Bug 30074 – Assertion failed, causes Safari crash from function crossing_count

• Status: UNCONFIRMED
• Component: Layout and Rendering

[Jeffrey Warren]

I'm working with a lot of canvas rendering, and I occasionally crash the browser entirely - in the crash report, this is always present:

10/2/09 7:41:38 PM 0x0-0x424424.com.apple.Safari59690 Assertion failed: ((min.y == p0.y && max.y == porder.y) || (min.y == porder.y && max.y == p0.y)), function crossing_count, file Paths/path-crossing.c, line 176.

I'm new to the WebKit source and was unable to find path-crossing.c; perhaps this is actually part of apple's CoreGraphics. A Google search reveals other people with bugs related to this function:

http://jeremy.argoud.free.fr/lm/drawberry.txt
http://www.belightsoft.com/forum/viewtopic.php?id=4665

Both are in OSX 10.5.x

To reproduce, open http://cartagen.org in a very large window (2500px width) and pan around with the mouse - the bug does occur in smaller windows, but a large window will increase the chance of duplicating it.

I'm not sure what action on my part is causing this; because it crashes Safari, it's hard to trace the call; i'm working on a pretty complex codebase, and tracing *every* call is not feasible for performance reasons; even if I could, I doubt I'd get to read the output before the crash occurred.

Of the googled errors I found, jeremy.argoud.free.fr's report included:

3   com.apple.CoreGraphics            0x9332a02c crossing_count + 824
4   com.apple.CoreGraphics            0x9332a5ac count_crossings_for_element + 472
5   com.apple.CoreGraphics            0x93329968 CGPathApplyByClosingSubpaths + 508
6   com.apple.CoreGraphics            0x93329a1c CGPathContainsPoint + 80

This makes me think it's related to the new isPointInPath() function of Canvas, which ships with Safari 4. It's a very new feature:

https://bugs.webkit.org/show_bug.cgi?id=16629
Tests: http://philip.html5.org/tests/canvas/suite/tests/index.2d.path.isPointInPath.html

but I don't believe we're using it, so that doesn't make sense. It's possible it's called by default in some other function we're using.

The closest I could get is in CGPath.h:199

/* Return true if `point' is contained in `path'; false otherwise. A point
   is contained in a path if it is inside the painted region when the path
   is filled; if `eoFill' is true, then the even-odd fill rule is used to
   evaluate the painted region of the path, otherwise, the winding-number
   fill rule is used. If `m' is non-NULL, then the point is transformed by
   `m' before determining whether the path contains it. */

CG_EXTERN bool CGPathContainsPoint(CGPathRef path,
    const CGAffineTransform *m, CGPoint point, bool eoFill)
    CG_AVAILABLE_STARTING(__MAC_10_4, __IPHONE_2_0);


in the OSX 10.6 Frameworks, CoreGraphics.framework. This may be a red herring.

I'll update with more details and hopefully a reduced test case if possible.

If this is a problem with CoreGraphics, I'm guessing WebKit won't take the bug... but since CoreGraphics is not open source, and WebKit is, can't we work around it?

[Mark Rowe (bdash)]

Please attach a crash log: <http://webkit.org/quality/crashlogs.html>.

[Jeffrey Warren]

Sorry, meant to:

Process:         Safari [57586]
Path:            /Applications/Safari.app/Contents/MacOS/Safari
Identifier:      com.apple.Safari
Version:         4.0.3 (6531.9)
Build Info:      WebBrowser-65310900~1
Code Type:       X86 (Native)
Parent Process:  launchd [174]

Date/Time:       2009-10-05 11:49:17.259 -0400
OS Version:      Mac OS X 10.6.1 (10B504)
Report Version:  6

Exception Type:  EXC_CRASH (SIGABRT)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Crashed Thread:  0  Dispatch queue: com.apple.main-thread

Application Specific Information:
Assertion failed: ((min.y == p[0].y && max.y == p[order].y) || (min.y == p[order].y && max.y == p[0].y)), function crossing_count, file Paths/path-crossing.c, line 176.


Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libSystem.B.dylib             	0x90eb4912 __kill + 10
1   libSystem.B.dylib             	0x90eb4904 kill$UNIX2003 + 32
2   libSystem.B.dylib             	0x90f47b99 raise + 26
3   libSystem.B.dylib             	0x90f5dc50 abort + 93
4   libSystem.B.dylib             	0x90f4a7f8 __pthread_markcancel + 0
5   com.apple.CoreGraphics        	0x910e167b crossing_count + 702
6   com.apple.CoreGraphics        	0x910e132e path_evaluate_level + 267
7   com.apple.CoreGraphics        	0x910e11db path_get_expected_outside_orientation + 18
8   com.apple.CoreGraphics        	0x910e1194 path_fix_orientation + 19
9   com.apple.CoreGraphics        	0x910e0e0a CGPathCreateByNormalizingGlyphPath + 39
10  com.apple.CoreGraphics        	0x910e0c23 CGFontCreateGlyphPath + 66
11  libRIP.A.dylib                	0x97d11186 ripc_DrawGlyphs + 2052
12  com.apple.CoreGraphics        	0x91096be2 draw_glyphs + 1508
13  com.apple.CoreGraphics        	0x91096537 CGContextShowGlyphsWithAdvances + 527
14  com.apple.WebCore             	0x9255025d WebCore::Font::drawGlyphs(WebCore::GraphicsContext*, WebCore::SimpleFontData const*, WebCore::GlyphBuffer const&, int, int, WebCore::FloatPoint const&) const + 573
15  com.apple.WebCore             	0x92550004 WebCore::Font::drawGlyphBuffer(WebCore::GraphicsContext*, WebCore::GlyphBuffer const&, WebCore::TextRun const&, WebCore::FloatPoint const&) const + 212
16  com.apple.WebCore             	0x9254fbc7 WebCore::Font::drawSimpleText(WebCore::GraphicsContext*, WebCore::TextRun const&, WebCore::FloatPoint const&, int, int) const + 359
17  com.apple.WebCore             	0x9271ea27 WebCore::GraphicsContext::drawBidiText(WebCore::Font const&, WebCore::TextRun const&, WebCore::FloatPoint const&) + 759
18  com.apple.WebCore             	0x928c0779 WebCore::CanvasRenderingContext2D::drawTextInternal(WebCore::String const&, float, float, bool, float, bool) + 2041
19  com.apple.WebCore             	0x928c0cdf WebCore::CanvasRenderingContext2D::fillText(WebCore::String const&, float, float) + 63
20  com.apple.WebCore             	0x928c096b WebCore::JSCanvasRenderingContext2D::fillText(JSC::ExecState*, JSC::ArgList const&) + 251
21  com.apple.WebCore             	0x928c0863 WebCore::jsCanvasRenderingContext2DPrototypeFunctionFillText(JSC::ExecState*, JSC::JSObject*, JSC::JSValue, JSC::ArgList const&) + 115
22  ???                           	0x175e520f 0 + 392057359
23  com.apple.JavaScriptCore      	0x95e7d770 JSC::Interpreter::execute(JSC::CallFrameClosure&, JSC::JSValue*) + 192
24  ???                           	0x19fbe3d0 0 + 435938256
25  ???                           	0x0000000a 0 + 10

Thread 1:  Dispatch queue: com.apple.libdispatch-manager
0   libSystem.B.dylib             	0x90e7a03a kevent + 10
1   libSystem.B.dylib             	0x90e7a768 _dispatch_mgr_invoke + 215
2   libSystem.B.dylib             	0x90e79bf9 _dispatch_queue_invoke + 183
3   libSystem.B.dylib             	0x90e7998a _dispatch_worker_thread2 + 234
4   libSystem.B.dylib             	0x90e79401 _pthread_wqthread + 390
5   libSystem.B.dylib             	0x90e79246 start_wqthread + 30

