<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>100463</bug_id>
          
          <creation_ts>2012-10-25 22:42:33 -0700</creation_ts>
          <short_desc>MathML fuzzing bugs - 1</short_desc>
          <delta_ts>2012-12-06 21:03:59 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>MathML</component>
          <version>528+ (Nightly build)</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>98791</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Abhishek Arya">inferno</reporter>
          <assigned_to name="Dave Barton">dbarton</assigned_to>
          <cc>dbarton</cc>
    
    <cc>dglazkov</cc>
    
    <cc>eric</cc>
    
    <cc>fred.wang</cc>
    
    <cc>jchaffraix</cc>
    
    <cc>webkit.review.bot</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>751557</commentid>
    <comment_count>0</comment_count>
      <attachid>170816</attachid>
    <who name="Abhishek Arya">inferno</who>
    <bug_when>2012-10-25 22:42:33 -0700</bug_when>
    <thetext>Created attachment 170816
Testcase 1

Testcase 1:

=================================================================
==20749== ERROR: AddressSanitizer crashed on unknown address 0x000000000000 (pc 0x7fdf04bb8565 sp 0x7fffc2cc73a0 bp 0x7fffc2cc7690 T0)
AddressSanitizer can not provide additional info.
    #0 0x7fdf04bb8564 in WebCore::RenderMathMLSubSup::addChild(WebCore::RenderObject*, WebCore::RenderObject*) third_party/WebKit/Source/WebCore/rendering/mathml/RenderMathMLSubSup.cpp:93
    #1 0x7fdefda4f886 in WebCore::NodeRendererFactory::createRendererIfNeeded() third_party/WebKit/Source/WebCore/dom/NodeRenderingContext.cpp:263
    #2 0x7fdefd9975ec in WebCore::Node::createRendererIfNeeded() third_party/WebKit/Source/WebCore/dom/Node.cpp:1395
    #3 0x7fdefd765f07 in WebCore::Element::attach() third_party/WebKit/Source/WebCore/dom/Element.cpp:1004
    #4 0x7fdefd340c46 in WebCore::ContainerNode::attachChildren() third_party/WebKit/Source/WebCore/dom/ContainerNode.h:208
    #5 0x7fdefd332eee in WebCore::ContainerNode::attach() third_party/WebKit/Source/WebCore/dom/ContainerNode.cpp:707
    #6 0x7fdefd766041 in WebCore::Element::attach() third_party/WebKit/Source/WebCore/dom/Element.cpp:1019
    #7 0x7fdefd2a889b in WebCore::Node::reattach() third_party/WebKit/Source/WebCore/dom/Node.h:878
    #8 0x7fdefd768daf in WebCore::Element::recalcStyle(WebCore::Node::StyleChange) third_party/WebKit/Source/WebCore/dom/Element.cpp:1132
    #9 0x7fdefd76a46c in WebCore::Element::recalcStyle(WebCore::Node::StyleChange) third_party/WebKit/Source/WebCore/dom/Element.cpp:1218
    #10 0x7fdefd42abc9 in WebCore::Document::recalcStyle(WebCore::Node::StyleChange) third_party/WebKit/Source/WebCore/dom/Document.cpp:1855
    #11 0x7fdefd42c520 in WebCore::Document::updateStyleIfNeeded() third_party/WebKit/Source/WebCore/dom/Document.cpp:1903
    #12 0x7fdefd406c9a in WebCore::Document::styleRecalcTimerFired(WebCore::Timer&lt;WebCore::Document&gt;*) third_party/WebKit/Source/WebCore/dom/Document.cpp:1788
    #13 0x7fdefd621684 in WebCore::Timer&lt;WebCore::Document&gt;::fired() third_party/WebKit/Source/WebCore/platform/Timer.h:106
    #14 0x7fdeff73ed26 in WebCore::ThreadTimers::sharedTimerFiredInternal() third_party/WebKit/Source/WebCore/platform/ThreadTimers.cpp:116
    #15 0x7fdeff73dfe8 in WebCore::ThreadTimers::sharedTimerFired() third_party/WebKit/Source/WebCore/platform/ThreadTimers.cpp:93
    #16 0x7fdee499601c in webkit_glue::WebKitPlatformSupportImpl::DoTimeout() ./webkit/glue/webkitplatformsupport_impl.h:165
    #17 0x7fdee499e4cf in base::internal::RunnableAdapter&lt;void (webkit_glue::WebKitPlatformSupportImpl::*)()&gt;::Run(webkit_glue::WebKitPlatformSupportImpl*) ./base/bind_internal.h:134
