Bug 10405 – REPRO: SVG Maze crashes in RenderPath code

• Status: RESOLVED
• Resolution: FIXED
• Component: SVG

[Eric Seidel (no email)]

SVG Maze crashes in RenderPath code

http://lab.vodafone.com/tm/maze15.svg

Click on the "up arrow" (the top green box) and then watch Safari crash:  (every time!)

Date/Time:      2006-08-15 02:00:09.226 -0500
OS Version:     10.4.7 (Build 8J2135)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  WindowServer [60]

Version: ??? (15869)

PID:    2109
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000008

Thread 0 Crashed:
0   com.apple.WebCore        	0x0105d6c4 WebCore::KRenderingDeviceContextQuartz::addPath(WebCore::KCanvasPath const*) + 6
1   com.apple.WebCore        	0x0106507d WebCore::RenderPath::paint(WebCore::RenderObject::PaintInfo&, int, int) + 1203
2   com.apple.WebCore        	0x0115f3a0 WebCore::RenderBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 72
3   com.apple.WebCore        	0x01062083 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 2071
4   com.apple.WebCore        	0x0115f3a0 WebCore::RenderBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 72
5   com.apple.WebCore        	0x01062083 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 2071
6   com.apple.WebCore        	0x0115f3a0 WebCore::RenderBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 72
7   com.apple.WebCore        	0x01062083 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 2071
8   com.apple.WebCore        	0x011688ce WebCore::RenderView::paint(WebCore::RenderObject::PaintInfo&, int, int) + 230
9   com.apple.WebCore        	0x0117daeb WebCore::RenderLayer::paintLayer(WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, bool, WebCore::PaintRestriction, WebCore::RenderObject*) + 1631
10  com.apple.WebCore        	0x0117db77 WebCore::RenderLayer::paint(WebCore::GraphicsContext*, WebCore::IntRect const&, WebCore::PaintRestriction, WebCore::RenderObject*) + 57
11  com.apple.WebCore        	0x010b16ef WebCore::Frame::paint(WebCore::GraphicsContext*, WebCore::IntRect const&) + 131
12  com.apple.WebCore        	0x010e670d -[WebCoreFrameBridge drawRect:] + 167
13  com.apple.WebKit         	0x0033b519 -[WebHTMLView drawSingleRect:] + 281
14  com.apple.WebKit         	0x0033b82d -[WebHTMLView drawRect:] + 323
15  com.apple.AppKit         	0x9342260f -[NSView _drawRect:clip:] + 3228
16  com.apple.AppKit         	0x93420af1 -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 1273
17  com.apple.WebKit         	0x00336e2b -[WebHTMLView(WebPrivate) _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 290
18  com.apple.AppKit         	0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239
19  com.apple.AppKit         	0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239
20  com.apple.AppKit         	0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239
21  com.apple.AppKit         	0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239
22  com.apple.AppKit         	0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239
23  com.apple.AppKit         	0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239
24  com.apple.AppKit         	0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239
25  com.apple.AppKit         	0x9341fdd8 -[NSThemeFrame _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 290
26  com.apple.AppKit         	0x9341f5c4 -[NSView _displayRectIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:] + 523
27  com.apple.AppKit         	0x9341eef4 -[NSView displayIfNeeded] + 439
28  com.apple.AppKit         	0x9341ec96 -[NSWindow displayIfNeeded] + 168
29  com.apple.Safari         	0x0001c394 0x1000 + 111508
30  com.apple.AppKit         	0x9346ef58 _handleWindowNeedsDisplay + 206
31  com.apple.CoreFoundation 	0x90824155 __CFRunLoopDoObservers + 342
32  com.apple.CoreFoundation 	0x908231f7 CFRunLoopRunSpecific + 827
33  com.apple.CoreFoundation 	0x90822eb5 CFRunLoopRunInMode + 61
34  com.apple.HIToolbox      	0x92f02b90 RunCurrentEventLoopInMode + 285
35  com.apple.HIToolbox      	0x92f021ce ReceiveNextEventCommon + 184
36  com.apple.HIToolbox      	0x92f020ee BlockUntilNextEventMatchingListInMode + 81
37  com.apple.AppKit         	0x933a3771 _DPSNextEvent + 576
38  com.apple.AppKit         	0x933a335e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137
39  com.apple.Safari         	0x00006f96 0x1000 + 24470
40  com.apple.AppKit         	0x9339d0e3 -[NSApplication run] + 512
41  com.apple.AppKit         	0x93391037 NSApplicationMain + 573
42  com.apple.Safari         	0x0005f7de 0x1000 + 387038
43  com.apple.Safari         	0x0005f6f9 0x1000 + 386809

