<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>185819</bug_id>
          
          <creation_ts>2018-05-21 06:25:10 -0700</creation_ts>
          <short_desc>Crash when loading a SVG image</short_desc>
          <delta_ts>2018-05-29 04:14:52 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit2</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Carlos Garcia Campos">cgarcia</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>achristensen</cc>
    
    <cc>agomez</cc>
    
    <cc>bfulgham</cc>
    
    <cc>mcatanzaro</cc>
    
    <cc>product-security</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>youennf</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1425632</commentid>
    <comment_count>0</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2018-05-21 06:25:10 -0700</bug_when>
    <thetext>This is happening in WebLoaderStrategy::scheduleLoad() when getting the value of FrameLoaderClient::pageID(). SVGImage uses the empty clients for the loader, and EmptyFrameLoaderClient::pageID() returns std::nullopt. The same happens with the frameID. This changed in r225934, when pageID() and frameID() were changed to return std::optional, EmptyFrameLoaderClient was updated to return std::nullopt instead of 0. I don&apos;t know why this crash didn&apos;t happen before to me, maybe getting the value of an empty optional has changed in a newer version of GCC, I don&apos;t know. The crash can be fixed by using value_or(0) instead of value() for both the frameID and the pageID. I&apos;m not sure about the security implications of this crash, so I&apos;ve used the security product just in case.

