Bug 10405

Summary:

REPRO: SVG Maze crashes in RenderPath code

Product:

WebKit

Reporter:

Eric Seidel (no email) <eric>

Component:

SVG

Assignee:

Nobody <webkit-unassigned>

Status:

RESOLVED FIXED

Severity:

Normal

Keywords:

SVGHitList

Priority:

Version:

420+

Hardware:

Mac

OS:

OS X 10.4

URL:

http://lab.vodafone.com/tm/maze15.svg

Attachments:

Description	Flags
Reduction (will crash)	none
First attempt	eric: review-
Improved patch	eric: review+

Eric Seidel (no email)

Reported 2006-08-15 00:02:25 PDT

SVG Maze crashes in RenderPath code http://lab.vodafone.com/tm/maze15.svg Click on the "up arrow" (the top green box) and then watch Safari crash: (every time!) Date/Time: 2006-08-15 02:00:09.226 -0500 OS Version: 10.4.7 (Build 8J2135) Report Version: 4 Command: Safari Path: /Applications/Safari.app/Contents/MacOS/Safari Parent: WindowServer [60] Version: ??? (15869) PID: 2109 Thread: 0 Exception: EXC_BAD_ACCESS (0x0001) Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000008 Thread 0 Crashed: 0 com.apple.WebCore 0x0105d6c4 WebCore::KRenderingDeviceContextQuartz::addPath(WebCore::KCanvasPath const*) + 6 1 com.apple.WebCore 0x0106507d WebCore::RenderPath::paint(WebCore::RenderObject::PaintInfo&, int, int) + 1203 2 com.apple.WebCore 0x0115f3a0 WebCore::RenderBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 72 3 com.apple.WebCore 0x01062083 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 2071 4 com.apple.WebCore 0x0115f3a0 WebCore::RenderBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 72 5 com.apple.WebCore 0x01062083 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 2071 6 com.apple.WebCore 0x0115f3a0 WebCore::RenderBox::paint(WebCore::RenderObject::PaintInfo&, int, int) + 72 7 com.apple.WebCore 0x01062083 WebCore::RenderSVGContainer::paint(WebCore::RenderObject::PaintInfo&, int, int) + 2071 8 com.apple.WebCore 0x011688ce WebCore::RenderView::paint(WebCore::RenderObject::PaintInfo&, int, int) + 230 9 com.apple.WebCore 0x0117daeb WebCore::RenderLayer::paintLayer(WebCore::RenderLayer*, WebCore::GraphicsContext*, WebCore::IntRect const&, bool, WebCore::PaintRestriction, WebCore::RenderObject*) + 1631 10 com.apple.WebCore 0x0117db77 WebCore::RenderLayer::paint(WebCore::GraphicsContext*, WebCore::IntRect const&, WebCore::PaintRestriction, WebCore::RenderObject*) + 57 11 com.apple.WebCore 0x010b16ef WebCore::Frame::paint(WebCore::GraphicsContext*, WebCore::IntRect const&) + 131 12 com.apple.WebCore 0x010e670d -[WebCoreFrameBridge drawRect:] + 167 13 com.apple.WebKit 0x0033b519 -[WebHTMLView drawSingleRect:] + 281 14 com.apple.WebKit 0x0033b82d -[WebHTMLView drawRect:] + 323 15 com.apple.AppKit 0x9342260f -[NSView _drawRect:clip:] + 3228 16 com.apple.AppKit 0x93420af1 -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 1273 17 com.apple.WebKit 0x00336e2b -[WebHTMLView(WebPrivate) _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 290 18 com.apple.AppKit 0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239 19 com.apple.AppKit 0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239 20 com.apple.AppKit 0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239 21 com.apple.AppKit 0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239 22 com.apple.AppKit 0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239 23 com.apple.AppKit 0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239 24 com.apple.AppKit 0x9342129f -[NSView _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 3239 25 com.apple.AppKit 0x9341fdd8 -[NSThemeFrame _recursiveDisplayRectIfNeededIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:topView:] + 290 26 com.apple.AppKit 0x9341f5c4 -[NSView _displayRectIgnoringOpacity:isVisibleRect:rectIsVisibleRectForView:] + 523 27 com.apple.AppKit 0x9341eef4 -[NSView displayIfNeeded] + 439 28 com.apple.AppKit 0x9341ec96 -[NSWindow displayIfNeeded] + 168 29 com.apple.Safari 0x0001c394 0x1000 + 111508 30 com.apple.AppKit 0x9346ef58 _handleWindowNeedsDisplay + 206 31 com.apple.CoreFoundation 0x90824155 __CFRunLoopDoObservers + 342 32 com.apple.CoreFoundation 0x908231f7 CFRunLoopRunSpecific + 827 33 com.apple.CoreFoundation 0x90822eb5 CFRunLoopRunInMode + 61 34 com.apple.HIToolbox 0x92f02b90 RunCurrentEventLoopInMode + 285 35 com.apple.HIToolbox 0x92f021ce ReceiveNextEventCommon + 184 36 com.apple.HIToolbox 0x92f020ee BlockUntilNextEventMatchingListInMode + 81 37 com.apple.AppKit 0x933a3771 _DPSNextEvent + 576 38 com.apple.AppKit 0x933a335e -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137 39 com.apple.Safari 0x00006f96 0x1000 + 24470 40 com.apple.AppKit 0x9339d0e3 -[NSApplication run] + 512 41 com.apple.AppKit 0x93391037 NSApplicationMain + 573 42 com.apple.Safari 0x0005f7de 0x1000 + 387038 43 com.apple.Safari 0x0005f6f9 0x1000 + 386809 Thread 1: 0 libSystem.B.dylib 0x9000a5c7 mach_msg_trap + 7 1 com.unsanity.ape 0xc0001db2 __ape_agent + 307 2 libSystem.B.dylib 0x90024b07 _pthread_body + 84 Thread 2: 0 libSystem.B.dylib 0x9001aafc select + 12 1 libSystem.B.dylib 0x90024b07 _pthread_body + 84 Thread 3: 0 libSystem.B.dylib 0x9000a5c7 mach_msg_trap + 7 1 com.apple.CoreFoundation 0x9082369a CFRunLoopRunSpecific + 2014 2 com.apple.CoreFoundation 0x90822eb5 CFRunLoopRunInMode + 61 3 com.apple.Foundation 0x9275eb4a -[NSRunLoop runMode:beforeDate:] + 182 4 com.apple.Foundation 0x9275ea46 -[NSRunLoop run] + 75 5 com.apple.WebKit 0x0036232f +[WebFileDatabase _syncLoop:] + 198 6 com.apple.Foundation 0x927291b0 forkThreadForFunction + 123 7 libSystem.B.dylib 0x90024b07 _pthread_body + 84 Thread 4: 0 libSystem.B.dylib 0x9000a5c7 mach_msg_trap + 7 1 com.apple.CoreFoundation 0x9082369a CFRunLoopRunSpecific + 2014 2 com.apple.CoreFoundation 0x90822eb5 CFRunLoopRunInMode + 61 3 com.apple.Foundation 0x9275e861 +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 259 4 com.apple.Foundation 0x927291b0 forkThreadForFunction + 123 5 libSystem.B.dylib 0x90024b07 _pthread_body + 84 Thread 5: 0 libSystem.B.dylib 0x9000a5c7 mach_msg_trap + 7 1 com.apple.CoreFoundation 0x9082369a CFRunLoopRunSpecific + 2014 2 com.apple.CoreFoundation 0x90822eb5 CFRunLoopRunInMode + 61 3 com.apple.Foundation 0x9278595a +[NSURLCache _diskCacheSyncLoop:] + 206 4 com.apple.Foundation 0x927291b0 forkThreadForFunction + 123 5 libSystem.B.dylib 0x90024b07 _pthread_body + 84 Thread 6: 0 libSystem.B.dylib 0x900251a7 semaphore_wait_signal_trap + 7 1 com.apple.Foundation 0x9277f008 -[NSConditionLock lockWhenCondition:] + 39 2 com.apple.Syndication 0x9a64b052 -[AsyncDB _run:] + 181 3 com.apple.Foundation 0x927291b0 forkThreadForFunction + 123 4 libSystem.B.dylib 0x90024b07 _pthread_body + 84 Thread 0 crashed with i386 Thread State: eax: 0x00000000 ebx: 0x0106187d ecx:0x17201cf0 edx: 0x16e46ab0 edi: 0x171fcb40 esi: 0x01384d88 ebp:0xbfffc388 esp: 0xbfffc388 ss: 0x0000002f efl: 0x00010202 eip:0x0105d6c4 cs: 0x00000027 ds: 0x0000002f es: 0x0000002f fs:0x00000000 gs: 0x00000037 Binary Images Description: 0x1000 - 0xdefff com.apple.Safari 2.0.4 (419.3) /Applications/Safari.app/Contents/MacOS/Safari 0x10e000 - 0x10ffff WebKitNightlyEnabler.dylib /Volumes/WebKit 1/WebKit.app/Contents/Resources/WebKitNightlyEnabler.dylib 0x114000 - 0x18efff com.apple.JavaScriptCore 420+ /Volumes/WebKit 1/WebKit.app/Contents/Resources/JavaScriptCore.framework/Versions/A/JavaScriptCore 0x305000 - 0x3b5fff com.apple.WebKit 420+ /Volumes/WebKit 1/WebKit.app/Contents/Resources/WebKit.framework/Versions/A/WebKit 0x1008000 - 0x1382fff com.apple.WebCore 420+ /Volumes/WebKit 1/WebKit.app/Contents/Resources/WebCore.framework/Versions/A/WebCore 0x17622000 - 0x1763efff GLDriver /System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLDriver.bundle/GLDriver 0x176ab000 - 0x176ccfff GLRendererFloat /System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLRendererFloat.bundle/GLRendererFloat 0x17a12000 - 0x17c41fff com.macromedia.Flash Player.plugin 8.0.27 (1.0.2f27) /Library/Internet Plug-Ins/Flash Player.plugin/Contents/MacOS/Flash Player 0x18d37000 - 0x18e78fff GLEngine /System/Library/Frameworks/OpenGL.framework/Resources/GLEngine.bundle/GLEngine 0x18ea0000 - 0x1906cfff com.apple.ATIRadeonX1000GLDriver 1.4.32 (4.3.2) /System/Library/Extensions/ATIRadeonX1000GLDriver.bundle/Contents/MacOS/ATIRadeonX1000GLDriver 0x8fe00000 - 0x8fe4bfff dyld 45.1 /usr/lib/dyld 0x90000000 - 0x9016efff libSystem.B.dylib /usr/lib/libSystem.B.dylib 0x901be000 - 0x901c0fff libmathCommon.A.dylib /usr/lib/system/libmathCommon.A.dylib 0x901c2000 - 0x901fefff com.apple.CoreText 1.1.1 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText 0x90225000 - 0x902fafff ATS /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0x9031a000 - 0x9076afff com.apple.CoreGraphics 1.258.33 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0x90801000 - 0x908c9fff com.apple.CoreFoundation 6.4.6 (368.27) /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0x90907000 - 0x90907fff com.apple.CoreServices 10.4 (???) /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices 0x90909000 - 0x909fcfff libicucore.A.dylib /usr/lib/libicucore.A.dylib 0x90a4c000 - 0x90acbfff libobjc.A.dylib /usr/lib/libobjc.A.dylib 0x90af4000 - 0x90b57fff libstdc++.6.dylib /usr/lib/libstdc++.6.dylib 0x90bc6000 - 0x90bcdfff libgcc_s.1.dylib /usr/lib/libgcc_s.1.dylib 0x90bd2000 - 0x90c42fff com.apple.framework.IOKit 1.4.4 (???) /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0x90c57000 - 0x90c69fff libauto.dylib /usr/lib/libauto.dylib 0x90c6f000 - 0x90f14fff com.apple.CoreServices.CarbonCore 682.12 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore 0x90f57000 - 0x90fbffff com.apple.CoreServices.OSServices 4.1 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices 0x90ff7000 - 0x91035fff com.apple.CFNetwork 129.16 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork 0x91047000 - 0x91057fff com.apple.WebServices 1.1.3 (1.1.0) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore 0x91062000 - 0x910e0fff com.apple.SearchKit 1.0.5 /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0x91115000 - 0x91133fff com.apple.Metadata 10.4.4 (121.36) /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata 0x9113f000 - 0x9114dfff libz.1.dylib /usr/lib/libz.1.dylib 0x91150000 - 0x91306fff com.apple.security 4.4.1 (27569) /System/Library/Frameworks/Security.framework/Versions/A/Security 0x913f5000 - 0x913fdfff com.apple.DiskArbitration 2.1 /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration 0x91404000 - 0x9142afff com.apple.SystemConfiguration 1.8.6 /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0x9143c000 - 0x91443fff libbsm.dylib /usr/lib/libbsm.dylib 0x91447000 - 0x914c0fff com.apple.audio.CoreAudio 3.0.4 /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio 0x9150e000 - 0x9150efff com.apple.ApplicationServices 10.4 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices 0x91510000 - 0x9153bfff com.apple.AE 314 (313) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0x9154e000 - 0x91622fff com.apple.ColorSync 4.4.6 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0x9165b000 - 0x916d8fff com.apple.print.framework.PrintCore 4.6 (177.13) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore 0x91705000 - 0x917affff com.apple.QD 3.10.20 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0x917d5000 - 0x91820fff com.apple.HIServices 1.5.2 (???) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0x9183f000 - 0x91855fff com.apple.LangAnalysis 1.6.3 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis 0x91861000 - 0x9187bfff com.apple.FindByContent 1.5 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent 0x91885000 - 0x918c2fff com.apple.LaunchServices 180 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices 0x918d6000 - 0x918e1fff com.apple.speech.synthesis.framework 3.4 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0x918e8000 - 0x91920fff com.apple.ImageIO.framework 1.4.7 /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO 0x91932000 - 0x919e4fff libcrypto.0.9.7.dylib /usr/lib/libcrypto.0.9.7.dylib 0x91a2a000 - 0x91a40fff libcups.2.dylib /usr/lib/libcups.2.dylib 0x91a45000 - 0x91a61fff libJPEG.