#2 reading a mail scroll will induce crash

[Anonymous]

Every time new mail arrives (in the real world), a mail
daemon will give you a stamped scroll. Reading this
scroll will display an infobox with some string
beginning with "jtp" in it, and then a segfault occurs.