Here's the bug report in brief:

16)
DESCR: BUS error when processing the first route on to further
        IDRP processing, after being OK'd by export()
        Happens in find_ann_list_entry(), where
                1st arg (peer) is NULL (!!!)
                3rd arg (p_ann_list) is 0x2 (!!!)

SEE: /lusr/*/.../idrp/export/sjr.test/* for more info.
STATUS: To SKH...
===========
Here's the bug:

 I have found a BUS error (no core file) after
export was run _once_ (this was on adastra, with QOS, no RIP):

Program received signal SIGBUS, Bus error.
0x10f3e8 in find_ann_list_entry (peer=0x0, p_att=0x223000, p_ann_list=0x2)
    at idrp_rt_phase_util.c:382
382             if (!p_ann_list->p_attr)
(gdb) where
#0  0x10f3e8 in find_ann_list_entry (peer=0x0, p_att=0x223000, p_ann_list=0x2)
    at idrp_rt_phase_util.c:382
#1  0x10ebf4 in link_ann_list_mod (p_idrp_rt=0x215630, p_att=0x223000,
    p_ann_list=0x2, type=836) at idrp_rt_phase_util.c:200
#2  0x10dd4c in idrp_send_ann_routes (peer=0x215000, p_ann_list=0x20eb00,
    flash=0) at idrp_rt_phase3.c:2005
#3  0x108cc0 in idrp_phase3_dump (peer=0x215000, actlist=0xefffefc0)
    at idrp_rt_phase3.c:282
#4  0xff438 in idrp_rt_send_init (peer=0x215000) at idrp_rt_peer.c:187
#5  0xffc50 in path_up (peer=0x215000) at idrp_rt_peer.c:351
#6  0x1224d8 in idrp_sm (peer=0x215000, event=5) at idrp_sm.c:179
#7  0xdf158 in process_keepalive (peer=0x215000, pdu=0x1fd014, length=30)
    at idrp_parse_pdu.c:1300
#8  0xe0734 in idrp_recv_pdu (peer=0x215000, pdu=0x1fd014, length=30,
    p_next_hop=0x200068, p_dst_intf=0x0) at idrp_parse_pdu.c:1845
#9  0xe0aa4 in idrp_recv (tp=0x1fc690) at idrp_parse_pdu.c:1984
#10 0x529c0 in task_process_sockets (numset=1, read_bits=0xeffff3a0,
    write_bits=0x0, except_bits=0x0) at task.c:3361
#11 0x5e5d0 in main (argc=4, argv=0xeffff88c) at task.c:6690
(gdb) c
Continuing.

Program terminated with signal SIGBUS, Bus error.
The program no longer exists.

======
THIS OCCURRED JUST AFTER THE _FIRST_ ROUTE TO EXPORT WAS PASSED BY
EXPORT() INTO THE REST OF THE IDRP CODE!

Because I happened to be watching this, you have this info, as well:

