Bug 11408 – EXC_BAD_ACCESS in WebCore::SVGPreserveAspectRatio::parsePreserveAspectRatio

• Component: SVG
• Status: RESOLVED DUPLICATE

[Dave McCaldon]

Running WebKit on a web page with embedded SVG, I get the following crash (below).  I don't yet have the problem SVG reduced into a simple example as it's quite complex to extract from the application.  If  need be, we can set up an SSH tunnel or something so you can debug it. 

---
Date/Time:      2006-10-24 20:29:51.740 -0400
OS Version:     10.4.8 (Build 8L2127)
Report Version: 4

Command: Safari
Path:    /Applications/Safari.app/Contents/MacOS/Safari
Parent:  WindowServer [68]

Version: ??? (17256)

PID:    2847
Thread: 0

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0 Crashed:
0   com.apple.WebCore              	0x010b854c WebCore::SVGPreserveAspectRatio::parsePreserveAspectRatio(WebCore::String const&) + 142
1   com.apple.WebCore              	0x0109c3a1 WebCore::SVGFitToViewBox::parseMappedAttribute(WebCore::MappedAttribute*) + 87
2   com.apple.WebCore              	0x010c4db9 WebCore::SVGSVGElement::parseMappedAttribute(WebCore::MappedAttribute*) + 193
3   com.apple.WebCore              	0x01246e84 WebCore::StyledElement::attributeChanged(WebCore::Attribute*, bool) + 436
4   com.apple.WebCore              	0x010c045d WebCore::SVGStyledElement::attributeChanged(WebCore::Attribute*, bool) + 33
5   com.apple.WebCore              	0x0124a48e WebCore::NamedAttrMap::addAttribute(WebCore::Attribute*) + 170
6   com.apple.WebCore              	0x0124d69c WebCore::Element::setAttribute(WebCore::String const&, WebCore::String const&, int&) + 708
7   com.apple.WebCore              	0x0123f156 WebCore::JSElementProtoFunc::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 4460
8   com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
9   com.apple.JavaScriptCore       	0x00130c09 KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 663
10  com.apple.JavaScriptCore       	0x00134edb KJS::ExprStatementNode::execute(KJS::ExecState*) + 117
11  com.apple.JavaScriptCore       	0x00137c3b KJS::SourceElementsNode::execute(KJS::ExecState*) + 421
12  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
13  com.apple.JavaScriptCore       	0x00123207 KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 45
14  com.apple.JavaScriptCore       	0x00122cd0 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 338
15  com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
16  com.apple.JavaScriptCore       	0x00130c09 KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 663
17  com.apple.JavaScriptCore       	0x00134edb KJS::ExprStatementNode::execute(KJS::ExecState*) + 117
18  com.apple.JavaScriptCore       	0x00137c3b KJS::SourceElementsNode::execute(KJS::ExecState*) + 421
19  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
20  com.apple.JavaScriptCore       	0x00123207 KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 45
21  com.apple.JavaScriptCore       	0x00122cd0 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 338
22  com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
23  com.apple.JavaScriptCore       	0x00130c09 KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 663
24  com.apple.JavaScriptCore       	0x00134edb KJS::ExprStatementNode::execute(KJS::ExecState*) + 117
25  com.apple.JavaScriptCore       	0x00137c3b KJS::SourceElementsNode::execute(KJS::ExecState*) + 421
26  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
