FULL PRODUCT VERSION :
Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)

ADDITIONAL OS VERSION INFORMATION :
Microsoft Windows XP SP2[Version 5.1.2600]

EXTRA RELEVANT SYSTEM CONFIGURATION :
Display adapter: NVIDIA Quadro NVS 285 driver version 8.1.7.2
Machine: HP XW4300 workstation Pentium 4 @ 3.00 GHz, 1.00 GB of RAM
JVM args: -XX:+UseConcMarkSweepGC -Dsun.java2d.ddoffscreen=false -Xms256m -Xmx256m

A DESCRIPTION OF THE PROBLEM :
JVM crashes in fontmanager.dll during painting.
This happened multiple times but we were not able to determine a scenario.





STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Unknown at this time.


ERROR MESSAGES/STACK TRACES THAT OCCUR :
unexpected exception has been detected in native code outside the VM.
Unexpected Signal : EXCEPTION_ACCESS_VIOLATION (0xc0000005) occurred at PC=0x5F57B3A
Function=[Unknown.]
Library=D:\terra\3p\JRE\bin\fontmanager.dll

NOTE: We are unable to locate the function name symbol for the error
      just occurred. Please refer to release documentation for possible
      reason and solutions.


Current Java thread:
at sun.awt.font.GlyphList.setupStringData(Native Method)
at sun.awt.font.GlyphList.setFromString(GlyphList.java:101)
- locked <0x20198558> (a java.lang.Class)
at sun.java2d.pipe.GlyphListPipe.drawString(GlyphListPipe.java:46)
at sun.java2d.pipe.ValidatePipe.drawString(ValidatePipe.java:123)
at sun.java2d.SunGraphics2D.drawString(SunGraphics2D.java:2534)
at javax.swing.plaf.basic.BasicGraphicsUtils.drawStringUnderlineCharAt(BasicGraphicsUtils.java:234)
at javax.swing.plaf.basic.BasicLabelUI.paintEnabledText(BasicLabelUI.java:81)
at javax.swing.plaf.basic.BasicLabelUI.paint(BasicLabelUI.java:164)
at com.ge.med.ptk.laf.CuiLabelUI.paint(CuiLabelUI.java:66)
at javax.swing.plaf.ComponentUI.update(ComponentUI.java:142)
at javax.swing.JComponent.paintComponent(JComponent.java:541)
at javax.swing.JComponent.paint(JComponent.java:808)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JLayeredPane.paint(JLayeredPane.java:557)
at javax.swing.JComponent.paintChildren(JComponent.java:647)
- locked <0x108a7090> (a java.awt.Component$AWTTreeLock)
at javax.swing.JComponent.paint(JComponent.java:817)
at javax.swing.JComponent.paintWithOffscreenBuffer(JComponent.java:4795)
at javax.swing.JComponent.paintDoubleBuffered(JComponent.java:4748)
at javax.swing.JComponent._paintImmediately(JComponent.java:4692)
at javax.swing.JComponent.paintImmediately(JComponent.java:4495)
at javax.swing.RepaintManager.paintDirtyRegions(RepaintManager.java:410)
at javax.swing.SystemEventQueueUtilities$ComponentWorkRequest.run(SystemEventQueueUtilities.java:117)
at java.awt.event.InvocationEvent.dispatch(InvocationEvent.java:178)
at java.awt.EventQueue.dispatchEvent(EventQueue.java:454)
at java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:201)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:151)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:145)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:137)
at java.awt.EventDispatchThread.run(EventDispatchThread.java:100)

