[ expat-Bugs-453546 ] memmove() segv inside XML_GetBuffer

[noreply@sourceforge.net]

Bugs item #453546, was opened at 2001-08-20 16:42
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=110127&aid=453546&group_id=10127

Category: XML::Parser (Perl module)
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Bart Schaefer (barts)
Assigned to: Clark Cooper (coopercc)
Summary: memmove() segv inside XML_GetBuffer

Initial Comment:
I do not believe this to be the same bug as 434665.

I'm using XML::Parser::EasyTree.

I wrote a module that, when perl is run from the shell
command line, successfully parses an XML file and
interprets the resulting tree.

When I use the same module as a mod_perl handler for an
upload of exactly the same file, I get a segmentation
fault.  GDB on a single-threaded httpd shows this to be
happening on a memmove() call with dest=0x0, *inside*
XML_GetBuffer().
The fix in xmlparse.c rev 1.22 only helps after
XML_GetBuffer() returns 0, and I don't get that far.

I'm using the 1.95.2-1 RPM on RedHat 6.2 linux, with
perl 5.6.0 and XML::Parser both installed using the
CPAN shell.  I've tried it on two different machines
with Apache 1.3.14/ mod_perl 1.24_01 and Apache
1.3.19/mod_perl 1.25, with the same results.

If I can come up with a minimal file that reproduces
this, I'll attach it to this bug report later.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=110127&aid=453546&group_id=10127