Xephyr is affected as well (version 2:1.4.1~git20080131-2). At least I think it's the same bug. "setxkbmap -model microsoftpro" will crash Xephyr "setxkbmap -model pc104" is fine. unfortunately the backtrace produced by gdb us useless.