After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 459713 - Crashes on some docbook transformations
Crashes on some docbook transformations
Status: RESOLVED FIXED
Product: libxslt
Classification: Platform
Component: general
1.1.21
Other All
: Normal critical
: ---
Assigned To: Daniel Veillard
libxml QA maintainers
Depends on:
Blocks:
 
 
Reported: 2007-07-23 21:01 UTC by Mike Hommey
Modified: 2007-07-26 19:52 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
testcase (59.59 KB, application/x-gzip)
2007-07-24 06:12 UTC, Mike Hommey 		Details
Simpler example to reproduce the problem. (1.26 KB, application/x-gzip)
2007-07-26 14:17 UTC, Daniel Leidert 		Details

Description Mike Hommey 2007-07-23 21:01:54 UTC 
Steps to reproduce:
This has been reported as Debian bug #434300

I'm going to attach the tarball the bug reporter attached there. Decompress the tarball and run make from within the directory it creates (you need docbook-xsl installed on your system, or to change the Makefiles to remove --nonet option).
xsltproc will crash during processing.

Investigation shows it crashes on access to free'd namespace structures. They are freed by the code added by this change: http://svn.gnome.org/viewcvs/libxslt/trunk/libxslt/xslt.c?view=diff&r1=1428&r2=1429

It doesn't crash with 1.1.20, and I also confirmed it doesn't crash with 1.1.21 with this patch reverted.


Stack trace:


Other information:
Comment 1 Mike Hommey 2007-07-24 06:12:44 UTC 
Created attachment 92257 [details]
testcase

It would be better if i actually attached the tarball...
Comment 2 Daniel Leidert 2007-07-26 14:03:59 UTC 
I was able to reduce the size of the example a lot so I can present a really small example, that shows the segmentation fault. Interesting: If you remove one (or both) of the empty templates, than xsltproc succeeds.

Simply run 

xsltproc -o test.html test_459713.xsl test_459713.xml

(I'm running it with the current docbook-xsl release 1.73.0, if that's important).
Comment 3 Daniel Leidert 2007-07-26 14:17:21 UTC 
Created attachment 92462 [details]
Simpler example to reproduce the problem.

A more simple example.
Comment 4 William M. Brack 2007-07-26 19:52:16 UTC 
I reverted the change to libxslt/xslt.c from the specified SVN revision.  Since this change was only to fix a problem found in a debugging environment, there should not be any noticible ill-effects from removing it.