Qemu 1.2.0 crashes when using tcp serial console and GRUB boots

When booting OpenWRT Attitude Adjustement ( http://downloads.openwrt.org/attitude_adjustment/12.09-beta2/x86/generic/openwrt-x86-generic-combined-ext4.img.gz ) with this command line:
qemu-system-x86_64 -serial tcp:127.0.0.1:4444 -hda openwrt-x86-generic-combined-ext4.img

Qemu crashes as soon as GRUB starts, after network cards start.

*** buffer overflow detected ***: /usr/bin/qemu-system-x86_64 terminated
======= Backtrace: =========
/usr/lib/libc.so.6(__fortify_fail+0x37)[0x7ffff45f2ad7]
/usr/lib/libc.so.6(+0xf9bb0)[0x7ffff45f0bb0]
/usr/lib/libc.so.6(+0xfba47)[0x7ffff45f2a47]
/usr/bin/qemu-system-x86_64[0x46a628]
/usr/bin/qemu-system-x86_64[0x4e8a14]
/usr/bin/qemu-system-x86_64[0x4e802b]
/usr/lib/libc.so.6(__libc_start_main+0xf5)[0x7ffff4518725]
/usr/bin/qemu-system-x86_64[0x40d949]


Here is a GDB backtrace:

Program received signal SIGABRT, Aborted.
0x00007ffff452bfa5 in raise () from /usr/lib/libc.so.6
(gdb) bt
#0  0x00007ffff452bfa5 in raise () from /usr/lib/libc.so.6
#1  0x00007ffff452d428 in abort () from /usr/lib/libc.so.6
#2  0x00007ffff456acfb in __libc_message () from /usr/lib/libc.so.6
#3  0x00007ffff45f2ad7 in __fortify_fail () from /usr/lib/libc.so.6
#4  0x00007ffff45f0bb0 in __chk_fail () from /usr/lib/libc.so.6
#5  0x00007ffff45f2a47 in __fdelt_warn () from /usr/lib/libc.so.6
#6  0x000000000046a628 in qemu_iohandler_poll (readfds=0xdb7da0 <rfds>, 
    writefds=0xdb7e20 <wfds>, xfds=0x6, xfds@entry=0xdb7ea0 <xfds>, ret=-1, 
    ret@entry=1) at iohandler.c:121
#7  0x00000000004e8a14 in main_loop_wait (nonblocking=<optimized out>)
    at main-loop.c:497
#8  0x00000000004e802b in main_loop ()
    at /usr/src/aur/qemu/src/qemu-1.2.0/vl.c:1643
#9  main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>)
    at /usr/src/aur/qemu/src/qemu-1.2.0/vl.c:3755
(gdb) 

Here is a more useless dump...