Fix two more locking issues in throwTo()