Hi,
now I managed to crash irssi with the following sequence:
/load otr
/load xmpp
/xmppconnect -ssl <myusername>@jabber.ccc.de <passwnd>
/unload otr
Backtrace:
#0 0xb7a8d556 in raise () from /lib/libc.so.6
#1 0xb7a8ed78 in abort () from /lib/libc.so.6
#2 0xb7ac7a6d in __libc_message () from /lib/libc.so.6
#3 0xb7acd815 in malloc_printerr () from /lib/libc.so.6
#4 0xb7acf6bc in free () from /lib/libc.so.6
#5 0xb75cb478 in _gcry_free (p=0x6) at global.c:642
#6 0xb75cce70 in _gcry_sexp_release (sexp=0x92ed530) at sexp.c:297
#7 0xb75caafd in gcry_sexp_release (sexp=0x92ed530) at visibility.c:128
#8 0xb7596d5a in otrl_privkey_forget (privkey=0x92eeab0) at privkey.c:645
#9 0xb7596dbf in otrl_privkey_forget_all (us=0x92e77b8) at privkey.c:662
#10 0xb759f07a in otrl_userstate_free (us=0x92e77b8) at userstate.c:49
#11 0xb773d9d9 in otrlib_deinit () from /usr/lib/irssi/modules/libotr.so
#12 0xb773d91b in otr_deinit () from /usr/lib/irssi/modules/libotr.so
#13 0x080e06d4 in module_file_deinit_gmodule (file=0x92dc878)
at modules-load.c:363
#14 0x080e078a in module_file_unload (file=0x92dc878) at modules-load.c:395
#15 0x080e0851 in module_unload (module=0x92e9f08) at modules-load.c:415
#16 0x08096444 in cmd_unload (data=0x944b3f7 "otr") at fe-modules.c:209
#17 0x080ed199 in signal_emit_real (rec=0x9185078, params=3,
va=0xbfe22604 "�\021\b�\026\t�\026\t", first_hook=0x9185098)
at signals.c:242
#18 0x080ed354 in signal_emit (signal=0x944b058 "command unload", params=3)
at signals.c:286
#19 0x080d664f in parse_command (command=0x9456e71 "unload otr",
expand_aliases=1, server=0x92ed208, item=0x0) at commands.c:899
#20 0x080d67d6 in event_command (line=0x9456e71 "unload otr",
server=0x92ed208, item=0x0) at commands.c:945
#21 0x080ed199 in signal_emit_real (rec=0x916e318, params=3,
va=0xbfe22744 "8�D\t����\030\tpnE\t8�D\t��231�016\b��\020\b",
first_hook=0x9192b40) at signals.c:242
#22 0x080ed354 in signal_emit (signal=0x8101a83 "send command", params=3)
at signals.c:286
#23 0x0806059e in key_send_line () at gui-readline.c:550
#24 0x080ed199 in signal_emit_real (rec=0x91a56d8, params=3,
va=0xbfe22824
"\030c.\tX(�Ϲ����\020V\032\t\b�D\t\f�D\t��\020\b��D\t��231�016\b�\032\t",
first_hook=0x91a2f98) at signals.c:242
#25 0x080ed354 in signal_emit (signal=0x944b3b8 "key send_line", params=3)
at signals.c:286
#26 0x0809ff76 in sig_multi (data=0x91a7dd0 "check_replaces;send_line",
gui_data=0x0) at keyboard.c:637
#27 0x080ed199 in signal_emit_real (rec=0x918c950, params=3,
va=0xbfe22914 "0\236\032\t", first_hook=0x918c970) at signals.c:242
#28 0x080ed354 in signal_emit (signal=0x944c4f8 "key multi", params=3)
at signals.c:286
#29 0x0809fb99 in key_emit_signal (keyboard=0x91a2948, key=0x91a0b50)
at keyboard.c:536
#30 0x0809fdad in key_pressed (keyboard=0x91a2948, key=0xbfe2298c "^J")
at keyboard.c:592
#31 0x080604b0 in sig_gui_key_pressed (keyp=0xa) at gui-readline.c:515
#32 0x080ed199 in signal_emit_real (rec=0x91aa840, params=1,
va=0xbfe22a7c "\036�\006\b�\003\030\t\001", first_hook=0x91a8de8)
at signals.c:242
#33 0x080ed354 in signal_emit (signal=0x8101abc "gui key pressed", params=1)
at signals.c:286
#34 0x08060aaf in sig_input () at gui-readline.c:746
#35 0x080dd49e in irssi_io_invoke (source=0x91a1bd0, condition=G_IO_IN,
data=0x91a1c28) at misc.c:56
#36 0xb7ddc65d in g_io_unix_dispatch (source=0x91a3bd0,
callback=0x80dd424 <irssi_io_invoke>, user_data=0x91a1c28)
at /tmp/buildd/glib2.0-2.16.6/glib/giounix.c:162
#37 0xb7da61b8 in IA__g_main_context_dispatch (context=0x916dc00)
at /tmp/buildd/glib2.0-2.16.6/glib/gmain.c:2012
#38 0xb7da9853 in g_main_context_iterate (context=0x916dc00, block=1,
dispatch=1, self=0x91d6dd8) at /tmp/buildd/glib2.0-2.16.6/glib/gmain.c:2645
#39 0xb7da9a11 in IA__g_main_context_iteration (context=0x916dc00, may_block=1)
at /tmp/buildd/glib2.0-2.16.6/glib/gmain.c:2708
#40 0x0807530a in main (argc=1, argv=0xbfe22ea4) at irssi.c:403