Thread 2:  WebCore: IconDatabase
0   libSystem.B.dylib             	0x90e81782 __semwait_signal + 10
1   libSystem.B.dylib             	0x90e8143e _pthread_cond_wait + 1191
2   libSystem.B.dylib             	0x90e830d8 pthread_cond_wait$UNIX2003 + 73
3   com.apple.WebCore             	0x924d3bea WebCore::IconDatabase::syncThreadMainLoop() + 266
4   com.apple.WebCore             	0x924cfa94 WebCore::IconDatabase::iconDatabaseSyncThread() + 180
5   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
6   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 3:  Safari: SafeBrowsingManager
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x9721eb61 CFRunLoopRunInMode + 97
5   com.apple.Safari              	0x0002575d 0x1000 + 149341
6   com.apple.Safari              	0x00025410 0x1000 + 148496
7   com.apple.Safari              	0x000253a9 0x1000 + 148393
8   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
9   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 4:  Safari: SnapshotStore
0   libSystem.B.dylib             	0x90e81782 __semwait_signal + 10
1   libSystem.B.dylib             	0x90e8143e _pthread_cond_wait + 1191
2   libSystem.B.dylib             	0x90e830d8 pthread_cond_wait$UNIX2003 + 73
3   com.apple.JavaScriptCore      	0x95dd70a1 WTF::ThreadCondition::timedWait(WTF::Mutex&, double) + 81
4   com.apple.Safari              	0x00042071 0x1000 + 266353
5   com.apple.Safari              	0x00041fc1 0x1000 + 266177
6   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
7   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 5:
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x9721eb61 CFRunLoopRunInMode + 97
5   com.apple.Foundation          	0x91898498 +[NSURLConnection(NSURLConnectionReallyInternal) _resourceLoadLoop:] + 329
6   com.apple.Foundation          	0x9185f964 -[NSThread main] + 45
7   com.apple.Foundation          	0x9185f914 __NSThread__main__ + 1499
8   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
9   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 6:
0   libSystem.B.dylib             	0x90e72756 select$DARWIN_EXTSN + 10
1   com.apple.CoreFoundation      	0x9725f04d __CFSocketManager + 1085
2   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
3   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 7:
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x9721eb61 CFRunLoopRunInMode + 97
5   com.google.Gears              	0x12ba83a5 PoolThreadsManager::JavaScriptThreadEntry(void*) + 501
6   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
7   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 8:
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x9721eb61 CFRunLoopRunInMode + 97
5   com.google.Gears              	0x12ba83a5 PoolThreadsManager::JavaScriptThreadEntry(void*) + 501
6   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
7   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 9:  WebCore: LocalStorage
0   libSystem.B.dylib             	0x90e81782 __semwait_signal + 10
1   libSystem.B.dylib             	0x90e8143e _pthread_cond_wait + 1191
2   libSystem.B.dylib             	0x90e830d8 pthread_cond_wait$UNIX2003 + 73
3   com.apple.JavaScriptCore      	0x95dd70a1 WTF::ThreadCondition::timedWait(WTF::Mutex&, double) + 81
4   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
5   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 10:
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x972247a4 CFRunLoopRun + 84
5   Move-Media-Player             	0x30b02a10 NP_Initialize + 582764
6   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
7   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 11:
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x972247a4 CFRunLoopRun + 84
5   ...orks.movemediaplayer.plugin	0x30f0b095 NP_Initialize + 679715
6   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
7   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 12:
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x9721eb61 CFRunLoopRunInMode + 97
5   com.google.Gears              	0x12ba83a5 PoolThreadsManager::JavaScriptThreadEntry(void*) + 501
6   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
7   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 13:
0   libSystem.B.dylib             	0x90e537da mach_msg_trap + 10
1   libSystem.B.dylib             	0x90e53f47 mach_msg + 68
2   com.apple.CoreFoundation      	0x9721fdbf __CFRunLoopRun + 2447
3   com.apple.CoreFoundation      	0x9721ed34 CFRunLoopRunSpecific + 452
4   com.apple.CoreFoundation      	0x9721eb61 CFRunLoopRunInMode + 97
5   com.google.Gears              	0x12ba83a5 PoolThreadsManager::JavaScriptThreadEntry(void*) + 501
6   libSystem.B.dylib             	0x90e80f39 _pthread_start + 345
7   libSystem.B.dylib             	0x90e80dbe thread_start + 34

Thread 14:
0   libSystem.B.dylib             	0x90e79092 __workq_kernreturn + 10
1   libSystem.B.dylib             	0x90e79628 _pthread_wqthread + 941
2   libSystem.B.dylib             	0x90e79246 start_wqthread + 30

Thread 15:
0   libSystem.B.dylib             	0x90e79092 __workq_kernreturn + 10
1   libSystem.B.dylib             	0x90e79628 _pthread_wqthread + 941
2   libSystem.B.dylib             	0x90e79246 start_wqthread + 30

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x00000000  ebx: 0x90f5dbff  ecx: 0xbfff638c  edx: 0x90eb4912
  edi: 0x000000b0  esi: 0x91822ba8  ebp: 0xbfff63a8  esp: 0xbfff638c
   ss: 0x0000001f  efl: 0x00000286  eip: 0x90eb4912   cs: 0x00000007
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0xffe17498