27  com.apple.JavaScriptCore       	0x00135a5d KJS::ForNode::execute(KJS::ExecState*) + 327
28  com.apple.JavaScriptCore       	0x00137c3b KJS::SourceElementsNode::execute(KJS::ExecState*) + 421
29  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
30  com.apple.JavaScriptCore       	0x00123207 KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 45
31  com.apple.JavaScriptCore       	0x00122cd0 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 338
32  com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
33  com.apple.JavaScriptCore       	0x00130c09 KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 663
34  com.apple.JavaScriptCore       	0x00134edb KJS::ExprStatementNode::execute(KJS::ExecState*) + 117
35  com.apple.JavaScriptCore       	0x00137c3b KJS::SourceElementsNode::execute(KJS::ExecState*) + 421
36  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
37  com.apple.JavaScriptCore       	0x00123207 KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 45
38  com.apple.JavaScriptCore       	0x00122cd0 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 338
39  com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
40  com.apple.JavaScriptCore       	0x00130c09 KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 663
41  com.apple.JavaScriptCore       	0x00134edb KJS::ExprStatementNode::execute(KJS::ExecState*) + 117
42  com.apple.JavaScriptCore       	0x00137c3b KJS::SourceElementsNode::execute(KJS::ExecState*) + 421
43  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
44  com.apple.JavaScriptCore       	0x00123207 KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 45
45  com.apple.JavaScriptCore       	0x00122cd0 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 338
46  com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
47  com.apple.JavaScriptCore       	0x00130c09 KJS::FunctionCallDotNode::evaluate(KJS::ExecState*) + 663
48  com.apple.JavaScriptCore       	0x00134edb KJS::ExprStatementNode::execute(KJS::ExecState*) + 117
49  com.apple.JavaScriptCore       	0x00137b39 KJS::SourceElementsNode::execute(KJS::ExecState*) + 163
50  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
51  com.apple.JavaScriptCore       	0x00135a5d KJS::ForNode::execute(KJS::ExecState*) + 327
52  com.apple.JavaScriptCore       	0x00137b39 KJS::SourceElementsNode::execute(KJS::ExecState*) + 163
53  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
54  com.apple.JavaScriptCore       	0x00135086 KJS::IfNode::execute(KJS::ExecState*) + 270
55  com.apple.JavaScriptCore       	0x00137c3b KJS::SourceElementsNode::execute(KJS::ExecState*) + 421
56  com.apple.JavaScriptCore       	0x00136cba KJS::CaseClauseNode::evalStatements(KJS::ExecState*) + 48
57  com.apple.JavaScriptCore       	0x00136d99 KJS::CaseBlockNode::evalBlock(KJS::ExecState*, KJS::JSValue*) + 165
58  com.apple.JavaScriptCore       	0x00137406 KJS::SwitchNode::execute(KJS::ExecState*) + 228
59  com.apple.JavaScriptCore       	0x00137b39 KJS::SourceElementsNode::execute(KJS::ExecState*) + 163
60  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
61  com.apple.JavaScriptCore       	0x00137823 KJS::TryNode::execute(KJS::ExecState*) + 123
62  com.apple.JavaScriptCore       	0x00137b39 KJS::SourceElementsNode::execute(KJS::ExecState*) + 163
63  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
64  com.apple.JavaScriptCore       	0x00123207 KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 45
65  com.apple.JavaScriptCore       	0x00122cd0 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 338
