And now I found that bug too. Pike was absolutely correct, the variable rxml_mode in this struct:

| struct xmlobj | { | struct mapping *entities; | struct mapping *attributes; | struct mapping *is_cdata; | int rxml_mode; | };

was clearly outside the object struct as an INT_TYPE. I wonder how many such bugs there is in Pike...