RESOLVED DUPLICATE of bug 1976221121
CSSCursorImageValue uses free'd SVGCursorElement pointer 
https://bugs.webkit.org/show_bug.cgi?id=21121
Summary CSSCursorImageValue uses free'd SVGCursorElement pointer
Eric Seidel (no email)
Reported 2008-09-25 15:04:22 PDT
CSSCursorImageValue uses free'd SVGCursorElement pointer I don't know if this needs security treatment or not. I'm guessing not. We saw this crash when running the layout tests in chromium, and I was able to reproduce it with a little effort in Safari. Test attached. Process: Safari [20368] Path: /Applications/Safari.app/Contents/MacOS/Safari Identifier: com.apple.Safari Version: 4.0 (5528.1) Build Info: WebBrowser-55280100~3 Code Type: X86 (Native) Parent Process: perl [20360] Date/Time: 2008-09-25 15:00:13.608 -0700 OS Version: Mac OS X 10.5.5 (9F33) Report Version: 6 Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x00000000c69a7b97 Crashed Thread: 0 Thread 0 Crashed: 0 com.apple.WebCore 0x0329f622 WebCore::Node::document() const + 98 (Node.h:313) 1 com.apple.WebCore 0x03236be5 WebCore::CSSCursorImageValue::~CSSCursorImageValue() + 243 2 com.apple.WebCore 0x03231081 WTF::RefCounted<WebCore::StyleBase>::deref() + 53 (RefCounted.h:96) 3 com.apple.WebCore 0x03231112 WTF::RefPtr<WebCore::CSSValue>::~RefPtr() + 34 4 com.apple.WebCore 0x032541a3 WTF::VectorDestructor<true, WTF::RefPtr<WebCore::CSSValue> >::destruct(WTF::RefPtr<WebCore::CSSValue>*, WTF::RefPtr<WebCore::CSSValue>*) + 25 (Vector.h:79) 5 com.apple.WebCore 0x032541cc WTF::VectorTypeOperations<WTF::RefPtr<WebCore::CSSValue> >::destruct(WTF::RefPtr<WebCore::CSSValue>*, WTF::RefPtr<WebCore::CSSValue>*) + 24 (Vector.h:235) 6 com.apple.WebCore 0x0325424a WTF::Vector<WTF::RefPtr<WebCore::CSSValue>, 0ul>::shrink(unsigned long) + 124 (Vector.h:695) 7 com.apple.WebCore 0x0325427c WTF::Vector<WTF::RefPtr<WebCore::CSSValue>, 0ul>::clear() + 34 (Vector.h:496) 8 com.apple.WebCore 0x0325428f WTF::Vector<WTF::RefPtr<WebCore::CSSValue>, 0ul>::~Vector() + 17 9 com.apple.WebCore 0x032bb3d7 WebCore::CSSValueList::~CSSValueList() + 41 10 com.apple.WebCore 0x03231081 WTF::RefCounted<WebCore::StyleBase>::deref() + 53 (RefCounted.h:96) 11 com.apple.WebCore 0x03231112 WTF::RefPtr<WebCore::CSSValue>::~RefPtr() + 34 12 com.apple.WebCore 0x03211a8a WebCore::CSSProperty::~CSSProperty() + 20 13 com.apple.WebCore 0x03253c38 WebCore::DeprecatedValueListNode<WebCore::CSSProperty>::~DeprecatedValueListNode() + 20 14 com.apple.WebCore 0x032555d1 WebCore::DeprecatedValueList<WebCore::CSSProperty>::deleteNode(WebCore::DeprecatedValueListImplNode*) + 29 (DeprecatedValueList.h:136) 15 com.apple.WebCore 0x033c94a3 WebCore::DeprecatedValueListImpl::Private::deleteList(WebCore::DeprecatedValueListImplNode*) + 37 (DeprecatedValueListImpl.cpp:109) 16 com.apple.WebCore 0x033ca005 WebCore::DeprecatedValueListImpl::Private::~Private() + 27 17 com.apple.WebCore 0x033ca0c5 WTF::RefCounted<WebCore::DeprecatedValueListImpl::Private>::deref() + 39 (RefCounted.h:96) 18 com.apple.WebCore 0x033ca119 WTF::RefPtr<WebCore::DeprecatedValueListImpl::Private>::~RefPtr() + 31 19 com.apple.WebCore 0x033c973b WebCore::DeprecatedValueListImpl::~DeprecatedValueListImpl() + 17 20 com.apple.WebCore 0x0324f9b1 WebCore::DeprecatedValueList<WebCore::CSSProperty>::~DeprecatedValueList() + 17 21 com.apple.WebCore 0x0324f9df WebCore::CSSMutableStyleDeclaration::~CSSMutableStyleDeclaration() + 43 22 com.apple.WebCore 0x0324f851 WebCore::CSSMappedAttributeDeclaration::~CSSMappedAttributeDeclaration() + 111 23 com.apple.WebCore 0x03231081 WTF::RefCounted<WebCore::StyleBase>::deref() + 53 (RefCounted.h:96) 24 com.apple.WebCore 0x033e10ce WTF::RefPtr<WebCore::CSSMappedAttributeDeclaration>::~RefPtr() + 34 25 com.apple.WebCore 0x036a1b1b WebCore::MappedAttribute::~MappedAttribute() + 41 26 com.apple.WebCore 0x0321867b WTF::RefCounted<WebCore::Attribute>::deref() + 53 (RefCounted.h:96) 27 com.apple.WebCore 0x032186c4 WTF::RefPtr<WebCore::Attribute>::~RefPtr() + 34 28 com.apple.WebCore 0x0342724b