Thread 1 &quot;WebKitWebProces&quot; received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51	../sysdeps/unix/sysv/linux/raise.c: No existe el fichero o el directorio.
(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007f8c41756231 in __GI_abort () at abort.c:79
#2  0x00007f8c4dd81de4 in WebKit::WebLoaderStrategy::scheduleLoad(WebCore::ResourceLoader&amp;, WebCore::CachedResource*, bool) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#3  0x00007f8c4dd82460 in WTF::Function&lt;void (WTF::RefPtr&lt;WebCore::SubresourceLoader, WTF::DumbPtrTraits&lt;WebCore::SubresourceLoader&gt; &gt;&amp;&amp;)&gt;::CallableWrapper&lt;WebKit::WebLoaderStrategy::loadResource(WebCore::Frame&amp;, WebCore::CachedResource&amp;, WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceLoaderOptions const&amp;, WTF::CompletionHandler&lt;void (WTF::RefPtr&lt;WebCore::SubresourceLoader, WTF::DumbPtrTraits&lt;WebCore::SubresourceLoader&gt; &gt;&amp;&amp;)&gt;&amp;&amp;)::{lambda(WTF::RefPtr&lt;WebCore::SubresourceLoader, WTF::DumbPtrTraits&lt;WebCore::SubresourceLoader&gt; &gt;&amp;&amp;)#1}&gt;::call(WTF::RefPtr&lt;WebCore::SubresourceLoader, WTF::DumbPtrTraits&lt;WebCore::SubresourceLoader&gt; &gt;&amp;&amp;) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#4  0x00007f8c4ebece4d in WTF::Function&lt;void (bool)&gt;::CallableWrapper&lt;WebCore::SubresourceLoader::create(WebCore::Frame&amp;, WebCore::CachedResource&amp;, WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceLoaderOptions const&amp;, WTF::CompletionHandler&lt;void (WTF::RefPtr&lt;WebCore::SubresourceLoader, WTF::DumbPtrTraits&lt;WebCore::SubresourceLoader&gt; &gt;&amp;&amp;)&gt;&amp;&amp;)::{lambda(bool)#1}&gt;::call(bool) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#5  0x00007f8c4ebebdb6 in WTF::Function&lt;void (bool)&gt;::CallableWrapper&lt;WebCore::SubresourceLoader::init(WebCore::ResourceRequest&amp;&amp;, WTF::CompletionHandler&lt;void (bool)&gt;&amp;&amp;)::{lambda(bool)#1}&gt;::call(bool) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#6  0x00007f8c4ebe73f2 in WTF::Function&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;::CallableWrapper&lt;WebCore::ResourceLoader::init(WebCore::ResourceRequest&amp;&amp;, WTF::CompletionHandler&lt;void (bool)&gt;&amp;&amp;)::{lambda(WebCore::ResourceRequest&amp;&amp;)#1}&gt;::call(WebCore::ResourceRequest&amp;&amp;) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#7  0x00007f8c4ebebb80 in WTF::Function&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;::CallableWrapper&lt;WebCore::SubresourceLoader::willSendRequestInternal(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;)::{lambda(WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;, WebCore::ResourceRequest&amp;&amp;)#1}::operator()(WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;, WebCore::ResourceRequest&amp;&amp;)::{lambda(WebCore::ResourceRequest&amp;&amp;)#1}&gt;::call(WebCore::ResourceRequest&amp;&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#8  0x00007f8c4ebe7b20 in WebCore::ResourceLoader::willSendRequestInternal(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#9  0x00007f8c4ebf463c in WebCore::SubresourceLoader::willSendRequestInternal(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;)::{lambda(WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;, WebCore::ResourceRequest&amp;&amp;)#1}::operator()(WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;, WebCore::ResourceRequest&amp;&amp;) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#10 0x00007f8c4ebf53ae in WebCore::SubresourceLoader::willSendRequestInternal(WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceResponse const&amp;, WTF::CompletionHandler&lt;void (WebCore::ResourceRequest&amp;&amp;)&gt;&amp;&amp;) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#11 0x00007f8c4ebe2670 in WebCore::ResourceLoader::init(WebCore::ResourceRequest&amp;&amp;, WTF::CompletionHandler&lt;void (bool)&gt;&amp;&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#12 0x00007f8c4ebf4421 in WebCore::SubresourceLoader::init(WebCore::ResourceRequest&amp;&amp;, WTF::CompletionHandler&lt;void (bool)&gt;&amp;&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#13 0x00007f8c4ebf44dd in WebCore::SubresourceLoader::create(WebCore::Frame&amp;, WebCore::CachedResource&amp;, WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceLoaderOptions const&amp;, WTF::CompletionHandler&lt;void (WTF::RefPtr&lt;WebCore::SubresourceLoader, WTF::DumbPtrTraits&lt;WebCore::SubresourceLoader&gt; &gt;&amp;&amp;)&gt;&amp;&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#14 0x00007f8c4dd7e57d in WebKit::WebLoaderStrategy::loadResource(WebCore::Frame&amp;, WebCore::CachedResource&amp;, WebCore::ResourceRequest&amp;&amp;, WebCore::ResourceLoaderOptions const&amp;, WTF::CompletionHandler&lt;void (WTF::RefPtr&lt;WebCore::SubresourceLoader, WTF::DumbPtrTraits&lt;WebCore::SubresourceLoader&gt; &gt;&amp;&amp;)&gt;&amp;&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#15 0x00007f8c4ec32a6a in WebCore::CachedResource::load(WebCore::CachedResourceLoader&amp;) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#16 0x00007f8c4ec377a9 in