>Number:         13088
>Category:       pkg
>Synopsis:       www/w3m crashes on complex table HTML pages
>Confidential:   no
>Severity:       critical
>Priority:       low
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jun 02 13:01:00 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:     Petri Koistinen
>Release:        pkgsrc 2nd June 2001, w3m 990604 Release.
>Organization:
>Environment:
System: NetBSD legoland 1.5 NetBSD 1.5 (CUSTOM1) #3: Sat Jan 6 18:36:42 GMT 2001 thoron@legoland:/usr/src/sys/arch/amiga/compile/CUSTOM1 amiga


>Description:
	w3m crashes on pages that are relatively complex.
	Like on www.netbsd.org, but www.freebsd.org, www.openbsd.org and
	www.trustedbsd.org are OK. ;-)
>How-To-Repeat:
	/usr/pkg/bin/w3m http://www.netbsd.org/

    10/13kb  76%   1.1kb/s eta 00:00:02
||||||||||||||||||||||||||||Segmentation fault (core dumped)

bash-2.05# gdb /usr/pkg/bin/w3m w3m.core 
GNU gdb 4.17
Copyright 1998 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "m68k--netbsd"...(no debugging symbols found)...
Core was generated by 3m'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/libexec/ld.so...(no debugging symbols
found)...done.
Reading symbols from /usr/lib/libm.so.0.1...(no debugging symbols found)...
done.
Reading symbols from /usr/lib/libtermcap.so.0.4...
(no debugging symbols found)...done.
Reading symbols from /usr/lib/libssl.so.1.0...(no debugging symbols
found)...
done.
Reading symbols from /usr/lib/libcrypto.so.0.2...
(no debugging symbols found)...done.
Reading symbols from /usr/lib/libc.so.12.62.1...(no debugging symbols
found)...
done.
#0  0x33c7a in GC_mark_from_mark_stack ()
(gdb) where
#0  0x33c7a in GC_mark_from_mark_stack ()
#1  0x338a0 in GC_mark_some ()
#2  0x2fdb2 in GC_stopped_mark ()
#3  0x2fc6e in GC_try_to_collect_inner ()
#4  0x3044e in GC_collect_or_expand ()
#5  0x304cc in GC_allocobj ()
#6  0x2ed2a in GC_generic_malloc_inner ()
#7  0x2ede0 in GC_generic_malloc ()
#8  0x2ee3c in GC_malloc_atomic ()
#9  0x2c594 in Strnew_size ()
#10 0xa944 in flushline ()
#11 0x19276 in do_refill ()
#12 0x1a474 in renderTable ()
#13 0x1a0a2 in renderCoTable ()
#14 0x1a400 in renderTable ()
#15 0xf8ca in HTMLlineproc1 ()
#16 0x108c8 in loadHTMLstream ()
#17 0x10158 in loadHTMLBuffer ()
#18 0x8094 in currentLn ()
#19 0x9dc0 in loadGeneralFile ()
#20 0x3b2c in main ()
#21 0x20e0 in __start ()
(gdb) 
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: