segfault in strlen()?

["John D. Baker" <jdbaker%mylinuxisp.com@localhost>]

Trying to get chat/unrealircd running on i386-current (5.99.36).  The
server starts up and a client can connect, but when the client dis-
connects, the server dumps core with:

[...]
Core was generated by `ircd'.
Program terminated with signal 11, Segmentation fault.
#0  0xbb9b9cb8 in strlen () from /usr/lib/libc.so.12
(gdb) bt
#0  0xbb9b9cb8 in strlen () from /usr/lib/libc.so.12
#1  0xbb9a7fac in __vfprintf_unlocked () from /usr/lib/libc.so.12
#2  0xbb9a0af6 in vsprintf () from /usr/lib/libc.so.12
#3  0x08061c5c in ircvsprintf ()
#4  0x0807b05c in ircd_log ()
#5  0x0807cdd2 in exit_client ()
#6  0xbb88c9ad in m_quit () from tmp/3CD07AA8.commands.so
#7  0x08066df6 in parse ()
#8  0x08066053 in dopacket ()
#9  0x080575c0 in read_message ()
#10 0x080618b1 in main ()
(gdb)


Later, trying to get chat/ircservices hooked up, ircd dumps core with:

[...]
Core was generated by `ircd'.
Program terminated with signal 11, Segmentation fault.
#0  0xbb9b9cb8 in strlen () from /usr/lib/libc.so.12
(gdb) bt
#0  0xbb9b9cb8 in strlen () from /usr/lib/libc.so.12
#1  0xbb9a7fac in __vfprintf_unlocked () from /usr/lib/libc.so.12
#2  0xbb9a0af6 in vsprintf () from /usr/lib/libc.so.12
#3  0x08061c5c in ircvsprintf ()
#4  0x0808521c in vsendto_one ()
#5  0x0808606a in sendto_one ()
#6  0xbb8a8a53 in m_server_synch () from tmp/2B812816.commands.so
#7  0xbb8a9c3a in m_server () from tmp/2B812816.commands.so
#8  0x08066df6 in parse ()
#9  0x08066053 in dopacket ()
#10 0x080575c0 in read_message ()
#11 0x080618b1 in main ()
(gdb)


Neither of these happen under i386-5.1_RC3.

Anyone seen anything similar with other programs?

--
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]mylinuxisp[flyspeck]com    OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645