Submitted On 25-MAR-2008
My understanding the underlying cause of DEP receiving an access violation is the plug-in code is compiled under VS 2003 which does not apply DEP correctly when linked. According to MS there is a type of fix for this in Vista service pack 1 that you can set the DEP level per process in a web app. They have given a new API to DEP that the we app running can set to turn DEP on, but allow old ATL "Thunk" code compiled before VS 2005 to run with out throwing a DEP access violation. So, I think if sun would either compile the plug-in under VS 2005 or add the line of code to the plug-in to set the DEP setting for the Applets to the proper setting it would fix this problem.
Article on this:
Submitted On 26-MAR-2008
The comment above is correct except for the suggestion that we could fix the Java Plug-In by adding one line of code. Our discussions with Microsoft have indicated that only they can fix the problem with IE 7. Making the API call in our ActiveX control would have no effect from what they have told us. They have also said that IE 8 will contain this API call, meaning that ActiveX controls like ours compiled with older compilers will work again.
Submitted On 28-MAR-2008
This is not true for the HTA. The HTA has its own DEP policy that is not the same as IE8 and currently is not changeable by the user. The OS sets the policy for the HTA and it stays that way. And as of the IE8 beta build available on this post's posting date it is not fixed for vista. I am not sure if MS plans on changing the DEP policy on the HTA like they did for IE. If they don't then this is still broken and will not get fixed by them unless the API implementation is done in the plugin. Because MS changed something for IE does not mean that it propagates to the HTA.
Submitted On 09-JAN-2009
If I recompiled applets using JDK 1.7 when it is released, would it fix the problem, or is this purely a run-time issue?
Submitted On 22-JAN-2009
Please do something about it. Any loaded Java applet from the web makes IE7 crash when IE7's DEP is on.
To solve the bug Sun has to recompile the activeX plugins using latest Microsoft ATL 7.1+ library, as explained here: http://blogs.msdn.com/michael_howard/archive/2008/01/29/new-nx-apis-added-to-windows-vista-sp1-windows-xp-sp3-and-windows-server-2008.aspx
Submitted On 22-JAN-2009
Bug solved with JRE 6u12 b03.
PLEASE NOTE: JDK6 is formerly known as Project Mustang