Binary Images:
    0x1000 -   0x1b4fe7  com.apple.Safari 4.0.3 (6531.9) <421687DE-D2BB-1195-01A6-964F9236AF35> /Applications/Safari.app/Contents/MacOS/Safari
  0x2b5000 -   0x2b6ff8 +com.google.GearsEnabler ??? (1.0) <FB867EC6-4394-4F9D-1F81-B11EC58EF9C6> /Library/InputManagers/GearsEnabler/GearsEnabler.bundle/Contents/MacOS/GearsEnabler
  0x2df000 -   0x2dfff8 +com.google.Gears 1.0 (0.5.33.0) <D080D05A-B4CF-5337-92FF-9BCBC38BB83B> /Library/Internet Plug-Ins/Gears.plugin/Contents/MacOS/libgears.dylib
 0x2659000 -  0x270efe7  libcrypto.0.9.7.dylib ??? (???) <4917E4F2-817F-5AC4-3FBE-54BC96360448> /usr/lib/libcrypto.0.9.7.dylib
 0x28ba000 -  0x28bbfff +com.vmware.FusionVMDKPlugIn ??? (0.0.1d2) /Library/Contextual Menu Items/FusionVMDKPlugIn.plugin/Contents/MacOS/FusionVMDKPlugIn
 0x593a000 -  0x593fff7  libgermantok.dylib ??? (???) <01D7A60F-ABD5-D6CE-6757-7BCF9EBF736B> /usr/lib/libgermantok.dylib
0x12b00000 - 0x12e17fef +com.google.Gears 1.0 (0.5.33.0) <37768D61-1192-57BE-038A-90931C2F6082> /Library/Internet Plug-Ins/Gears.plugin/Contents/Resources/Gears.bundle/Contents/MacOS/libgears.dylib
0x1763e000 - 0x1763eff7  com.apple.JavaPluginCocoa 13.0.0 (13.0.0) <933EEE98-9DC9-7AB5-3EAE-C5704F32A379> /System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/JavaPluginCocoa.bundle/Contents/MacOS/JavaPluginCocoa
0x17680000 - 0x17687ff7  com.apple.JavaVM 13.0.0 (13.0.0) <73B4CB4C-7C91-D148-E6DD-CFD578055BF7> /System/Library/Frameworks/JavaVM.framework/Versions/A/JavaVM
0x17792000 - 0x17793ff7  ATSHI.dylib ??? (???) <251A0D44-8909-BC8C-49DF-477BA8304FDC> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/ATSHI.dylib
0x177c1000 - 0x177d2fe7 +com.github.rentzsch.clicktoflash 1.5.3 (1.5.3) <4799624D-2ECD-8A6F-7D7D-83616B86AACB> /Users/warren/Library/Internet Plug-Ins/ClickToFlash.webplugin/Contents/MacOS/ClickToFlash
0x177e6000 - 0x177f9ff7 +org.andymatuschak.Sparkle 1.5 Beta (bzr) (1.5) <F2A310FB-E0FD-B767-18E7-A29791CA4AAC> /Users/warren/Library/Internet Plug-Ins/ClickToFlash.webplugin/Contents/Frameworks/Sparkle.framework/Sparkle
0x17806000 - 0x17809ff3  libFontRegistryUI.dylib ??? (???) <6211FDD4-5C93-542F-7B8E-AA37C679EF48> /System/Library/Frameworks/ApplicationServices.framework/Frameworks/ATS.framework/Resources/libFontRegistryUI.dylib
0x1782f000 - 0x179a0ff7  GLEngine ??? (???) <132E6F18-BD3F-53AC-8448-2B68A83B0393> /System/Library/Frameworks/OpenGL.framework/Resources/GLEngine.bundle/GLEngine
0x179d1000 - 0x17a11ff7  com.apple.driver.AppleIntelGMA950GLDriver 1.6.2 (6.0.2) <B70730D5-6E21-3109-F79F-4D1AC576674D> /System/Library/Extensions/AppleIntelGMA950GLDriver.bundle/Contents/MacOS/AppleIntelGMA950GLDriver
0x17a1a000 - 0x17a36ff7  GLRendererFloat ??? (???) <FE1D4967-5C89-4C0F-FA40-5AF1EB1A742D> /System/Library/Frameworks/OpenGL.framework/Resources/GLRendererFloat.bundle/GLRendererFloat
0x18a0d000 - 0x18a36fef  com.apple.audio.CoreAudioKit 1.6 (1.6) <E9D5679D-0F3A-EE19-76F9-559F42E5DF8C> /System/Library/Frameworks/CoreAudioKit.framework/Versions/A/CoreAudioKit
0x18dc4000 - 0x18dc8ff3  com.apple.audio.AudioIPCPlugIn 1.1.0 (1.1.0) <39CD9296-183C-5603-94A4-0A0EC327BA69> /System/Library/Extensions/AudioIPCDriver.kext/Contents/Resources/AudioIPCPlugIn.bundle/Contents/MacOS/AudioIPCPlugIn
0x18dd8000 - 0x18dddffb  com.apple.audio.AppleHDAHALPlugIn 1.7.4 (1.7.4a1) <B4217DD8-4BDE-CC1C-70FF-06EA901F376D> /System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAHALPlugIn.bundle/Contents/MacOS/AppleHDAHALPlugIn
0x18deb000 - 0x18df9fe7  libSimplifiedChineseConverter.dylib ??? (???) <4C9CC2D9-2F13-4465-5447-2516FCD9255B> /System/Library/CoreServices/Encodings/libSimplifiedChineseConverter.dylib
0x18e59000 - 0x18e6bff7  libTraditionalChineseConverter.dylib ??? (???) <C4E0D62B-4D1A-8DAD-D10B-2C055AA0479C> /System/Library/CoreServices/Encodings/libTraditionalChineseConverter.dylib
0x1a3be000 - 0x1a3dbff7  libPDFRIP.A.dylib ??? (???) <C285E30B-5134-EB20-7DD0-2AC0CFD33234> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libPDFRIP.A.dylib
0x1b3ef000 - 0x1b46efe7  com.apple.xquery 1.3 (27) <3060D4C7-9B24-B0A3-F28A-172CB5440358> /System/Library/PrivateFrameworks/XQuery.framework/XQuery
0x1c462000 - 0x1ca9bffb +com.macromedia.Flash Player.plugin 10.0.32 (1.0.4f18472) <B19EE236-3941-C958-2E04-0B99BB5E237A> /Library/Internet Plug-Ins/Flash Player.plugin/Contents/MacOS/Flash Player
0x30a41000 - 0x30ca4fc3 +Move-Media-Player ??? (???) <51F9D630-01CF-461C-9620-88BA2AE5FCAC> /Users/warren/Library/Internet Plug-Ins/Move-Media-Player.plugin/Contents/MacOS/Move-Media-Player
0x30e28000 - 0x31122fe7 +com.movenetworks.movemediaplayer.plugin npmnqmp 071505000006 (npmnqmp 071505000006) <881AB9A9-EC54-0AF9-ABC4-39D139AA3A6C> /Users/warren/Library/Internet Plug-Ins/Move_Media_Player.plugin/Contents/MacOS/Move-Media-Player
0x3e000000 - 0x3e046ff7  com.apple.glut 3.4.4 (GLUT-3.4.4) <DF15FD36-E1F5-D745-1BF6-DD3AEA2897E4> /System/Library/Frameworks/GLUT.framework/Versions/A/GLUT
0x70000000 - 0x700cbfe7  com.apple.audio.units.Components 1.6 (1.6) <A568FC6D-1D2D-A04B-FD1A-AFF6E326E020> /System/Library/Components/CoreAudio.component/Contents/MacOS/CoreAudio
0x8fe00000 - 0x8fe4162b  dyld 132.1 (???) <211AF0DD-42D9-79C8-BB6A-1F4BEEF4B4AB> /usr/lib/dyld
0x90003000 - 0x9005dff7  com.apple.framework.IOKit 2.0 (???) <7618DDEC-2E3B-9C6E-FDC9-15169E24B4FB> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x9005e000 - 0x90082ff7  libJPEG.dylib ??? (???) <265DBF67-994E-E320-4CB1-9C3DE792C3B2> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x90151000 - 0x901caff7  com.apple.PDFKit 2.5 (2.5) <58603BDB-337F-FBE3-EB11-7C31CF261995> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/PDFKit.framework/Versions/A/PDFKit
0x901cb000 - 0x902c1ff7  libGLProgrammability.dylib ??? (???) <B8E40851-3A01-7D01-2F96-537BF7FA63B5> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLProgrammability.dylib
0x902c2000 - 0x902c3ff7  com.apple.MonitorPanelFramework 1.3.0 (1.3.0) <0EC4EEFF-477E-908E-6F21-ED2C973846A4> /System/Library/PrivateFrameworks/MonitorPanel.framework/Versions/A/MonitorPanel
0x902c4000 - 0x902d0ff7  libkxld.dylib ??? (???) <152C8DBB-0149-5827-3240-E57CA85CFE5F> /usr/lib/system/libkxld.dylib
