7-Jul-99 bug: Possible bad pointer when moving <b> inside of <li>

Thanks for Tidy!  It's proving invaluable.

I have some apparent bugs to report (in this and subsequent messages).

The HTML document below has a <b> outside of an <li> rather than inside it.
I think this is causing 7-Jul-99 Tidy to dereference a bad pointer in
istack.c, InsertedToken(), line 235:

    istack = lexer->insert;

Symptoms seem to vary depending on the contents of memory.  One (much
longer) incarnation of this example document caused Tidy to generate the
invalid start tag "<\0x18\0x0d\0x0a\0x30>" along with the corresponding end
tag.  Also, Andy Quick's 7-Jul-99 Java Tidy throws an
ArrayIndexOutOfBoundsException every time (which is what leads me to suspect
the above mentioned line).

-------- Example HTML document --------
<html>
  <head>
    <title>x</title>
  </head>
  <body>
    <ul>
      <li>item 1</li>
      <b><li>item 2</li></b>
    </ul>
  </body>
</html>
---------------------------------------

Randy

Received on Thursday, 22 July 1999 20:26:57 UTC