After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 777293 - infinite recursion in xmlXPathCompParserContext
infinite recursion in xmlXPathCompParserContext
Status: RESOLVED FIXED
Product: libxslt
Classification: Platform
Component: general
git master
Other Linux
: Normal normal
: ---
Assigned To: Daniel Veillard
libxml QA maintainers
Depends on:
Blocks:
 
 
Reported: 2017-01-16 03:31 UTC by wang junjie
Modified: 2017-01-16 14:14 UTC
See Also:
GNOME target: ---
GNOME version: ---

Attachments
poc (459 bytes, text/plain)
2017-01-16 03:33 UTC, wang junjie 		Details

Description wang junjie 2017-01-16 03:31:59 UTC 
The segmentation fault caused by infinite recursion:


part of stack trace:

+ Trace 237060

  • #0 _int_malloc
    at malloc.c line 3302
  • #1 __GI___libc_malloc
    at malloc.c line 2891
  • #2 xmlXPathCompParserContext
    at xpath.c line 6258
  • #3 xmlXPathCompiledEvalInternal
    at xpath.c line 14929
  • #4 xmlXPathCompiledEval__internal_alias
    at xpath.c line 14993
  • #5 xsltEvalVariable
    at variables.c line 926
  • #6 xsltBuildVariable
    at variables.c line 1804
  • #7 xsltParseStylesheetCallerParam
    at variables.c line 2019
  • #8 exsltFuncFunctionFunction
    at functions.c line 384
  • #9 xmlXPathCompOpEval
    at xpath.c line 13597
  • #10 xmlXPathCompOpEval
    at xpath.c line 13988
  • #11 xmlXPathCompOpEval
    at xpath.c line 14563
  • #12 xmlXPathRunEval
    at xpath.c line 14563
  • #13 xmlXPathCompiledEvalInternal
    at xpath.c line 14930 






Comment 1


wang junjie





          2017-01-16 03:33:09 UTC
        



Created attachment 343521 [details]
poc






Comment 2


Nick Wellnhofer





          2017-01-16 14:14:51 UTC
        



Fixed with the following commit:

https://git.gnome.org/browse/libxslt/commit/?id=8ee72e493542cc61a0d539143195979adefb5890

Thanks for the report.