This bug is second crash found while investigating 4698522. The code for Unsafe.setObject in unsafe.cpp is missing a card mark so the scavenger can't work correctly. The fix is simply to modify Unsafe_SetObject to work pretty much like Unsafe_SetObject140. The bug was introduced as part of the work for 4616656, the rewrite of the unsafe API for 64-bit.