occurs on line #1017 in reviewURLString()
reviewURL = [reviewURL stringByReplacingOccurrencesOfString:@"AFFILIATE_CAMPAIGN_CODE" withString:[NSString stringWithFormat:@"%@", self.affiliateCampaignCode]];
self.affiliateCampaignCode is pointing to a junk memory address, despite being set properly prior to calling reviewURLString()
I was using your default values for Affiliate and Campaign codes.