Dynamic libraries:
0x00400000 - 0x00406000 d:\terra\3p\JRE\bin\java.exe
0x7C900000 - 0x7C9B0000 C:\WINDOWS\system32\ntdll.dll
0x7C800000 - 0x7C8F4000 C:\WINDOWS\system32\kernel32.dll
0x77DD0000 - 0x77E6B000 C:\WINDOWS\system32\ADVAPI32.dll
0x77E70000 - 0x77F01000 C:\WINDOWS\system32\RPCRT4.dll
0x77C10000 - 0x77C68000 C:\WINDOWS\system32\MSVCRT.dll
0x08000000 - 0x08136000 d:\terra\3p\JRE\bin\client\jvm.dll
0x77D40000 - 0x77DD0000 C:\WINDOWS\system32\USER32.dll
0x77F10000 - 0x77F57000 C:\WINDOWS\system32\GDI32.dll
0x76B40000 - 0x76B6D000 C:\WINDOWS\system32\WINMM.dll
0x76390000 - 0x763AD000 C:\WINDOWS\system32\IMM32.DLL
0x629C0000 - 0x629C9000 C:\WINDOWS\system32\LPK.DLL
0x74D90000 - 0x74DFB000 C:\WINDOWS\system32\USP10.dll
0x10000000 - 0x10007000 d:\terra\3p\JRE\bin\hpi.dll
0x003B0000 - 0x003BE000 d:\terra\3p\JRE\bin\verify.dll
0x003C0000 - 0x003D8000 d:\terra\3p\JRE\bin\java.dll
0x003E0000 - 0x003ED000 d:\terra\3p\JRE\bin\zip.dll
0x05E40000 - 0x05F4A000 D:\terra\3p\JRE\bin\awt.dll
0x73000000 - 0x73026000 C:\WINDOWS\system32\WINSPOOL.DRV
0x774E0000 - 0x7761D000 C:\WINDOWS\system32\ole32.dll
0x05F50000 - 0x05FA0000 D:\terra\3p\JRE\bin\fontmanager.dll
0x73760000 - 0x737A9000 C:\WINDOWS\system32\ddraw.dll
0x73BC0000 - 0x73BC6000 C:\WINDOWS\system32\DCIMAN32.dll
0x73940000 - 0x73A10000 C:\WINDOWS\system32\D3DIM700.DLL
0x755C0000 - 0x755EE000 C:\WINDOWS\system32\msctfime.ime
0x07020000 - 0x070B1000 D:\tacq\su\win32\bin\logger.dll
0x070C0000 - 0x0726D000 d:\terra\3p\ace5.1\bin\aced.dll
0x71AB0000 - 0x71AC7000 C:\WINDOWS\system32\WS2_32.dll
0x71AA0000 - 0x71AA8000 C:\WINDOWS\system32\WS2HELP.dll
0x71A50000 - 0x71A8F000 C:\WINDOWS\system32\MSWSOCK.dll
0x07270000 - 0x07287000 C:\WINDOWS\system32\MSVCIRTD.dll
0x07290000 - 0x072F0000 C:\WINDOWS\system32\MSVCRTD.dll
0x072F0000 - 0x0730A000 D:\terra\tlt\arch\nt40d\lib\TltCommon.dll
0x07310000 - 0x0738E000 C:\WINDOWS\system32\MSVCP60D.dll
0x71AD0000 - 0x71AD9000 C:\WINDOWS\system32\WSOCK32.dll
0x07390000 - 0x07507000 D:\terra\3p\xml4c4_0_0-win32\bin\xerces-c_1_6_0.dll
0x4A800000 - 0x4A856000 D:\terra\3p\xml4c4_0_0-win32\bin\icuuc20.dll
0x4AD00000 - 0x4B4D8000 D:\terra\3p\xml4c4_0_0-win32\bin\icudt20.dll
0x076A0000 - 0x076BE000 D:\terra\3p\JRE\bin\jpeg.dll
0x07710000 - 0x07732000 D:\terra\3p\JRE\bin\dcpr.dll
0x07790000 - 0x077AB000 D:\tacq\cu\win32\bin\SharedMemory.dll
0x07A20000 - 0x07A5C000 D:\tacq\cu\win32\bin\NTLoginInfo.dll
0x5B860000 - 0x5B8B4000 C:\WINDOWS\system32\NETAPI32.dll
0x77FE0000 - 0x77FF1000 C:\WINDOWS\system32\Secur32.dll
0x71BF0000 - 0x71C03000 C:\WINDOWS\system32\SAMLIB.dll
0x662B0000 - 0x66308000 C:\WINDOWS\system32\hnetcfg.dll
0x71A90000 - 0x71A98000 C:\WINDOWS\System32\wshtcpip.dll
0x07A70000 - 0x07A7F000 D:\terra\3p\JRE\bin\net.dll
0x76F20000 - 0x76F47000 C:\WINDOWS\system32\DNSAPI.dll
