Re: [xslt] Segmentation fault with an infinite loop

[Mike Hommey <mh glandium org>]

Here we go, copy/paste from gdb output of a full backtrace:
(Note that I cut after #49, and it goes up to #21807...)

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 16779)]
0x4013d56d in xmlXPathObjectCopy__internal_alias (val=0x804fc18)
    at xpath.c:3291
3291    xmlXPathObjectCopy(xmlXPathObjectPtr val) {
#0  0x4013d56d in xmlXPathObjectCopy__internal_alias (val=0x804fc18)
    at xpath.c:3291
        ret = 0x0
#1  0x4014b261 in xmlXPathCompOpEval (ctxt=0x80b0180, op=0x804fa70)
    at xpath.c:10289
        total = 0
        equal = 0
        ret = 0
        comp = 0x804f698
        arg1 = 0x0
        arg2 = 0x0
        bak = 0x0
        bakd = 0x0
        pp = 0
        cs = 0
#2  0x4014b6e9 in xmlXPathCompOpEval (ctxt=0x80b0180, op=0x804fa98)
    at xpath.c:10393
        total = 0
        equal = 0
        ret = 0
        comp = 0x804f698
        arg1 = 0x402e1c31
        arg2 = 0x0
        bak = 0x8057e28
        bakd = 0x8057208
        pp = 0
        cs = 0
#3  0x4014b3f1 in xmlXPathCompOpEval (ctxt=0x80b0180, op=0x804fac0)
    at xpath.c:10331
        func = 0x40206f7e <__pthread_alt_unlock+14>
        oldFunc = (const xmlChar *) 0x817db40 ""
        oldFuncURI = (const xmlChar *) 0x402e1c31 "\201ï\037ï\v"
        i = -1075834440
        total = 0
        equal = -1075834392
        ret = 135780784
        comp = 0x804f698
        arg1 = 0x4020ae74
        arg2 = 0xbfe011e8
        bak = 0x817dac8
        bakd = 0x401e28ec
        pp = 1076763697
        cs = 135781056
#4  0x4014c0b4 in xmlXPathCompOpEval (ctxt=0x80b0180, op=0x804fae8)
    at xpath.c:10667
        total = 0
        equal = -1075834232
        ret = -1073743380
        comp = 0x804f698
        arg1 = 0x401e28ec
        arg2 = 0x28
        bak = 0x28
        bakd = 0x4039ffc0
        pp = 1076760306
        cs = -1075834280
#5  0x4014c7bc in xmlXPathRunEval (ctxt=0x80b0180) at xpath.c:10860
        comp = 0x804f698
#6  0x4014cc24 in xmlXPathCompiledEval__internal_alias (comp=0x804f698,
    ctx=0x80564e0) at xpath.c:11062
        ctxt = 0x80b0180
        res = 0x4039ffc0
        tmp = 0x28
        init = 0x0
        stack = 0
#7  0x4008c56a in xsltEvalVariable (ctxt=0x8057080, elem=0x817db38,
    precomp=0x804f968) at variables.c:474
        comp = 0x804f698
        result = 0x0
        oldProximityPosition = 1
        oldContextSize = 1
        oldInst = 0x8058108
        oldNode = 0x8057e28
        oldDoc = 0x805a218
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#8  0x4008d8da in xsltBuildVariable (ctxt=0x8057080, comp=0x804f968, 
tree=0x0)
    at variables.c:1195
        elem = 0x817db38
#9  0x4008da4b in xsltRegisterVariable (ctxt=0x8057080, comp=0x804f968,
    tree=0x0, param=0) at variables.c:1238
        elem = 0x9
        present = 0
#10 0x4008e1e8 in xsltParseStylesheetVariable (ctxt=0x8057080, 
cur=0x8058108)
    at variables.c:1497
        comp = 0x804f968
#11 0x4009fbd6 in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1591
        info = 0x804f968
        cur = 0x8058108
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4354
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#12 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe0144c
#13 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#14 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208
#15 0x400a3da8 in xsltApplyTemplates (ctxt=0x8057080, node=0x8057e28,
    inst=0x80582a8, comp=0x804fc78) at transform.c:3370
        cur = 0x0
        delete = 0x0
        oldNode = 0x8057e28
        res = 0x817da58
        list = 0x817d9b0
        oldList = 0x817d8a8
        i = 0
        oldProximityPosition = 1
        oldContextSize = 1
        oldMode = (const xmlChar *) 0x0
        oldModeURI = (const xmlChar *) 0x0
        params = 0x0
        param = 0x40082c99
        nbsorts = 0
        sorts = {0x817db08, 0x400af60c, 0xbfe01528, 0x4008d8da, 0x8057080,
  0x817da30, 0x804f968, 0x4008c26e, 0x8057080, 0x805777a, 0x817da30,
  0x817da30, 0x400af60c, 0x0, 0xbfe01558}
        oldXDocPtr = 0x8057208
        oldCDocPtr = 0x805a218
        tmpDocPtr = 0x8058108
        newDocPtr = 0x0
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#16 0x4009fb3e in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1574
