Regardless of the input, it is a bad bug in dvipng. Programs should not crash. If it is possible for someone to send me the dvi file, I could send it to the maintainer. (Or feel free to send it directly :) I won't have a chance myself to extract the dvi file that's being fed to dvipng for a while, at best. --thanks, karl.