    #18 0x7fdee499e11a in base::internal::InvokeHelper&lt;false, void, base::internal::RunnableAdapter&lt;void (webkit_glue::WebKitPlatformSupportImpl::*)()&gt;, void (webkit_glue::WebKitPlatformSupportImpl*)&gt;::MakeItSo(base::internal::RunnableAdapter&lt;void (webkit_glue::WebKitPlatformSupportImpl::*)()&gt;, webkit_glue::WebKitPlatformSupportImpl*) ./base/bind_internal.h:870
    #19 0x7fdee499de27 in base::internal::Invoker&lt;1, base::internal::BindState&lt;base::internal::RunnableAdapter&lt;void (webkit_glue::WebKitPlatformSupportImpl::*)()&gt;, void (webkit_glue::WebKitPlatformSupportImpl*), void (base::internal::UnretainedWrapper&lt;webkit_glue::WebKitPlatformSupportImpl&gt;)&gt;, void (webkit_glue::WebKitPlatformSupportImpl*)&gt;::Run(base::internal::BindStateBase*) ./base/bind_internal.h:1172
    #20 0x7fdef0b7752c in base::Callback&lt;void ()&gt;::Run() const ./base/callback.h:391
    #21 0x7fdef11c3f6b in base::Timer::RunScheduledTask() base/timer.cc:181
    #22 0x7fdef11c4920 in base::BaseTimerTaskInternal::Run() base/timer.cc:46
    #23 0x7fdef11c749f in base::internal::RunnableAdapter&lt;void (base::BaseTimerTaskInternal::*)()&gt;::Run(base::BaseTimerTaskInternal*) ./base/bind_internal.h:134
    #24 0x7fdef11c70ea in base::internal::InvokeHelper&lt;false, void, base::internal::RunnableAdapter&lt;void (base::BaseTimerTaskInternal::*)()&gt;, void (base::BaseTimerTaskInternal*)&gt;::MakeItSo(base::internal::RunnableAdapter&lt;void (base::BaseTimerTaskInternal::*)()&gt;, base::BaseTimerTaskInternal*) ./base/bind_internal.h:870
    #25 0x7fdef11c6de3 in base::internal::Invoker&lt;1, base::internal::BindState&lt;base::internal::RunnableAdapter&lt;void (base::BaseTimerTaskInternal::*)()&gt;, void (base::BaseTimerTaskInternal*), void (base::internal::OwnedWrapper&lt;base::BaseTimerTaskInternal&gt;)&gt;, void (base::BaseTimerTaskInternal*)&gt;::Run(base::internal::BindStateBase*) ./base/bind_internal.h:1172
    #26 0x7fdef0b7752c in base::Callback&lt;void ()&gt;::Run() const ./base/callback.h:391
    #27 0x7fdef0d94c8d in MessageLoop::RunTask(base::PendingTask const&amp;) base/message_loop.cc:470
    #28 0x7fdef0d96afa in MessageLoop::DeferOrRunPendingTask(base::PendingTask const&amp;) base/message_loop.cc:482
    #29 0x7fdef0d971b5 in MessageLoop::DoWork() base/message_loop.cc:661
    #30 0x7fdef0a8951d in base::MessagePumpGlib::HandleDispatch() base/message_pump_glib.cc:268
    #31 0x7fdef0a8b3a5 in (anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) base/message_pump_glib.cc:105
    #32 0x7fdedeca5d52 in g_main_dispatch /build/buildd/glib2.0-2.32.3/./glib/gmain.c:2539
Stats: 16M malloced (94M for red zones) by 94118 calls
Stats: 1M realloced by 1535 calls
Stats: 13M freed by 75985 calls
Stats: 0M really freed by 0 calls
Stats: 132M (33801 full pages) mmaped in 33 calls
  mmaps   by size class: 10:94185; 11:2047; 12:1024; 13:512; 14:256; 15:128; 16:64; 17:32; 18:32; 19:8;
  mallocs by size class: 10:91131; 11:1483; 12:957; 13:192; 14:220; 15:87; 16:21; 17:7; 18:18; 19:2;
  frees   by size class: 10:73729; 11:1312; 12:455; 13:173; 14:201; 15:78; 16:13; 17:4; 18:18; 19:2;
  rfrees  by size class:
Stats: malloc large: 27 small slow: 848
==20749== ABORTING</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>751559</commentid>
    <comment_count>1</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2012-10-25 22:43:43 -0700</bug_when>
    <thetext>Ask an ye shall receive?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>751567</commentid>
    <comment_count>2</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2012-10-25 22:52:55 -0700</bug_when>
    <thetext>http://trac.webkit.org/browser/trunk/Source/WebCore/rendering/mathml/RenderMathMLSubSup.cpp#L93

A null pointer on that line.

