[xml] core dump on test-10-1.xml in libxslt 0.9.0 "make tests"

[Fabrizio Ammollo <f ammollo reitek com>]

Hello,

I have just downloaded and compiled libxslt 0.9.0, and all the tests except 
the named one work. The output of make is the following:

test-10-1.xml
/bin/sh: 16414 Memory fault - core dumped
1,2d0
< <?xml version="1.0"?>
< <ul><li>James Clark</li><li>Michael Kay</li><li>Daniel Veillard</li></ul>

This is the output of gdb:

#0  0x800233ea in realfree () from /usr/lib/libc.so.1
#1  0x80023ae6 in cleanfree () from /usr/lib/libc.so.1
#2  0x80022f1a in _real_malloc () from /usr/lib/libc.so.1
#3  0x80022de9 in malloc () from /usr/lib/libc.so.1
#4  0x800b6597 in xmlStaticCopyNode (node=0x80610cc, doc=0x0, parent=0x0,
    recursive=0) at tree.c:2643
#5  0x800b6844 in xmlCopyNode (node=0x8007b80c, recursive=-2147340880)
    at tree.c:2768
#6  0x800738e3 in xsltCopyNode (ctxt=0x805c504, node=0x80610cc,
    insert=0x80022db0) at transform.c:317
#7  0x800749e3 in xsltApplyOneTemplate (ctxt=0x805c504, node=0x805c9e8,
    list=0x80610cc, real=1) at transform.c:967
#8  0x800745a0 in xsltProcessOneNode (ctxt=0x805c504, node=0x805c9e8)
    at transform.c:814
#9  0x8007654f in xsltApplyTemplates (ctxt=0x805c504, node=0x805c770,
    inst=0x8060f54, comp=0x1) at transform.c:2128
#10 0x8007475e in xsltApplyOneTemplate (ctxt=0x805c504, node=0x805c770,
    list=0x8060c94, real=1) at transform.c:892
#11 0x800745a0 in xsltProcessOneNode (ctxt=0x805c504, node=0x805c770)
    at transform.c:814
#12 0x800740b7 in xsltDefaultProcessOneNode (ctxt=0x805c504, node=0x805c71c)
    at transform.c:638
#13 0x800744d9 in xsltProcessOneNode (ctxt=0x805c504, node=0x805c71c)
    at transform.c:788
#14 0x80077121 in xsltApplyStylesheet (style=0x805f288, doc=0x805c71c,
    params=0x8047c6c) at transform.c:2542
#15 0x8049939 in main (argc=3, argv=0x8047cd0) at xsltproc.c:210
#16 0x804909b in _start ()

One strange thing is that the value of Recursive passed to xmlCopyNode from 
#6 and printed at #5 is totally wrong, infact xsltCopyNode calls xmlCopyNode 
by passing it 0 ! Even more strangely, the value is then correctly printed at 
#4, although I don't understand why !!!
The final effect, anyway, is that the call to xmlMalloc (which is not 
printed, and I don't understand this too) makes the program dump core..

I'm working under SCO OpenServer 5.0.4, using gcc 2.95.3 and gdb 5.0

Should I make a bug report for this ? 
Or, how could I provide more information ?

TIA

--
Fabrizio Ammollo