DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24693>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=24693

DOMNode::getTextContent() corrupts heap

[EMAIL PROTECTED] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|INVALID                     |



------- Additional Comments From [EMAIL PROTECTED]  2003-11-14 14:37 -------
1. Compiler VC6.

2. Stack trace:
operator delete(void * 0x005c73d0) line 49 + 16 bytes
XERCES-C_2_3_0D! 12080e79()
XERCES-C_2_3_0D! 1211d5dc()
XERCES-C_2_3_0D! 1211baa3()
XERCES-C_2_3_0D! 1211f804()
XERCES-C_2_3_0D! 1211e738()
XERCES-C_2_3_0D! 120a0334()
XERCES-C_2_3_0D! 120a008c()
XERCES-C_2_3_0D! 120ad651()
parse(const char * 0x002fa459) line 97 + 43 bytes
main() line 103 + 24 bytes
mainCRTStartup() line 338 + 17 bytes

3. All comments about poor practices and invitations to disaster are irrelevant 
(I put everything in one function, no error handling, type checking, etc. 
intentionally to make the test case shorter).

4. A patch suggested by [EMAIL PROTECTED] does not fix anything.
The line
        pChild = pChild->getNextSibling() 
 returns NULL.
In fact node type of the first child (which is returned by the previous line) 
is ELEMENT_NODE  (pChild->getNodeType() returns 1) and pChild->getNodeName() 
returns L"Obj"

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to