Stack seems smashed with large image inside table #8
How to reproduce
The behavior is not stable. w3m sometimes crashes and sometimes doesn't.
I haven't debugged it, so I don't know why it's unstable and how the stack smashed. Following is my steps to compile w3m:
This is found by afl-fuzz.
While I have seen lots of crashes with table colspan (actually, they are majority of crashes), I cannot always reproduce them. They seem sensitive to environment variable and compiler options, etc. With some environment, I can always reproduce crash. But it may not crash anymore if env changed.
I will try to produce reliable case. In the meantime, maybe you could fix #16. Hope fixing it will reduce non-deterministic factor.