        info = 0x804fc78
        cur = 0x80582a8
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4353
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#17 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe0162c
#18 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#19 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208
#20 0x400a3da8 in xsltApplyTemplates (ctxt=0x8057080, node=0x8057e28,
    inst=0x80582a8, comp=0x804fc78) at transform.c:3370
        cur = 0x0
        delete = 0x0
        oldNode = 0x8057e28
        res = 0x817d950
        list = 0x817d8a8
        oldList = 0x817d7a0
        i = 0
        oldProximityPosition = 1
        oldContextSize = 1
        oldMode = (const xmlChar *) 0x0
        oldModeURI = (const xmlChar *) 0x0
        params = 0x0
        param = 0x40082c99
        nbsorts = 0
        sorts = {0x817da00, 0x400af60c, 0xbfe01708, 0x4008d8da, 0x8057080,
  0x817d928, 0x804f968, 0x4008c26e, 0x8057080, 0x805777a, 0x817d928,
  0x817d928, 0x400af60c, 0x0, 0xbfe01738}
        oldXDocPtr = 0x8057208
        oldCDocPtr = 0x805a218
        tmpDocPtr = 0x8058108
        newDocPtr = 0x0
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#21 0x4009fb3e in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1574
        info = 0x804fc78
        cur = 0x80582a8
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4352
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#22 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe0180c
#23 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#24 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208
#25 0x400a3da8 in xsltApplyTemplates (ctxt=0x8057080, node=0x8057e28,
    inst=0x80582a8, comp=0x804fc78) at transform.c:3370
        cur = 0x0
        delete = 0x0
        oldNode = 0x8057e28
        res = 0x817d848
        list = 0x817d7a0
        oldList = 0x817d698
        i = 0
        oldProximityPosition = 1
        oldContextSize = 1
        oldMode = (const xmlChar *) 0x0
        oldModeURI = (const xmlChar *) 0x0
        params = 0x0
        param = 0x40082c99
        nbsorts = 0
        sorts = {0x817d8f8, 0x400af60c, 0xbfe018e8, 0x4008d8da, 0x8057080,
  0x817d820, 0x804f968, 0x4008c26e, 0x8057080, 0x805777a, 0x817d820,
  0x817d820, 0x400af60c, 0x0, 0xbfe01918}
        oldXDocPtr = 0x8057208
        oldCDocPtr = 0x805a218
        tmpDocPtr = 0x8058108
        newDocPtr = 0x0
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#26 0x4009fb3e in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1574
        info = 0x804fc78
        cur = 0x80582a8
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4351
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#27 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe019ec
#28 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#29 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208
#30 0x400a3da8 in xsltApplyTemplates (ctxt=0x8057080, node=0x8057e28,
    inst=0x80582a8, comp=0x804fc78) at transform.c:3370
        cur = 0x0
        delete = 0x0
        oldNode = 0x8057e28
        res = 0x817d740
        list = 0x817d698
        oldList = 0x817d590
        i = 0
        oldProximityPosition = 1
        oldContextSize = 1
        oldMode = (const xmlChar *) 0x0
        oldModeURI = (const xmlChar *) 0x0
        params = 0x0
        param = 0x40082c99
        nbsorts = 0
        sorts = {0x817d7f0, 0x400af60c, 0xbfe01ac8, 0x4008d8da, 0x8057080,
  0x817d718, 0x804f968, 0x4008c26e, 0x8057080, 0x805777a, 0x817d718,
  0x817d718, 0x400af60c, 0x0, 0xbfe01af8}
        oldXDocPtr = 0x8057208
        oldCDocPtr = 0x805a218
        tmpDocPtr = 0x8058108
        newDocPtr = 0x0
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#31 0x4009fb3e in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1574
        info = 0x804fc78
        cur = 0x80582a8
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4350
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#32 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe01bcc
#33 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#34 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208
#35 0x400a3da8 in xsltApplyTemplates (ctxt=0x8057080, node=0x8057e28,
    inst=0x80582a8, comp=0x804fc78) at transform.c:3370
        cur = 0x0
