Add this to menubar-items.el:
("Crash" :filter '())
under the line reading:
["Edit Faces..." (customize-face nil)]
Then recompile and run XEmacs.
Click on Options, then on Crash. You will get an item saying "No
menu". Try going to that item with the keyboard (type right-arrow)
instead of the mouse. XEmacs will crash.
I didn't had time to investigate it too much, all I saw was that
Fcharacter_to_event gets called with ch=0 (in events.c) which causes a
crash at the time CONSP(ch) is called.
Hope this helps,
Tudor