Comment 6 for bug 524566

#3 0x00e28a63 in _dbus_validate_signature_with_reason (type_str=0xb76bcc1c, type_pos=0, len=1)
    at dbus-marshal-validate.c:218
218 _DBUS_POINTER_TO_INT (_dbus_list_pop_last (&element_count_stack));
(gdb) l
213 if (*p != DBUS_TYPE_ARRAY &&
214 *p != DBUS_DICT_ENTRY_BEGIN_CHAR &&
215 *p != DBUS_STRUCT_BEGIN_CHAR)
216 {
217* element_count =
218 _DBUS_POINTER_TO_INT (_dbus_list_pop_last (&element_count_stack));
219
220 ++element_count;
221
222 if (!_dbus_list_append (&element_count_stack,
(gdb) print *p
$17 = 117 'u'

/** #DBUS_TYPE_UINT32 as a string literal instead of a int literal */
#define DBUS_TYPE_UINT32_AS_STRING "u"

#define _DBUS_POINTER_TO_INT(pointer) ((long)(pointer))

Running with "python -u", to unbuffer stdout and stderr, there's more:

*** glibc detected *** python: realloc(): invalid next size: 0x096ac1e8Segmentation fault (core dumped)