Well, I've managed to reproduce the fault once with the debugger running.. the backtrace I get is
Could you cut and paste in the full backtrace, with addresses, along with a diff of the debug changes you've made so I can see what's happening?
Thanks,
Jer