The constructor JavaStringBuffer(JNIEnv *env, jstring text) (see src/windows/native/sun/windows/awt.h) assigns L"" constant value to the m_pStr data member if the text argument is NULL. However, the destructor of the class unconditionally free()'s the pointer. That may lead to a crash.