GNOME Bugzilla – Bug 776792
SEGV on unknown address 0x00000020 (pc 0x081726f8 sp 0xbfb3bf00 bp 0x00000000 T0)
Last modified: 2017-01-03 16:18:14 UTC
Created attachment 342745 [details] poc ==28759== ERROR: AddressSanitizer: SEGV on unknown address 0x00000020 (pc 0x081726f8 sp 0xbfa5da10 bp 0x00000000 T0) AddressSanitizer can not provide additional info. #0 0x81726f7 in xsltElementAvailableFunction /home/b/asan/libxslt-1.1.29/libxslt/functions.c:852 #1 0xb604dc7b in xmlXPathCompOpEval.part.59 /home/b/libxml2-2.9.4/xpath.c:13597 #2 0xb604db2d in xmlXPathCompOpEval.part.59 /home/b/libxml2-2.9.4/xpath.c:13988 #3 0xb604ff5c in xmlXPathCompOpEval /home/b/libxml2-2.9.4/xpath.c:14563 #4 0xb604ff5c in xmlXPathRunEval /home/b/libxml2-2.9.4/xpath.c:14563 #5 0xb60500d3 in xmlXPathCompiledEvalInternal /home/b/libxml2-2.9.4/xpath.c:14930 #6 0xb6054216 in xmlXPathCompiledEval__internal_alias /home/b/libxml2-2.9.4/xpath.c:14993 #7 0x80b062c in xsltEvalXPathPredicate /home/b/asan/libxslt-1.1.29/libxslt/templates.c:76 #8 0x80881a4 in xsltTestPredicateMatch.isra.3 /home/b/asan/libxslt-1.1.29/libxslt/pattern.c:889 #9 0x80a985f in xsltTestCompMatch /home/b/asan/libxslt-1.1.29/libxslt/pattern.c:1151 #10 0x80a985f in xsltGetTemplate /home/b/asan/libxslt-1.1.29/libxslt/pattern.c:2450 #11 0x81359b8 in xsltProcessOneNode /home/b/asan/libxslt-1.1.29/libxslt/transform.c:2144 #12 0x8137671 in xsltDefaultProcessOneNode /home/b/asan/libxslt-1.1.29/libxslt/transform.c:2035 #13 0x8137671 in xsltProcessOneNode /home/b/asan/libxslt-1.1.29/libxslt/transform.c:2167 #14 0x814e25a in xsltApplyStylesheetInternal /home/b/asan/libxslt-1.1.29/libxslt/transform.c:6054 #15 0x8054f81 in xsltProcess /home/b/asan/libxslt-1.1.29/xsltproc/xsltproc.c:414 #16 0x8050e8e in main /home/b/asan/libxslt-1.1.29/xsltproc/xsltproc.c:925 #17 0xb5deea82 (/lib/i386-linux-gnu/libc.so.6+0x19a82) #18 0x8053b40 in _start (/home/b/asan/libxslt-1.1.29/xsltproc/xsltproc+0x8053b40) SUMMARY: AddressSanitizer: SEGV /home/b/asan/libxslt-1.1.29/libxslt/functions.c:852 xsltElementAvailableFunction ==28759== ABORTING Aborted
Fixed with the following commit: https://git.gnome.org/browse/libxslt/commit/?id=bf6c947bf6b77d28344829cd489b1f19eeb26536