Core-dump pasting from one form field into another

Hello All,

This is exercisable in Dillo 3.0.4.1, but not new.  I found it by
accident in my hack-up of Dillo 3.0.4.

The reproduction is:
- enable cookies for .google.com
- navigate to https://mail.google.com/mail/?ui=html
- fight the links until you get a screen with two fields, one for the
username and one for the password
- type something into the username field
- select it and drag to the password field
-- core dump

I am on:

- OSX 10.6.8
- Dillo 3.0.4.1 with SSL enabled
- FLTK 1.3.3
- with dpid, etc from Dillo 3.0.4 with extensive hacking

so the fault could be Mac-specific.

Essentially the same fault (in Fl::dnd()) is reproducible in clean
Dillo 3.0.4, with FLTK 1.3.2, clean dpid, etc, so I *think* it's not a
product of my hackery.

Clean Dillo 3.0.4 does not report the CGContextSetShouldAntialias and
related errors, so I *think* that they are unrelated.

Some errors and backtrace below.

So far, I have not reproduced this fault in the FLTK input test program.

Does anyone have a favourite piece of form html for me to try, to see
if we can get out of needing gmail for the reproduction.

Regards,
James.

========================

Sat Dec 27 12:16:00 James-MacBook.local dillo[93125] <Error>:
CGContextSetShouldAntialias: invalid context 0x0
Sat Dec 27 12:16:00 James-MacBook.local dillo[93125] <Error>:
CGContextSetTextPosition: invalid context 0x0
Sat Dec 27 12:16:00 James-MacBook.local dillo[93125] <Error>:
CGContextSetShouldAntialias: invalid context 0x0
Sat Dec 27 12:16:00 James-MacBook.local dillo[93125] <Error>:
CGContextSetShouldAntialias: invalid context 0x0

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_INVALID_ADDRESS at address: 0x0000000000000000
0x00007fff8a1cd7cd in __dynamic_cast ()
(gdb) bt
#0  0x00007fff8a1cd7cd in __dynamic_cast ()
#1  0x000000010009b318 in Fl::dnd () at Fl_cocoa.mm:3792
#2  0x00000001000aee3f in Fl_Input::handle (this=<value temporarily
unavailable, due to optimizations>, event=<value temporarily
unavailable, due to optimizations>) at Fl_Input.cxx:681
#3  0x0000000100071187 in CustInput2::handle (this=0x103c10a00, e=5)
at fltkui.cc:86
#4  0x000000010009cfda in send (event=<value temporarily unavailable,
due to optimizations>, to=<value temporarily unavailable, due to
optimizations>, window=<value temporarily unavailable, due to
optimizations>) at Fl.cxx:1143
#5  0x000000010009eaf7 in Fl::handle_ (e=5, window=0x102a1e020) at Fl.cxx:1455
#6  0x000000010009ad28 in cocoaMouseHandler (theEvent=0x100565980) at
Fl_cocoa.mm:1057
#7  0x00007fff890580c7 in -[NSWindow sendEvent:] ()
#8  0x00007fff88f8cafa in -[NSApplication sendEvent:] ()
#9  0x000000010009af43 in +[FLApplication sendEvent:] (self=<value
temporarily unavailable, due to optimizations>, _cmd=<value
temporarily unavailable, due to optimizations>, theEvent=0x100565980)
at Fl_cocoa.mm:1453
#10 0x000000010009883a in do_queued_events (time=1e+20) at Fl_cocoa.mm:772
#11 0x000000010009b175 in fl_wait [inlined] () at
/Users/jamescone/buildTrees/fltk/fltk-1.3.3/src/Fl_cocoa.mm:796
#12 0x000000010009b175 in fl_mac_flush_and_wait (time_to_wait=1e+20)
at Fl_cocoa.mm:815
#13 0x000000010009df39 in Fl::run () at Fl.cxx:589
#14 0x0000000100004819 in main (argc=1, argv=0x7fff5fbff3f0) at dillo.cc:572
(gdb)