Here is some more on jsrt crashing on Ubuntu.
I can even make this happen on a tiny, 6-line file, which is rather strange.
I kept taking things away and got it down to this.


<html>
<body>
<form onunload>
</form>
</body>
</html>

OR

<html>
<body>
<form onunload=formUnload(this.name)>
</form>
</body>
</html>

Regardless of whether or not there is a formUnload routine to go to.

Backtrace is included below.

In htmlParse, it is calling runOnload
The crash happens in runOnload.
I wasn't able to add any printf's to runOnload.
I think it's happening immediately upon entry into runOnload.

thanks
Kevin

xxxxxx

(gdb) bt
#0  0x00007fd8bd133f77 in __GI_raise (sig=sig@entry=6)
    at ../nptl/sysdeps/unix/sysv/linux/raise.c:56
#1  0x00007fd8bd1375e8 in __GI_abort () at abort.c:90
#2  0x00007fd8bd1714fb in __libc_message (do_abort=do_abort@entry=1,
    fmt=fmt@entry=0x7fd8bd282f10 "*** %s ***: %s terminated\n")
    at ../sysdeps/unix/sysv/linux/libc_fatal.c:199
#3  0x00007fd8bd20f08c in __GI___fortify_fail (msg=<optimized out>,
msg@entry=0x7fd8bd282ef8 "stack smashing detected") at fortify_fail.c:37
#4  0x00007fd8bd20f030 in __stack_chk_fail () at stack_chk_fail.c:28
#5  0x000000000042dc69 in runOnload () at html.c:2008
#6 0x000000000042a805 in htmlParse (buf=0x243cb20 "", remote=0) at html.c:711
#7  0x00000000004152a8 in browseCurrentBuffer () at buffers.c:5328
#8 0x000000000041459a in runCommand (line=0x68e520 <line2.8236> "jsrt_crash")
    at buffers.c:4992
#9  0x0000000000414cee in edbrowseCommand (
    line=0x68c6a0 <line.8800> "b jsrt_crash", script=0 '\000')
    at buffers.c:5164
#10 0x0000000000406988 in main (argc=0, argv=0x7ffe2a9f2f10) at main.c:1364

_______________________________________________
Edbrowse-dev mailing list
[email protected]
http://lists.the-brannons.com/mailman/listinfo/edbrowse-dev

Reply via email to