WTF::VectorDestructor<true, WTF::RefPtr<WebCore::Attribute> >::destruct(WTF::RefPtr<WebCore::Attribute>*, WTF::RefPtr<WebCore::Attribute>*) + 25 (Vector.h:79) 29 com.apple.WebCore 0x03427274 WTF::VectorTypeOperations<WTF::RefPtr<WebCore::Attribute> >::destruct(WTF::RefPtr<WebCore::Attribute>*, WTF::RefPtr<WebCore::Attribute>*) + 24 (Vector.h:235) 30 com.apple.WebCore 0x034272f2 WTF::Vector<WTF::RefPtr<WebCore::Attribute>, 0ul>::shrink(unsigned long) + 124 (Vector.h:695) 31 com.apple.WebCore 0x03427324 WTF::Vector<WTF::RefPtr<WebCore::Attribute>, 0ul>::clear() + 34 (Vector.h:496) 32 com.apple.WebCore 0x036b0e83 WebCore::NamedAttrMap::clearAttributes() + 119 (NamedAttrMap.cpp:199) 33 com.apple.WebCore 0x036b1d37 WebCore::NamedMappedAttrMap::clearAttributes() + 41 (NamedMappedAttrMap.cpp:38) 34 com.apple.WebCore 0x036b06d2 WebCore::NamedAttrMap::detachFromElement() + 34 (NamedAttrMap.cpp:207) 35 com.apple.WebCore 0x034259de WebCore::Element::~Element() + 92 36 com.apple.WebCore 0x038920f3 WebCore::StyledElement::~StyledElement() + 81 37 com.apple.WebCore 0x037eb0fe WebCore::SVGElement::~SVGElement() + 84 38 com.apple.WebCore 0x03855c2b WebCore::SVGStyledElement::~SVGStyledElement() + 115 39 com.apple.WebCore 0x03857a91 WebCore::SVGStyledLocatableElement::~SVGStyledLocatableElement() + 97 40 com.apple.WebCore 0x0385842c WebCore::SVGStyledTransformableElement::~SVGStyledTransformableElement() + 184 41 com.apple.WebCore 0x0383a669 WebCore::SVGRectElement::~SVGRectElement() + 339 42 com.apple.WebCore 0x032edfb2 void WebCore::removeAllChildrenInContainer<WebCore::Node, WebCore::ContainerNode>(WebCore::ContainerNode*) + 240 (ContainerNodeAlgorithms.h:51) 43 com.apple.WebCore 0x032eb1fb WebCore::ContainerNode::removeAllChildren() + 17 (ContainerNode.cpp:63) 44 com.apple.WebCore 0x032ed78c WebCore::ContainerNode::~ContainerNode() + 56 45 com.apple.WebCore 0x03425b69 WebCore::Element::~Element() + 487 46 com.apple.WebCore 0x038920f3 WebCore::StyledElement::~StyledElement() + 81 47 com.apple.WebCore 0x037eb0fe WebCore::SVGElement::~SVGElement() + 84 48 com.apple.WebCore 0x03855c2b WebCore::SVGStyledElement::~SVGStyledElement() + 115 49 com.apple.WebCore 0x03857a91 WebCore::SVGStyledLocatableElement::~SVGStyledLocatableElement() + 97 50 com.apple.WebCore 0x03851717 WebCore::SVGSVGElement::~SVGSVGElement() + 455 51 com.apple.WebCore 0x03218827 WebCore::TreeShared<WebCore::Node>::removedLastRef() + 37 (TreeShared.h:99) 52 com.apple.WebCore 0x0385cad7 WebCore::TreeShared<WebCore::Node>::deref() + 219 (TreeShared.h:69) 53 com.apple.WebCore 0x032095a3 WTF::RefPtr<WebCore::Node>::~RefPtr() + 31 54 com.apple.WebCore 0x03608436 WebCore::JSNode::~JSNode() + 92 55 com.apple.WebCore 0x035763a4 WebCore::JSEventTargetNode::~JSEventTargetNode() + 40 56 com.apple.WebCore 0x035b7bb6 WebCore::JSElement::~JSElement() + 40 57 com.apple.WebCore 0x0361a70e WebCore::JSSVGElement::~JSSVGElement() + 40 58 com.apple.WebCore 0x0366fef6 WebCore::JSSVGSVGElement::~JSSVGSVGElement() + 38 59 com.apple.JavaScriptCore 0x004b2975 unsigned long JSC::Heap::sweep<(JSC::Heap::HeapType)0>() + 355 60 com.apple.JavaScriptCore 0x00459bef JSC::Heap::collect() + 471 (collector.cpp:977) 61 com.apple.WebCore 0x03497f8b WebCore::GCController::garbageCollectNow() + 41 (GCController.cpp:79) 62 com.apple.WebKit 0x0024124a -[WebView(WebPrivate) _close] + 1010 (WebView.mm:806) 63 com.apple.WebKit 0x00231e34 -[WebView close] + 36 (WebView.mm:2155) 64 com.apple.Safari 0x000fa6cf 0x1000 + 1021647 65 com.apple.Safari 0x000e7f28 0x1000 + 945960 66 com.apple.Safari 0x00038549 0x1000 + 226633 67 com.apple.Safari 0x000382d9 0x1000 + 226009 68 com.apple.AppKit 0x928d6b1d -[NSWindowController _windowDidClose] + 220 69 com.apple.Safari 0x00037ca4 0x1000 + 224420 70 com.apple.Safari 0x00037c02 0x1000 + 224258 71 com.apple.CoreFoundation 0x94142c85 -[NSArray makeObjectsPerformSelector:] + 565 72 com.apple.AppKit 0x9290801b -[NSApplication _deallocHardCore:] + 433 73 com.apple.AppKit 0x92906d39 -[NSApplication