Crashes at bizmakoto.jp
Hi. I don't try all pages but at least there are several pages where dillo keeps crashing. One example is http://bizmakoto.jp/bizid/articles/0911/02/news082.html. gdb backtrace shows something like this. #0 0x28554687 in __vfprintf () from /lib/libc.so.6 #1 0x284e1fe0 in vsnprintf () from /lib/libc.so.6 #2 0x0807a16f in dStr_vsprintfa (ds=0x83cad40, format=0x80fd314 "unexpected closing tag: </%s> -- expected </%s>.\n", argp=0xbfbfe318 "$B!&(B216\017\b") at dlib.c:362 #3 0x08065f94 in DilloHtml::bugMessage (this=0x847f400, format=0x80fd314 "unexpected closing tag: </%s> -- expected </%s>.\n") at html.cc:144 #4 0x0806bed5 in Html_tag_cleanup_at_close (html=0x847f400, new_idx=8) at html.cc:1338 #5 0x0806ce4f in Html_write_raw (html=0x847f400, buf=0x861e000 "\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n<html id=\"/bizid/articles/0911/02/news082.html\">\n<head>\n<meta http-equiv=\"Content-Type\" content"..., bufsize=59935, Eof=0) at html.cc:3514 #6 0x0806dca5 in DilloHtml::write (this=0x847f400, Buf=0x0, BufSize=59935, Eof=0) at html.cc:556 #7 0x0806ddbe in Html_callback (Op=0, Client=0x8502380) at html.cc:3673 #8 0x0805b862 in Cache_process_queue (entry=0x8562980) at cache.c:1173 #9 0x0805c41f in Cache_delayed_process_queue_callback () at cache.c:1237 #10 0x080cc874 in fltk::wait () #11 0x080cca19 in fltk::run () #12 0x0804f158 in main (argc=1, argv=0xbfbfe798) at dillo.cc:353 I set YES/NO on w3c_plus_heuristics in dillorc but it didn't help. It seems that new_tag contains something valid but tag looks corrupted or not-initialized. (gdb) p new_tag $1 = {name = 0x80f8ef7 "body", Flags = 30 '\036', EndTag = 79 'O', TagLevel = 1 '\001', open = 0x8069e9c <Html_tag_open_body>, close = 0x8067db0 <Html_tag_close_body>} (gdb) p tag $2 = {name = 0x79000000 <Error reading address 0x79000000: Bad address>, Flags = 16 '\020', EndTag = 0 '\0', TagLevel = 0 '\0', open = 0, close = 0x2f} Regards, furaisanjin
On Tue, Nov 03, 2009 at 09:19:50AM +0900, furaisanjin wrote:
Hi.
I don't try all pages but at least there are several pages where dillo keeps crashing. One example is http://bizmakoto.jp/bizid/articles/0911/02/news082.html. gdb backtrace shows something like this.
It doesn't crash here... :P The were a couple of patches for cleanup_at_close, please try from the repository without them (upto 1404:d4a8309dc63c), and let us know how it goes. -- Cheers Jorge.-
Jorge wrote:
On Tue, Nov 03, 2009 at 09:19:50AM +0900, furaisanjin wrote:
Hi.
I don't try all pages but at least there are several pages where dillo keeps crashing. One example is http://bizmakoto.jp/bizid/articles/0911/02/news082.html. gdb backtrace shows something like this.
It doesn't crash here... :P
The were a couple of patches for cleanup_at_close, please try from the repository without them (upto 1404:d4a8309dc63c), and let us know how it goes.
I don't see where the tag variable is set to anything at all in tip. I don't get a crash, but I get gibberish in the page bugs.
2009/11/4 corvid <corvid@lavabit.com>:
I don't see where the tag variable is set to anything at all in tip.
Agree.
I don't get a crash, but I get gibberish in the page bugs.
That's interesting aspect in Linux, isn't it? How can you access to memory pointed by none-initialized variable in Linux? Regards, furaisanjin
On Wed, Nov 04, 2009 at 09:04:40PM +0900, furaisanjin wrote:
2009/11/4 corvid <corvid@lavabit.com>:
I don't see where the tag variable is set to anything at all in tip.
Agree.
I don't get a crash, but I get gibberish in the page bugs.
That's interesting aspect in Linux, isn't it? How can you access to memory pointed by none-initialized variable in Linux?
Please try Hg tip and report. BTW, are you using some BSD? -- Cheers Jorge.-
On Tue, Nov 03, 2009 at 03:10:31PM +0000, corvid wrote:
Jorge wrote:
On Tue, Nov 03, 2009 at 09:19:50AM +0900, furaisanjin wrote:
Hi.
I don't try all pages but at least there are several pages where dillo keeps crashing. One example is http://bizmakoto.jp/bizid/articles/0911/02/news082.html. gdb backtrace shows something like this.
It doesn't crash here... :P
The were a couple of patches for cleanup_at_close, please try from the repository without them (upto 1404:d4a8309dc63c), and let us know how it goes.
I don't see where the tag variable is set to anything at all in tip. I don't get a crash, but I get gibberish in the page bugs.
Right, I made hurried modifications to a good patch and that bug slipped in. -- Cheers Jorge.-
participants (3)
-
corvid＠lavabit.com -
furaisanjin＠gmail.com -
jcid＠dillo.org