Invoking "xmlstarlet ed" with a number of edit operations exceeding the MAX_XML_ED_OPS constant (hardcoded at 128) results in a segfault when memory beyond the ops[] array is indexed into.
Attempts to pass more edit operations on the command line than allowed should be identified and gracefully handled.
I removed the hardcoded limitation in commit c3c2b173408f0432eccf74de87dabb59d3328e9a
Find in version 1.4.0