Crash in lookup()

Carsten Fuchs <[email protected]> Mon, 24 Jan 2011 11:34:14 +0100
Newsgroups gmane.text.xml.expat.general
Message-ID <[email protected]>
This is a cryptographically signed message in MIME format.

--===============1981959899==
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha1; boundary="------------ms030900040001020904020401"

This is a cryptographically signed message in MIME format.

--------------ms030900040001020904020401
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: quoted-printable

Dear expat list,

we're using expat 2.0.1 (with OpenCollada) for loading Collada documents,=
 using Win7 with VC++ 2010.
For testing, we also tried the current CVS tarball, with the same results=
=2E

Unfortunately, when we try to load a simple sample file, we get a segfaul=
t in function
NAMED * lookup(HASH_TABLE *table, KEY name, size_t createSize)


The stacktrace without function parameters is at:
http://pastebin.com/EN9xkVnr

The same stacktrace with function parameters is at:
http://pastebin.com/EcXkkXm5

A link to the relevant line of source code is
http://trac.cafu.de/browser/cafu/trunk/ExtLibs/expat/lib/xmlparse.c#L5880=


where i =3D=3D 0x38 and table->v[i] =3D=3D 0xdddddddd (pointer to previou=
sly deleted memory).


Is this a known bug?
What can we do?

Any help would much be appreciated!

Many thanks and best regards,
Carsten



--=20
    Cafu - the open-source Game and Graphics Engine
for multiplayer, cross-platform, real-time 3D Action
           Learn more at http://www.cafu.de


--------------ms030900040001020904020401
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms030900040001020904020401--

--===============1981959899==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Expat-discuss mailing list
[email protected]
http://mail.libexpat.org/mailman/listinfo/expat-discuss

--===============1981959899==--