W3 crashes

Recent messages to this list, by JDonner, and Vincent Hamrick, contain html which causes VM to fire up w3, which crashes XEmacs with the following Lisp backtrace. It's very important to fix this as soon as possible, and I am willing to help, but probably Andy or Bill are the right people to find the fix. If you need for me to debug a little to help out if you can't reproduce it yourself, let me know... Martin # (unwind-protect ...) specifier-instance(#<image-specifier global=((... . ...) (... . ...) (... . ...)) fallback=((nil . ...)) 0x1bd3> nil nil nil) # bind (value no-fallback default domain property glyph) glyph-property-instance(#<glyph (buffer) #<image-specifier global=(... ... ...) fallback=(...) 0x1bd3>0x1bd2> image nil nil nil) # bind (no-fallback default domain glyph) glyph-image-instance(#<glyph (buffer) #<image-specifier global=(... ... ...) fallback=(...) 0x1bd3>0x1bd2>) # bind (inhibit-read-only zmacs-region-stays val frame value message) raw-append-progress("Parsing 5k" 33 #<x-frame "emacs" 0x593e>) # bind (tmsg top frame value message label) append-progress(progress "Parsing 5k" 33 nil) # bind (frame value message label) display-progress(progress "Parsing 5k" 33) # bind (str args value fmt) progress("Parsing %s" 33 "5k") # bind (w3-p-s-btdt w3-p-s-baseobject w3-p-s-except w3-p-s-content-model w3-p-s-tran-list w3-p-s-transition w3-p-s-state-transitions w3-p-s-includep w3-p-s-end-tag w3-p-s-content w3-p-s-var w3-p-s-undo-list w3-p-s-overrides w3-p-s-num w3-p-s-pos w3-p-s-entity open-list content content-model attr-value attr-name ref w3-p-d-exceptions w3-p-d-shortref-chars w3-p-d-shortrefs w3-p-d-in-parsed-marked-section w3-p-d-null-end-tag-enabled w3-p-d-non-markup-chars w3-p-d-debug-url marked-section-undo-stack w3-p-d-open-element-stack w3-p-d-current-element tag-end attribute-value-end tag-attributes net-tag-p w3-p-d-end-tag-p w3-p-d-tag-name between-tags-end between-tags-start parse-buffer one-hundred status-message-format loop-count last-loop-start gc-cons-threshold old-syntax-table buff) w3-parse-buffer(#<buffer " *w3-region*">) # (unwind-protect ...) byte-code("..." [get-buffer-create " *w3-region*" erase-buffer source w3-parse-buffer parse st nd w3-draw-tree nil widget glyph url w3-image-widgets-waiting widget-get :src assoc w3-graphics-list (widget-value-set widget glyph) ((error)) url-current-object 6 push-mark t w3-find-specific-link w3-running-xemacs device-type tty w3-fixup-eol-faces message "Drawing... done"] 3) # (unwind-protect ...) # bind (parse w3-display-same-buffer source nd st) w3-region(2535 8151) # bind (buffer-read-only start end buffer-size) byte-code("..." [nil buffer-size end start buffer-read-only message "Inlining text/html, be patient..." vm-fsfemacs-mule-p enable-multibyte-characters xzx ((set-buffer-multibyte xzx)) set-buffer-multibyte vm-mime-insert-mime-body layout vm-mime-transfer-decode-region w3-region t inhibit-read-only remove-text-properties (read-only nil) "Inlining text/html... done"] 4) !\"\"Æ" ... 6))))se ... . ((error (byte-code "À ÂÃÄ # bind (layout) vm-mime-display-internal-text/html([("text/html" "charset=us-ascii" "name=xemacs2118changes.html") ("text/html" "charset=us-ascii" "name=\"xemacs2118changes.html\"") "7bit" nil nil ("inline" "filename=xemacs2118changes.html") ("inline" "filename=\"xemacs2118changes.html\"") #<marker at 5339992 in inbox 0x8939224> #<marker at 5340163 in inbox 0x893920c> #<marker at 5345779 in inbox 0x8939104> nil nil <<m>> nil]) byte-code("..." [intern "vm-mime-display-internal-" type layout] 3) # (condition-case ... . ((void-function))) # (unwind-protect ...) # bind (modified file type type2 type-no-subtype extent dont-honor-c-d layout) vm-decode-mime-layout([("text/html" "charset=us-ascii" "name=xemacs2118changes.html") ("text/html" "charset=us-ascii" "name=\"xemacs2118changes.html\"") "7bit" nil nil ("inline" "filename=xemacs2118changes.html") ("inline" "filename=\"xemacs2118changes.html\"") #<marker at 5339992 in inbox 0x8939224> #<marker at 5340163 in inbox 0x893920c> #<marker at 5345779 in inbox 0x8939104> nil nil <<m>> nil]) # bind (part-list layout) vm-mime-display-internal-multipart/mixed([("multipart/mixed" "boundary=------------5D211D64D97BE22F2D781758") ("multipart/mixed" "boundary=\"------------5D211D64D97BE22F2D781758\"") "7bit" nil nil nil nil #<marker at 5337291 in inbox 0x88c3b8c> #<marker at 5339147 in inbox 0x88d0cb4> #<marker at 5345822 in inbox 0x88d04d4> ([... ... "7bit" nil nil nil nil #<marker at 5339231 in inbox 0x88fa6c4> #<marker at 5339307 in inbox 0x88fa6ac> #<marker at 5339952 in inbox 0x893923c> nil nil <<m>> nil] [... ... "7bit" nil nil ... ... #<marker at 5339992 in inbox 0x8939224> #<marker at 5340163 in inbox 0x893920c> #<marker at 5345779 in inbox 0x8939104> nil nil <<m>> nil]) nil <<m>> nil]) byte-code("..." [intern "vm-mime-display-internal-" type layout] 3) # (condition-case ... . ((void-function))) # (unwind-protect ...) # bind (modified file type type2 type-no-subtype extent dont-honor-c-d layout) vm-decode-mime-layout([("multipart/mixed" "boundary=------------5D211D64D97BE22F2D781758") ("multipart/mixed" "boundary=\"------------5D211D64D97BE22F2D781758\"") "7bit" nil nil nil nil #<marker at 5337291 in inbox 0x88c3b8c> #<marker at 5339147 in inbox 0x88d0cb4> #<marker at 5345822 in inbox 0x88d04d4> ([... ... "7bit" nil nil nil nil #<marker at 5339231 in inbox 0x88fa6c4> #<marker at 5339307 in inbox 0x88fa6ac> #<marker at 5339952 in inbox 0x893923c> nil nil <<m>> nil] [... ... "7bit" nil nil ... ... #<marker at 5339992 in inbox 0x8939224> #<marker at 5340163 in inbox 0x893920c> #<marker at 5345779 in inbox 0x8939104> nil nil <<m>> nil]) nil <<m>> nil]) # (unwind-protect ...) # (unwind-protect ...)