JPEGImageReader.readImage crash

This is radiance case 65442009

Data directory: /net/cores.central/cores/65442009/0417/pid_17782

(dbx) regs
current thread: t@133
current frame: [8]
g0-g3 0x00000000 0x0002d000 0x00000000 0x80000000
g4-g7 0x02467fe8 0x0044eedc 0x00000000 0xfe2a9400
o0-o3 0x00000000 0x00000000 0x00000001 0x04d4fe70
o4-o7 0x04d4fd88 0x00000198 0xcf47f348 0xd26ba614
l0-l3 0xd26ec000 0x00000001 0x04d4fe88 0x04d4e340
l4-l7 0x04d500c4 0x03842c90 0x00000001 0xd26bae14
i0-i3 0x03842c90 0x04d4fe90 0x045f3658 0x04d500a4
i4-i7 0x00000198 0x049940c0 0xcf47f3d8 0xd26ba3a8
y 0x00000000
psr 0xfe401000
pc 0xd26ba68c:SUNWprivate_1.1+0xa68c ld [%o0], %o0
npc 0xd26ba690:SUNWprivate_1.1+0xa690 st %o0, [%fp - 20]

(dbx) where -l
current thread: t@133
  [1] libc.so.1:__lwp_kill(0x0, 0x6, 0xff09b96c, 0xa8350, 0xff36b298, 0x0), at
xff3412a4
  [2] libc.so.1:raise(0x6, 0x0, 0xff09d658, 0xffffffff, 0xff368284, 0x6), at 0x
f2dfe18
  [3] libc.so.1:abort(0x0, 0x1, 0xff09b96c, 0xa8350, 0xff36b298, 0x0), at 0xff2
0038
  [4] libjvm.so:os::abort(0x1, 0xff15b85e, 0xcf47e5d0, 0xff188000, 0xff1cfce4,
x3f40ec), at 0xff09d658
  [5] libjvm.so:os::handle_unexpected_exception(0x2467fe8, 0xb, 0xd26ba68c, 0xc
47f2c8, 0x32d54, 0xff36ce80), at 0xff09b96c
  [6] libjvm.so:JVM_handle_solaris_signal(0xd26ba68c, 0xff15d339, 0xcf47f010, 0
1, 0xd26ba690, 0xcf47f010), at 0xfedd82ec
  [7] libc.so.1:__sighndlr(0xb, 0xcf47f2c8, 0xcf47f010, 0xfedd79f4, 0x0, 0x1),
t 0xff3401dc
  ---- called from signal handler with signal 11 (SIGSEGV) ------
=>[8] 0xd26ba68c(0x0, 0x0, 0x1, 0x4d4fe70, 0x4d4fd88, 0x198), at 0xd26ba68c
  [9] 0xd26ba614(0x3842c90, 0x4d4fe90, 0x45f3658, 0x4d500a4, 0x198, 0x49940c0),
at 0xd26ba614
  [10] 0xd26ba3a8(0x6, 0x1, 0x1, 0x4d4fe70, 0x1, 0x198), at 0xd26ba3a8
  [11] 0xd26ba1c8(0x3842c90, 0xcf47f670, 0xcf47f514, 0x1, 0xcf47f75c, 0x3), at
xd26ba1c8
  [12] 0xd26ba170(0x3842c90, 0xcf47f670, 0x1, 0xd, 0x0, 0x3), at 0xd26ba170
  [13] libjpeg.so:Java_com_sun_imageio_plugins_jpeg_JPEGImageReader_readImage(0
0, 0x3a71228, 0x3, 0x9830e8, 0xcf47f75c, 0x3), at 0xd26bed6c
...

(dbx) whereis -a 0xd26ba68c
dbx: warning: unknown language, 'c' assumed
`libjpeg.so`SUNWprivate_1.1+0xa68c


hs_err_pid17782.log:

An unexpected exception has been detected in native code outside the VM.
Unexpected Signal : 11 occurred at PC=0xD26BA68C
Function=[Unknown. Nearest: Java_sun_awt_image_JPEGImageDecoder_readImage+0x7A90
]
Library=/u01/app/oracle/product/10.1.2/ocsapps/jdk/jre/lib/sparc/libjpeg.so

Current Java thread:
    at com.sun.imageio.plugins.jpeg.JPEGImageReader.readImage(Native Method)
    at com.sun.imageio.plugins.jpeg.JPEGImageReader.readInternal(JPEGImageReader
.java:1053)
    at com.sun.imageio.plugins.jpeg.JPEGImageReader.read(JPEGImageReader.java:85
3)
    at oracle.imt.dscodec.renderer.memory.JpegReader.produceImage(JpegReader.jav
a:72)
    at oracle.imt.dscodec.renderer.memory.VirtualScreenRenderer.drawJpegFull(Vir
tualScreenRenderer.java:329)
    at oracle.imt.dscodec.cube.CubeParser.readImageJpeg(CubeParser.java:927)
    at oracle.imt.dscodec.cube.CubeParser.receiveDataNoResetFlag(CubeParser.java
:1223)
    at oracle.imt.dscodec.cube.CubeParser.receiveData(CubeParser.java:1045)
    at oracle.imt.server.virtual_screen.dscodec.cube.RenderExecutable.execute(Re
nderExecutable.java:69)
    - locked <0xe1260918> (a java.lang.Object)
    at oracle.imt.transport.threadpool.RestrictedThreadPool$RestrictedExecutable
.execute(RestrictedThreadPool.java:128)
    at oracle.imt.imtserver.threadpool.LogBranchRestrictedThreadPool$LogBranchRe
strictedExecutable.execute(LogBranchRestrictedThreadPool.java:32)
    at oracle.imt.transport.threadpool.ThreadPool$WorkingThread.run(ThreadPool.j
ava:419)
    at java.lang.Thread.run(Thread.java:534)
Some more information from customer sent by ###@###.### :

The new set of corefiles which have comein today are uploaded at /net/cores/cores/0417 dir. They are in respectives directories, such as pid_17782, pid_801, pid_7219.

We have recommended them to put -Xcheck:jni options to catch any native method errors. Cu got another coredump with this flag setup. I will upload those files as well.

JNI_65442009_PID_22344_corefiles.tar.gz size: 24,650k
JNI_65442009_PID_22344_libraries.tar.gz size: 8,402k

The hs_err_pid22344.log was empty. Nothing was logged there.