0x76FB0000 - 0x76FB8000 C:\WINDOWS\System32\winrnr.dll
0x76F60000 - 0x76F8C000 C:\WINDOWS\system32\WLDAP32.dll
0x76FC0000 - 0x76FC6000 C:\WINDOWS\system32\rasadhlp.dll
0x07D10000 - 0x07E96000 D:\tacq\cu\win32\bin\ndm.dll
0x07EA0000 - 0x07EEA000 D:\terra\dmf\arch\nt40d\lib\dmf.dll
0x07EF0000 - 0x07F29000 D:\terra\terrautil\arch\nt40d\lib\terrautil.dll
0x07F30000 - 0x07FB5000 d:\terra\3p\merge\mc3lib\MC3ADV.dll
0x07FC0000 - 0x07FCE000 D:\terra\3p\Merge\mc3pic\PICN20.dll
0x07FD0000 - 0x07FEE000 D:\terra\dmf\arch\nt40d\lib\Jdmf.dll
0x08140000 - 0x0817F000 D:\terra\dmf\arch\nt40d\lib\dmfdicom.dll
0x07FF0000 - 0x08000000 D:\terra\dmf\arch\nt40d\lib\asciifiles.dll
0x08180000 - 0x08190000 D:\terra\terrautil\arch\nt40d\lib\Jterrautil.dll
0x08190000 - 0x0825F000 d:\tacq\cu\win32\bin\dmfnet.dll
0x08260000 - 0x082AA000 d:\tacq\cu\win32\bin\NetworkPlugin.dll
0x08430000 - 0x084A0000 D:\terra\db\arch\nt40d\lib\terradb.dll
0x084A0000 - 0x08572000 D:\terra\db\arch\nt40d\lib\tdbtk.dll
0x06F40000 - 0x06F63000 D:\terra\3p\JRE\bin\jsound.dll
0x72D20000 - 0x72D29000 C:\WINDOWS\system32\wdmaud.drv
0x76C30000 - 0x76C5E000 C:\WINDOWS\system32\WINTRUST.dll
0x77A80000 - 0x77B14000 C:\WINDOWS\system32\CRYPT32.dll
0x77B20000 - 0x77B32000 C:\WINDOWS\system32\MSASN1.dll
0x76C90000 - 0x76CB8000 C:\WINDOWS\system32\IMAGEHLP.dll
0x72D10000 - 0x72D18000 C:\WINDOWS\system32\msacm32.drv
0x77BE0000 - 0x77BF5000 C:\WINDOWS\system32\MSACM32.dll
0x77BD0000 - 0x77BD7000 C:\WINDOWS\system32\midimap.dll
0x06FC0000 - 0x06FDC000 D:\tacq\cu\win32\bin\NativePixelDataExtractor.dll
0x0B510000 - 0x0B51A000 D:\terra\3p\JRE\bin\win32com.dll
0x06EA0000 - 0x06EC3000 D:\terra\3p\JRE\bin\cmm.dll
0x0B7F0000 - 0x0B838000 d:\tacq\cu\win32\bin\T2sPlugin.dll
0x7C9C0000 - 0x7D1D5000 C:\WINDOWS\system32\shell32.dll
0x77F60000 - 0x77FD6000 C:\WINDOWS\system32\SHLWAPI.dll
0x773D0000 - 0x774D2000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
0x5D090000 - 0x5D127000 C:\WINDOWS\system32\comctl32.dll
0x71B20000 - 0x71B32000 C:\WINDOWS\system32\MPR.dll
0x75F60000 - 0x75F67000 C:\WINDOWS\System32\drprov.dll
0x71C10000 - 0x71C1E000 C:\WINDOWS\System32\ntlanman.dll
0x71CD0000 - 0x71CE7000 C:\WINDOWS\System32\NETUI0.dll
0x71C90000 - 0x71CD0000 C:\WINDOWS\System32\NETUI1.dll
0x71C80000 - 0x71C87000 C:\WINDOWS\System32\NETRAP.dll
0x75F70000 - 0x75F79000 C:\WINDOWS\System32\davclnt.dll
0x77920000 - 0x77A13000 C:\WINDOWS\system32\SETUPAPI.dll
0x77B40000 - 0x77B62000 C:\WINDOWS\system32\appHelp.dll
0x77120000 - 0x771AC000 C:\WINDOWS\system32\OLEAUT32.dll
0x769C0000 - 0x76A73000 C:\WINDOWS\system32\USERENV.dll
0x59A60000 - 0x59B01000 C:\WINDOWS\system32\DBGHELP.dll
0x77C00000 - 0x77C08000 C:\WINDOWS\system32\VERSION.dll
0x76BF0000 - 0x76BFB000 C:\WINDOWS\system32\PSAPI.DLL