Thread 1:
0   libSystem.B.dylib        	0x9000a5c7 mach_msg_trap + 7
1   com.unsanity.ape         	0xc0001db2 __ape_agent + 307
2   libSystem.B.dylib        	0x90024b07 _pthread_body + 84

Thread 2:
0   libSystem.B.dylib        	0x9001aafc select + 12
1   libSystem.B.dylib        	0x90024b07 _pthread_body + 84

Thread 3:
0   libSystem.B.dylib        	0x9000a5c7 mach_msg_trap + 7
1   com.apple.CoreFoundation 	0x9082369a CFRunLoopRunSpecific + 2014
2   com.apple.CoreFoundation 	0x90822eb5 CFRunLoopRunInMode + 61
3   com.apple.Foundation     	0x9275eb4a -[NSRunLoop runMode:beforeDate:] + 182
4   com.apple.Foundation     	0x9275ea46 -[NSRunLoop run] + 75
5   com.apple.WebKit         	0x0036232f +[WebFileDatabase _syncLoop:] + 198
6   com.apple.Foundation     	0x927291b0 forkThreadForFunction + 123
7   libSystem.B.dylib        	0x90024b07 _pthread_body + 84

Thread 4:
0   libSystem.B.dylib        	0x9000a5c7 mach_msg_trap + 7
1   com.apple.CoreFoundation 	0x9082369a CFRunLoopRunSpecific + 2014
2   com.apple.CoreFoundation 	0x90822eb5 CFRunLoopRunInMode + 61
3   com.apple.Foundation     	0x9275e861 +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 259
4   com.apple.Foundation     	0x927291b0 forkThreadForFunction + 123
5   libSystem.B.dylib        	0x90024b07 _pthread_body + 84

Thread 5:
0   libSystem.B.dylib        	0x9000a5c7 mach_msg_trap + 7
1   com.apple.CoreFoundation 	0x9082369a CFRunLoopRunSpecific + 2014
2   com.apple.CoreFoundation 	0x90822eb5 CFRunLoopRunInMode + 61
3   com.apple.Foundation     	0x9278595a +[NSURLCache _diskCacheSyncLoop:] + 206
4   com.apple.Foundation     	0x927291b0 forkThreadForFunction + 123
5   libSystem.B.dylib        	0x90024b07 _pthread_body + 84

Thread 6:
0   libSystem.B.dylib        	0x900251a7 semaphore_wait_signal_trap + 7
1   com.apple.Foundation     	0x9277f008 -[NSConditionLock lockWhenCondition:] + 39
2   com.apple.Syndication    	0x9a64b052 -[AsyncDB _run:] + 181
3   com.apple.Foundation     	0x927291b0 forkThreadForFunction + 123
4   libSystem.B.dylib        	0x90024b07 _pthread_body + 84

Thread 0 crashed with i386 Thread State:
eax: 0x00000000    ebx: 0x0106187d ecx:0x17201cf0 edx: 0x16e46ab0
edi: 0x171fcb40    esi: 0x01384d88 ebp:0xbfffc388 esp: 0xbfffc388
 ss: 0x0000002f    efl: 0x00010202 eip:0x0105d6c4  cs: 0x00000027
 ds: 0x0000002f     es: 0x0000002f  fs:0x00000000  gs: 0x00000037

