Segfault doesn't happen with --disable-sse2. This puts the segfault firmly in the SSE2 section of dsputilenc_mmx.c. Assembler is voodoo to me so I'm going to have to leave this for someone else to decode. Should I file this as a bug?