66  com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
67  com.apple.JavaScriptCore       	0x001312c0 KJS::FunctionCallResolveNode::evaluate(KJS::ExecState*) + 662
68  com.apple.JavaScriptCore       	0x00134edb KJS::ExprStatementNode::execute(KJS::ExecState*) + 117
69  com.apple.JavaScriptCore       	0x00137b39 KJS::SourceElementsNode::execute(KJS::ExecState*) + 163
70  com.apple.JavaScriptCore       	0x00134df9 KJS::BlockNode::execute(KJS::ExecState*) + 67
71  com.apple.JavaScriptCore       	0x00123207 KJS::DeclaredFunctionImp::execute(KJS::ExecState*) + 45
72  com.apple.JavaScriptCore       	0x00122cd0 KJS::FunctionImp::callAsFunction(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 338
73  com.apple.JavaScriptCore       	0x0013cc04 KJS::JSObject::call(KJS::ExecState*, KJS::JSObject*, KJS::List const&) + 112
74  com.apple.WebCore              	0x0126375c KJS::JSAbstractEventListener::handleEvent(WebCore::Event*, bool) + 1478
75  com.apple.WebCore              	0x0110e72c WebCore::Document::handleWindowEvent(WebCore::Event*, bool) + 166
76  com.apple.WebCore              	0x01230fbb WebCore::EventTargetNode::dispatchWindowEvent(WebCore::AtomicString const&, bool, bool) + 155
77  com.apple.WebCore              	0x01112774 WebCore::Document::implicitClose() + 190
78  com.apple.WebCore              	0x010e8803 WebCore::Frame::checkEmitLoadEvent() + 261
79  com.apple.WebCore              	0x010ef186 WebCore::Frame::checkCompleted() + 166
80  com.apple.WebCore              	0x010ef0a7 WebCore::Frame::completed(bool) + 97
81  com.apple.WebCore              	0x010ef1ca WebCore::Frame::checkCompleted() + 234
82  com.apple.WebCore              	0x010ef2f0 WebCore::Frame::finishedParsing() + 36
83  com.apple.WebCore              	0x0103105f WebCore::XMLTokenizer::end() + 335
84  com.apple.WebCore              	0x010ef873 WebCore::Frame::endIfNotLoading() + 157
85  com.apple.WebCore              	0x0138092c WebCore::DocumentLoader::finishedLoading() + 74
86  com.apple.WebCore              	0x01385fcd WebCore::FrameLoader::finishedLoading() + 75
87  com.apple.WebCore              	0x0138a24c WebCore::MainResourceLoader::didFinishLoading() + 34
88  com.apple.WebCore              	0x01388c41 -[WebCoreResourceLoaderAsDelegate connectionDidFinishLoading:] + 37
89  com.apple.Foundation           	0x9265be00 -[NSURLConnection(NSURLConnectionInternal) _sendDidFinishLoadingCallback] + 176
90  com.apple.Foundation           	0x92659ea5 -[NSURLConnection(NSURLConnectionInternal) _sendCallbacks] + 748
91  com.apple.Foundation           	0x92659b41 _sendCallbacks + 201
92  com.apple.CoreFoundation       	0x90828379 CFRunLoopRunSpecific + 1213
93  com.apple.CoreFoundation       	0x90827eb5 CFRunLoopRunInMode + 61
94  com.apple.HIToolbox            	0x92dcdb90 RunCurrentEventLoopInMode + 285
95  com.apple.HIToolbox            	0x92dcd297 ReceiveNextEventCommon + 385
96  com.apple.HIToolbox            	0x92dcd0ee BlockUntilNextEventMatchingListInMode + 81
97  com.apple.AppKit               	0x9326f465 _DPSNextEvent + 572
98  com.apple.AppKit               	0x9326f056 -[NSApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 137
99  com.apple.Safari               	0x00006f96 0x1000 + 24470
100 com.apple.AppKit               	0x93268ddb -[NSApplication run] + 512
101 com.apple.AppKit               	0x9325cd2f NSApplicationMain + 573
102 com.apple.Safari               	0x0005f7de 0x1000 + 387038
103 com.apple.Safari               	0x0005f6f9 0x1000 + 386809