terminate:] + 742 74 com.apple.AppKit 0x92827b03 -[NSApplication sendAction:to:from:] + 112 75 com.apple.Safari 0x0002add8 0x1000 + 171480 76 com.apple.AppKit 0x928d6540 -[NSMenu performActionForItemAtIndex:] + 493 77 com.apple.AppKit 0x928d6245 -[NSCarbonMenuImpl performActionWithHighlightingForItemAtIndex:] + 220 78 com.apple.AppKit 0x928d5ecb -[NSMenu performKeyEquivalent:] + 866 79 com.apple.AppKit 0x928d4770 -[NSApplication _handleKeyEquivalent:] + 492 80 com.apple.AppKit 0x927f1733 -[NSApplication sendEvent:] + 3999 81 com.apple.Safari 0x00029020 0x1000 + 163872 82 com.apple.AppKit 0x9274ed0f -[NSApplication run] + 847 83 com.apple.AppKit 0x9271bf14 NSApplicationMain + 574 84 com.apple.Safari 0x000b2776 0x1000 + 726902 Thread 1: 0 libSystem.B.dylib 0x96db668e __semwait_signal + 10 1 libSystem.B.dylib 0x96de136d pthread_cond_wait$UNIX2003 + 73 2 com.apple.JavaScriptCore 0x00532f0f WTF::ThreadCondition::wait(WTF::Mutex&) + 39 (ThreadingPthreads.cpp:222) 3 com.apple.WebCore 0x0352dc35 WebCore::IconDatabase::syncThreadMainLoop() + 641 (IconDatabase.cpp:1334) 4 com.apple.WebCore 0x0352f044 WebCore::IconDatabase::iconDatabaseSyncThread() + 1198 (IconDatabase.cpp:1036) 5 com.apple.WebCore 0x0352f073 WebCore::IconDatabase::iconDatabaseSyncThreadStart(void*) + 23 (IconDatabase.cpp:940) 6 libSystem.B.dylib 0x96de06f5 _pthread_start + 321 7 libSystem.B.dylib 0x96de05b2 thread_start + 34 Thread 2: 0 libSystem.B.dylib 0x96daf4a6 mach_msg_trap + 10 1 libSystem.B.dylib 0x96db6c9c mach_msg + 72 2 com.apple.CoreFoundation 0x940d40ce CFRunLoopRunSpecific + 1790 3 com.apple.CoreFoundation 0x940d4cf8 CFRunLoopRunInMode + 88 4 com.apple.CFNetwork 0x9670eeca CFURLCacheWorkerThread(void*) + 396 5 libSystem.B.dylib 0x96de06f5 _pthread_start + 321 6 libSystem.B.dylib 0x96de05b2 thread_start + 34 Thread 3: 0 libSystem.B.dylib 0x96daf4a6 mach_msg_trap + 10 1 libSystem.B.dylib 0x96db6c9c mach_msg + 72 2 com.apple.CoreFoundation 0x940d40ce CFRunLoopRunSpecific + 1790 3 com.apple.CoreFoundation 0x940d4cf8 CFRunLoopRunInMode + 88 4 com.apple.Foundation 0x9010a100 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 320 5 com.apple.Foundation 0x900a6bad -[NSThread main] + 45 6 com.apple.Foundation 0x900a6754 __NSThread__main__ + 308 7 libSystem.B.dylib 0x96de06f5 _pthread_start + 321 8 libSystem.B.dylib 0x96de05b2 thread_start + 34 Thread 4: 0 libSystem.B.dylib 0x96daf506 semaphore_timedwait_signal_trap + 10 1 libSystem.B.dylib 0x96de184f _pthread_cond_wait + 1244 2 libSystem.B.dylib 0x96de30d3 pthread_cond_timedwait_relative_np + 47 3 com.apple.Foundation 0x900ecb1c -[NSCondition waitUntilDate:] + 236 4 com.apple.Foundation 0x900ec930 -[NSConditionLock lockWhenCondition:beforeDate:] + 144 5 com.apple.Foundation 0x900ec895 -[NSConditionLock lockWhenCondition:] + 69 6 com.apple.AppKit 0x927bc358 -[NSUIHeartBeat _heartBeatThread:] + 753 7 com.apple.Foundation 0x900a6bad -[NSThread main] + 45 8 com.apple.Foundation 0x900a6754 __NSThread__main__ + 308 9 libSystem.B.dylib 0x96de06f5 _pthread_start + 321 10 libSystem.B.dylib 0x96de05b2 thread_start + 34 Thread 5: 0 libSystem.B.dylib 0x96dff5e2 select$DARWIN_EXTSN + 10 1 libSystem.B.dylib 0x96de06f5 _pthread_start + 321 2 libSystem.B.dylib 0x96de05b2 thread_start + 34 Thread 0 crashed with X86 Thread State (32-bit): eax: 0xc69a7b97 ebx: 0x0329f5cc ecx: 0x032304a3 edx: 0x00000000 edi: 0x00000001 esi: 0x1a64d514 ebp: 0xbfffde18 esp: 0xbfffddf0 ss: 0x0000001f efl: 0x00010292 eip: 0x0329f622 cs: 0x00000017 ds: 0x0000001f es: 0x0000001f fs: 0x00000000 gs: 0x00000037 cr2: 0xc69a7b97 Binary Images: 0x1000 - 0x142fef com.apple.Safari 4.0 (5528.1) <88983e9de4325a60c903ef39a2293d27> /Applications/Safari.app/Contents/MacOS/Safari 0x18f000 - 0x2a2ff3 com.apple.WebKit 528+ (528.4+) <751e55c1b908fb475983f3227dda738c> /Users/eseidel/Projects/build/Debug/WebKit.framework/Versions/A/WebKit 0x42c000 - 0x43bff8 SyndicationUI ??? (???) <1fe4e2e3c35f575a6122b9192644dae4> /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI 0x44b000 - 0x5c3fe8 