I am able to reliably produce seg faults in a minimal TSocket example by simply sending 5 characters to the listening port. To reproduce, run this in one session (root -b server.C):
and this in another:
The same thing happens when using TSocket::Recv(TMessage *&mess) and the same thing happens with the net tutorial hserv2.C.
The actual seg fault seems to be taking place in tobuf in Bytes.h.