Comment 4 for bug 1234673

It looks like indicator-message-service is crashing when it tries to pass an invalid pointer to _int_free(), and that this is happening from somewhere inside GIO, but it's impossible to tell where because the retrace corrupts out at that point.

I see this ticket has been reassigned to me; however, I'm unsure how to proceed on it -- the retrace doesn't contain enough information, and I don't have a phone running Touch to satisfy the preconditions listed in Gema's description.

Gema, is there another way of triggering this on a tablet?