Thread 1:
0   libSystem.B.dylib              	0x90009857 mach_msg_trap + 7
1   com.apple.CoreFoundation       	0x9082869a CFRunLoopRunSpecific + 2014
2   com.apple.CoreFoundation       	0x90827eb5 CFRunLoopRunInMode + 61
3   com.apple.Foundation           	0x9262aa9b +[NSURLConnection(NSURLConnectionInternal) _resourceLoadLoop:] + 259
4   com.apple.Foundation           	0x925f536c forkThreadForFunction + 123
5   libSystem.B.dylib              	0x90023d87 _pthread_body + 84

Thread 2:
0   libSystem.B.dylib              	0x90009857 mach_msg_trap + 7
1   com.apple.CoreFoundation       	0x9082869a CFRunLoopRunSpecific + 2014
2   com.apple.CoreFoundation       	0x90827eb5 CFRunLoopRunInMode + 61
3   com.apple.Foundation           	0x92651c4e +[NSURLCache _diskCacheSyncLoop:] + 206
4   com.apple.Foundation           	0x925f536c forkThreadForFunction + 123
5   libSystem.B.dylib              	0x90023d87 _pthread_body + 84

Thread 3:
0   libSystem.B.dylib              	0x90024427 semaphore_wait_signal_trap + 7
1   com.apple.Foundation           	0x9264b2f8 -[NSConditionLock lockWhenCondition:] + 39
2   com.apple.Syndication          	0x9a4cd052 -[AsyncDB _run:] + 181
3   com.apple.Foundation           	0x925f536c forkThreadForFunction + 123
4   libSystem.B.dylib              	0x90023d87 _pthread_body + 84

Thread 4:
0   libSystem.B.dylib              	0x90019d3c select + 12
1   libSystem.B.dylib              	0x90023d87 _pthread_body + 84

Thread 5:
0   libSystem.B.dylib              	0x900268bc kevent + 12
1   ...ple.CoreServices.CarbonCore 	0x90cb2f84 PrivateMPEntryPoint + 51
2   libSystem.B.dylib              	0x90023d87 _pthread_body + 84

Thread 6:
0   libSystem.B.dylib              	0x90024427 semaphore_wait_signal_trap + 7
1   ...ple.CoreServices.CarbonCore 	0x90cb3129 MPWaitOnQueue + 198
2   com.apple.DesktopServices      	0x9251af3f TNodeSyncTask::SyncTaskProc(void*) + 143
3   ...ple.CoreServices.CarbonCore 	0x90cb2f84 PrivateMPEntryPoint + 51
4   libSystem.B.dylib              	0x90023d87 _pthread_body + 84

Thread 7:
0   libSystem.B.dylib              	0x90024427 semaphore_wait_signal_trap + 7
1   com.apple.Foundation           	0x9264b2f8 -[NSConditionLock lockWhenCondition:] + 39
2   com.apple.AppKit               	0x93346270 -[NSUIHeartBeat _heartBeatThread:] + 377
3   com.apple.Foundation           	0x925f536c forkThreadForFunction + 123
4   libSystem.B.dylib              	0x90023d87 _pthread_body + 84

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x00000000    ebx: 0x010b84cc ecx: 0x00420024 edx: 0x17dde8a0
  edi: 0x17e94e30    esi: 0x17de0300 ebp: 0xbfffcf58 esp: 0xbfffcf10
   ss: 0x0000001f    efl: 0x00010286 eip: 0x010b854c  cs: 0x00000017
   ds: 0x0000001f     es: 0x0000001f  fs: 0x00000000  gs: 0x00000037

