Comment 12 for bug 124336

The bug appears to be caused by a memory allocation or reference-count error. I've built network-manager-applet (aka package network-manager-applet) and added a report:

src/wsp-wpa-eap.c::wso_wpa_eap_new()

 phase2_type_combo = glade_xml_get_widget (opt->uixml, "wpa_eap_phase2_type_combo");
 tree_model = wso_wpa_create_phase2_type_model (capabilities, TRUE, &num_added);
 printf("About to call GTK_IS_TREE_MODEL(%lX)\n", tree_model);
 printf("GTK_IS_TREE_MODEL (%lX)=%d\n", tree_model, GTK_IS_TREE_MODEL(tree_model));
 gtk_combo_box_set_model (GTK_COMBO_BOX (phase2_type_combo), tree_model);
 gtk_tree_model_get_iter_first (tree_model, &iter);
 gtk_combo_box_set_active_iter (GTK_COMBO_BOX (phase2_type_combo), &iter);

Mostly it will crash, but sometimes it will work okay. Each of the following was generated by starting nm-applet, clicking the notification-area icon, and choosing "Connect to Other Wireless Network..." :

$ nm-applet
About to call GTK_IS_TREE_MODEL(FFFFFFFFAC028590)
Segmentation fault (core dumped)

$ nm-applet (***WORKED***)
About to call GTK_IS_TREE_MODEL(C715A0)
About to call GTK_IS_TREE_MODEL(CE8620)

$ nm-applet
About to call GTK_IS_TREE_MODEL(FFFFFFFFAC018590)
Segmentation fault (core dumped)

$ nm-applet (***Failed during secondary stage***)
About to call GTK_IS_TREE_MODEL(D93010)
About to call GTK_IS_TREE_MODEL(FFFFFFFFAC0440A0)
Segmentation fault (core dumped)