You need to specify the eventsink in the Connect-function, otherwise the editor-control is used as eventsink, because you connect the event to it.
The correct function is called, but with an incorrect this-pointer and therefore the member variable that holds the timer also points to an incorrect location.
Instead of using the timer some undefined memory that belongs to the editor-control is used => crash.
Just add NULL, this to the parameter list of Connect (and Disconnect) in CCManager::OnEditorOpen ( and CCManager::OnEditorClose).
I'm not sure if it is really needed for Disconnect, but it does not hurd.