CVS HEAD crashes sometimes in CORBA_ORB_string_to_object()

Hi,

I am seeing crashes when I invoke CORBA_ORB_string_to_object() for the
second time. I got the backtrace below. I am not sure what causes the
crash.

Ideas? 
  jules


Backtrace was generated from '/home/evo/opt/bin//evolution-2.4'

Using host libthread_db library "/lib/libthread_db.so.1".
[Thread debugging using libthread_db enabled]
[New Thread 46912604280976 (LWP 31753)]
[New Thread 1115969888 (LWP 31764)]
[New Thread 1107577184 (LWP 31763)]
[New Thread 1099184480 (LWP 31761)]
[New Thread 1090791776 (LWP 31760)]
[New Thread 1082399072 (LWP 31759)]
[New Thread 1082132832 (LWP 31758)]
0x00002aaaaf7caeba in waitpid () from /lib/libpthread.so.0
#0  0x00002aaaaf7caeba in waitpid () from /lib/libpthread.so.0
#1  0x00002aaaac923a84 in libgnomeui_module_info_get () from /usr/lib/libgnomeui-2.so.0
#2  0x000000000041987e in segv_redirect (sig=11) at main.c:424
#3  <signal handler called>
#4  0x00002aaaae58a3c2 in IOP_ObjectKey_equal (a=0x6d6f632e6373656d, b=0x9d0770) at iop-profiles.c:308
#5  0x00002aaaae57dcde in g_CORBA_Object_equal (a=0x724160, b=0x7fffffffd6f0) at corba-object.c:43
#6  0x00002aaab05e7b2e in g_hash_table_lookup () from /usr/lib/libglib-2.0.so.0
#7  0x00002aaaae57dff4 in ORBit_lookup_objref (obj=0x7fffffffd6f0) at corba-object.c:101
#8  0x00002aaaae57e2c2 in ORBit_objref_find (orb=0x55d7f0, type_id=0x2aaaae5a6259 "", profiles=0x9e2560) at corba-object.c:180
#9  0x00002aaaae57f3bb in ORBit_object_by_corbaloc (orb=0x55d7f0, corbaloc=0x6e98e0 "corbaloc:iiop:omc-w2k-3-4.omesc.com:951/BRUTUS_LOGON", ev=0x7fffffffd8b0) at corba-object.c:660
#10 0x00002aaaae5774ba in CORBA_ORB_string_to_object (orb=0x55d7f0, string=0x6e98e0 "corbaloc:iiop:omc-w2k-3-4.omesc.com:951/BRUTUS_LOGON", ev=0x7fffffffd8b0) at corba-orb.c:604
#11 0x00002aaab41339b1 in brutus_connect (service=0x6e8a20, ex=0x723cb0) at camel-brutus-store.c:760
#12 0x00002aaab41335cb in brutus_get_name (service=0x6e8a20, brief=1) at camel-brutus-store.c:699
#13 0x00002aaab2020389 in camel_service_get_name (service=0x6e8a20, brief=1) at camel-service.c:516
#14 0x00002aaab2815a22 in get_folderinfo_desc (mm=0x6eab90, done=0) at mail-ops.c:1056
#15 0x00002aaab28136e9 in do_op_status (mm=0xa66a40) at mail-mt.c:958
#16 0x00002aaab28120bc in mail_msgport_received (source=0x648f20, cond=G_IO_IN, d=0x64d5d0) at mail-mt.c:474
#17 0x00002aaab05f4076 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#18 0x00002aaab05f5a98 in g_main_context_acquire () from /usr/lib/libglib-2.0.so.0
#19 0x00002aaab05f5dfa in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#20 0x00002aaaae0a53eb in bonobo_main () from /usr/lib/libbonobo-2.so.0
#21 0x0000000000419e02 in main (argc=1, argv=0x7fffffffdf58) at main.c:602