0x90326000 - 0x90551ff3  com.apple.QuartzComposer 4.0 (156.6) <D1D3A5A8-75BC-4556-85FA-8A9F487106DD> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzComposer.framework/Versions/A/QuartzComposer
0x90552000 - 0x9055fff7  com.apple.AppleFSCompression 1.0 (1.0) <A348AEAB-D279-68B9-0CF2-3C29FBADBCC4> /System/Library/PrivateFrameworks/AppleFSCompression.framework/Versions/A/AppleFSCompression
0x90565000 - 0x90a13fe7  com.apple.VideoToolbox 0.420.17 (420.17) <F2812B5D-4C09-EFCC-182E-412257859AB1> /System/Library/PrivateFrameworks/VideoToolbox.framework/Versions/A/VideoToolbox
0x90a62000 - 0x90a72fff  SyndicationUI ??? (???) <5AC05CC5-8CCA-5C2A-9252-BBDA4D5E03B2> /System/Library/PrivateFrameworks/SyndicationUI.framework/Versions/A/SyndicationUI
0x90a73000 - 0x90ab0ff7  com.apple.SystemConfiguration 1.10 (1.10) <897AEEAF-CF5D-2843-C33B-31A0A7C98A6A> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x90da5000 - 0x90da6ff7  com.apple.audio.units.AudioUnit 1.6 (1.6) <68180B96-381C-A09D-5576-606A134FD953> /System/Library/Frameworks/AudioUnit.framework/Versions/A/AudioUnit
0x90e50000 - 0x90e52ff7  com.apple.securityhi 4.0 (36638) <962C66FB-5BE9-634E-0810-036CB340C059> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x90e53000 - 0x90ff7feb  libSystem.B.dylib ??? (???) <E58B649F-FFDC-AB09-2028-8B706BEF7C0F> /usr/lib/libSystem.B.dylib
0x90ffb000 - 0x91053fe7  com.apple.datadetectorscore 2.0 (80.7) <A40AA74A-9D13-2A6C-5440-B50905923251> /System/Library/PrivateFrameworks/DataDetectorsCore.framework/Versions/A/DataDetectorsCore
0x91054000 - 0x91066ff7  com.apple.MultitouchSupport.framework 200.20 (200.20) <1D7EE15B-ADDD-1F57-F1FB-FB5252910D5A> /System/Library/PrivateFrameworks/MultitouchSupport.framework/Versions/A/MultitouchSupport
0x91067000 - 0x91848497  com.apple.CoreGraphics 1.535.5 (???) <0B93D29C-D957-AD00-10F3-94112D75D6D9> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x91849000 - 0x91ab9ffb  com.apple.Foundation 6.6 (751) <A61B645E-1A15-5BCA-3043-C8AB85C6AD30> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x91aba000 - 0x91af8fe7  com.apple.MediaKit 10.0 (472) <8B1C89AF-6A2A-8D01-D723-22A4DBEA7760> /System/Library/PrivateFrameworks/MediaKit.framework/Versions/A/MediaKit
0x91af9000 - 0x91b07fe7  libz.1.dylib ??? (???) <7B7A02AB-DA99-6180-880E-D28E4F9AA8EB> /usr/lib/libz.1.dylib
0x91b08000 - 0x91b12ffb  com.apple.speech.recognition.framework 3.10.10 (3.10.10) <E106CC3A-7633-5587-0B29-64E19FCBC613> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x91b1b000 - 0x91bf5fff  com.apple.DesktopServices 1.5.1 (1.5.1) <D9C18268-699B-A996-1035-4EA3695F4074> /System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x91c28000 - 0x91d67fe3  com.apple.QTKit 7.6.3 (1584) <18130DA4-7132-CEAF-2137-4925CAC0B585> /System/Library/Frameworks/QTKit.framework/Versions/A/QTKit
0x91d68000 - 0x91d78ff7  com.apple.DSObjCWrappers.Framework 10.6 (134) <81A0B409-3906-A98F-CA9B-A49E75007495> /System/Library/PrivateFrameworks/DSObjCWrappers.framework/Versions/A/DSObjCWrappers
0x91d79000 - 0x91d9ffff  com.apple.DictionaryServices 1.1 (1.1) <07694B30-56A9-5C98-B8BC-DA0628715FA8> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices
0x91da0000 - 0x91db1ff7  com.apple.LangAnalysis 1.6.5 (1.6.5) <E77440D0-76EE-EB4C-3D00-9EDE417F13CF> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x91dd3000 - 0x91fe5fff  com.apple.RawCamera.bundle 2.2.1 (477) <10937A0D-0856-1B69-AE27-43BC15B7DD21> /System/Library/CoreServices/RawCamera.bundle/Contents/MacOS/RawCamera
0x91fe6000 - 0x92001ff7  libPng.dylib ??? (???) <38DD4AA1-0643-85A0-F2F5-EE9269729975> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x92002000 - 0x9202aff7  libxslt.1.dylib ??? (???) <769EF4B2-C1AD-73D5-AAAD-1564DAEA77AF> /usr/lib/libxslt.1.dylib
0x9202b000 - 0x92099ff7  com.apple.ISSupport 1.9.1 (49) <E6EF2734-ED63-E7C2-C4D2-8D64E9955BFC> /System/Library/PrivateFrameworks/ISSupport.framework/Versions/A/ISSupport
0x920e4000 - 0x920e7ffb  com.apple.help 1.3.1 (41) <67F1F424-3983-7A2A-EC21-867BE838E90B> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x920e8000 - 0x92119ff3  libTrueTypeScaler.dylib ??? (???) <F326E053-7425-2F10-F883-CBD56A1E1B72> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libTrueTypeScaler.dylib
0x9211a000 - 0x9211dff7  libCoreVMClient.dylib ??? (???) <16BB2178-B32D-E57E-F1E4-D177F7754232> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libCoreVMClient.dylib
0x9211e000 - 0x922a0fe7  libicucore.A.dylib ??? (???) <FBB66376-CBA9-8149-A1AA-10AB8578C3B3> /usr/lib/libicucore.A.dylib
0x922a1000 - 0x922dafe7  com.apple.bom 10.0 (164) <CC61CCD7-F76C-45DD-6666-C0E0D07C7343> /System/Library/PrivateFrameworks/Bom.framework/Versions/A/Bom
0x922db000 - 0x922dbff7  com.apple.Cocoa 6.6 (???) <EA27B428-5904-B00B-397A-185588698BCC> /System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa
0x92307000 - 0x92309ff7  libRadiance.dylib ??? (???) <0E03CF64-0931-7B9A-F617-4387B809D6D8> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x9230a000 - 0x923fcff7  libcrypto.0.9.8.dylib ??? (???) <792B8722-3091-5E9F-E25F-67499CFE0599> /usr/lib/libcrypto.0.9.8.dylib
0x923fd000 - 0x9245dfe7  com.apple.CoreText 3.0.0 (???) <8F4FCAE2-8E6F-F0DE-A6AA-15D0228B7F13> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x9245e000 - 0x924ccff7  com.apple.QuickLookUIFramework 2.0 (327.0) <86D7E331-4C25-D360-7316-BA32192686D7> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuickLookUI.framework/Versions/A/QuickLookUI
0x924cd000 - 0x92cb2fe7  com.apple.WebCore 6531 (6531.9) <F9A9848B-9EB0-B912-49F5-7E8010AF2CF1> /System/Library/Frameworks/WebKit.framework/Versions/A/Frameworks/WebCore.framework/Versions/A/WebCore
0x92dff000 - 0x92eaeff3  com.apple.ink.framework 1.3 (104) <8526D880-D367-3EF9-DBFD-9A6AB240F57A> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x92eaf000 - 0x92eefff3  com.apple.securityinterface 4.0 (36981) <F024C5CA-0762-1599-5BAB-17F785E51075> /System/Library/Frameworks/SecurityInterface.framework/Versions/A/SecurityInterface
0x930b0000 - 0x930f6ff7  libauto.dylib ??? (???) <FAB17F30-A28B-E33D-6E21-C7119C9C83ED> /usr/lib/libauto.dylib