com.apple.JavaScriptCore 528+ (528.4+) <a669c77e7bed42b1fff24093051d1f07> /Users/eseidel/Projects/build/Debug/JavaScriptCore.framework/Versions/A/JavaScriptCore 0xa00000 - 0xb1eff7 com.apple.RawCamera.bundle 2.0.8 (2.0.8) <56067945130800a348eb076676d41e92> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera 0xcbd000 - 0xcc2ff3 libCGXCoreImage.A.dylib ??? (???) <31761f6461b8dd390dc4df480b1fb564> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib 0x3206000 - 0x4544fe2 com.apple.WebCore 528+ (528.4+) <01caa076e12344f6f850a25bc710dd68> /Users/eseidel/Projects/build/Debug/WebCore.framework/Versions/A/WebCore 0x1be00000 - 0x1be05fff com.apple.DictionaryServiceComponent 1.1 (1.1) <8edc1180f52db18e9ddfb4e95debe61b> /System/Library/Components/DictionaryService.component/Contents/MacOS/DictionaryService 0x1be31000 - 0x1be32ffc com.apple.JavaPluginCocoa 12.1.0 (12.1.0) <d21a12c5668d4d89bfe492a5223a75cc> /Library/Internet Plug-Ins/JavaPluginCocoa.bundle/Contents/MacOS/JavaPluginCocoa 0x1be81000 - 0x1bef2fff +com.DivXInc.DivXDecoder 6.4.0 (6.4.0) /Library/QuickTime/DivX Decoder.component/Contents/MacOS/DivX Decoder 0x1c0b4000 - 0x1c0b9ffd com.apple.JavaVM 12.1.0 (12.1.0) <25c546c36e5bed978579d281080ab4c8> /System/Library/Frameworks/JavaVM.framework/Versions/A/JavaVM 0x8fe00000 - 0x8fe2da53 dyld 96.2 (???) <7af47d3b00b2268947563c7fa8c59a07> /usr/lib/dyld 0x9009c000 - 0x90317fe7 com.apple.Foundation 6.5.6 (677.21) <5cfa0aa8b9b43193955d601ba6c2591a> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0x90318000 - 0x90326ffd libz.1.dylib ??? (???) <5ddd8539ae2ebfd8e7cc1c57525385c7> /usr/lib/libz.1.dylib 0x9039a000 - 0x906bcfe2 com.apple.QuickTime 7.5.5 (990.7) <87077cec43c7e9b02c8ee80e50b8b81f> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime 0x906bd000 - 0x906c4ffe libbsm.dylib ??? (???) <d25c63378a5029648ffd4b4669be31bf> /usr/lib/libbsm.dylib 0x906c5000 - 0x906c5ffe com.apple.quartzframework 1.5 (1.5) <4b8f505e32e4f2d67967a276401f9aaf> /System/Library/Frameworks/Quartz.framework/Versions/A/Quartz 0x906c6000 - 0x90722ff7 com.apple.htmlrendering 68 (1.1.3) <fe87a9dede38db00e6c8949942c6bd4f> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering 0x90723000 - 0x90741fff libresolv.9.dylib ??? (???) <a8018c42930596593ddf27f7c20fe7af> /usr/lib/libresolv.9.dylib 0x90773000 - 0x90806fff com.apple.ink.framework 101.3 (86) <bf3fa8927b4b8baae92381a976fd2079> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink 0x90807000 - 0x9080efe9 libgcc_s.1.dylib ??? (???) <f53c808e87d1184c0f9df63aef53ce0b> /usr/lib/libgcc_s.1.dylib 0x9080f000 - 0x90833fff libxslt.1.dylib ??? (???) <4933ddc7f6618743197aadc85b33b5ab> /usr/lib/libxslt.1.dylib 0x90834000 - 0x90c44fef libBLAS.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib 0x90c45000 - 0x90c45ffe com.apple.MonitorPanelFramework 1.2.0 (1.2.0) <a2b462be6c51187eddf7d097ef0e0a04> /System/Library/PrivateFrameworks/MonitorPanel.framework/Versions/A/MonitorPanel 0x90c5e000 - 0x90c6effc com.apple.LangAnalysis 1.6.4 (1.6.4) <8b7831b5f74a950a56cf2d22a2d436f6> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis 0x90c6f000 - 0x90d70fff com.apple.PubSub 1.0.3 (65.3) /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub 0x90d71000 - 0x90d78fff com.apple.agl 3.0.9 (AGL-3.0.9) <aeab67ef267f8295ae80fddc197b52a5> /System/Library/Frameworks/AGL.framework/Versions/A/AGL 0x90d79000 - 0x90e1bff3 com.apple.QuickTimeImporters.component 7.5.5 (990.7) /System/Library/QuickTime/QuickTimeImporters.component/Contents/MacOS/QuickTimeImporters 0x90efd000 - 0x90efeffc libffi.dylib ??? (???) <a3b573eb950ca583290f7b2b4c486d09> /usr/lib/libffi.dylib 0x90f6d000 - 0x90fa4fff com.apple.SystemConfiguration 1.9.2 (1.9.2) <8b26ebf26a009a098484f1ed01ec499c> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration 0x90fa5000 - 0x90fa5ffd com.apple.Accelerate 1.4.2 (Accelerate 1.