[XALANC-774] Crash in XalanTransformer::transform() if extra parenthesis is in XSL.

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.11
• Component/s: XalanC
• Environment: RedHat Linux 7
• Assignee: Steven J. Hathaway
• Reporter: Chad Rosenquist
• Created: 14/Sep/17 20:42
• Updated: 14/Sep/17 20:42

Description

Hi,

I ran into an issue where I am getting a crash during a transform because of a syntax error in the XSL. I am expecting the transformer to report an error instead of a crash. To reproduce the crash:

1. Edit the SimpleTransform.cpp file located in xalan-c-1.11/c/samples/SimpleTransform to call my crash.xml and crash.xsl files.

2. Run the transform and see the SIGABRT generated (if compiled in debug mode):
SimpleTransform: /apps/uadev/tfuas/Dev/build/xalan-c-1.11/c/src/xalanc/XalanDOM/XalanDOMString.cpp:72: xalanc_1_11::XalanDOMString::XalanDOMString(const XalanDOMChar*, xercesc_3_1::MemoryManager&, xalanc_1_11::XalanDOMString::size_type): Assertion `theString != 0' failed.
Abort

If not compiled in debug mode, it crashes with a SEGV.

3. The crash is because the following line in the XSL:
<xsl:value-of select="(string($var1_resultof_first/@ID)"/>
should be:
<xsl:value-of select="string($var1_resultof_first/@ID)"/>

Thanks,
Chad