Segv in HandleExposeEvent

I was using Java Workshop which is running on JDK 1.1 when the VM
dumped core on me. The core file can be found in ~evan/cores/core-java.3.

Here is the dbx stack trace:
=>[1] _lwp_kill(0x0, 0x6, 0x0, 0xef771f14, 0x33, 0x0), at 0xef4b98ec
  [2] sysAbort(0x0, 0xedfc1000, 0xedfc0188, 0xb, 0x0, 0x10000), at 0xef74ebf8
  ---- called from signal handler with signal 11 (SIGSEGV) ------
  [3] HandleExposeEvent(), at 0xef2c0368
  [4] awt_canvas_handleEvent(0x6d1808, 0xee2850f8, 0xedfc0780, 0x0, 0xedfc05f7, 0x0), at 0xef2c1354
  [5] DispatchEvent(0xedfc0780, 0x6d1808, 0x8000, 0x0, 0x0, 0xffffffff), at 0xef055b7c
  [6] DecideToDispatch(0xedfc0780, 0xfd644, 0x8000, 0x0, 0x6d1808, 0x0), at 0xef056224
  [7] XtDispatchEvent(0xedfc0780, 0x0, 0xe97b0, 0x2, 0x2, 0xfd3f0), at 0xef056408
  [8] XtAppProcessEvent(0xfd3f0, 0x0, 0xfd5bc, 0xfd3fc, 0xfd5b8, 0x1), at 0xef05ed1c
  [9] awt_MToolkit_loop(0x1, 0xef2e56b4, 0xef2d9440, 0xef2e5634, 0xef2a5400, 0x0), at 0xef2a592c
  [10] sun_awt_motif_MToolkit_run(0xef2e56b4, 0xef2d9450, 0xef771fc4, 0x8, 0x1, 0x3b8c1f), at 0xef2a59c8
  [11] Java_sun_awt_motif_MToolkit_run_stub(0x10ca18, 0xedfc0ca4, 0x41, 0xedfc0ca4, 0x601b8, 0x5fde8), at 0xef2c4250
  [12] invokeNativeMethod(0x10c9f0, 0x101f28, 0x10ca18, 0xedfc0ca4, 0xef714b5c, 0xee3000a0), at 0xef714ef0
  [13] finish_invokevirtual(0x61dd3, 0xedfc0ca4, 0x10ca18, 0x10c9ec, 0x5fde8, 0x10c9f0), at 0xef7592e0
  [14] do_execute_java_method_vararg(0xedfc0ca4, 0xef777049, 0x0, 0x0, 0x0, 0x10c9b0), at 0xef7247d8
  [15] execute_java_dynamic_method(0xedfc0ca4, 0xee307e10, 0xef777044, 0xef777048, 0xef779800, 0xf6030020), at 0xef723e7c
  [16] ThreadRT0(0xee307e10, 0xef777048, 0x22d80, 0xedff0de0, 0x3bb79341, 0x1), at 0xef744204
  [17] start_func(0xef760400, 0xee307e10, 0xef7441ac, 0x0, 0x0, 0x0), at 0xef757aa0
(dbx) quit