0x930f7000 - 0x930f7ff7  com.apple.quartzframework 1.5 (1.5) <CEB78F00-C5B2-3B3F-BF70-DD6D578719C0> /System/Library/Frameworks/Quartz.framework/Versions/A/Quartz
0x930f8000 - 0x93417fe7  com.apple.CoreServices.CarbonCore 859.1 (859.1) <2E72AF56-4BE6-294A-7372-19C360688B8B> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x93418000 - 0x9347cffb  com.apple.htmlrendering 72 (1.1.4) <4D451A35-FAB6-1288-71F6-F24A4B6E2371> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x93496000 - 0x93560fef  com.apple.CoreServices.OSServices 352 (352) <D9F21CA4-EED0-705F-8F3C-F1322D114B52> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x93561000 - 0x93567ff7  com.apple.DisplayServicesFW 2.1 (2.1) <762CC18B-1F71-E9FC-ECB7-7078B4856D6E> /System/Library/PrivateFrameworks/DisplayServices.framework/Versions/A/DisplayServices
0x93568000 - 0x935f9fe3  com.apple.print.framework.PrintCore 6.0 (312) <C588530A-0F2C-DD72-E308-3B8735125189> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x936a9000 - 0x93713fe7  libstdc++.6.dylib ??? (???) <411D87F4-B7E1-44EB-F201-F8B4F9227213> /usr/lib/libstdc++.6.dylib
0x9373d000 - 0x9384aff7  com.apple.MediaToolbox 0.420.17 (420.17) <EE843140-C79F-3D8C-B89E-893CD74C3633> /System/Library/PrivateFrameworks/MediaToolbox.framework/Versions/A/MediaToolbox
0x9384b000 - 0x938e7fe7  com.apple.ApplicationServices.ATS 4.0 (???) <81700C90-2614-F7E2-CC6A-B01C24A2BD75> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x938e8000 - 0x93cfeff7  libBLAS.dylib ??? (???) <C4FB303A-DB4D-F9E8-181C-129585E59603> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x93d8e000 - 0x93de4ff7  com.apple.MeshKitRuntime 1.0 (49.0) <BCB920E3-C567-3F37-D404-F518A256859E> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/Frameworks/MeshKitRuntime.framework/Versions/A/MeshKitRuntime
0x93de5000 - 0x93dfdff7  com.apple.CFOpenDirectory 10.6 (10.6) <1537FB4F-C112-5D12-1E5D-3B1002A4038F> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory
0x93e07000 - 0x93e3bff7  libcups.2.dylib ??? (???) <9078BA07-DEE1-6597-D15D-7BE3A20CB5A0> /usr/lib/libcups.2.dylib
0x93e3c000 - 0x93e8dff7  com.apple.HIServices 1.8.0 (???) <B8EC13DB-A81A-91BF-8C82-66E840C64C91> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x93e8e000 - 0x93eb5ff7  com.apple.quartzfilters 1.6.0 (1.6.0) <879A3B93-87A6-88FE-305D-DF1EAED04756> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/QuartzFilters.framework/Versions/A/QuartzFilters
0x93eb6000 - 0x94091ff3  libType1Scaler.dylib ??? (???) <BD3674DE-EAD9-C57A-0072-3C18970DCC1C> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libType1Scaler.dylib
0x94092000 - 0x9409bff7  com.apple.DiskArbitration 2.3 (2.3) <E9C40767-DA6A-6CCB-8B00-2D5706753000> /System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x9409c000 - 0x943bffef  com.apple.HIToolbox 1.6.0 (???) <6F95AF67-678A-D8BC-FFC2-029C9AA2F44A> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x943c0000 - 0x943f1ff7  libGLImage.dylib ??? (???) <0FB347C7-A579-4E51-4733-39AB28064554> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLImage.dylib
0x943fa000 - 0x943feff7  IOSurface ??? (???) <C11D3FF3-EB51-A07D-EF24-9C2004115724> /System/Library/Frameworks/IOSurface.framework/Versions/A/IOSurface
0x943ff000 - 0x9446eff7  libvMisc.dylib ??? (???) <59243A8C-2B98-3E71-8032-884D4853E79F> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x9446f000 - 0x9448efe7  com.apple.opencl 11 (11) <372A42E7-FB10-B74D-E1A0-980E94D07021> /System/Library/Frameworks/OpenCL.framework/Versions/A/OpenCL
0x944d8000 - 0x94551ff3  com.apple.audio.CoreAudio 3.2.0 (3.2) <91AE891E-6015-AABE-3512-2D5EBCA0937B> /System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x94552000 - 0x94555ff7  libCGXType.A.dylib ??? (???) <3FB5E457-EABF-B33E-E01B-C695FB2D72EE> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXType.A.dylib
0x94556000 - 0x94556ff7  liblangid.dylib ??? (???) <B99607FC-5646-32C8-2C16-AFB5EA9097C2> /usr/lib/liblangid.dylib
0x94557000 - 0x954e5ff7  com.apple.QuickTimeComponents.component 7.6.3 (1584) /System/Library/QuickTime/QuickTimeComponents.component/Contents/MacOS/QuickTimeComponents
0x954e6000 - 0x9551eff7  com.apple.LDAPFramework 2.0 (120.1) <8C7F3F42-6A4D-D37A-4232-685D44E8769E> /System/Library/Frameworks/LDAP.framework/Versions/A/LDAP
0x9551f000 - 0x95781ff3  com.apple.security 6.0 (36910) <F045B57C-054F-F06F-EF7E-EABEC2700274> /System/Library/Frameworks/Security.framework/Versions/A/Security
0x95782000 - 0x95802feb  com.apple.SearchKit 1.3.0 (1.3.0) <9E18AEA5-F4B4-8BE5-EEA9-818FC4F46FD9> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x95803000 - 0x9583ffff  com.apple.CoreMediaIOServices 101.0 (715) <FD86FB28-9BA1-0993-1172-F10F61EA6344> /System/Library/PrivateFrameworks/CoreMediaIOServices.framework/Versions/A/CoreMediaIOServices
0x95840000 - 0x9584aff7  com.apple.HelpData 2.0.3 (33) <AD60F037-CE57-C93A-F865-2CEEE3F08F31> /System/Library/PrivateFrameworks/HelpData.framework/Versions/A/HelpData
0x9584b000 - 0x9592eff7  com.apple.WebKit 6531 (6531.9) <991912FB-1484-A0B2-593F-A8722BC6AFE7> /System/Library/Frameworks/WebKit.framework/Versions/A/WebKit
0x95962000 - 0x95a0aff7  com.apple.QD 3.31 (???) <40FCAC85-4E4F-2290-90D4-F66D550ADFDC> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x95a0b000 - 0x95b14fe7  com.apple.CoreAUC 4.10.0 (4.10.0) <34606DCE-1257-8FB9-E633-AC56DD263EAB> /System/Library/PrivateFrameworks/CoreAUC.framework/Versions/A/CoreAUC
0x95b15000 - 0x95b6ffe7  com.apple.CorePDF 1.0 (1.0) <590244C9-15D7-7A65-13AF-6F597123746B> /System/Library/PrivateFrameworks/CorePDF.framework/Versions/A/CorePDF
0x95b70000 - 0x95baeff7  com.apple.QuickLookFramework 2.0 (327.0) <84AF77F0-DAFD-DCED-FBD4-DCF827650F44> /System/Library/Frameworks/QuickLook.framework/Versions/A/QuickLook
0x95baf000 - 0x95cd7fe7  com.apple.CoreData 102 (246) <E7E6CE39-9B51-13C8-FE31-8FE57CF7BDE1> /System/Library/Frameworks/CoreData.framework/Versions/A/CoreData
0x95cd8000 - 0x95dccfe7  libiconv.2.dylib ??? (???) <0C578460-3929-29DD-585A-DB1E0C977425> /usr/lib/libiconv.2.dylib
0x95dcd000 - 0x95f5bfff  com.apple.JavaScriptCore 6531 (6531.5) <DDDCCE57-42D2-BAA1-63F1-F76458EE0927> /System/Library/Frameworks/JavaScriptCore.framework/Versions/A/JavaScriptCore
