dillo_port1.3: segfault someplace on reload of news.google.com

I've got a segfault using dillo_port1.3 by continuously hitting the Reload
button with the following url:

http://www.google.com/search?aq=f&hl=en&gl=us&tbm=nws&btnmeta_news_search=1&q=alaska+north+pole

After about three or four taps, dillo disappears and I don't see anything
within the debug output from the startx window.  (Using DWM and manually
starting startx within a terminal here.)

I don't think I've compiled with -g, -ggdb, etc...  but here's what I've got so far.
I'll try to bit-bang this a little bit more tomorrow when I get time if nobody else gets this.

My guess so far, when running within GDB, reload button works continuously without crashing until
I start clicking before the page finishes reloading, then segfault.  So, scanning gdb bt, this
looks like it might get into fltk-1.3 buttons.


This is all I've got so far:

Connecting to 74.125.127.103
a_Nav_expect_done: reload!
Nav_open_url: new url='http://www.google.com/search?aq=f&hl=en&gl=us&tbm=nws&btnmeta_news_search=1&q=alaska+north+pole'
Connecting to 74.125.127.103
a_Nav_expect_done: reload!
Nav_open_url: new url='http://www.google.com/search?aq=f&hl=en&gl=us&tbm=nws&btnmeta_news_search=1&q=alaska+north+pole'
Connecting to 74.125.127.103
a_Nav_expect_done: reload!
Nav_open_url: new url='http://www.google.com/search?aq=f&hl=en&gl=us&tbm=nws&btnmeta_news_search=1&q=alaska+north+pole'
Connecting to 74.125.127.103
Nav_open_url: new url='http://www.google.com/search?aq=f&hl=en&gl=us&tbm=nws&btnmeta_news_search=1&q=alaska+north+pole'
Connecting to 74.125.127.103

Program received signal SIGSEGV, Segmentation fault.
_______________________________________________________________________________
     eax:00000000 ebx:0821A9D0  ecx:02040DA4  edx:08103690     eflags:00010246
     esi:00000010 edi:AF1FC008  esp:BFFFEB18  ebp:BFFFEB58     eip:450D7606
     cs:0073  ds:007B  es:007B  fs:0000  gs:0033  ss:007B    o d I t s Z a P c 
[007B:BFFFEB18]---------------------------------------------------------[stack]
BFFFEB48 : 78 EB FF BF  D8 E6 17 08 - F0 DB 15 08  D8 E6 17 08 x...............
BFFFEB38 : 58 EB FF BF  91 36 10 08 - 91 36 10 08  F0 DB 15 08 X....6...6......
BFFFEB28 : 90 36 10 08  D8 E6 17 08 - 91 36 10 08  D8 E6 17 08 .6.......6......
BFFFEB18 : 08 C0 1F AF  ED 18 08 08 - 08 C0 1F AF  10 00 00 00 ................
[007B:AF1FC008]---------------------------------------------------------[ data]
AF1FC008 : 00 00 00 00  00 00 00 00 - 00 00 00 00  00 00 00 00 ................
AF1FC018 : 00 00 00 00  00 00 00 00 - 00 00 00 00  00 00 00 00 ................
[0073:450D7606]---------------------------------------------------------[ code]
=> 0x450d7606:  rep movsl %ds:(%esi),%es:(%edi)
   0x450d7608:  mov    %eax,%ecx
   0x450d760a:  rep movsb %ds:(%esi),%es:(%edi)
   0x450d760c:  pop    %eax
   0x450d760d:  mov    %eax,%edi
   0x450d760f:  mov    %edx,%esi
------------------------------------------------------------------------------
0x450d7606 in ?? () from /lib/libc.so.6

gdb> bt
#0  0x450d7606 in ?? () from /lib/libc.so.6
#1  0xaf1fc008 in ?? ()
#2  0x08081976 in dStr_append_l (ds=0x821a9d0, s=0x10 <Address 0x10 out of bounds>, l=0x8103690) at dlib.c:272
#3  0x0805ab29 in a_Url_dup (ori=0x821a9d0) at url.c:435
#4  0x08055f87 in a_Bw_add_url (bw=0x80fa2b8, Url=0x817e6d8) at bw.c:210
#5  0x0805d3fe in Nav_open_url (bw=0x80fa2b8, url=0xaf1fc008, requester=<value optimized out>, offset=0x0) at nav.c:240
#6  0x4308cd55 in Fl::wait(double) () from /usr/lib/fltk-1/libfltk.so.1.3
#7  0x00000001 in ?? ()
#8  0x00000001 in ?? ()
#9  0x00000000 in ?? ()

-- 
Roger
http://rogerx.freeshell.org/