could the problem be so simple that free is used on the crash like
instead of pkg_free? i den't remember other use of free() system call
in openser.
-- juha
if(notify_body!=NULL)
{
if(notify_body->s)
free(notify_body->s); ********** here
pkg_free(notify_body);
}