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate 0x90fa6000 - 0x91039ff3 com.apple.ApplicationServices.ATS 3.4 (???) <a96cd91dabc68545183c11de8f92c7e4> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS 0x9103a000 - 0x916d6fff com.apple.CoreGraphics 1.351.33 (???) <481a77e81d9e53589a05e80cfa90bbb5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0x916d7000 - 0x916fffff libcups.2.dylib ??? (???) <bddaa132350e872b9d6d8b7e57f204d1> /usr/lib/libcups.2.dylib 0x91700000 - 0x918cefff com.apple.security 5.0.4 (34102) <f01d6cbd6a0f24f6c13952ed448e77d6> /System/Library/Frameworks/Security.framework/Versions/A/Security 0x918cf000 - 0x91ba9ff3 com.apple.CoreServices.CarbonCore 786.6 (786.6) <5682aae1e2cf5ae750d5a4dea98c084c> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore 0x91baa000 - 0x91bafffb com.apple.DisplayServicesFW 2.0 (2.0) <8953865f53e940007a4e4ac5390d3c95> /System/Library/PrivateFrameworks/DisplayServices.framework/Versions/A/DisplayServices 0x91bb0000 - 0x91beafe7 com.apple.coreui 1.2 (62) /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI 0x91c08000 - 0x91c1efff com.apple.DictionaryServices 1.0.0 (1.0.0) <ad0aa0252e3323d182e17f50defe56fc> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices 0x91c1f000 - 0x91d65ff7 com.apple.ImageIO.framework 2.0.4 (2.0.4) <6a6623d3d1a7292b5c3763dcd108b55f> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO 0x91d6c000 - 0x91ea4ff7 libicucore.A.dylib ??? (???) <3d8fdaf51c2664ab620f1688203caf26> /usr/lib/libicucore.A.dylib 0x91ea5000 - 0x91f70fff com.apple.ColorSync 4.5.0 (4.5.0) /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync 0x91f71000 - 0x9230efe7 com.apple.QuartzCore 1.5.5 (1.5.5) <82435993614a3fff1236be18f82188bf> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0x9230f000 - 0x92314fff com.apple.backup.framework 1.0 (1.0) /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup 0x92315000 - 0x92320fe7 libCSync.A.dylib ??? (???) <86d2f2e167ba6f74f45a186f5c7f8980> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib 0x92321000 - 0x9232bfeb com.apple.audio.SoundManager 3.9.2 (3.9.2) <0f2ba6e891d3761212cf5a5e6134d683> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound 0x9232c000 - 0x92357fe7 libauto.dylib ??? (???) <42d8422dc23a18071869fdf7b5d8fab5> /usr/lib/libauto.dylib 0x92358000 - 0x923b1ff7 libGLU.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib 0x923b2000 - 0x923d0ff7 com.apple.QuickLookFramework 1.3 (170.7) /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook 0x923d1000 - 0x923d1ffc com.apple.audio.units.AudioUnit 1.5 (1.5) /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit 0x923d2000 - 0x923d2ffd com.apple.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib 0x923d3000 - 0x9240cffe com.apple.securityfoundation 3.0 (32989) <e9171eda22c69c884a04a001aeb526e0> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation 0x9240d000 - 0x92714fff com.apple.HIToolbox 1.5.4 (???) <5e2af960b53059c648af4adb99471032> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0x92715000 - 0x92715ffd com.apple.Accelerate.vecLib 3.4.2 (vecLib 3.4.2) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib 0x92716000 - 0x92f13fef com.apple.AppKit 6.5.3 (949.34) <4c7af9b12c894d4a528fda29377f143b> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0x92f14000 - 0x92f52fff libGLImage.dylib ??? (???) <f0fe2252f6b1ca341bc7837fe2dcf11a> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib 0x92f53000 - 0x92fa3ff7 com.apple.HIServices 1.7.0 (???) <f7e78891a6d08265c83dca8e378be1ea> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices 0x9376d000 - 0x937d3ffb com.apple.ISSupport 1.7 (38) /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport 0x937d4000 - 0x937f2ff3 com.apple.DirectoryService.Framework 3.5.5 (3.5.5) <4b81063df189bc462f012a169474fcbc> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService 0x937f3000 - 0x937fbfff com.apple.DiskArbitration 2.2.1 (2.2.1) <75b0c8d8940a8a27816961dddcac8e0f> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration 0x937fc000 - 0x9380cfff com.apple.speech.synthesis.framework 3.7.1 (3.7.1) <06d8fc0307314f8ffc16f206ad3dbf44> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis 0x9380d000 - 0x93843fef libtidy.A.dylib ??? (???) <f1d1742e06280444baa5637b209fd0af> /usr/lib/libtidy.A.dylib 0x93844000 - 0x93846fff com.apple.CrashReporterSupport 10.5.5 (159) <9a0fe0419410218e5b1a25c08d4531cd> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport 0x93847000 - 0x938c3feb com.apple.audio.CoreAudio 3.1.0 (3.1) <70bb7c657061631491029a61babe0b26> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio 0x9398e000 - 0x93b49ff3 com.apple.QuartzComposer 2.1 (106.5) <1a52b406a3f3d04387c822da4a93c245> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzComposer.framework/Versions/A/QuartzComposer 0x93c13000 - 0x93c6dff7 com.apple.CoreText 2.0.3 (???) <1f1a97273753e6cfea86c810d6277680> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText 0x93c6e000 - 0x93cf8fe3 com.apple.DesktopServices 1.4.7 (1.4.7) <d16642ba22c32f67be793ebfbe67ca3a> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv 0x93cf9000 - 0x93cfbff5 libRadiance.dylib ??? (???) <8a844202fcd65662bb9ab25f08c45a62> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib 0x93d08000 - 0x93d37fe3 com.apple.AE 402.2 (402.2) <e01596187e91af5d48653920017b8c8e> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE 0x93d38000 - 0x93d79fe7 libRIP.A.dylib ??? (???) <1f09316e876fe813271bdfb9eb5b229e> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib 0x93d7a000 - 0x93e41ff2 com.apple.vImage 3.0 (3.0) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage 0x93e42000 - 0x93e81fef libTIFF.dylib ??? (???) <3589442575ac77746ae99ecf724f5f87> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib 0x93e82000 - 0x93e9dffb libPng.dylib ??? (???) <4780e979d35aa5ec2cea22678836cea5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib 0x93e9e000 - 0x93ecfffb com.apple.quartzfilters 1.5.0 (1.5.0) <22581f8fe9dd2cb261f97a897407ec3e> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzFilters.framework/Versions/A/QuartzFilters 0x93ed0000 - 0x93f19fef com.apple.Metadata 10.5.2 (398.22) <a6b676925dd832780daf991e79adfebd> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata 0x93f1a000 - 0x93f94ff8 com.apple.print.framework.PrintCore 5.5.3 (245.3) <222dade7b33b99708b8c09d1303f93fc> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore 0x93f95000 - 0x93fa4fff libsasl2.2.dylib ??? (???) <b9e1ca0b6612e280b6cbea6df0eec5f6> /usr/lib/libsasl2.2.dylib 0x93fa5000 - 0x93fa9fff com.apple.OpenDirectory 10.5 (10.5) <e7e4507f5ecd8c8cdcdb2fc0675da0b4> /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/OpenDirectory 0x93faa000 - 0x9405cffb libcrypto.0.9.7.dylib ??? (???) <69bc2457aa23f12fa7d052601d48fa29> /usr/lib/libcrypto.0.9.7.dylib 0x9405d000 - 0x94061fff libGIF.dylib ??? (???) <572a32e46e33be1ec041c5ef5b0341ae> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib 0x94062000 - 0x94194fff com.apple.CoreFoundation 6.5.4 (476.15) <e2869ad6dc1dd289f21b305b0bea9158> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0x94195000 - 0x94195ffa com.apple.CoreServices 32 (32) <2fcc8f3bd5bbfc000b476cad8e6a3dd2> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices 0x94196000 - 0x941c8fff com.apple.LDAPFramework 1.4.5 (110) <cc04500cf7b6edccc75bb3fe2973f72c> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP 0x941c9000 - 0x941c9ff8 com.apple.Cocoa 6.5 (???) <e064f94d969ce25cb7de3cfb980c3249> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa 0x941ca000 - 0x94227ffb libstdc++.6.dylib ??? (???) <04b812dcec670daa8b7d2852ab14be60> /usr/lib/libstdc++.6.dylib 0x94228000 - 0x94239ffe com.apple.CFOpenDirectory 10.5 (10.5) <6a7f55108d77db7384d0e2219d07e9f8> /System/Library/PrivateFrameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory 0x9423f000 - 0x94269fff com.apple.CoreMediaPrivate 11.0 (11.0) <e37d6ebd5934b482c864ba6eaf122488> /System/Library/PrivateFrameworks/CoreMediaPrivate.framework/Versions/A/CoreMediaPrivate 0x9426a000 - 0x942aefeb com.apple.DirectoryService.PasswordServerFramework 3.0.3 (3.0.3) <7e80635e8f1380dbf4af27e17e709fcb> /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer 