[lxml-dev] [Bug 245541] [NEW] Segfault caused by double free after GC in lxml 1.1.2

[Stefan Behnel]

Hi,

Mark Seaborn wrote:
> I know lxml 1.1.2 is quite an old version but I wanted to
> debug this segfault to find the root cause in case the root cause was
> not fixed in later versions.

It definitely was, likely over more than one release.


> Also, the newer releases do not build on
> Ubuntu edgy without upgrading lots of other components.

Apparently, edgy has libxml2 2.6.26, so it should build and work. What is the
problem you are experiencing?


> I believe this bug is fixed in commit 44623 in version 1.3.1 (where the
> description in https://codespeak.net/lxml/changes-2.0.6.html is "Better way
> to prevent crashes in Element proxy cleanup code").

The respective code has been fixed and rewritten multiple times since 1.1 and
IIRC the last corner cases were fixed as recent as somewhere in 2.0.x.
In any case, don't use 1.3.1, as it's completely broken. I don't quite
remember, that might be related to the fix or not.

Stefan