Binary Images Description:
    0x1000 -    0xdefff com.apple.Safari 2.0.4 (419.3)	/Applications/Safari.app/Contents/MacOS/Safari
  0x10e000 -   0x10ffff WebKitNightlyEnabler.dylib 	/Volumes/WebKit/WebKit.app/Contents/Resources/WebKitNightlyEnabler.dylib
  0x114000 -   0x193fff com.apple.JavaScriptCore 420+	/Volumes/WebKit/WebKit.app/Contents/Resources/JavaScriptCore.framework/Versions/A/JavaScriptCore
  0x305000 -   0x398fff com.apple.WebKit 420+	/Volumes/WebKit/WebKit.app/Contents/Resources/WebKit.framework/Versions/A/WebKit
 0x1008000 -  0x1482fff com.apple.WebCore 420+	/Volumes/WebKit/WebKit.app/Contents/Resources/WebCore.framework/Versions/A/WebCore
0x174cd000 - 0x17626fff GLEngine 	/System/Library/Frameworks/OpenGL.framework/Resources/GLEngine.bundle/GLEngine
0x17652000 - 0x17840fff com.apple.ATIRadeonX1000GLDriver 1.4.40 (4.4.0)	/System/Library/Extensions/ATIRadeonX1000GLDriver.bundle/Contents/MacOS/ATIRadeonX1000GLDriver
0x1787c000 - 0x17898fff GLDriver 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLDriver.bundle/GLDriver
0x1789f000 - 0x178c3fff GLRendererFloat 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Resources/GLRendererFloat.bundle/GLRendererFloat
0x8fe00000 - 0x8fe49fff dyld 46.9	/usr/lib/dyld
0x90000000 - 0x9016ffff libSystem.B.dylib 	/usr/lib/libSystem.B.dylib
0x901bf000 - 0x901c1fff libmathCommon.A.dylib 	/usr/lib/system/libmathCommon.A.dylib
0x901c3000 - 0x901fffff com.apple.CoreText 1.1.1 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90226000 - 0x902fbfff ATS 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x9031b000 - 0x9076ffff com.apple.CoreGraphics 1.258.38 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x90806000 - 0x908cefff com.apple.CoreFoundation 6.4.6 (368.27)	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x9090c000 - 0x9090cfff com.apple.CoreServices 10.4 (???)	/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x9090e000 - 0x90a01fff libicucore.A.dylib 	/usr/lib/libicucore.A.dylib
0x90a51000 - 0x90ad0fff libobjc.A.dylib 	/usr/lib/libobjc.A.dylib
0x90af9000 - 0x90b5dfff libstdc++.6.dylib 	/usr/lib/libstdc++.6.dylib
0x90bcc000 - 0x90bd3fff libgcc_s.1.dylib 	/usr/lib/libgcc_s.1.dylib
0x90bd8000 - 0x90c4bfff com.apple.framework.IOKit 1.4.6 (???)	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90c60000 - 0x90c72fff libauto.dylib 	/usr/lib/libauto.dylib
0x90c78000 - 0x90f1efff com.apple.CoreServices.CarbonCore 682.15	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90f61000 - 0x90fc9fff com.apple.CoreServices.OSServices 4.1	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x91001000 - 0x9103ffff com.apple.CFNetwork 129.18	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x91052000 - 0x91062fff com.apple.WebServices 1.1.3 (1.1.0)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x9106d000 - 0x910ebfff com.apple.SearchKit 1.0.5	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x91120000 - 0x9113efff com.apple.Metadata 10.4.4 (121.36)	/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x9114a000 - 0x91158fff libz.1.dylib 	/usr/lib/libz.1.dylib
0x9115b000 - 0x912fafff com.apple.security 4.5.1 (29002)	/System/Library/Frameworks/Security.framework/Versions/A/Security
0x913f8000 - 0x91400fff com.apple.DiskArbitration 2.1.1	/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x91407000 - 0x9142dfff com.apple.SystemConfiguration 1.8.6	/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x9143f000 - 0x91446fff libbsm.dylib 	/usr/lib/libbsm.dylib
0x9144a000 - 0x914c3fff com.apple.audio.CoreAudio 3.0.4	/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x91511000 - 0x91511fff com.apple.ApplicationServices 10.4 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x91513000 - 0x9153efff com.apple.AE 314 (313)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x91551000 - 0x91625fff com.apple.ColorSync 4.4.8	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x91660000 - 0x916ddfff com.apple.print.framework.PrintCore 4.6 (177.13)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9170a000 - 0x917b3fff com.apple.QD 3.10.21 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x917d9000 - 0x91824fff com.apple.HIServices 1.5.2 (???)	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x91843000 - 0x91859fff com.apple.LangAnalysis 1.6.3	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x91865000 - 0x9187ffff com.apple.FindByContent 1.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x91889000 - 0x918c6fff com.apple.LaunchServices 181	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x918da000 - 0x918e6fff com.apple.speech.synthesis.framework 3.5	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x918ed000 - 0x91928fff com.apple.ImageIO.framework 1.5.0	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x9193a000 - 0x919ecfff libcrypto.0.9.7.dylib 	/usr/lib/libcrypto.0.9.7.dylib
0x91a32000 - 0x91a48fff libcups.2.dylib 	/usr/lib/libcups.2.dylib
