The attached message is edited from one I managed to convince notmuch-emacs to send via some mishap with gpg-agent. It has an empty signature part. Clearly this is wrong, but on the other hand, it should not cause notmuch show --decrypt to segmentation fault. As for the actual creation of the message, I suppose that's more likely a bug in emacs, if anything.