Heap at VM Abort:
Heap
 par new generation total 8128K, used 4488K [0x10010000, 0x10810000, 0x10810000)
  eden space 8064K, 55% used [0x10010000, 0x10472340, 0x107f0000)
  from space 64K, 0% used [0x107f0000, 0x107f0000, 0x10800000)
  to space 64K, 0% used [0x10800000, 0x10800000, 0x10810000)
 concurrent mark-sweep generation total 253952K, used 168791K [0x10810000, 0x20010000, 0x20010000)
 concurrent-mark-sweep perm gen total 29364K, used 17720K [0x20010000, 0x21cbd000, 0x24010000)

Local Time = Wed Jul 26 04:58:54 2006
Elapsed Time = 18979
#
# The exception above was detected in native code outside the VM
#
# Java VM: Java HotSpot(TM) Client VM (1.4.2-b28 mixed mode)
#


REPRODUCIBILITY :
This bug can be reproduced occasionally.

---------- BEGIN SOURCE ----------
none identified
---------- END SOURCE ----------
Submitter also provided following testcase that crashes JDK (while symptoms seems different).

import javax.swing.*;
import java.awt.*;
import java.awt.event.*;
import sun.awt.font.GlyphList;
import sun.java2d.loops.FontInfo;

class MiniTest
    extends JFrame {
  private JPanel pane = new JPanel();
  private GlyphList glyphList;
  private FontInfo fontInfo = new FontInfo();


  public MiniTest() {
    fontInfo.font=new Font("Arial",Font.BOLD,12);
    this.setContentPane(pane);
    startNonAWTAction();
  }

  private void startNonAWTAction() {
    for (int i = 0; i < 100; i++) {
      Thread t = new Thread() {
        public void run() {
          while (true) {
            try {
              try {
                Thread.currentThread().sleep( (int) (Math.random() *
15));
              }
              catch (InterruptedException ex1) {
              }
              doBadThings();
            }
            catch (Throwable ex) {
            }
          }
        }
      };
      t.setPriority(7);
      t.start();
    }
  }

  protected void doBadThings() {
    pane.getGraphics().drawString("some bla bla bla",
                                  (int) (Math.random() * 1000),
                                  (int) (Math.random() * 1000));
    glyphList = sun.awt.font.GlyphList.getInstance();
    glyphList.setFromString(fontInfo, "some other bla bla bla bla", 5 *
5.0f,
                              7 * 7.0f);
    glyphList.dispose();

  }

  public static void main(String[] args) {
    MiniTest miniTest1 = new MiniTest();
    miniTest1.setDefaultCloseOperation(JFrame.EXIT_ON_CLOSE);
    miniTest1.pack();
    miniTest1.show();
  }

}