[xml/sgml-pkgs] Bug#568382: libxslt1.1: Invalid free() in xslReleaseRVT

[Toby Speight]

Okay, I think I've got a minimal repro (appended).  It's possible the
fault lies in the Perl interface, in which case this should be
reassigned to the `libxml-libxslt-perl' package.

The bug only seems to be triggered if we pass nodes from exsl:node-set()
into an unrelated extension function; changing the select to not call
local:uc() causes the program to run to completion.

Also of interest: if I change the definition of local:uc to

  { $_ = shift; return uc; }

then the crash doesn't happen until after the output is written.  I'm
guessing that this means it's possibly Perl's garbage collection
interfering?  I'm not sure whether that's usable for a workaround in my
production code or not - I'm dealing with many more calls there.

Here's the code:

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 568382.pl
Type: text/x-perl
Size: 867 bytes
Desc: Test program
URL: <http://lists.alioth.debian.org/pipermail/debian-xml-sgml-pkgs/attachments/20100204/c0b801fc/attachment.pl>