0x91a4d000 - 0x91a6bfff libJPEG.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91a70000 - 0x91acefff libJP2.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91ae0000 - 0x91ae4fff libGIF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91ae6000 - 0x91b63fff libRaw.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91b67000 - 0x91ba4fff libTIFF.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91baa000 - 0x91bc4fff libPng.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91bc9000 - 0x91bcbfff libRadiance.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91bcd000 - 0x91bcdfff com.apple.Accelerate 1.3.1 (Accelerate 1.3.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91bcf000 - 0x91c5dfff com.apple.vImage 2.5	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91c64000 - 0x91c64fff com.apple.Accelerate.vecLib 3.3.1 (vecLib 3.3.1)	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91c66000 - 0x91cbffff libvMisc.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91cc8000 - 0x91cecfff libvDSP.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91cf4000 - 0x920fdfff libBLAS.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x92137000 - 0x924ebfff libLAPACK.dylib 	/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x92518000 - 0x9259cfff com.apple.DesktopServices 1.3.4	/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x925d8000 - 0x92808fff com.apple.Foundation 6.4.7 (567.28)	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92914000 - 0x929f2fff libxml2.2.dylib 	/usr/lib/libxml2.2.dylib
0x92a0f000 - 0x92afcfff libiconv.2.dylib 	/usr/lib/libiconv.2.dylib
0x92b0c000 - 0x92b23fff libGL.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x92b2e000 - 0x92b86fff libGLU.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0x92b9a000 - 0x92b9afff com.apple.Carbon 10.4 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92b9c000 - 0x92bacfff com.apple.ImageCapture 3.0.4	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92bba000 - 0x92bc2fff com.apple.speech.recognition.framework 3.6	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92bc8000 - 0x92bcdfff com.apple.securityhi 2.0.1 (24742)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92bd3000 - 0x92c64fff com.apple.ink.framework 101.2.1 (71)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x92c78000 - 0x92c7bfff com.apple.help 1.0.3 (32.1)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x92c7e000 - 0x92c9bfff com.apple.openscripting 1.2.5 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x92cab000 - 0x92cb1fff com.apple.print.framework.Print 5.2 (192.4)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x92cb7000 - 0x92d1afff com.apple.htmlrendering 66.1 (1.1.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x92d3e000 - 0x92d7ffff com.apple.NavigationServices 3.4.4 (3.4.3)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x92da6000 - 0x92db3fff com.apple.audio.SoundManager 3.9.1	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x92dba000 - 0x92dbffff com.apple.CommonPanels 1.2.3 (73)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x92dc4000 - 0x930b6fff com.apple.HIToolbox 1.4.8 (???)	/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x931bb000 - 0x931c6fff com.apple.opengl 1.4.12	/System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x931cb000 - 0x931e6fff com.apple.DirectoryService.Framework 3.2	/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x93256000 - 0x93256fff com.apple.Cocoa 6.4 (???)	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x93258000 - 0x9390efff com.apple.AppKit 6.4.8 (824.42)	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x93c8f000 - 0x93d09fff com.apple.CoreData 90	/System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x93d42000 - 0x93e03fff com.apple.audio.toolbox.AudioToolbox 1.4.3	/System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x93e43000 - 0x93e43fff com.apple.audio.units.AudioUnit 1.4.2	/System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x93e45000 - 0x94017fff com.apple.QuartzCore 1.4.9	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x94068000 - 0x940a9fff libsqlite3.0.dylib 	/usr/lib/libsqlite3.0.dylib
0x940b1000 - 0x940ebfff libGLImage.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x94179000 - 0x941b7fff com.apple.vmutils 4.0.2 (93.1)	/System/Library/PrivateFrameworks/vmutils.framework/Versions/A/vmutils
0x941fb000 - 0x9420bfff com.apple.securityfoundation 2.2.1 (28150)	/System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x94218000 - 0x94255fff com.apple.securityinterface 2.2.1 (27695)	/System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x94271000 - 0x94280fff libCGATS.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib
0x94287000 - 0x94292fff libCSync.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x94297000 - 0x942bbfff libPDFRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libPDFRIP.A.dylib
0x942de000 - 0x942f8fff libRIP.A.dylib 	/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x94718000 - 0x94861fff com.apple.AddressBook.framework 4.0.4 (485.1)	/System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x948ed000 - 0x948fcfff com.apple.DSObjCWrappers.Framework 1.1	/System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x94903000 - 0x9492cfff com.apple.LDAPFramework 1.4.2 (69.1.1)	/System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x94932000 - 0x94941fff libsasl2.2.dylib 	/usr/lib/libsasl2.2.dylib
0x94945000 - 0x94969fff libssl.0.9.7.dylib 	/usr/lib/libssl.0.9.7.dylib
0x94975000 - 0x94992fff libresolv.9.dylib 	/usr/lib/libresolv.9.dylib
0x95742000 - 0x95765fff libxslt.1.dylib 	/usr/lib/libxslt.1.dylib
0x96f8f000 - 0x9705dfff libGLProgrammability.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x97078000 - 0x97079fff libGLSystem.dylib 	/System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLSystem.dylib
0x9707b000 - 0x97080fff com.apple.agl 2.5.9 (AGL-2.5.9)	/System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x9a4ca000 - 0x9a501fff com.apple.Syndication 1.0.6 (54)	/System/Library/PrivateFrameworks/Syndication.framework/Versions/A/Syndication
0x9a51d000 - 0x9a52ffff com.apple.SyndicationUI 1.0.6 (54)	/System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI

