I have attached an email and a crash report from Mail. Opening the emlx document *always* crashes Mail. I cannot tell from the crash report whether the crash is due to a Webkit rendering issue with the content or what, but it is quite consistent. This is using Safari 3.1.1 - choice is not available in the Version menu of bugzilla.
Created attachment 20676 [details] email which consistently crashes Mail
Created attachment 20677 [details] Mail Crash Report
I get a slightly more useful crash log from Mail on Leopard: Exception Type: EXC_SOFTWARE (SIGTRAP) Exception Codes: 0x0000000000000007, 0x0000000000000000 Crashed Thread: 0 Thread 0 Crashed: 0 com.apple.WebCore 0x96030a21 0x95a5e000 + 6105633 1 com.apple.WebCore 0x95cf1e59 WebCore::RenderInline::addChildToFlow(WebCore::RenderObject*, WebCore::RenderObject*) + 73 2 com.apple.WebCore 0x95bf0e22 WebCore::FrameLoader::loadSubframe(WebCore::HTMLFrameOwnerElement*, WebCore::KURL const&, WebCore::String const&, WebCore::String const&) + 386 3 com.apple.WebCore 0x95bd15e7 WebCore::FrameLoader::requestObject(WebCore::RenderPart*, WebCore::String const&, WebCore::AtomicString const&, WebCore::String const&, WTF::Vector<WebCore::String, 0ul> const&, WTF::Vector<WebCore::String, 0ul> const&) + 183
<rdar://problem/5874842>
I suspect this is the same as the inline svg crash we saw, which is fixed, but i'm not entirely sure :-(
This seems like a dupliate of bug 17945. which we believe to be fixed? *** This bug has been marked as a duplicate of bug 17945 ***
If Apple still has crash reports in their internal system we can re-open this for further investigation.