0x942af000 - 0x94336ff7 libsqlite3.0.dylib ??? (???) <6978bbcca4277d6ae9f042beff643f7d> /usr/lib/libsqlite3.0.dylib 0x94337000 - 0x9441cff3 com.apple.CoreData 100.1 (186) <8e28162ef2288692615b52acc01f8b54> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData 0x94577000 - 0x945c6fff com.apple.QuickLookUIFramework 1.3 (170.7) /System/Library/PrivateFrameworks/QuickLookUI.framework/Versions/A/QuickLookUI 0x945c7000 - 0x945c7ff8 com.apple.ApplicationServices 34 (34) <8f910fa65f01d401ad8d04cc933cf887> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices 0x945c8000 - 0x94612fe1 com.apple.securityinterface 3.0 (32532) <f521dae416ce7a3bdd594b0d4e2fb517> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface 0x946f8000 - 0x946ffff7 libCGATS.A.dylib ??? (???) <973c01cc14f3d673270e269ccfaec660> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGATS.A.dylib 0x94700000 - 0x94742fef com.apple.NavigationServices 3.5.2 (163) <91844980804067b07a0b6124310d3f31> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices 0x94743000 - 0x94767feb libssl.0.9.7.dylib ??? (???) <c7359b7ab32b5f8574520746e10a41cc> /usr/lib/libssl.0.9.7.dylib 0x9477c000 - 0x94c4df3e libGLProgrammability.dylib ??? (???) <fe1a33d4919c121aab831ad516da6a89> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib 0x94c4e000 - 0x94c5dffe com.apple.DSObjCWrappers.Framework 1.2.1 (1.2.1) <eac1c7b7c07ed3148c85934b6f656308> /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers 0x94c5e000 - 0x94d05feb com.apple.QD 3.11.54 (???) <b743398c24c38e581a86e91744a2ba6e> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD 0x94d06000 - 0x94e85fff com.apple.AddressBook.framework 4.1.1 (696) <bb7f2d5f0b2d180288cd959cd9ba6c1a> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook 0x94e86000 - 0x94ec5fff com.apple.CoreMediaIOServicesPrivate 12.0 (12.0) /System/Library/PrivateFrameworks/CoreMediaIOServicesPrivate.framework/Versions/A/CoreMediaIOServicesPrivate 0x94ec6000 - 0x94ecffff com.apple.speech.recognition.framework 3.7.24 (3.7.24) <d3180f9edbd9a5e6f283d6156aa3c602> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition 0x94ed3000 - 0x94f81ffb com.apple.QTKit 7.5.5 (990.7) /System/Library/Frameworks/QTKit.framework/Versions/A/QTKit 0x94f82000 - 0x950bafe7 com.apple.imageKit 1.0.2 (1.0) <5eee702fe546c8c881acfc65c41ad178> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/ImageKit.framework/Versions/A/ImageKit 0x950bb000 - 0x950c1fff com.apple.print.framework.Print 218.0.2 (220.1) <8bf7ef71216376d12fcd5ec17e43742c> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print 0x950c2000 - 0x950c2fff com.apple.Carbon 136 (136) <98a5e3bc0c4fa44bbb09713bb88707fe> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon 0x950c3000 - 0x950c5fff com.apple.securityhi 3.0 (30817) <2b2854123fed609d1820d2779e2e0963> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI 0x950c6000 - 0x95180fe3 com.apple.CoreServices.OSServices 226.5 (226.5) <2a135d4fb16f4954290f7b72b4111aa3> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices 0x95181000 - 0x95195ff3 com.apple.ImageCapture 4.0 (5.0.0) /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture 0x95409000 - 0x95436feb libvDSP.dylib ??? (???) <b232c018ddd040ec4e2c2af632dd497f> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib 0x95437000 - 0x95443ff9 com.apple.helpdata 1.0.1 (14.2) /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData 0x95444000 - 0x9545cfff com.apple.openscripting 1.2.8 (???) <572c7452d7e740e8948a5ad07a99602b> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting 0x9545d000 - 0x954dafef libvMisc.