This can be a case of the application passing an invalid pointer to glNormalPointer(), but it's also possible that it's an issue with display list compilation in mesa. Do the patches I attached to the bug report fix the problem?