This is probably NSS fault, feel free to reassign.  But whenever I quit Evolution, it crashes at:

pk11cxt.c::PK11_CipherOp()::738

736         case CKA_DECRYPT:
737             length = maxout;
738             crv=PK11_GETTAB(context->slot)->C_DecryptUpdate(context->session,
739                                                     in, inlen, out, &length);
740             break;

because PK11_GETTAB(context->slot) returns an invalid pointer, which is then dereferenced.

(gdb) p	*context->slot
$9 = {functionList = 0x7f5944b72c40, module = 0x2195800, needTest = 0, isPerm =	1, isHW = 0, isInternal = 3, disabled =	0, reason = PK11_DIS_NONE, 
  readOnly = 1,	needLogin = 0, hasRandom = 1, defRWSession = 0,	isThreadSafe = 1, flags = 1539,	session = 1, sessionLock = 0x220f810, slotID = 1, 
  defaultFlags = 2684370749, refCount =	12, freeListLock = 0x220f8c0, freeSymKeysWithSessionHead = 0x7f5914031300, freeSymKeysHead = 0x7f5914033f90, 
  keyCount = 7,	maxKeyCount = 800, askpw = 0, timeout =	30, authTransact = 0, authTime = 0, minPassword = 0, maxPassword = 0, series = 2, flagSeries = 
    0, flagState = 0, wrapKey =	0, wrapMechanism = 306,	refKeys = {9}, mechanismList = 0x2212700, mechanismCount = 129,	cert_array = 0x0, array_size = 
    0, cert_count = 0, serial =	'0' <repeats 16 times>,	slot_name = 
    "NSS Internal Cryptographic Services", '\000' <repeats 21 times>, "H7 \002\000\000\000\000", token_name = 
    "NSS Generic Crypto Services\000\000\000\000\000", hasRootCerts = 0, hasRootTrust =	0, hasRSAInfo =	0, RSAInfoFlags = 0, protectedAuthPath = 0, 
  isActiveCard = 0, lastLoginCheck = 0,	lastState = 0, nssToken = 0x22f8620, mechanismBits = 
    "\a\a\006\003\003\003\001\000\000\000\000\000\000\000\000\000\a\a\005", '\000' <repeats 13 times>, "\a\a\006\002\002\002\000\000\000\000\000\000\000\
000\000\000\002\002\002\002\002\002\002\000\000\000\000\000\000\000\000\000\003\003\003\002\002\002\000\000\000\000\000\000\000\000\000\000ldd```\000\000
\000\000\000\000\000\000\000\000\f\004\f\b\b\b\000\000\000\000\000\000\000\000\000\000\f\f\f\b\000\b\b\b\000\000\000\000\000\000\000\000\b\b", '\000' <re
peats 14 times>, "\b\b\b", '\000' <repeats 13 times>, "\b\b\000\000\000\000\b\b\b\b\b\b\000\000\000\000\b", '\000' <repeats 15 times>, "\b", '\000' <repe
ats 62 times>}
(gdb) p*(CK_FUNCTION_LIST_PTR)context->slot->functionList
Cannot access memory at address 0x7f5944b72c40

oops.

evolution-2.91.3-1.fc15.x86_64
nss-3.12.8.99.2-1.fc15.x86_64