In one of those crashes, what is in ap->stream->user_flags[0] ?
My guess is that it is a null pointer, and that somehow a keyword flag got set in the message without any keywords being defined.
If, in fact, that is the case, I'll send you a patch.
-- Mark --
http://staff.washington.edu/mrc Science does not emerge from voting, party politics, or public debate. Si vis pacem, para bellum.
