I found a bug in it that I simplified but I don't have time to figure out where the bug is. It's easy to reproduce if you have CDcover installed.
Create a cover (Cover.jpg) that contains one line:
/123456789012345678
The important part is the starting '/' and that there are at least 18 characters following.
Run XMMS and bring up one of the songs using that Cover.
segfault!