0x95f5c000 - 0x95fd3feb  com.apple.backup.framework 1.1 (1.0) <73C642BD-A0C5-7D45-79FA-0AA6D96226C0> /System/Library/PrivateFrameworks/Backup.framework/Versions/A/Backup
0x95fd4000 - 0x96013ff7  com.apple.ImageCaptureCore 1.0 (1.0) <D8767350-A10D-B6B5-3A8D-05888A7758ED> /System/Library/Frameworks/ImageCaptureCore.framework/Versions/A/ImageCaptureCore
0x96014000 - 0x96014ff7  com.apple.vecLib 3.5 (vecLib 3.5) <17BEEF92-DF30-CD52-FD65-0B7B43B93617> /System/Library/Frameworks/vecLib.framework/Versions/A/vecLib
0x96015000 - 0x96018fe7  libmathCommon.A.dylib ??? (???) <1622A54F-1A98-2CBE-B6A4-2122981A500E> /usr/lib/system/libmathCommon.A.dylib
0x96019000 - 0x96026ff7  com.apple.NetFS 3.2 (3.2) <E6FD80B0-0238-0C42-A3EC-EBDEC107A1C3> /System/Library/Frameworks/NetFS.framework/Versions/A/NetFS
0x96027000 - 0x9603bffb  com.apple.speech.synthesis.framework 3.10.35 (3.10.35) <57DD5458-4F24-DA7D-0927-C3321A65D743> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x9603c000 - 0x9613efef  com.apple.MeshKitIO 1.0 (49.0) <E4436373-BF5D-9644-F8B7-B72762BEC08B> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/Frameworks/MeshKitIO.framework/Versions/A/MeshKitIO
0x9613f000 - 0x96a1cff7  com.apple.AppKit 6.6.1 (1038.2) <27C304F6-0045-160B-7591-E57ECF19BDDB> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
0x96a2d000 - 0x96ad4fe7  com.apple.CFNetwork 454.4 (454.4) <7C563385-9893-3B48-8607-5BC81DA2C4CF> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x96ad5000 - 0x96b0bfff  libtidy.A.dylib ??? (???) <DDFAB560-3883-A6A2-7BDD-D91730982B48> /usr/lib/libtidy.A.dylib
0x96b32000 - 0x96b66ff7  libssl.0.9.8.dylib ??? (???) <F3402001-EC8D-58E5-4A23-02A979C9E857> /usr/lib/libssl.0.9.8.dylib
0x96b80000 - 0x96b86ff7  libCGXCoreImage.A.dylib ??? (???) <8E11578A-B46D-0BC1-DE50-05A92F377D7D> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCGXCoreImage.A.dylib
0x96b87000 - 0x96c61fe7  com.apple.DiscRecording 5.0 (5000.4.6) <8471B33F-5B5A-13EA-04B4-41882AE63C7D> /System/Library/Frameworks/DiscRecording.framework/Versions/A/DiscRecording
0x96c62000 - 0x96d3fff7  com.apple.vImage 4.0 (4.0) <64597E4B-F144-DBB3-F428-0EC3D9A1219E> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x96d6b000 - 0x96e1afef  com.apple.ColorSync 4.6.0 (4.6.0) <66ABAE86-B0EC-D641-913D-08ACA965F9FA> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x96e1b000 - 0x96e21fff  com.apple.CommonPanels 1.2.4 (91) <2438AF5D-067B-B9FD-1248-2C9987F360BA> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x96e22000 - 0x96ed4ffb  libFontParser.dylib ??? (???) <EB089832-660F-0B34-3AC8-CCDA937987D9> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontParser.dylib
0x96ed5000 - 0x96febfe3  com.apple.PubSub 1.0.4 (65.11) <7F349A71-C4E6-E645-B28D-03A7DD120AA6> /System/Library/Frameworks/PubSub.framework/Versions/A/PubSub
0x96fff000 - 0x9700fff7  libsasl2.2.dylib ??? (???) <C8744EA3-0AB7-CD03-E639-C4F2B910BE5D> /usr/lib/libsasl2.2.dylib
0x97010000 - 0x97054ff3  com.apple.coreui 0.2 (112) <A810DFFD-6314-5E2B-93A4-D5626634B1EE> /System/Library/PrivateFrameworks/CoreUI.framework/Versions/A/CoreUI
0x971af000 - 0x971e2ff7  com.apple.AE 496 (496) <B638FDD4-7322-F0E4-ACEB-777D8A1399E1> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x971e3000 - 0x9735afef  com.apple.CoreFoundation 6.6 (550) <193E33D6-2E92-3452-773B-60A1A9CCC573> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x97360000 - 0x973a2fe7  libvDSP.dylib ??? (???) <8F8FFFB3-81E3-2969-5688-D5B0979182E6> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x973d7000 - 0x97459ffb  SecurityFoundation ??? (???) <29C27E0E-B2B3-BF6B-B1F8-5783B8B01535> /System/Library/Frameworks/SecurityFoundation.framework/Versions/A/SecurityFoundation
0x9745a000 - 0x974f7ff3  com.apple.LaunchServices 360.3 (360.3) <C8590D53-E46A-F58A-7CF2-03A8159D8569> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x974f8000 - 0x97505ff7  libbz2.1.0.dylib ??? (???) <495732E1-2AC4-44FC-E633-4CBCC503B924> /usr/lib/libbz2.1.0.dylib
0x97547000 - 0x97569ff3  com.apple.DirectoryService.Framework 3.6 (621) <61569C79-6567-BE8F-4F76-BAC04E5FBF79> /System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService
0x9756a000 - 0x97602fe7  edu.mit.Kerberos 6.5.8 (6.5.8) <BA9BD282-FF56-3BFD-E78C-7DBE73B48480> /System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos
0x97603000 - 0x97650feb  com.apple.DirectoryService.PasswordServerFramework 6.0 (6.0) <BF66BA5D-BBC8-78A5-DBE2-F9DE3DD1D775> /System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer
0x97651000 - 0x97688fe7  libcurl.4.dylib ??? (???) <D6299871-E1C9-5238-FE18-0B3C02025376> /usr/lib/libcurl.4.dylib
0x97689000 - 0x97845fef  com.apple.ImageIO.framework 3.0.0 (3.0.0) <A37E541F-3D6A-2BE9-AB32-F60CCDE13608> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x97846000 - 0x97870ff7  com.apple.shortcut 1.1 (1.1) <B0514FA9-7CAE-AD94-93CA-7B2A2C5F7B8A> /System/Library/PrivateFrameworks/Shortcut.framework/Versions/A/Shortcut
0x97871000 - 0x978abfe7  libFontRegistry.dylib ??? (???) <EE633CF6-8827-EF05-10A4-5F2937120227> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/Resources/libFontRegistry.dylib
0x978ac000 - 0x979b3fe3  com.apple.DiskImagesFramework 10.6 (281) <B57DDA36-9B4B-9D57-7072-91D531BDD2BC> /System/Library/PrivateFrameworks/DiskImages.framework/Versions/A/DiskImages
0x979b4000 - 0x979e4ff7  com.apple.MeshKit 1.0 (49.0) <435718C1-ED40-6BCC-F0D8-67FA05CFFF1E> /System/Library/PrivateFrameworks/MeshKit.framework/Versions/A/MeshKit
0x97a3f000 - 0x97b68fe7  com.apple.audio.toolbox.AudioToolbox 1.6 (1.6) <62BEEBE6-68FC-4A48-91CF-39DA2BD793F1> /System/Library/Frameworks/AudioToolbox.framework/Versions/A/AudioToolbox
0x97b69000 - 0x97bacff7  com.apple.NavigationServices 3.5.3 (181) <28CDD978-030E-7D4A-5334-874A8EBE6C29> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x97bad000 - 0x97be4ff7  com.apple.CoreMedia 0.420.17 (420.17) <A45B464A-4E05-8372-C055-974AD5393E03> /System/Library/PrivateFrameworks/CoreMedia.framework/Versions/A/CoreMedia
0x97be5000 - 0x97ce6fe7  libxml2.2.dylib ??? (???) <C242A74D-280A-90C3-3F79-891624AA45D2> /usr/lib/libxml2.2.dylib