        delete = 0x0
        oldNode = 0x8057e28
        res = 0x817d638
        list = 0x817d590
        oldList = 0x817d488
        i = 0
        oldProximityPosition = 1
        oldContextSize = 1
        oldMode = (const xmlChar *) 0x0
        oldModeURI = (const xmlChar *) 0x0
        params = 0x0
        param = 0x40082c99
        nbsorts = 0
        sorts = {0x817d6e8, 0x400af60c, 0xbfe01ca8, 0x4008d8da, 0x8057080,
  0x817d610, 0x804f968, 0x4008c26e, 0x8057080, 0x805777a, 0x817d610,
  0x817d610, 0x400af60c, 0x0, 0xbfe01cd8}
        oldXDocPtr = 0x8057208
        oldCDocPtr = 0x805a218
        tmpDocPtr = 0x8058108
        newDocPtr = 0x0
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#36 0x4009fb3e in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1574
        info = 0x804fc78
        cur = 0x80582a8
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4349
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#37 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe01dac
#38 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#39 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208
#40 0x400a3da8 in xsltApplyTemplates (ctxt=0x8057080, node=0x8057e28,
    inst=0x80582a8, comp=0x804fc78) at transform.c:3370
        cur = 0x0
        delete = 0x0
        oldNode = 0x8057e28
        res = 0x817d530
        list = 0x817d488
        oldList = 0x817d380
        i = 0
        oldProximityPosition = 1
        oldContextSize = 1
        oldMode = (const xmlChar *) 0x0
        oldModeURI = (const xmlChar *) 0x0
        params = 0x0
        param = 0x40082c99
        nbsorts = 0
        sorts = {0x817d5e0, 0x400af60c, 0xbfe01e88, 0x4008d8da, 0x8057080,
  0x817d508, 0x804f968, 0x4008c26e, 0x8057080, 0x805777a, 0x817d508,
  0x817d508, 0x400af60c, 0x0, 0xbfe01eb8}
        oldXDocPtr = 0x8057208
        oldCDocPtr = 0x805a218
        tmpDocPtr = 0x8058108
        newDocPtr = 0x0
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#41 0x4009fb3e in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1574
        info = 0x804fc78
        cur = 0x80582a8
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4348
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#42 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe01f8c
#43 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#44 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208
#45 0x400a3da8 in xsltApplyTemplates (ctxt=0x8057080, node=0x8057e28,
    inst=0x80582a8, comp=0x804fc78) at transform.c:3370
        cur = 0x0
        delete = 0x0
        oldNode = 0x8057e28
        res = 0x817d428
        list = 0x817d380
        oldList = 0x817d278
        i = 0
        oldProximityPosition = 1
        oldContextSize = 1
        oldMode = (const xmlChar *) 0x0
        oldModeURI = (const xmlChar *) 0x0
        params = 0x0
        param = 0x40082c99
        nbsorts = 0
        sorts = {0x817d4d8, 0x400af60c, 0xbfe02068, 0x4008d8da, 0x8057080,
  0x817d400, 0x804f968, 0x4008c26e, 0x8057080, 0x805777a, 0x817d400,
  0x817d400, 0x400af60c, 0x0, 0xbfe02098}
        oldXDocPtr = 0x8057208
        oldCDocPtr = 0x805a218
        tmpDocPtr = 0x8058108
        newDocPtr = 0x0
        oldNsNr = 2
        oldNamespaces = (xmlNsPtr *) 0x804fd40
#46 0x4009fb3e in xsltApplyOneTemplate (ctxt=0x8057080, node=0x8057e28,
    list=0x8058108, templ=0x80583b0, params=0x0) at transform.c:1574
        info = 0x804fc78
        cur = 0x80582a8
        insert = 0x805aa58
        copy = 0x0
        oldInsert = 0x805aa58
        oldCurrent = 0x8057208
        oldInst = 0x80582a8
        oldBase = 4347
        tmpRVT = 0x0
        level = 0
        addCallResult = 0
        debugedNode = 0x0
        start = 0
#47 0x4009f693 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057e28,
    params=0x0) at transform.c:1413
        template = 0x80583b0
        oldNode = 0xbfe0216c
#48 0x4009ef82 in xsltDefaultProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1268
        copy = 0x0
        delete = 0x0
        cur = 0x8057e28
        nbchild = 1
        oldSize = 1
        childno = 1
        oldPos = 1
        template = 0x0
#49 0x4009f527 in xsltProcessOneNode (ctxt=0x8057080, node=0x8057208,
    params=0x0) at transform.c:1389
        template = 0x0
        oldNode = 0x8057208


Mike