[xml/sgml-pkgs] Bug#460682: xsltproc --maxdepth 65535 leads to seg fault

[Mathieu Malaterre]

Package: xsltproc
Version: 1.1.19-1
Severity: normal


When specifying the maxdepth on the command line to be 65535 xsltproc
finish with a seg fault:

$ gdbrun xsltproc --maxdepth 65535 maxdepth.xsl f.xml
...
Program received signal SIGSEGV, Segmentation fault.
0xb7e8d715 in xsltXPathVariableLookup () from /usr/lib/libxslt.so.1
(gdb)                                                                                                                      

maxdepth.xsl is the following file:

<?xml version="1.0" encoding="ISO-8859-1"?>
<xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
version="1.0">
  <xsl:output method="text" indent="yes"/>
  <xsl:template match="/">
    <xsl:call-template name="do-group-length"/>
  </xsl:template>

  <xsl:template name="do-group-length">
    <xsl:param name="count" select="0"/>
    <xsl:if test="$count &lt; 65535"> <!-- 0xffff -->
      <xsl:call-template name="do-group-length">
        <xsl:with-param name="count" select="$count + 2"/>
      </xsl:call-template>
    </xsl:if>
  </xsl:template>
</xsl:stylesheet>

Available online at:

http://gdcm.svn.sourceforge.net/viewvc/gdcm/Sandbox/maxdepth.xsl?view=markup

thanks
-Mathieu

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.18-4-686-bigmem
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages xsltproc depends on:
ii  libc6                      2.5-9+b1      GNU C Library: Shared libraries
ii  libgcrypt11                1.2.3-2       LGPL Crypto library - runtime libr
ii  libgpg-error0              1.4-1         library for common error values an
ii  libxml2                    2.6.27.dfsg-1 GNOME XML library
ii  libxslt1.1                 1.1.19-1      XSLT processing library - runtime 

-- no debconf information