Binary Images Description:
    0x1000 -    0xdefff com.apple.Safari 2.0.4 (419.3)	/Applications/Safari.app/Contents/MacOS/Safari
  0x10e000 -   0x10ffff WebKitNightlyEnabler.dylib 	/Volumes/WebKit 1/WebKit.app/Contents/Resources/WebKitNightlyEnabler.dylib
  0x114000 -   0x18efff com.apple.JavaScriptCore 420+	/Volumes/WebKit 1/WebKit.app/Contents/Resources/JavaScriptCore.framework/Versions/A/JavaScriptCore
  0x305000 -   0x3b5fff com.apple.WebKit 420+	/Volumes/WebKit 1/WebKit.app/Contents/Resources/WebKit.framework/Versions/A/WebKit
 0x1008000 -  0x1382fff com.apple.WebCore 420+	/Volumes/WebKit 1/WebKit.app/Contents/Resources/WebCore.framework/Versions/A/WebCore
0x17622000 - 0x1763efff GLDriver 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLDriver.bundle/GLDriver
0x176ab000 - 0x176ccfff GLRendererFloat 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLRendererFloat.bundle/GLRendererFloat
0x17a12000 - 0x17c41fff com.macromedia.Flash Player.plugin 8.0.27 (1.0.2f27)	/Library/Internet Plug-Ins/Flash Player.plugin/Contents/MacOS/Flash Player
0x18d37000 - 0x18e78fff GLEngine 	/System/Library/Frameworks/OpenGL.framework/Resources/GLEngine.bundle/GLEngine
0x18ea0000 - 0x1906cfff com.apple.ATIRadeonX1000GLDriver 1.4.32 (4.3.2)	/System/Library/Extensions/ATIRadeonX1000GLDriver.bundle/Contents/MacOS/ATIRadeonX1000GLDriver
0x8fe00000 - 0x8fe4bfff dyld 45.1	/usr/lib/dyld
0x90000000 - 0x9016efff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x901be000 - 0x901c0fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x901c2000 - 0x901fefff com.apple.CoreText 1.1.1 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90225000 - 0x902fafff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x9031a000 - 0x9076afff com.apple.CoreGraphics 1.258.33 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x90801000 - 0x908c9fff com.apple.CoreFoundation 6.4.6 (368.27)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x90907000 - 0x90907fff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x90909000 - 0x909fcfff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x90a4c000 - 0x90acbfff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90af4000 - 0x90b57fff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x90bc6000 - 0x90bcdfff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x90bd2000 - 0x90c42fff com.apple.framework.IOKit 1.4.4 (???)	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90c57000 - 0x90c69fff libauto.dylib 	/usr/lib/libauto.dylib
0x90c6f000 - 0x90f14fff com.apple.CoreServices.CarbonCore 682.12	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90f57000 - 0x90fbffff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x90ff7000 - 0x91035fff com.apple.CFNetwork 129.16	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x91047000 - 0x91057fff com.apple.WebServices 1.1.3 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x91062000 - 0x910e0fff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x91115000 - 0x91133fff com.apple.Metadata 10.4.4 (121.36)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9113f000 - 0x9114dfff libz.1.dylib 	/usr/lib/libz.1.dylib
0x91150000 - 0x91306fff com.apple.security 4.4.1 (27569)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x913f5000 - 0x913fdfff com.apple.DiskArbitration 2.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x91404000 - 0x9142afff com.apple.SystemConfiguration 1.8.6	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x9143c000 - 0x91443fff libbsm.dylib 	/usr/lib/libbsm.dylib
0x91447000 - 0x914c0fff com.apple.audio.CoreAudio 3.0.4	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9150e000 - 0x9150efff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x91510000 - 0x9153bfff com.apple.AE 314 (313)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x9154e000 - 0x91622fff com.apple.ColorSync 4.4.6	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x9165b000 - 0x916d8fff com.apple.print.framework.PrintCore 4.6 (177.13)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x91705000 - 0x917affff com.apple.QD 3.10.20 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x917d5000 - 0x91820fff com.apple.HIServices 1.5.2 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x9183f000 - 0x91855fff com.apple.LangAnalysis 1.6.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x91861000 - 0x9187bfff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x91885000 - 0x918c2fff com.apple.LaunchServices 180	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x918d6000 - 0x918e1fff com.apple.speech.synthesis.framework 3.4	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x918e8000 - 0x91920fff com.apple.ImageIO.framework 1.4.7	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91932000 - 0x919e4fff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91a2a000 - 0x91a40fff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91a45000 - 0x91a61fff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91a66000 - 0x91ac4fff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91ad4000 - 0x91ad8fff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91ada000 - 0x91b35fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91b39000 - 0x91b76fff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91b7c000 - 0x91b96fff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91b9b000 - 0x91b9dfff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91b9f000 - 0x91b9ffff com.apple.Accelerate 1.2.2 (Accelerate 1.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91ba1000 - 0x91c2bfff com.apple.vImage 2.4	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91c32000 - 0x91c32fff com.apple.Accelerate.vecLib 3.2.2 (vecLib 3.2.2)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91c34000 - 0x91c79fff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91c81000 - 0x91ca6fff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91cad000 - 0x92230fff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x9226d000 - 0x9261ffff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x9264c000 - 0x926d0fff com.apple.DesktopServices 1.3.4	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x9270c000 - 0x9293efff com.apple.Foundation 6.4.6 (567.27)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92a4a000 - 0x92b28fff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92b45000 - 0x92c32fff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92c42000 - 0x92c59fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92c64000 - 0x92cbbfff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92ccf000 - 0x92ccffff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92cd1000 - 0x92ce1fff com.apple.ImageCapture 3.0.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92cef000 - 0x92cf7fff com.apple.speech.recognition.framework 3.5	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92cfd000 - 0x92d02fff com.apple.securityhi 2.0.1 (24742)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92d08000 - 0x92d99fff com.apple.ink.framework 101.2.1 (71)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x92dad000 - 0x92db0fff com.apple.help 1.0.3 (32.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x92db3000 - 0x92dd0fff com.apple.openscripting 1.2.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x92de0000 - 0x92de6fff com.apple.print.framework.Print 5.2 (192.4)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x92dec000 - 0x92e4ffff com.apple.htmlrendering 66.1 (1.1.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x92e73000 - 0x92eb4fff com.apple.NavigationServices 3.4.4 (3.4.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x92edb000 - 0x92ee8fff com.apple.audio.SoundManager 3.9.1	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x92eef000 - 0x92ef4fff com.apple.CommonPanels 1.2.3 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x92ef9000 - 0x931ebfff com.apple.HIToolbox 1.4.8 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x932f0000 - 0x932fbfff com.apple.opengl 1.4.10	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x93300000 - 0x9331bfff com.apple.DirectoryService.Framework 3.1	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x9338a000 - 0x9338afff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x9338c000 - 0x93a45fff com.apple.AppKit 6.4.7 (824.41)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x93dc6000 - 0x93e40fff com.apple.CoreData 90	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x93e79000 - 0x93f3afff com.apple.audio.toolbox.AudioToolbox 1.4.3	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x93f7a000 - 0x93f7afff com.apple.audio.units.AudioUnit 1.4.2	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x93f7c000 - 0x9412afff com.apple.QuartzCore 1.4.8	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x94178000 - 0x941b9fff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x941c1000 - 0x941fbfff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x94289000 - 0x942c7fff com.apple.vmutils 4.0.2 (93.1)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x9430b000 - 0x9431bfff com.apple.securityfoundation 2.2.1 (28150)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94328000 - 0x94365fff com.apple.securityinterface 2.2.1 (27695)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x94381000 - 0x94390fff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x94397000 - 0x943a2fff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x943a7000 - 0x943cbfff libPDFRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libPDFRIP.A.dylib
0x943ee000 - 0x94408fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x9440e000 - 0x946c5fff com.apple.QuickTime 7.1.2	/System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x94826000 - 0x9496ffff com.apple.AddressBook.framework 4.0.4 (485.1)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x949fb000 - 0x94a0afff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94a11000 - 0x94a3afff com.apple.LDAPFramework 1.4.1 (69.0.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94a40000 - 0x94a4ffff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94a53000 - 0x94a77fff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94a83000 - 0x94aa0fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x9582e000 - 0x95851fff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x97075000 - 0x97130fff libGLProgrammability.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x9714a000 - 0x9714bfff libGLSystem.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLSystem.dylib
0x9714d000 - 0x97152fff com.apple.agl 2.5.9 (AGL-2.5.9)	/System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x9a648000 - 0x9a67ffff com.apple.Syndication 1.0.6 (54)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9a69b000 - 0x9a6adfff com.apple.SyndicationUI 1.0.6 (54)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
0xc0000000 - 0xc000efff com.unsanity.ape 2.0	/Library/Frameworks/ApplicationEnhancer.framework/Versions/A/ApplicationEnhancer

