20344 2008-08-11 02:00:23 -0700 [GTK] Segfault when svg is embedded with an <img> tag 2008-08-11 07:51:28 -0700 1 1 1 Unclassified WebKit WebKitGTK 528+ (Nightly build) PC Linux RESOLVED DUPLICATE 19370 P2 Critical --- 0 camaradetux webkit-unassigned oldest_to_newest 88207 0 camaradetux 2008-08-11 02:00:23 -0700 When trying to display a page embedding an svg file with an <img> tag, webkigtk crashes. To reproduce, the svg file can be valid or invalid, with only headers for instance, or even with a single character. An example page is : (yes, as simple) <img src="./circle.svg"/> An example for svg is : <?xml version="1.0"?> <!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.0//EN" "http://www.w3.org/TR/2001/REC-SVG-20010904/DTD/svg10.dtd"> <svg xmlns="http://www.w3.org/2000/svg"> </svg> When the svg file is displayed alone or with <object data="./circle.svg"/>, there is no problem. To check it, you can make your webkitgtk crash with 244bytes and the following link : http://pers.yaxm.org/temp/kate 88208 1 22725 camaradetux 2008-08-11 02:01:56 -0700 Created attachment 22725 Backtrace of the segfault Corresponding backtrace 88215 2 pierre-luc.beaudoin 2008-08-11 07:51:28 -0700 *** This bug has been marked as a duplicate of 19370 *** 22725 2008-08-11 02:01:56 -0700 2008-08-11 02:01:56 -0700 Backtrace of the segfault bt.txt text/plain 2000 camaradetux IzAgIDB4YjdkMTBmZjcgaW4gV2ViQ29yZTo6U2Nyb2xsVmlldzo6dXBkYXRlICgpCiAgIGZyb20g L3Vzci9saWIvbGlid2Via2l0LTEuMC5zby4xCiMxICAweGI3OTdlYzE1IGluIFdlYkNvcmU6OkRv Y3VtZW50OjppbXBsaWNpdENsb3NlICgpCiAgIGZyb20gL3Vzci9saWIvbGlid2Via2l0LTEuMC5z by4xCiMyICAweGI3YWIxNzlmIGluIFdlYkNvcmU6OkZyYW1lTG9hZGVyOjpjaGVja0NhbGxJbXBs aWNpdENsb3NlICgpCiAgIGZyb20gL3Vzci9saWIvbGlid2Via2l0LTEuMC5zby4xCiMzICAweGI3 YWM0ZTczIGluIFdlYkNvcmU6OkZyYW1lTG9hZGVyOjpjaGVja0NvbXBsZXRlZCAoKQogICBmcm9t IC91c3IvbGliL2xpYndlYmtpdC0xLjAuc28uMQojNCAgMHhiN2FjNjgxMyBpbiBXZWJDb3JlOjpG cmFtZUxvYWRlcjo6ZmluaXNoZWRQYXJzaW5nICgpCiAgIGZyb20gL3Vzci9saWIvbGlid2Via2l0 LTEuMC5zby4xCiM1ICAweGI3OTdiZTIzIGluIFdlYkNvcmU6OkRvY3VtZW50OjpmaW5pc2hlZFBh