Hmm, I did some more testing, and it seems that in order for the previous commands to cause reboot, the system must NOT have a default route. I did most of my experimenting while ppp was not active, and failed to notice this factor. This could tend to reduce the impact of the bug. :)