WebCore::CachedResourceLoader::requestResource(WebCore::CachedResource::Type, WebCore::CachedResourceRequest&amp;&amp;, WebCore::CachedResourceLoader::ForPreload, WebCore::CachedResourceLoader::DeferOption) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#17 0x00007f8c4ec3916d in WebCore::CachedResourceLoader::requestImage(WebCore::CachedResourceRequest&amp;&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#18 0x00007f8c4ebcc794 in WebCore::ImageLoader::updateFromElement() () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#19 0x00007f8c4f20a5e4 in WebCore::SVGImageElement::svgAttributeChanged(WebCore::QualifiedName const&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#20 0x00007f8c4e876086 in WebCore::Element::parserSetAttributes(WTF::Vector&lt;WebCore::Attribute, 0ul, WTF::CrashOnOverflow, 16ul&gt; const&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#21 0x00007f8c4f2fc298 in WebCore::XMLDocumentParser::startElementNs(unsigned char const*, unsigned char const*, unsigned char const*, int, unsigned char const**, int, int, unsigned char const**) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#22 0x00007f8c4c3e5a92 in ?? () from /usr/lib/x86_64-linux-gnu/libxml2.so.2
#23 0x00007f8c4c3f3b09 in ?? () from /usr/lib/x86_64-linux-gnu/libxml2.so.2
#24 0x00007f8c4c3f520e in xmlParseChunk () from /usr/lib/x86_64-linux-gnu/libxml2.so.2
#25 0x00007f8c4f2fa597 in WebCore::XMLDocumentParser::doWrite(WTF::String const&amp;) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#26 0x00007f8c4f2fa80b in WebCore::XMLDocumentParser::append(WTF::RefPtr&lt;WTF::StringImpl, WTF::DumbPtrTraits&lt;WTF::StringImpl&gt; &gt;&amp;&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#27 0x00007f8c4e828a4b in WebCore::DecodedDataDocumentParser::appendBytes(WebCore::DocumentWriter&amp;, char const*, unsigned long) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#28 0x00007f8c4f2802ff in WebCore::SVGImage::dataChanged(bool) [clone .part.269] () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#29 0x00007f8c4ec2b47c in WebCore::CachedImage::updateImageData(bool) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#30 0x00007f8c4ec33ab7 in WebCore::CachedImage::finishLoading(WebCore::SharedBuffer*) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#31 0x00007f8c4ebf4e50 in WebCore::SubresourceLoader::didFinishLoading(WebCore::NetworkLoadMetrics const&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#32 0x00007f8c4dd88bf8 in WebKit::WebResourceLoader::didReceiveResource(WebKit::ShareableResource::Handle const&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#33 0x00007f8c4decf0d7 in WebKit::WebResourceLoader::didReceiveWebResourceLoaderMessage(IPC::Connection&amp;, IPC::Decoder&amp;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#34 0x00007f8c4dbabe8b in IPC::Connection::dispatchMessage(std::unique_ptr&lt;IPC::Decoder, std::default_delete&lt;IPC::Decoder&gt; &gt;) ()
   from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#35 0x00007f8c4dbac81c in IPC::Connection::dispatchOneMessage() () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#36 0x00007f8c4bb6e465 in WTF::RunLoop::performWork() () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#37 0x00007f8c4bba2ea9 in WTF::RunLoop::RunLoop()::{lambda(void*)#1}::_FUN(void*) () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#38 0x00007f8c4435d615 in g_main_dispatch (context=0x5625ccf99310) at gmain.c:3177
#39 g_main_context_dispatch (context=context@entry=0x5625ccf99310) at gmain.c:3830
#40 0x00007f8c4435d9b8 in g_main_context_iterate (context=0x5625ccf99310, block=block@entry=1, dispatch=dispatch@entry=1, self=&lt;optimized out&gt;) at gmain.c:3903
#41 0x00007f8c4435dcc2 in g_main_loop_run (loop=0x5625cd0211c0) at gmain.c:4099
#42 0x00007f8c4bba38e8 in WTF::RunLoop::run() () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libjavascriptcoregtk-4.0.so.18
#43 0x00007f8c4e0829d0 in WebProcessMainUnix () from /home/cgarcia/src/git/gnome/WebKit/WebKitBuild/Release/lib/libwebkit2gtk-4.0.so.37
#44 0x00007f8c41741a87 in __libc_start_main (main=0x5625cceebc30 &lt;main&gt;, argc=3, argv=0x7fff0484a848, init=&lt;optimized out&gt;, fini=&lt;optimized out&gt;, rtld_fini=&lt;optimized out&gt;, 
    stack_end=0x7fff0484a838) at ../csu/libc-start.c:310
#45 0x00005625cceebcba in _start ()</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1425633</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2018-05-21 06:25:32 -0700</bug_when>
    <thetext>&lt;rdar://problem/40414695&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1425634</commentid>
    <comment_count>2</comment_count>
      <attachid>340848</attachid>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2018-05-21 06:28:07 -0700</bug_when>
    <thetext>Created attachment 340848
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1425650</commentid>
    <comment_count>3</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2018-05-21 08:18:35 -0700</bug_when>
    <thetext>CC WK2 owners</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1425652</commentid>
    <comment_count>4</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2018-05-21 08:25:52 -0700</bug_when>
    <thetext>(In reply to Carlos Garcia Campos from comment #0)
&gt; I&apos;m not sure about the security implications of this crash, so I&apos;ve used the
&gt; security product just in case.