cnNpbmcgKCkKICAgZnJvbSAvdXNyL2xpYi9saWJ3ZWJraXQtMS4wLnNvLjEKIzYgIDB4Yjc5YmVi MDggaW4gV2ViQ29yZTo6WE1MVG9rZW5pemVyOjplbmQgKCkKICAgZnJvbSAvdXNyL2xpYi9saWJ3 ZWJraXQtMS4wLnNvLjEKIzcgIDB4Yjc5Nzc3MTkgaW4gV2ViQ29yZTo6RG9jdW1lbnQ6OmZpbmlz aFBhcnNpbmcgKCkKICAgZnJvbSAvdXNyL2xpYi9saWJ3ZWJraXQtMS4wLnNvLjEKIzggIDB4Yjdh Yzg4YTkgaW4gV2ViQ29yZTo6RnJhbWVMb2FkZXI6OmVuZElmTm90TG9hZGluZ01haW5SZXNvdXJj ZSAoKQogICBmcm9tIC91c3IvbGliL2xpYndlYmtpdC0xLjAuc28uMQojOSAgMHhiN2NlNjA0YSBp biBXZWJDb3JlOjpTVkdJbWFnZTo6ZGF0YUNoYW5nZWQgKCkKICAgZnJvbSAvdXNyL2xpYi9saWJ3 ZWJraXQtMS4wLnNvLjEKIzEwIDB4YjdiNjNhYWYgaW4gV2ViQ29yZTo6SW1hZ2U6OnNldERhdGEg KCkgZnJvbSAvdXNyL2xpYi9saWJ3ZWJraXQtMS4wLnNvLjEKIzExIDB4YjdhYTRiNGIgaW4gV2Vi Q29yZTo6Q2FjaGVkSW1hZ2U6OmRhdGEgKCkKICAgZnJvbSAvdXNyL2xpYi9saWJ3ZWJraXQtMS4w LnNvLjEKLS0tVHlwZSA8cmV0dXJuPiB0byBjb250aW51ZSwgb3IgcSA8cmV0dXJuPiB0byBxdWl0 LS0tCiMxMiAweGI3YWQ2ZDkxIGluIFdlYkNvcmU6OkxvYWRlcjo6SG9zdDo6ZGlkRmluaXNoTG9h ZGluZyAoKQogICBmcm9tIC91c3IvbGliL2xpYndlYmtpdC0xLjAuc28uMQojMTMgMHhiN2FlMzBj OCBpbiBXZWJDb3JlOjpTdWJyZXNvdXJjZUxvYWRlcjo6ZGlkRmluaXNoTG9hZGluZyAoKQogICBm cm9tIC91c3IvbGliL2xpYndlYmtpdC0xLjAuc28uMQojMTQgMHhiN2FkZjAwZiBpbiBXZWJDb3Jl OjpSZXNvdXJjZUxvYWRlcjo6ZGlkRmluaXNoTG9hZGluZyAoKQogICBmcm9tIC91c3IvbGliL2xp YndlYmtpdC0xLjAuc28uMQojMTUgMHhiN2M0YTMwNiBpbiBXZWJDb3JlOjpSZXNvdXJjZUhhbmRs ZU1hbmFnZXI6OmRvd25sb2FkVGltZXJDYWxsYmFjayAoKQogICBmcm9tIC91c3IvbGliL2xpYndl YmtpdC0xLjAuc28uMQojMTYgMHhiN2M0YTc2OSBpbiBXZWJDb3JlOjpUaW1lcjxXZWJDb3JlOjpS ZXNvdXJjZUhhbmRsZU1hbmFnZXI+OjpmaXJlZCAoKQogICBmcm9tIC91c3IvbGliL2xpYndlYmtp dC0xLjAuc28uMQojMTcgMHhiN2I4NDBjNiBpbiBXZWJDb3JlOjpUaW1lckJhc2U6OmZpcmVUaW1l cnMgKCkKICAgZnJvbSAvdXNyL2xpYi9saWJ3ZWJraXQtMS4wLnNvLjEKIzE4IDB4YjdiODQ0MGEg aW4gV2ViQ29yZTo6VGltZXJCYXNlOjpzaGFyZWRUaW1lckZpcmVkICgpCiAgIGZyb20gL3Vzci9s aWIvbGlid2Via2l0LTEuMC5zby4xCiMxOSAweGI3ZDEzY2RmIGluIFdlYkNvcmU6OnRpbWVvdXRf Y2IgKCkgZnJvbSAvdXNyL2xpYi9saWJ3ZWJraXQtMS4wLnNvLjEKIzIwIDB4YjcyOTczZTYgaW4g Pz8gKCkgZnJvbSAvdXNyL2xpYi9saWJnbGliLTIuMC5zby4wCiMyMSAweDAwMDAwMDAwIGluID8/ ICgpCgo=