0x97ce7000 - 0x97d07fe7  libresolv.9.dylib ??? (???) <A48921CB-3FA7-3071-AF9C-2D86FB493A3A> /usr/lib/libresolv.9.dylib
0x97d08000 - 0x97d49ff7  libRIP.A.dylib ??? (???) <6DB158C6-A84D-98C9-1D48-868A3DB17D09> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libRIP.A.dylib
0x97d55000 - 0x97d56ff7  com.apple.TrustEvaluationAgent 1.0 (1) <71E2DA16-83EC-6056-FFEE-862A04B5599F> /System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent
0x97d57000 - 0x97d6bfe7  libbsm.0.dylib ??? (???) <14CB053A-7C47-96DA-E415-0906BA1B78C9> /usr/lib/libbsm.0.dylib
0x97d6c000 - 0x97e19fe7  libobjc.A.dylib ??? (???) <410DD065-A18F-F054-0457-65525F4D1039> /usr/lib/libobjc.A.dylib
0x97e88000 - 0x97e8dff7  com.apple.OpenDirectory 10.6 (10.6) <92582807-E8F3-3DD9-EB42-4195CFB754A1> /System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory
0x97e8e000 - 0x97edeff7  com.apple.framework.familycontrols 2.0 (2.0) <50617342-E578-4C1C-938A-19A37ECA91CA> /System/Library/PrivateFrameworks/FamilyControls.framework/Versions/A/FamilyControls
0x97edf000 - 0x97f28fe7  libTIFF.dylib ??? (???) <6EF87001-6FB4-1405-C588-F6D8042D3534> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x9802f000 - 0x9803cff7  com.apple.opengl 1.6.3 (1.6.3) <59D86286-B46F-B0E4-68F8-E5CDCADE393E> /System/Library/Frameworks/OpenGL.framework/Versions/A/OpenGL
0x98079000 - 0x980bdfe7  com.apple.Metadata 10.6.0 (507.1) <CBD1B22B-5F10-C784-03A2-35106B97DF3F> /System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x980be000 - 0x982bbfeb  com.apple.AddressBook.framework 5.0 (862) <BD05B213-46CF-8EFD-B801-CF741408600D> /System/Library/Frameworks/AddressBook.framework/Versions/A/AddressBook
0x982ff000 - 0x98303ff7  libGIF.dylib ??? (???) <51848EBF-27D4-0F85-C22A-D1AE10D328F3> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x98304000 - 0x9830eff7  com.apple.CrashReporterSupport 10.6 (237) <2FABBC83-A515-24AD-4BAA-60E458509549> /System/Library/PrivateFrameworks/CrashReporterSupport.framework/Versions/A/CrashReporterSupport
0x9830f000 - 0x9830fff7  com.apple.Accelerate.vecLib 3.5 (vecLib 3.5) <3E039E14-2A15-56CC-0074-EE59F9FBB913> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x98310000 - 0x983e1ff3  ColorSyncDeprecated.dylib ??? (???) <AFD6DAC8-12EF-B2A0-5322-E902D5B48B0A> /System/Library/Frameworks/ApplicationServices.framework/Frameworks/ColorSync.framework/Versions/A/Resources/ColorSyncDeprecated.dylib
0x983e2000 - 0x983e2ff7  com.apple.CoreServices 44 (44) <AC35D112-5FB9-9C8C-6189-5F5945072375> /System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x983e3000 - 0x985c3fff  com.apple.imageKit 2.0 (1.0) <A09D802D-DAD8-39D6-B3D1-83931741E387> /System/Library/Frameworks/Quartz.framework/Versions/A/Frameworks/ImageKit.framework/Versions/A/ImageKit
0x985c4000 - 0x985c4ff7  com.apple.Carbon 150 (152) <608A04AB-F35D-D2EB-6629-16B88FB32074> /System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x985c5000 - 0x989faff7  libLAPACK.dylib ??? (???) <5E2D2283-57DE-9A49-1DB0-CD027FEFA6C2> /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x989fb000 - 0x98a6bffb  com.apple.AppleVAFramework 4.6.2 (4.6.2) <25381B2A-89A6-0CEB-C159-DFF70C76B881> /System/Library/PrivateFrameworks/AppleVA.framework/Versions/A/AppleVA
0x98a6c000 - 0x98a6cff7  com.apple.Accelerate 1.5 (Accelerate 1.5) <F642E7A0-3720-FA19-0190-E6DBD9EF2D9B> /System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x98a6d000 - 0x98a89fe3  com.apple.openscripting 1.3 (???) <D2FF4419-FD71-5D4A-F397-B03E82085232> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x98a8a000 - 0x98deeff7  com.apple.QuartzCore 1.6.0 (226.0) <7E29DD09-BE04-AA06-5C81-5C093F16901B> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
0x98e0f000 - 0x98e13ff7  libGFXShared.dylib ??? (???) <ED62E870-E219-C873-88AA-9CE08108F811> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGFXShared.dylib
0x98e14000 - 0x98e14ff7  com.apple.ApplicationServices 38 (38) <8012B504-3D83-BFBB-DA65-065E061CFE03> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x98e15000 - 0x98e1ffe7  com.apple.audio.SoundManager 3.9.3 (3.9.3) <5F494955-7290-2D91-DA94-44B590191771> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x98f58000 - 0x98f5ffff  com.apple.print.framework.Print 6.0 (237) <7A06B15C-B835-096E-7D96-C2FE8F0D21E1> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x98f60000 - 0x98f7eff7  com.apple.CoreVideo 1.6.0 (43.0) <3A853574-DD9E-08D8-FD2C-6221B55C3E08> /System/Library/Frameworks/CoreVideo.framework/Versions/A/CoreVideo
0x98f7f000 - 0x98f89ff7  libGL.dylib ??? (???) <B375A3B6-2983-A4E4-50FB-9087FD606FD6> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGL.dylib
0x98f8a000 - 0x98f91ff7  com.apple.agl 3.0.12 (AGL-3.0.12) <6BF89127-C18C-27A9-F94A-981836A822FE> /System/Library/Frameworks/AGL.framework/Versions/A/AGL
0x9900a000 - 0x99303fef  com.apple.QuickTime 7.6.3 (1584) <687233E1-F428-5224-08D5-5874BEA2300D> /System/Library/Frameworks/QuickTime.framework/Versions/A/QuickTime
0x99304000 - 0x9930eff7  libCSync.A.dylib ??? (???) <A05BB12D-CD51-DE43-323B-3A3E99A3EED5> /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/Resources/libCSync.A.dylib
0x9930f000 - 0x99324fff  com.apple.ImageCapture 6.0 (6.0) <3F31833A-38A9-444E-02B7-17619CA6F2A0> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x99325000 - 0x993defe7  libsqlite3.dylib ??? (???) <16CEF8E8-8C9A-94CD-EF5D-05477844C005> /usr/lib/libsqlite3.dylib
0x993df000 - 0x9942ffe7  libGLU.dylib ??? (???) <55A69DCE-1237-341E-F239-CDFE1F5B19BB> /System/Library/Frameworks/OpenGL.framework/Versions/A/Libraries/libGLU.dylib
0xba900000 - 0xba916ff7  libJapaneseConverter.dylib ??? (???) <4FB5CEEB-8D3E-8C57-1718-81D7CAFBFE69> /System/Library/CoreServices/Encodings/libJapaneseConverter.dylib
0xbab00000 - 0xbab21fe7  libKoreanConverter.dylib ??? (???) <A23F9980-5CC8-A44D-6FD6-DBFCBFF4FF28> /System/Library/CoreServices/Encodings/libKoreanConverter.dylib
0xbad00000 - 0xbad01fe7  libLatin2Converter.dylib ??? (???) <3A37DE22-855A-25CC-8967-A7C910401745> /System/Library/CoreServices/Encodings/libLatin2Converter.dylib
0xffff0000 - 0xffff1fff  libSystem.B.dylib ??? (???) <E58B649F-FFDC-AB09-2028-8B706BEF7C0F> /usr/lib/libSystem.B.dylib

