Thanks for fixing this so quickly. I believe this is a long-standing bug. I confirmed that the crash occurs in both 6.4 and 6.3 on Solaris x86. It may have been there forever. I also believe that the bug only occurs when re-finalizing within the same session. We run a new ec session each time we re-finalize before releasing to production, which is probably why we never hit this bug. Since we used 6.3 for a year without problems, I think we can safely wait for a fix in 6.6.