It dies with SIBABRT, so that&apos;s totally safe, and at worst this could be a denial of service.

std::optional::value throws a std::bad_optional_access exception, but that becomes abort() because WebKit is built with -fno-exceptions.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1425669</commentid>
    <comment_count>5</comment_count>
    <who name="Michael Catanzaro">mcatanzaro</who>
    <bug_when>2018-05-21 09:26:16 -0700</bug_when>
    <thetext>(In reply to Carlos Garcia Campos from comment #0)
&gt; I don&apos;t know why this crash didn&apos;t happen before to me

A few weeks ago, Yusuke switched us from WTF&apos;s implementation of std::optional to the standard library&apos;s. That requires GCC 7.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1425679</commentid>
    <comment_count>6</comment_count>
      <attachid>340848</attachid>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2018-05-21 09:47:26 -0700</bug_when>
    <thetext>Comment on attachment 340848
Patch

Good catch! r=me</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1425681</commentid>
    <comment_count>7</comment_count>
      <attachid>340848</attachid>
    <who name="Alex Christensen">achristensen</who>
    <bug_when>2018-05-21 09:50:17 -0700</bug_when>
    <thetext>Comment on attachment 340848
Patch

Why is this not testable?  Why don&apos;t we make WebResourceLoader::TrackingParameters::pageID and frameID std::optional, too?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1426063</commentid>
    <comment_count>8</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2018-05-22 00:44:47 -0700</bug_when>
    <thetext>(In reply to Alex Christensen from comment #7)
&gt; Comment on attachment 340848 [details]
&gt; Patch
&gt; 
&gt; Why is this not testable?

I tried to make a test case, but I couldn&apos;t. I&apos;m not familiar with SVG, it seems to happen when an image tag inside an svg contains another image, but I haven&apos;t managed te create a test. This always happens when visiting http://www.mutua.es. I also tried to extract the test case from that page but failed too. If someone knows how to create a test case for this we can add it in a follow up patch.

&gt; Why don&apos;t we make
&gt; WebResourceLoader::TrackingParameters::pageID and frameID std::optional, too?

I don&apos;t think that helps. The tracking parameters are used in a lot of log messages, we would need to use value_or(0) everywhere. Then we would also need to make std::optional webPageID and webFrameID in NetworkLoadParameters (or use vale_or(0) when assigning the network load parameters). That would also require a lot of changes in network process code. If we ever get rid of the empty client, those will no longer be optional, so I don&apos;t think it&apos;s worth all the changes involved.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1426064</commentid>
    <comment_count>9</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2018-05-22 00:46:15 -0700</bug_when>
    <thetext>Committed r232056: &lt;https://trac.webkit.org/changeset/232056&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1428051</commentid>
    <comment_count>10</comment_count>
    <who name="Carlos Garcia Campos">cgarcia</who>
    <bug_when>2018-05-29 04:14:52 -0700</bug_when>
    <thetext>*** Bug 186048 has been marked as a duplicate of this bug. ***</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>340848</attachid>
            <date>2018-05-21 06:28:07 -0700</date>
            <delta_ts>2018-05-21 09:47:26 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>wk2-crash.diff</filename>
            <type>text/plain</type>
            <size>2073</size>
            <attacher name="Carlos Garcia Campos">cgarcia</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nIGIvU291cmNlL1dlYktpdC9DaGFu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</data>
<flag name="review"
          id="359070"
          type_id="1"
          status="+"
          setter="bfulgham"
    />
          </attachment>
      

    </bug>

</bugzilla>