+++ This bug was initially created as a clone of Bug #182824 +++
Bug 182824 was about blackdown-jdk but I could reproduce it with sun-jdk-1.4 too.
Results with 22.214.171.124 with badicc.jpg from http://scary.beasts.org/security/CESA-2006-004.html
# SIGSEGV (0xb) at pc=0xb7ea50dc, pid=20387, tid=3085122240
# Java VM: Java HotSpot(TM) Client VM (1.4.2_14-b05 mixed mode)
# Problematic frame:
# C [libc.so.6+0x710dc] memcpy+0x1c
Results with recently added 126.96.36.199:
Exception in thread "main" java.lang.IllegalArgumentException: Invalid ICC Profile Data
Apparently they fixed it, safe java exception instead of segfault. Although I didn't find any relevant bug in 188.8.131.52 changelog or advisory from Sun. But maybe we can assume it's fixed, get it stable and glsa'd.
OK got it confirmed from SUN:
x86 please stabilize:
x86 stable, last arch, changing status to glsa?
I vote yes for GLSA.
GLSA 200804-20, sorry for the long delay.