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib 0x91a66000 - 0x91ac4fff libJP2.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib 0x91ad4000 - 0x91ad8fff libGIF.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib 0x91ada000 - 0x91b35fff libRaw.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib 0x91b39000 - 0x91b76fff libTIFF.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib 0x91b7c000 - 0x91b96fff libPng.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib 0x91b9b000 - 0x91b9dfff libRadiance.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib 0x91b9f000 - 0x91b9ffff com.apple.Accelerate 1.2.2 (Accelerate 1.2.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate 0x91ba1000 - 0x91c2bfff com.apple.vImage 2.4 /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0x91c32000 - 0x91c32fff com.apple.Accelerate.vecLib 3.2.2 (vecLib 3.2.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0x91c34000 - 0x91c79fff libvMisc.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0x91c81000 - 0x91ca6fff libvDSP.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0x91cad000 - 0x92230fff libBLAS.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0x9226d000 - 0x9261ffff libLAPACK.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0x9264c000 - 0x926d0fff com.apple.DesktopServices 1.3.4 /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0x9270c000 - 0x9293efff com.apple.Foundation 6.4.6 (567.27) /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0x92a4a000 - 0x92b28fff libxml2.2.dylib /usr/lib/libxml2.2.dylib 0x92b45000 - 0x92c32fff libiconv.2.dylib /usr/lib/libiconv.2.dylib 0x92c42000 - 0x92c59fff libGL.dylib /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0x92c64000 - 0x92cbbfff libGLU.dylib /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0x92ccf000 - 0x92ccffff com.apple.Carbon 10.4 (???) /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon 0x92cd1000 - 0x92ce1fff com.apple.ImageCapture 3.0.4 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture 0x92cef000 - 0x92cf7fff com.apple.speech.recognition.framework 3.5 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition 0x92cfd000 - 0x92d02fff com.apple.securityhi 2.0.1 (24742) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI 0x92d08000 - 0x92d99fff com.apple.ink.framework 101.2.1 (71) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0x92dad000 - 0x92db0fff com.apple.help 1.0.3 (32.1) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help 0x92db3000 - 0x92dd0fff com.apple.openscripting 1.2.5 (???) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting 0x92de0000 - 0x92de6fff com.apple.print.framework.Print 5.2 (192.4) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print 0x92dec000 - 0x92e4ffff com.apple.htmlrendering 66.1 (1.1.3) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering 0x92e73000 - 0x92eb4fff com.apple.NavigationServices 3.4.4 (3.4.3) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices 0x92edb000 - 0x92ee8fff com.apple.audio.SoundManager 3.9.1 /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound 0x92eef000 - 0x92ef4fff com.apple.CommonPanels 1.2.3 (73) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels 0x92ef9000 - 0x931ebfff com.apple.HIToolbox 1.4.8 (???) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0x932f0000 - 0x932fbfff com.apple.opengl 1.4.10 /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL 0x93300000 - 0x9331bfff com.apple.DirectoryService.Framework 3.1 /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService 0x9338a000 - 0x9338afff com.apple.Cocoa 6.4 (???) /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa 0x9338c000 - 0x93a45fff com.apple.AppKit 6.4.7 (824.41) /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0x93dc6000 - 0x93e40fff com.apple.CoreData 90 /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData 0x93e79000 - 0x93f3afff com.apple.audio.toolbox.AudioToolbox 1.4.3 /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0x93f7a000 - 0x93f7afff com.apple.audio.units.AudioUnit 1.4.2 /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0x93f7c000 - 0x9412afff com.apple.QuartzCore 1.4.8 /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0x94178000 - 0x941b9fff libsqlite3.0.dylib /usr/lib/libsqlite3.0.dylib 0x941c1000 - 0x941fbfff libGLImage.dylib /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0x94289000 - 0x942c7fff com.apple.vmutils 4.0.2 (93.1) /System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils 0x9430b000 - 0x9431bfff com.apple.securityfoundation 2.2.1 (28150) /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0x94328000 - 0x94365fff com.apple.securityinterface 2.2.1 (27695) /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface 0x94381000 - 0x94390fff libCGATS.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib 0x94397000 - 0x943a2fff libCSync.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib 0x943a7000 - 0x943cbfff libPDFRIP.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libPDFRIP.A.dylib 0x943ee000 - 0x94408fff libRIP.A.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib 0x9440e000 - 0x946c5fff com.apple.QuickTime 7.1.2 /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime 0x94826000 - 0x9496ffff com.apple.AddressBook.framework 4.0.4 (485.1) /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook 0x949fb000 - 0x94a0afff com.apple.DSObjCWrappers.Framework 1.1 /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers 0x94a11000 - 0x94a3afff com.apple.LDAPFramework 1.4.1 (69.0.1) /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP 0x94a40000 - 0x94a4ffff libsasl2.2.dylib /usr/lib/libsasl2.2.dylib 0x94a53000 - 0x94a77fff libssl.0.9.7.dylib /usr/lib/libssl.0.9.7.dylib 0x94a83000 - 0x94aa0fff libresolv.9.dylib /usr/lib/libresolv.9.dylib 0x9582e000 - 0x95851fff libxslt.1.dylib /usr/lib/libxslt.1.dylib 0x97075000 - 0x97130fff libGLProgrammability.dylib /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib 0x9714a000 - 0x9714bfff libGLSystem.dylib /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLSystem.dylib 0x9714d000 - 0x97152fff com.apple.agl 2.5.9 (AGL-2.5.9) /System/Library/Frameworks/AGL.framework/Versions/A/AGL 0x9a648000 - 0x9a67ffff com.apple.Syndication 1.0.6 (54) /System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication 0x9a69b000 - 0x9a6adfff com.apple.SyndicationUI 1.0.6 (54) /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI 0xc0000000 - 0xc000efff com.unsanity.ape 2.0 /Library/Frameworks/ApplicationEnhancer.framework/Versions/A/ApplicationEnhancer Model: MacBookPro1,1, BootROM MBP11.0055.B03, 2 processors, Intel Core Duo, 2.16 GHz, 2 GB Graphics: ATI Radeon X1600, ATY,RadeonX1600, PCIe, 256 MB Memory Module: DIMM0/BANK 0, 1 GB, DDR2 SDRAM, 667 MHz Memory Module: DIMM1/BANK 1, 1 GB, DDR2 SDRAM, 667 MHz AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x86), 0.1.24 Bluetooth: Version 1.7.5f10, 2 service, 0 devices, 1 incoming serial ports Network Service: AirPort, AirPort, en1 Network Service: Parallels Host-Guest Adapter, Ethernet, en2 Serial ATA Device: ST9100824AS, 93.16 GB Parallel ATA Device: MATSHITADVD-R UJ-857 USB Device: Hub, Up to 480 Mb/sec, 500 mA USB Device: Hub in Apple Pro Keyboard, Mitsumi Electric, Up to 12 Mb/sec, 500 mA USB Device: Apple Optical USB Mouse, Mitsumi Electric, Up to 1.5 Mb/sec, 100 mA USB Device: Apple Pro Keyboard, Mitsumi Electric, Up to 12 Mb/sec, 250 mA USB Device: Apple Cinema HD Display, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA USB Device: Built-in iSight, Micron, Up to 480 Mb/sec, 500 mA USB Device: Apple Internal Keyboard / Trackpad, Apple Computer, Up to 12 Mb/sec, 500 mA USB Device: IR Receiver, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA USB Device: Bluetooth HCI, Up to 12 Mb/sec, 500 mA FireWire Device: unknown_device, unknown_value, Up to 400 Mb/sec