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib 0x954db000 - 0x96490ffe com.apple.QuickTimeComponents.component 7.5.5 (990.7) /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents 0x965f3000 - 0x966d3fff libobjc.A.dylib ??? (???) <7b92613fdf804fd9a0a3733a0674c30b> /usr/lib/libobjc.A.dylib 0x966e2000 - 0x966e2ffb com.apple.installserver.framework 1.0 (8) /System/Library/PrivateFrameworks/InstallServer.framework/Versions/A/InstallServer 0x966e3000 - 0x96702ffa libJPEG.dylib ??? (???) <e7eb56555109e23144924cd64aa8daec> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib 0x96703000 - 0x96787fe3 com.apple.CFNetwork 339.5 (339.5) <c6565c13b0356e1d4bb99a68398d558b> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork 0x96788000 - 0x96838fff edu.mit.Kerberos 6.0.12 (6.0.12) <da7253e3fb7e47e46cb46d47ed320ffc> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos 0x96839000 - 0x96861ff7 com.apple.shortcut 1 (1.0) <057783867138902b52bc0941fedb74d1> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut 0x96862000 - 0x96c20fea libLAPACK.dylib ??? (???) /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib 0x96c21000 - 0x96d45fe3 com.apple.audio.toolbox.AudioToolbox 1.5.1 (1.5.1) /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox 0x96d46000 - 0x96d96feb com.apple.framework.familycontrols 1.0.2 (1.0.2) <90f740755beef77835545ede9e5e975d> /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls 0x96d97000 - 0x96dadfe7 com.apple.CoreVideo 1.5.1 (1.5.1) <001910004257f1386724398f584b30b5> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo 0x96dae000 - 0x96f0eff3 libSystem.B.dylib ??? (???) <a12f397abf2285077b89bd726bff5b18> /usr/lib/libSystem.B.dylib 0x96f0f000 - 0x96f13fff libmathCommon.A.dylib ??? (???) /usr/lib/system/libmathCommon.A.dylib 0x96f14000 - 0x96ff5ff7 libxml2.2.dylib ??? (???) <de34eb9b43eb7d4a4e0b7f25529efa12> /usr/lib/libxml2.2.dylib 0x96ff6000 - 0x97068fff com.apple.PDFKit 2.1.1 (2.1.1) /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/PDFKit.framework/Versions/A/PDFKit 0x97069000 - 0x97075ffe libGL.dylib ??? (???) /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib 0x97076000 - 0x9707bfff com.apple.CommonPanels 1.2.4 (85) <ea0665f57cd267609466ed8b2b20e893> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels 0x9707c000 - 0x970fbff5 com.apple.SearchKit 1.2.1 (1.2.1) <3140a605db2abf56b237fa156a08b28b> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit 0x970fc000 - 0x97188ff7 com.apple.LaunchServices 290 (290) <61af37aac50984d220dd176f777e3b72> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices 0x97189000 - 0x97196fe7 com.apple.opengl 1.5.7 (1.5.7) <db835aeb1ffca9f5b5647dd0829a5b2c> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL 0x97197000 - 0x9719afff com.apple.help 1.1 (36) <b507b08e484cb89033e9cf23062d77de> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help 0x9719b000 - 0x97226fff com.apple.framework.IOKit 1.5.1 (???) <324526f69e1443f2f9fb722cc88a23ec> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit 0xfffe8000 - 0xfffebfff libobjc.A.dylib ??? (???) /usr/lib/libobjc.A.dylib 0xffff0000 - 0xffff1780 libSystem.B.dylib ??? (???) /usr/lib/libSystem.B.dylib
Attachments
crashing test case (765 bytes, image/svg+xml)
2008-09-25 15:05 PDT, Eric Seidel (no email) 		no flags
Details
View All Add attachment proposed patch, testcase, etc.
Eric Seidel (no email)
Comment 1 2008-09-25 15:05:36 PDT
Created attachment 23823 [details] crashing test case I'm not sure this reduction is 100% right. I haven't seen it crash every time, but I've definitely seen it crash. The layout tests under svg/dynamic-tests/SVGCursor* crash in chromium every time.
Eric Seidel (no email)
Comment 2 2008-09-25 15:10:35 PDT
Niko wrote this code. I think we fix this by having an SVGCursorElement force a full style-recalc every time it dies, or removing the week pointers. Because the style rule containing the CSSCursorImageValue could be document-wide, so we can't just go to the "clients" and have them re-calc, we need to make sure the CSSCursorImageValue itself is recalc'd or?
Alexey Proskuryakov
Comment 3 2008-09-26 00:22:53 PDT
Looks like a duplicate of bug 19762 to me, although the stack traces are a bit different.
Eric Seidel (no email)
Comment 4 2008-09-26 01:06:47 PDT
*** This bug has been marked as a duplicate of 19762 ***
Note You need to log in before you can comment on or make changes to this bug.