Description of problem:

nmh's post program crashes with the following output from glibc:

warthog>comp

What now? ?
Options are:
  edit [<editor> <switches>]
  refile [<switches>] +folder
  mime [<switches>]
  display [<switches>]
  list [<switches>]
  send [<switches>]
  push [<switches>]
  whom [<switches>]
  quit [-delete]
  delete
  cd [directory]
  pwd
  ls
  attach
  (de)tach [-n]
  (al)ist [-ln] 

What now? send
*** glibc detected *** post: free(): invalid pointer: 0x0000000000d24a75 ***
======= Backtrace: =========
/lib64/libc.so.6[0x3f3bc7dda6]
post[0x4092b0]
post[0x40669f]
post[0x407ac0]
post[0x4053eb]
post[0x403341]
/lib64/libc.so.6(__libc_start_main+0xed)[0x3f3bc2169d]
post[0x403f01]
======= Memory map: ========
00400000-00415000 r-xp 00000000 09:01 4727661                            /usr/libexec/nmh/post
00614000-00615000 r--p 00014000 09:01 4727661                            /usr/libexec/nmh/post
00615000-00617000 rw-p 00015000 09:01 4727661                            /usr/libexec/nmh/post
00617000-0064b000 rw-p 00000000 00:00 0 
00d20000-00d41000 rw-p 00000000 00:00 0                                  [heap]
3f3b800000-3f3b822000 r-xp 00000000 09:01 655398                         /lib64/ld-2.14.90.so
3f3ba21000-3f3ba22000 r--p 00021000 09:01 655398                         /lib64/ld-2.14.90.so
3f3ba22000-3f3ba23000 rw-p 00022000 09:01 655398                         /lib64/ld-2.14.90.so
3f3ba23000-3f3ba24000 rw-p 00000000 00:00 0 
3f3bc00000-3f3bdad000 r-xp 00000000 09:01 655415                         /lib64/libc-2.14.90.so
3f3bdad000-3f3bfad000 ---p 001ad000 09:01 655415                         /lib64/libc-2.14.90.so
3f3bfad000-3f3bfb1000 r--p 001ad000 09:01 655415                         /lib64/libc-2.14.90.so
3f3bfb1000-3f3bfb3000 rw-p 001b1000 09:01 655415                         /lib64/libc-2.14.90.so
3f3bfb3000-3f3bfb8000 rw-p 00000000 00:00 0 
3f3c800000-3f3c815000 r-xp 00000000 09:01 655753                         /lib64/libgcc_s-4.6.2-20111027.so.1
3f3c815000-3f3ca14000 ---p 00015000 09:01 655753                         /lib64/libgcc_s-4.6.2-20111027.so.1
3f3ca14000-3f3ca15000 rw-p 00014000 09:01 655753                         /lib64/libgcc_s-4.6.2-20111027.so.1
3f40800000-3f40818000 r-xp 00000000 09:01 655673                         /lib64/libresolv-2.14.90.so
3f40818000-3f40a18000 ---p 00018000 09:01 655673                         /lib64/libresolv-2.14.90.so
3f40a18000-3f40a19000 r--p 00018000 09:01 655673                         /lib64/libresolv-2.14.90.so
3f40a19000-3f40a1a000 rw-p 00019000 09:01 655673                         /lib64/libresolv-2.14.90.so
3f40a1a000-3f40a1c000 rw-p 00000000 00:00 0 
7f5f10ace000-7f5f10ad5000 r-xp 00000000 09:01 655414                     /lib64/libnss_dns-2.14.90.so
7f5f10ad5000-7f5f10cd4000 ---p 00007000 09:01 655414                     /lib64/libnss_dns-2.14.90.so
7f5f10cd4000-7f5f10cd5000 r--p 00006000 09:01 655414                     /lib64/libnss_dns-2.14.90.so
7f5f10cd5000-7f5f10cd6000 rw-p 00007000 09:01 655414                     /lib64/libnss_dns-2.14.90.so
7f5f10cd6000-7f5f10cd8000 r-xp 00000000 09:01 655744                     /lib64/libnss_mdns4_minimal.so.2
7f5f10cd8000-7f5f10ed7000 ---p 00002000 09:01 655744                     /lib64/libnss_mdns4_minimal.so.2
7f5f10ed7000-7f5f10ed8000 rw-p 00001000 09:01 655744                     /lib64/libnss_mdns4_minimal.so.2
7f5f10ed8000-7f5f10ee4000 r-xp 00000000 09:01 655466                     /lib64/libnss_files-2.14.90.so
7f5f10ee4000-7f5f110e3000 ---p 0000c000 09:01 655466                     /lib64/libnss_files-2.14.90.so
7f5f110e3000-7f5f110e4000 r--p 0000b000 09:01 655466                     /lib64/libnss_files-2.14.90.so
7f5f110e4000-7f5f110e5000 rw-p 0000c000 09:01 655466                     /lib64/libnss_files-2.14.90.so
7f5f110e5000-7f5f17508000 r--p 00000000 09:01 4001419                    /usr/lib/locale/locale-archive
7f5f17508000-7f5f1750b000 rw-p 00000000 00:00 0 
7f5f17548000-7f5f1754a000 rw-p 00000000 00:00 0 
7fff5bbf6000-7fff5bc17000 rw-p 00000000 00:00 0                          [stack]
7fff5bca6000-7fff5bca7000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
send: message not delivered to anyone

What now?

Version-Release number of selected component (if applicable):

nmh-1.4-1.fc16.x86_64

How reproducible:

100%

Steps to Reproduce:
1. Compose a message.
2. Tell it to send.
3.
  
Actual results:

Crashes as above.

Expected results:

Should send the message and not crash.