[xslt] crash in libxslt 1.0.9




I get a crash when running the attached stylesheet.  It is getting pretty
deep into libxslt and I don't know exactly why it does, but I've made the
following observations:  

the namespace information (ctxt->nsNr,  ctxt->namespace[0]) that eventually
gets used in xmlStrEqual contains invalid pointers
it crashes near the end of the stylesheet (the xsl:apply-templates
select="exsl:node-set($sadoc)/node()")

I have tried to find a simple case that has the same problem to no avail.
Will post more if I know more, just wanted to see if the stack trace looks
familiar to a known/resolved issue.


C:\test>xsltproc --version
Using libxml 20412, libxslt 10009 and libexslt 702
xsltproc was compiled against libxml 20412, libxslt 10009 and libexslt 702
libxslt 10009 was compiled against libxml 20412
libexslt 702 was compiled against libxml 20412

attachments:
sa_log.txt		a stack dump of the crash
build-output.xsl		the offending stylesheet



 <<salog.txt>>  <<build-output.xsl>> 
03062002_124128 | SA | fatal   | //=====================================================
03062002_124128 | SA | fatal   | Exception code: C0000005
03062002_124128 | SA | fatal   | Fault address:  00A32B6F 01:00011B6F C:\gsstools\bin\libxml2.dll
03062002_124128 | SA | fatal   | 
Registers:
03062002_124128 | SA | fatal   | EAX:00C3E26F
EBX:05334078
ECX:00000039
EDX:00C6AE6F
ESI:05334078
EDI:00000000
03062002_124128 | SA | fatal   | CS:EIP:001B:00A32B6F
03062002_124128 | SA | fatal   | SS:ESP:0023:02E7F3DC  EBP:055CA5A8
03062002_124128 | SA | fatal   | DS:0023  ES:0023  FS:003B  GS:0000
03062002_124128 | SA | fatal   | Flags:00010206
03062002_124128 | SA | fatal   | Call stack:
03062002_124128 | SA | fatal   | Address   Frame
03062002_124128 | SA | fatal   | 00A32B6F  02E7F3DC  xmlStrEqual+1F (File [C:\gsstools\gnome-xml\parser.c] Line [1156])
03062002_124128 | SA | fatal   | 00A5A48E  02E7F3F4  xmlXPathNsLookup+5E (File [C:\gsstools\gnome-xml\xpath.c] Line [2548])
03062002_124128 | SA | fatal   | 00A6244D  02E7F440  xmlXPathNodeCollectAndTest+6D (File [C:\gsstools\gnome-xml\xpath.c] Line [8021])
03062002_124128 | SA | fatal   | 00A6188D  02E7F47C  xmlXPathCompOpEval+66D (File [C:\gsstools\gnome-xml\xpath.c] Line [9214])
03062002_124128 | SA | fatal   | 00A62172  02E7F4B0  xmlXPathCompOpEval+F52 (File [C:\gsstools\gnome-xml\xpath.c] Line [9587])
03062002_124128 | SA | fatal   | 00A61211  02E7F4C0  xmlXPathRunEval+71 (File [C:\gsstools\gnome-xml\xpath.c] Line [9703])
03062002_124128 | SA | fatal   | 00A6106E  02E7F4DC  xmlXPathCompiledEval+8E (File [C:\gsstools\gnome-xml\xpath.c] Line [9866])
03062002_124128 | SA | fatal   | 00A0B125  02E7F504  xsltEvalXPathPredicate+55 (File [C:\gsstools\libxslt\libxslt\templates.c] Line [74])
03062002_124128 | SA | fatal   | 00A07395  02E7F534  xsltTestCompMatch+645 (File [C:\gsstools\libxslt\libxslt\pattern.c] Line [724])
03062002_124128 | SA | fatal   | 00A090AB  02E7F564  xsltGetTemplate+12B (File [C:\gsstools\libxslt\libxslt\pattern.c] Line [1946])
03062002_124128 | SA | fatal   | 00A0BC14  02E7F580  xsltProcessOneNode+14 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [960])
03062002_124128 | SA | fatal   | 00A0EC79  02E7F5E4  xsltApplyTemplates+499 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [2758])
