153302 - Crash occurs after hovering over portions of page [@ MRJPluginInstance::Initialize]

Status: VERIFIED FIXED

(Camino Graveyard :: Page Layout, defect)

Description

[Chris Petersen]

build: 2002-06-20-05
platform: OS X 10.1.5
Expected results: Audio track to be played (by applet) when mouseover occurs .
What I got: Application crashes.


Steps to reproduce:

1) Load url
2) Move mouse over any of the characters like Clifford, Tbone, etc.
3) Application immediately crashes

HTML shows how applet is called:
onMouseOver="changeImages(playSound(document.applets.cliffplayer);"
onMouseOut="changeImages(stopSound(document.applets.cliffplayer);"

<applet code="TinyAudioPlayer.class" codebase="sound" name="cliffplayer"
width="1" height="1" MAYSCRIPT>
    <param name=snd value="sound/ltsplay.au">
  </applet>

Comment 1

[Chris Petersen]

Attachment: Stack trace

Comment 2

[Greg K.]

Confirmed using Chimera/20020621, crashing in MRJPluginInstance::Initialize.

Comment 3

[Greg K.]

Attachment: Crash report generated by FizzillaCFM/2002061014 showing crash in MRJPluginInstance::Initialize

Comment 4

[Greg K.]

(Chris, I wonder why my stack traces always explicitly identify the crashed
thread ("Thread 0 Crashed"), and yours don't?)

Comment 5

[saari (gone)]

MRJPluginInstance explosion

Comment 6

[saari (gone)]

->patrick, looks like a possible regression

Comment 7

[Patrick C. Beard]

My table-driven QueryInterface mechanism was broken under g++.

The problem was in my assumption that

  UInt32((interfaceType*) ((leafType*)0))

would return a non-zero value, but under g++ this is never true. I changed the macro to 
this

  (UInt32((interfaceType*) ((leafType*)4)) - UInt32((leafType*)4))

With this change, the crash goes away.

Comment 8

[Chris Petersen]

Marking verified in the 2002-06-22-05 NB.