Model: MacBookPro1,2, BootROM MBP12.0061.B00, 2 processors, Intel Core Duo, 2.16 GHz, 2 GB
Graphics: ATI Radeon X1600, ATY,RadeonX1600, PCIe, 256 MB
Memory Module: BANK 0/DIMM0, 1 GB, DDR2 SDRAM, 667 MHz
Memory Module: BANK 1/DIMM1, 1 GB, DDR2 SDRAM, 667 MHz
AirPort: spairport_wireless_card_type_airport_extreme (0x168C, 0x86), 0.1.27
Bluetooth: Version 1.7.9f12, 2 service, 1 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en1
Serial ATA Device: ST9120821AS, 111.79 GB
Parallel ATA Device: MATSHITADVD-R   UJ-846
USB Device: USB2.0 Hub Controller, NEC Corporation, Up to 480 Mb/sec, 500 mA
USB Device: USB-PS/2 Optical Mouse, Logitech, Up to 1.5 Mb/sec, 500 mA
USB Device: Logitech USB Keyboard, Logitech, Up to 1.5 Mb/sec, 500 mA
USB Device: Built-in iSight, Micron, Up to 480 Mb/sec, 500 mA
USB Device: Apple Internal Keyboard / Trackpad, Apple Computer, Up to 12 Mb/sec, 500 mA
USB Device: Bluetooth HCI, Up to 12 Mb/sec, 500 mA
USB Device: IR Receiver, Apple Computer, Inc., Up to 12 Mb/sec, 500 mA

Bug 11108 addresses this (its original summary was "preserveAspectRatio crashes when empty").

[Eric Seidel (no email)]

This would be much easier to debug with the actual SVG.  Even if it's a complicated one.

[Eric Seidel (no email)]

I think the parsePreserveAspectRatio parser was re-written recently by rwlbuis.  Without a test case, we'll have to close this.

[David Kilzer (:ddkilzer)]

Reopening to mark duplicate of Bug 12365.

[David Kilzer (:ddkilzer)]

*** This bug has been marked as a duplicate of 12365 ***