[Mark Rowe (bdash)]

Can you please attach it to the bug rather than pasting it inline?  It’s impossible to read like that.

[Jeffrey Warren]

Created attachment 40687 [details]
Safari crash report

I'm sorry - I don't know any of the conventions here. I assumed it'd be full-text searchable if I included it inline. Here's the attachment instead.

[Mark Rowe (bdash)]

It does make it searchable, but Bugzilla does exciting things to the content by wrapping it which makes it impossible to process using any of our tools for analyzing crash logs :-)

[Mark Rowe (bdash)]

<rdar://problem/7267951>

[Mark Rowe (bdash)]

The backtrace strongly suggests that this is a bug in the underlying CoreGraphics framework.

[Mark Rowe (bdash)]

Given that this problem lies within the CoreGraphics framework rather than WebKit, this bug will be tracked by Apple as <rdar://problem/7267951>.  Since the problem is outside of WebKit this bug will be closed.  Thanks for the report!

[Jeffrey Warren]

I've looked at this again and it seems related to the behavior of the canvas.lineTo()/canvas.moveTo() commands. The actual console output was: 

10/19/09 11:20:48 AM	Safari[86156]	crossing_count: warning: assertion failed: 0 is not in the range (nan, nan) or (nan, nan); assuming the latter. Please report this bug.

Oct 19 11:23:33 nautilus [0x0-0xa11a11].com.apple.Safari[86176]: Mon Oct 19 11:23:33 nautilus.local Safari[86176] <Error>: CGPathAddLineToPoint: no current point.
Oct 19 11:23:33 nautilus Safari[86176]: CGPathAddLineToPoint: no current point.

Indicating that, just as with lineTo, a new point was added to a line which did not yet have an initial point. Polygon drawing in canvas will fail in WebKit if you don't first moveTo(x,y) before running lineTo(x,y) and this bug seems to expose a similar limitation when drawing text. 

However, the lineTo/moveTo behavior is caught and logged, and does not crash Webkit; it would be fantastic to do the same in the new drawText() functionality.

I'd argue that WebKit should implement a try/catch behavior on this bug so that Safari doesn't crash, regardless of whether Apple fixes the underlying Core Graphics problem. As the drawText function sees more and more usage, this bug will become a serious liability. 

Best,
Jeff

====================================================== 



Safari:
Version 4.0.3 (6531.9)

Application Specific Information:
Assertion failed: ((min.y == p[0].y && max.y == p[order].y) || (min.y == p[order].y && max.y == p[0].y)), function crossing_count, file Paths/path-crossing.c, line 176.


Thread 0 Crashed:  Dispatch queue: com.apple.main-thread
0   libSystem.B.dylib             	0x90eb4912 __kill + 10
1   libSystem.B.dylib             	0x90eb4904 kill$UNIX2003 + 32
2   libSystem.B.dylib             	0x90f47b99 raise + 26
3   libSystem.B.dylib             	0x90f5dc50 abort + 93
4   libSystem.B.dylib             	0x90f4a7f8 __pthread_markcancel + 0
5   com.apple.CoreGraphics        	0x910e167b crossing_count + 702
6   com.apple.CoreGraphics        	0x910e132e path_evaluate_level + 267
7   com.apple.CoreGraphics        	0x910e11db path_get_expected_outside_orientation + 18
8   com.apple.CoreGraphics        	0x910e1194 path_fix_orientation + 19
9   com.apple.CoreGraphics        	0x910e0e0a CGPathCreateByNormalizingGlyphPath + 39
10  com.apple.CoreGraphics        	0x910e0c23 CGFontCreateGlyphPath + 66
11  libRIP.A.dylib                	0x97d11186 ripc_DrawGlyphs + 2052
12  com.apple.CoreGraphics        	0x91096be2 draw_glyphs + 1508
13  com.apple.CoreGraphics        	0x91096537 CGContextShowGlyphsWithAdvances + 527
14  com.apple.WebCore             	0x9255025d WebCore::Font::drawGlyphs(WebCore::GraphicsContext*, WebCore::SimpleFontData const*, WebCore::GlyphBuffer const&, int, int, WebCore::FloatPoint const&) const + 573
15  com.apple.WebCore             	0x92550004 WebCore::Font::drawGlyphBuffer(WebCore::GraphicsContext*, WebCore::GlyphBuffer const&, WebCore::TextRun const&, WebCore::FloatPoint const&) const + 212
16  com.apple.WebCore             	0x9254fbc7 WebCore::Font::drawSimpleText(WebCore::GraphicsContext*, WebCore::TextRun const&, WebCore::FloatPoint const&, int, int) const + 359
17  com.apple.WebCore             	0x9271ea27 WebCore::GraphicsContext::drawBidiText(WebCore::Font const&, WebCore::TextRun const&, WebCore::FloatPoint const&) + 759
18  com.apple.WebCore             	0x928c0779 WebCore::CanvasRenderingContext2D::drawTextInternal(WebCore::String const&, float, float, bool, float, bool) + 2041
19  com.apple.WebCore             	0x928c0cdf WebCore::CanvasRenderingContext2D::fillText(WebCore::String const&, float, float) + 63
20  com.apple.WebCore             	0x928c096b WebCore::JSCanvasRenderingContext2D::fillText(JSC::ExecState*, JSC::ArgList const&) + 251
21  com.apple.WebCore             	0x928c0863 WebCore::jsCanvasRenderingContext2DPrototypeFunctionFillText(JSC::ExecState*, JSC::JSObject*, JSC::JSValue, JSC::ArgList const&) + 115
22  ???                           	0x0074820f 0 + 7635471
23  com.apple.JavaScriptCore      	0x95e7d770 JSC::Interpreter::execute(JSC::CallFrameClosure&, JSC::JSValue*) + 192
24  ???                           	0x1c0083d0 0 + 469795792
25  ???                           	0x0000000a 0 + 10