Attachments
Reduction (will crash) (290 bytes, image/svg+xml) 2006-08-15 15:15 PDT, mitz	no flags	Details
First attempt (9.62 KB, patch) 2006-08-21 06:36 PDT, Rob Buis	eric: review-	Details Formatted Diff Diff
Improved patch (3.38 KB, patch) 2006-08-21 11:12 PDT, Rob Buis	eric: review+	Details Formatted Diff Diff
Show Obsolete (1) View All Add attachment proposed patch, testcase, etc.

mitz

Comment 1 2006-08-15 15:15:59 PDT

Created attachment 10046 [details] Reduction (will crash) The crash happens when an element has a renderer but null path data. Since renderers aren't created for elements with null path data, the only way this can happen is for the path data to be removed from an element that already has a renderer, as in this testcase.

Rob Buis

Comment 2 2006-08-21 06:36:06 PDT

Created attachment 10142 [details] First attempt This fixes maze15.svg, except for the lack of animation. Cheers, Rob.

Eric Seidel (no email)

Comment 3 2006-08-21 08:57:45 PDT

Comment on attachment 10142 [details] First attempt There are a couple things which I would change here. 1. The test case should ideally draw a green square behind the red one, so that when the red one is cleared by the javascript, the green square shows through as an indicator of success. Second, I 'm not sure I agree with your strokeBoundingBox changes. IMO it would be cleaner to have a one line if check at the very beginning: if (isEmpty()) return CGEmptyRect; They way you've written it now, it's nondeterministic as to what sort of rect you are returning. Also, an if with an early return often reads a bit cleaner. Otherwise looks great! Given that the rect you are returning is non-deterministic (and I'm not sure if you added your copyright to KCanvasPathQuartz or not) I'm going to have to r- this.

Eric Seidel (no email)

Comment 4 2006-08-21 09:24:23 PDT

Comment on attachment 10142 [details] First attempt Actually, since this is such a small change (2 lines), you're not required to add a copyright. But you're welcome to do so. Definitely need to fix the non-deterministic behavior however.

Rob Buis

Comment 5 2006-08-21 11:12:51 PDT

Created attachment 10146 [details] Improved patch This should address the issues Erics raised. Cheers, Rob.

Eric Seidel (no email)

Comment 6 2006-08-21 16:06:22 PDT

Comment on attachment 10146 [details] Improved patch You'll need to fix the conflict markers in the ChangeLog. Otherwise looks good. r=me.

Rob Buis

Comment 7 2006-08-22 07:57:42 PDT

Comment on attachment 10146 [details] Improved patch Landed as r15963.

Note You need to log in before you can comment on or make changes to this bug.