1. Launch SwingSet2
2. Launch JavaFerret
3. Configure JavaFerret to track CaretEvents
4. Select SwingSet2 ButtonDemo toolbar item
5. Select the "Source Code" tab
6. Click/tab to the text itself
7. Hit CTRL-END to move the text caret to the end of the source code text
8. See "An EXCEPTION_ACCESS_VIOLATION exception has been detected in native code outside the VM" in the window that launched SwingSet

My guess is that an assumption about the size of the object at the end of the text was wrong, and a strcpy() attempted to happen to a null pointer or some such in the JNI C code in JavaAccessBridge.DLL somewhere.

This bug was found under Windows 2000...