solaris8 trap 31 crash, ipf 3.4.32

I've been seeing my nameservers (Solaris 8) sporadically hang and I believe
I narrowed it down to ipf (3.4.22) so I went to upgrade to 3.4.32.

Now, every time ipf loads, I get a kernel crash:

panic[cpu0]/thread=2a100045d20: BAD TRAP: type=31 rp=2a100043df0
addr=300019dbb90 mmu_fsr=0
sched: trap type = 0x31
addr=0x300019dbb90

and the box reboots. I've reproduced this with gcc 3.3 and with Sun's Forte
compiler. I'm running Solaris 8 with all current patches in 64bit mode.

For the original problem (which prompted me to upgrade), I have four
identically configured machines - three crash multiple times throughout the
day. The fourth sits behind a firewall and ipf doesn't get much workout on
the deny rules. The fourth hasn't rebooted in months.

Any pointers would be helpful, thanks.

--
matthew zeier - "Nothing in life is to be feared. It is only to be
understood." - Marie Curie