03062002_124128 | SA | fatal   | 00A0C43A  02E7F624  xsltApplyOneTemplate+1BA (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1168])
03062002_124128 | SA | fatal   | 00A0F1F3  02E7F650  xsltIf+143 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [2983])
03062002_124128 | SA | fatal   | 00A0C43A  02E7F690  xsltApplyOneTemplate+1BA (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1168])
03062002_124128 | SA | fatal   | 00A0BD20  02E7F6B4  xsltProcessOneNode+120 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1009])
03062002_124128 | SA | fatal   | 00A0EC79  02E7F718  xsltApplyTemplates+499 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [2758])
03062002_124128 | SA | fatal   | 00A0C43A  02E7F758  xsltApplyOneTemplate+1BA (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1168])
03062002_124128 | SA | fatal   | 00A0BD20  02E7F77C  xsltProcessOneNode+120 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1009])
03062002_124128 | SA | fatal   | 00A0EC79  02E7F7E0  xsltApplyTemplates+499 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [2758])
03062002_124128 | SA | fatal   | 00A0C43A  02E7F820  xsltApplyOneTemplate+1BA (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1168])
03062002_124128 | SA | fatal   | 00A0D765  02E7F874  xsltDocumentElem+8D5 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1738])
03062002_124128 | SA | fatal   | 00A0C43A  02E7F8B4  xsltApplyOneTemplate+1BA (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1168])
03062002_124128 | SA | fatal   | 00A0BD20  02E7F8D8  xsltProcessOneNode+120 (File [C:\gsstools\libxslt\libxslt\transform.c] Line [1009])
03062002_124128 | SA | fatal   | 00A0F9FC  02E7F914  xsltApplyStylesheetInternal+2AC (File [C:\gsstools\libxslt\libxslt\transform.c] Line [3405])
03062002_124128 | SA | fatal   | 00A0F74A  02E7F930  xsltApplyStylesheet+1A (File [C:\gsstools\libxslt\libxslt\transform.c] Line [3519])
03062002_124129 | SA | fatal   | 009E62C4  02E7F988  XSLT_Element_Handler::exec+2EF (File [C:\gsstools\engine\elements.cpp] Line [976])
03062002_124129 | SA | fatal   | 009E99F1  02E7F9B4  processNode+11F (File [C:\gsstools\engine\xmldispatch.cpp] Line [39])
03062002_124129 | SA | fatal   | 009E9BB9  02E7F9C8  processNodeChildren+2C (File [C:\gsstools\engine\xmldispatch.cpp] Line [100])
03062002_124129 | SA | fatal   | 009E6610  02E7FF60  OUTPUT_Element_Handler::exec+1BE (File [C:\gsstools\engine\elements.cpp] Line [1053])
03062002_124129 | SA | fatal   | 009E99F1  02E7FF8C  processNode+11F (File [C:\gsstools\engine\xmldispatch.cpp] Line [39])
03062002_124129 | SA | fatal   | 009E9BB9  02E7FFA0  processNodeChildren+2C (File [C:\gsstools\engine\xmldispatch.cpp] Line [100])
03062002_124129 | SA | fatal   | 009E812B  02E7FFAC  runDoc+14 (File [C:\gsstools\engine\gsscore.cpp] Line [436])
03062002_124129 | SA | fatal   | 0040CD01  02E7FFF0  0001:0000BD01 C:\gsstools\bin\SA.exe
03062002_124129 | SA | fatal   | 
03062002_124129 | SA | fatal   | Call stack info(thread=0x18C) : 
03062002_124129 | SA | fatal   |      C:\gsstools\engine\gsscore.cpp(534) : gssUnhandledExceptionFilter
03062002_124129 | SA | fatal   |      kernel32!0x77EB9B8E : UnhandledExceptionFilter
03062002_124129 | SA | fatal   |      kernel32!0x77E9D702 : QueueUserAPC

build-output.xsl



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]