Bug#523320: libnxml0: crashes with non well-formed xml

2009-04-10 Thread Andrea Marchesini
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


 I attach the back

Tnx for the bug report but I can not recreate this bug on my computers.

b

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (Darwin)

iEYEARECAAYFAkngCQUACgkQOSG7KPv+ssS8bgCgkSEy4LNcWpNGCPqUkMTZXXoA
Df0AoInEylUgZEw0aVVcdT811Ca3kV/O
=Z8Wh
-END PGP SIGNATURE-



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#523320: libnxml0: crashes with non well-formed xml

2009-04-09 Thread Riccardo Stagni
Package: libnxml0
Version: 0.18.3-2
Severity: normal

I had some crashes with newsbeuter. After some investigations I discovered
the cause: an unescaped ampersand. Galeon (the browser I use, gecko-based)
throws an XML parsing error, while newsbeuter crashed with segfault.
Could the library fail gracefully instead of dying miserably?

I attach the backtrace obtained with lib{nxml,mrss}0-dbg packages, and the
culprit xml.

ciao
Riccardo


-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: lang=it...@euro, lc_ctype=it...@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages libnxml0 depends on:
ii  libc6 2.9-6  GNU C Library: Shared libraries
ii  libcurl3-gnutls   7.18.2-8.1 Multi-protocol file transfer libra

libnxml0 recommends no packages.

libnxml0 suggests no packages.

-- no debconf information
(gdb) bt
#0  0x0012 in ?? ()
#1  0xb7f3c293 in __nxml_parse_get_tag (doc=0xa49c740, buffer=0xb673f038, 
size=0xb673f034, data=0xb673d544, doctype=0xb673f03c) at nxml_parser.c:852
#2  0xb7f3cce8 in __nxml_parse_get_tag (doc=0xa49c740, buffer=0xb673f038, 
size=0xb673f034, data=0xb673de14, doctype=0xb673f03c) at nxml_parser.c:1108
#3  0xb7f3cce8 in __nxml_parse_get_tag (doc=0xa49c740, buffer=0xb673f038, 
size=0xb673f034, data=0xb673e6e4, doctype=0xb673f03c) at nxml_parser.c:1108
#4  0xb7f3cce8 in __nxml_parse_get_tag (doc=0xa49c740, buffer=0xb673f038, 
size=0xb673f034, data=0xb673efb4, doctype=0xb673f03c) at nxml_parser.c:1108
#5  0xb7f3cce8 in __nxml_parse_get_tag (doc=0xa49c740, buffer=0xb673f038, 
size=0xb673f034, data=0xb673f040, doctype=0xb673f03c) at nxml_parser.c:1108
#6  0xb7f3d417 in __nxml_parse_buffer (nxml=0xa49c740, 
r_buffer=value optimized out, r_size=188634) at nxml_parser.c:1337
#7  0xb7f2fdef in mrss_parse_url_with_options_error_and_transfer_buffer (
url=0xa5bdfb4 http://blog.makezine.com/index.xml;, ret=0xb673f20c, 
options=0xa46fff8, code=0xb673f21c, feed_content=0x0, feed_size=0x0)
at mrss_parser.c:1265
#8  0xb7f2ff02 in mrss_parse_url_with_options_and_error (
url=0xa5bdfb4 http://blog.makezine.com/index.xml;, ret=0xb673f20c, 
options=0xa46fff8, code=0xb673f21c) at mrss_parser.c:1213
#9  0x08089b32 in ?? ()
#10 0x0808af52 in ?? ()
#11 0x0808c735 in ?? ()
---Type return to continue, or q return to quit---
#12 0x0806d06a in ?? ()
#13 0x0806d42e in ?? ()
#14 0x0806d8fa in ?? ()
#15 0x0807b51b in ?? ()
#16 0x080c7543 in ?? ()
#17 0xb7f4b4e5 in start_thread () from /lib/i686/cmov/libpthread.so.0
#18 0xb7cd00de in clone () from /lib/i686/cmov/libc.so.6



index.xml.gz
Description: GNU Zip compressed data