(gdb) where
#0  export (rt=0x21c460, proto=0, proto_list=0x1fe834, int_list=0x0, 
    gw_list=0x0, result=0xefffee08) at policy.c:1361
#1  0x119250 in idrp_route_export (p_idrp_rt=0x215630, peer=0x215000, 
    query_type=5) at idrp_rt_policy.c:668
#2  0x10dca4 in idrp_send_ann_routes (peer=0x215000, p_ann_list=0x20eb00, 
    flash=0) at idrp_rt_phase3.c:1986
#3  0x108cc0 in idrp_phase3_dump (peer=0x215000, actlist=0xefffefc0)
    at idrp_rt_phase3.c:282
#4  0xff438 in idrp_rt_send_init (peer=0x215000) at idrp_rt_peer.c:187
#5  0xffc50 in path_up (peer=0x215000) at idrp_rt_peer.c:351
#6  0x1224d8 in idrp_sm (peer=0x215000, event=5) at idrp_sm.c:179
#7  0xdf158 in process_keepalive (peer=0x215000, pdu=0x1fd014, length=30)
    at idrp_parse_pdu.c:1300
#8  0xe0734 in idrp_recv_pdu (peer=0x215000, pdu=0x1fd014, length=30, 
    p_next_hop=0x200068, p_dst_intf=0x0) at idrp_parse_pdu.c:1845
#9  0xe0aa4 in idrp_recv (tp=0x1fc690) at idrp_parse_pdu.c:1984
#10 0x529c0 in task_process_sockets (numset=1, read_bits=0xeffff3a0, 
    write_bits=0x0, except_bits=0x0) at task.c:3361
#11 0x5e5d0 in main (argc=4, argv=0xeffff88c) at task.c:6690
(gdb) p *(rt->rt_idrp)
$9 = {
  p_rt = 0x21c460, 
  peer = 0x185ba0, 
  p_loc_rt_peer = 0x2001c8, 
  p_loc_intf = 0x0, 
  p_attr = 0x2145a0, 
  p_qos_def = 0x0, 
  p_rt_qos = {0x0 <repeats 15 times>}, 
  route_id_in = -1, 
  pref_cal = 75, 
  pref_rcvd = 0, 
  gated_pref = 180, 
  p_next_nlri = 0x0, 
  p_with = 0x0, 
  p_with_back = 0x0, 
  p_ann_nlri = 0x0, 
  p_ann_back = 0x0, 
  p_replace = 0x0, 
  p_damped_clear = 0x0, 
  p_min_adv = 0x0, 
  p_min_adv_back = 0x0, 
  p_min_advRD = 0x0, 
  p_min_advRD_back = 0x0, 
  p_next_best = 0x0, 
  p_better = 0x0, 
  p_p_best_ext = 0x20e880, 
  route_out = {{
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
---Type <return> to continue, or q <return> to quit---
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }, {
      p_next = 0x0, 
      p_back = 0x0, 
      p_att = 0x0, 
      route_id = 0
    }}, 
  nlri = {
    pfx_len = 0 '\000', 
    pfx = '\000' <repeats 19 times>
  }, 
  family = 2, 
  nlri_id = 0, 
  status = 131078, 
  qos_status = 0, 
  p_import_opts = 0x0, 
  p_export_opts = 0x214360	<<<<< THIS IS WHAT WE WERE LOOKING FOR!
}
(gdb) p *(rt->rt_idrp->p_export_opts)
$10 = {
  rib_id = -1, 
  next_hop = {{
      p_net = 0x0, 
      p_next = 0x0, 
      cnt = 0, 
      next_hop_snpas = {
        pdu_len = 0, 
        cnt = 0, 
        snpa1 = {
          p_next = 0x0, 
          len = 0, 
          snpa = "\000\000\000\000\000\000\000"
        }
      }
    }, {
      p_net = 0x0, 
      p_next = 0x0, 
      cnt = 0, 
      next_hop_snpas = {
        pdu_len = 0, 
        cnt = 0, 
        snpa1 = {
          p_next = 0x0, 
          len = 0, 
          snpa = "\000\000\000\000\000\000\000"
        }
      }
    }}, 
  p_intf = 0x0, 
  status = 0, 
  multi_exit_rcvd = 0 '\000', 
  multi_exit_xmt = 0 '\000', 
  hopcount_xmit = 0 '\000', 
  capacity_xmit = 0 '\000', 
  multi_exit_peers = 0, 
  multi_exit = {0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 
  idrp_local_proto = 0, 
  capacity = {
    operator = 0, 
    value = 0
  }, 
  hopcnt_pref = 0, 
  hopcount = 6, 		<<<<< THIS IS WHAT WE WERE LOOKING FOR!
  p_DIST_LIST_INCL = 0x0, 
  p_DIST_LIST_EXCL = 0x0, 
  p_DIST_LIST = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 
  p_qos = 0x0, 
  p_qos_xmt = 0x0, 
  p_local_opts = 0x0, 
  p_extinfo = 0x0
}

