General Protection Fault occures when I did following operation.

1. run Applet1
2. push button 'show frame' on applet.
3. push back button on browser.

I tested on Windows95(4.00.950 B) + Netscape 4.06 + Java Plugin bundled with JRE1.2rc2(international).

This is the log the DRWATSON caught.

------------------------------------------------------------------------------
Fault log generated on 1998.11.27 10:01:24

Trap 13 (0dh) - General Protection Fault 0000
eax=00000000 ebx=00020000 ecx=0002805c edx=00000002 esi=00020000 edi=0002805c
eip=00002349 esp=0000c45c ebp=0000c484 -- -- -- nv up EI pl ZR na PE nc
cs=16ef ss=18af ds=1647 es=0000 fs=10a7 gs=0000
>16ef:00002349 268b07 mov ax,word ptr es:[bx]

===
 16ef:0000232b 668b4e04 mov ecx,dword ptr [bp+04]
 16ef:0000232f 678b4154 mov ax,word ptr [ecx+54]
 16ef:00002333 0bc0 or ax,ax
 16ef:00002335 7406 jz 233d
 16ef:00002337 50 push ax
 16ef:00002338 9a7a624f04 call 44f:627a
 16ef:0000233d 668b4e04 mov ecx,dword ptr [bp+04]
 16ef:00002341 678b4124 mov ax,word ptr [ecx+24]
 16ef:00002345 8bd8 mov bx,ax
 16ef:00002347 c41f les bx,dword ptr [bx]
>16ef:00002349 268b07 mov ax,word ptr es:[bx]
 16ef:0000234c 48 dec ax
 16ef:0000234d 678b4924 mov cx,word ptr [ecx+24]
 16ef:00002351 8bd9 mov bx,cx
 16ef:00002353 c41f les bx,dword ptr [bx]
 16ef:00002355 268907 mov word ptr es:[bx],ax
===

CS(16ef): limit=0000239f
DS(1647): limit=0021ffff
ES(0000): invalid
FS(10a7): limit=00000033
GS(0000): invalid
SS(18af): limit=0000ffff

SS:EBP CS:EIP Arguments (C order)
18af:0000c484 16ef:00002349 (805c, 0002, 8000, 0002, 8000, 0002, 1a1e, 513f)
18af:0000c4b4 16ef:00001f40 (8000, 0002, 0147, 10a7, 0000, 0147, 0000, 6630)
18af:0000c4dc 16ef:00001ec9 (8000, 0002, 08f5, c530, 0028, 0177, 07fc, 11a7)
18af:0000c4e8 16ef:000008f0 (07fc, 11a7, 5f40, 6ac0, 00bf, 06d8, 0000, 0dc0)
18af:0000c530 0177:00000028 (97fa, 0066, 07fc, 0000, 02a0, 00c5, 02a0, 00c5)

SS:EBP CS:EIP Arguments (C order)
18af:0000c484 16ef:00002349 (805c, 0002, 8000, 0002, 8000, 0002, 1a1e, 513f)
18af:0000c4b4 16ef:00001f40 (8000, 0002, 0147, 10a7, 0000, 0147, 0000, 6630)
===
 16ef:00001f20 0bff or di,di
 16ef:00001f22 75d3 jnz 1ef7
 16ef:00001f24 668b7e04 mov edi,dword ptr [bp+04]
 16ef:00001f28 66678b7704 mov esi,dword ptr [edi+04]
 16ef:00001f2d 660bf6 or esi,esi
 16ef:00001f30 7410 jz 1f42
 16ef:00001f32 66678b06 mov eax,dword ptr [esi]
 16ef:00001f36 6667894704 mov dword ptr [edi+04],eax
 16ef:00001f3b 6656 push esi
 16ef:00001f3d e896ff call 1ed6
>16ef:00001f40 ebe6 jmp 1f28
 16ef:00001f42 668b7604 mov esi,dword ptr [bp+04]
 16ef:00001f46 6656 push esi
 16ef:00001f48 688200 push 0082
 16ef:00001f4b 6a00 push +00
 16ef:00001f4d 6a00 push +00
===
18af:0000c4dc 16ef:00001ec9 (8000, 0002, 08f5, c530, 0028, 0177, 07fc, 11a7)
===
 16ef:00001ea8 8ec1 mov es,cx
 16ef:00001eaa 6626ff363c00 push dword ptr es:[003c]
 16ef:00001eb0 53 push bx
 16ef:00001eb1 9a6e0a7f16 call 167f:0a6e
 16ef:00001eb6 6656 push esi
 16ef:00001eb8 66678b4608 mov eax,dword ptr [esi+08]
 16ef:00001ebd 6650 push eax
 16ef:00001ebf 9a3a522717 call 1727:523a
 16ef:00001ec4 6656 push esi
 16ef:00001ec6 e80d00 call 1ed6
>16ef:00001ec9 b80100 mov ax,0001
 16ef:00001ecc 1f pop ds
 16ef:00001ecd 665e pop esi
 16ef:00001ecf 665f pop edi
 16ef:00001ed1 c9 leave
 16ef:00001ed2 ca0400 retf 0004
===
18af:0000c4e8 16ef:000008f0 (07fc, 11a7, 5f40, 6ac0, 00bf, 06d8, 0000, 0dc0)
===
 16ef:000008d8 e9d301 jmp 0aae
 16ef:000008db ca2400 retf 0024
 16ef:000008de 55 push bp
 16ef:000008df 8bec mov bp,sp
 16ef:000008e1 68f508 push 08f5
 16ef:000008e4 8b5e06 mov bx,word ptr [bp+06]
 16ef:000008e7 e81900 call 0903
 16ef:000008ea 6650 push eax
 16ef:000008ec 0e push cs
 16ef:000008ed e8b611 call 1aa6
>16ef:000008f0 59 pop cx
 16ef:000008f1 5d pop bp
 16ef:000008f2 ca0200 retf 0002
 16ef:000008f5 ca0200 retf 0002
 16ef:000008f8 85db test bx,bx
 16ef:000008fa 7507 jnz 903
===
18af:0000c530 0177:00000028 (97fa, 0066, 07fc, 0000, 02a0, 00c5, 02a0, 00c5)
===
 0177:00000002 64139a7a7e adc bx,word ptr fs:[bp+si+7e7a]
 0177:00000007 bd142e mov bp,2e14
 0177:0000000a 8e1e0200 mov ds,word ptr [0002]
 0177:0000000e 8b36d21c mov si,word ptr [1cd2]
 0177:00000012 83feff cmp si,-01
 0177:00000015 745e jz 75
 0177:00000017 8e06d01c mov es,word ptr [1cd0]
 0177:0000001b 83feff cmp si,-01
 0177:0000001e 740b jz 2b
 0177:00000020 66ea0a2bf7bf3f01 jmp 13f:bff72b0a
>0177:00000028 66ea6429f7bf3f01 jmp 13f:bff72964
 0177:00000030 66ead42bf7bf3f01 jmp 13f:bff72bd4
 0177:00000038 66ea0a2af7bf3f01 jmp 13f:bff72a0a
 0177:00000040 5b pop bx
 0177:00000041 7769 ja ac
 0177:00000043 6e outsbdx
===

End of fault log
------------------------------------------------------------------------------