Model: MacBookPro1,1, BootROM MBP11.0055.B03, 2 processors, Intel Core Duo, 2.16 GHz, 2 GB
Graphics: ATI Radeon X1600, ATY,RadeonX1600, PCIe, 256 MB
Memory Module: DIMM0/BANK 0, 1 GB, DDR2 SDRAM, 667 MHz
Memory Module: DIMM1/BANK 1, 1 GB, DDR2 SDRAM, 667 MHz
AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x86), 0.1.24
Bluetooth: Version 1.7.5f10, 2 service, 0 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
Network Service: Parallels Host-Guest Adapter, Ethernet, en2
Serial ATA Device: ST9100824AS, 93.16 GB
Parallel ATA Device: MATSHITADVD-R   UJ-857
USB Device: Hub, Up to 480 Mb/sec, 500 mA
USB Device: Hub in Apple Pro Keyboard, Mitsumi Electric, Up to 12 Mb/sec, 500 mA
USB Device: Apple Optical USB Mouse, Mitsumi Electric, Up to 1.5 Mb/sec, 100 mA
USB Device: Apple Pro Keyboard, Mitsumi Electric, Up to 12 Mb/sec, 250 mA
USB Device: Apple Cinema HD Display, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA
USB Device: Built-in iSight, Micron, Up to 480 Mb/sec, 500 mA
USB Device: Apple Internal Keyboard / Trackpad, Apple Computer, Up to 12 Mb/sec, 500 mA
USB Device: IR Receiver, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA
USB Device: Bluetooth HCI, Up to 12 Mb/sec, 500 mA
FireWire Device: unknown_device, unknown_value, Up to 400 Mb/sec

