[Expat-discuss] Crash in lookup()

[Carsten Fuchs]

Dear expat list,

we're using expat 2.0.1 (with OpenCollada) for loading Collada documents, using Win7 with VC++ 2010.
For testing, we also tried the current CVS tarball, with the same results.

Unfortunately, when we try to load a simple sample file, we get a segfault in function
NAMED * lookup(HASH_TABLE *table, KEY name, size_t createSize)


The stacktrace without function parameters is at:
http://pastebin.com/EN9xkVnr

The same stacktrace with function parameters is at:
http://pastebin.com/EcXkkXm5

A link to the relevant line of source code is
http://trac.cafu.de/browser/cafu/trunk/ExtLibs/expat/lib/xmlparse.c#L5880

where i == 0x38 and table->v[i] == 0xdddddddd (pointer to previously deleted memory).


Is this a known bug?
What can we do?

Any help would much be appreciated!

Many thanks and best regards,
Carsten



-- 
    Cafu - the open-source Game and Graphics Engine
for multiplayer, cross-platform, real-time 3D Action
           Learn more at http://www.cafu.de

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5219 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mail.libexpat.org/pipermail/expat-discuss/attachments/20110124/dc5f1b5b/attachment.bin>