Created attachment 10046 [details]
Reduction (will crash)

The crash happens when an element has a renderer but null path data. Since renderers aren't created for elements with null path data, the only way this can happen is for the path data to be removed from an element that already has a renderer, as in this testcase.

[Rob Buis]

Created attachment 10142 [details]
First attempt

This fixes maze15.svg, except for the lack of animation.
Cheers,

Rob.

[Eric Seidel (no email)]

Comment on attachment 10142 [details]
First attempt

There are a couple things which I would change here.

1.  The test case should ideally draw a green square behind the red one, so that when the red one is cleared by the javascript, the green square shows through as an indicator of success.

Second, I 'm not sure I agree with your strokeBoundingBox changes.

IMO it would be cleaner to have a one line if check at the very beginning:
if (isEmpty())
    return CGEmptyRect;

They way you've written it now, it's nondeterministic as to what sort of rect you are returning.   Also, an if with an early return often reads a bit cleaner.

Otherwise looks great!

Given that the rect you are returning is non-deterministic (and I'm not sure if you added your copyright to KCanvasPathQuartz or not) I'm going to have to r- this.

[Eric Seidel (no email)]

Comment on attachment 10142 [details]
First attempt

Actually, since this is such a small change (2 lines), you're not required to add a copyright.  But you're welcome to do so.  Definitely need to fix the non-deterministic behavior however.

[Rob Buis]

Created attachment 10146 [details]
Improved patch

This should address the issues  Erics raised.
Cheers,

Rob.

[Eric Seidel (no email)]

Comment on attachment 10146 [details]
Improved patch

You'll need to fix the conflict markers in the ChangeLog.

Otherwise looks good.  r=me.

[Rob Buis]

Comment on attachment 10146 [details]
Improved patch

Landed as r15963.