Presumably m_scripts is null.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>751577</commentid>
    <comment_count>3</comment_count>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2012-10-25 23:11:24 -0700</bug_when>
    <thetext>This one should be trivial for Dave (who presumably knows better than I do what m_scripts does) to fix.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>752685</commentid>
    <comment_count>4</comment_count>
      <attachid>171075</attachid>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-10-26 22:35:46 -0700</bug_when>
    <thetext>Created attachment 171075
Reduced test case

I&apos;m pretty sure the patch for bug 98791 fixes this. I will check and then mark this bug as a duplicate of that one.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>752688</commentid>
    <comment_count>5</comment_count>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-10-26 22:38:51 -0700</bug_when>
    <thetext>(In reply to comment #3)
&gt; This one should be trivial for Dave (who presumably knows better than I do what m_scripts does) to fix.

m_scripts is the anonymous box containing the subscript and/or superscript, by the way. (It&apos;s needed because a subscript and superscript are supposed to line up vertically, to be cool looking mathematics.)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>752852</commentid>
    <comment_count>6</comment_count>
      <attachid>171109</attachid>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-10-27 16:45:27 -0700</bug_when>
    <thetext>Created attachment 171109
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>752855</commentid>
    <comment_count>7</comment_count>
      <attachid>171109</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2012-10-27 17:12:49 -0700</bug_when>
    <thetext>Comment on attachment 171109
Patch

LGTM.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>752861</commentid>
    <comment_count>8</comment_count>
      <attachid>171109</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-10-27 18:25:55 -0700</bug_when>
    <thetext>Comment on attachment 171109
Patch

Rejecting attachment 171109 from commit-queue.

New failing tests:
mathml/msubsup-fuzz.html
Full output: http://queues.webkit.org/results/14618237</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>752866</commentid>
    <comment_count>9</comment_count>
      <attachid>171109</attachid>
    <who name="WebKit Review Bot">webkit.review.bot</who>
    <bug_when>2012-10-27 18:36:30 -0700</bug_when>
    <thetext>Comment on attachment 171109
Patch

Attachment 171109 did not pass chromium-ews (chromium-xvfb):
Output: http://queues.webkit.org/results/14611631

New failing tests:
mathml/msubsup-fuzz.html</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>752911</commentid>
    <comment_count>10</comment_count>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-10-27 23:25:40 -0700</bug_when>
    <thetext>Is there a way I can see the stack trace of these failures? Should I mark the test as possibly crashing and try to land it that way? Would the stack trace be available on a bot then, but not on the cr-linux EWS bot?

Sorry I can&apos;t figure out how to analyze the EWS failures. The test passed locally for me.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>753743</commentid>
    <comment_count>11</comment_count>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-10-29 14:06:09 -0700</bug_when>
    <thetext>I uploaded the mathml/msubsup-fuzz.html test that crashed on chromium-ews (chromium-xvfb), and it passes on a cr-linux bot:
http://build.webkit.org/builders/Chromium%20Linux%20Release%20%28Tests%29/builds/40442/steps/layout-test/logs/stdio contains:
13:38:48.368 14284 worker/3 mathml/msubsup-fuzz.html passed

Is it possible that chromium-ews (chromium-xvfb) had not yet gotten the patch for bug 98791, http://trac.webkit.org/changeset/132735 landed at 10/27/12 11:18:34? Or maybe mathml/msubsup-fuzz.html is really flaky, and will sometimes crash?

I think I will upload another patch to this bug, and see if it passes cr-linux.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>753771</commentid>
    <comment_count>12</comment_count>
      <attachid>171314</attachid>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-10-29 14:34:35 -0700</bug_when>
    <thetext>Created attachment 171314
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>753772</commentid>
    <comment_count>13</comment_count>
      <attachid>171314</attachid>
    <who name="Eric Seidel (no email)">eric</who>
    <bug_when>2012-10-29 14:35:09 -0700</bug_when>
    <thetext>Comment on attachment 171314
Patch

I assume this just for the EWS to chew on?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>753774</commentid>
    <comment_count>14</comment_count>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-10-29 14:37:52 -0700</bug_when>
    <thetext>(In reply to comment #13)
&gt; (From update of attachment 171314 [details])
&gt; I assume this just for the EWS to chew on?

I figure we&apos;ll wait to see what the EWS says first. If it passes, I guess I&apos;d like a r+ so we can cq+ it and hopefully close the bug.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>784388</commentid>
    <comment_count>15</comment_count>
      <attachid>171314</attachid>
    <who name="Julien Chaffraix">jchaffraix</who>
    <bug_when>2012-12-05 18:00:18 -0800</bug_when>
    <thetext>Comment on attachment 171314
Patch

View in context: https://bugs.webkit.org/attachment.cgi?id=171314&amp;action=review

It looks like this entry was removed in http://trac.webkit.org/changeset/133691 so the patch is moot.

&gt; LayoutTests/mathml/msubsup-fuzz.html:4
&gt; +    // This test crashed once on cr-linux-ews. See webkit.org/b/100463.

Not sure if it helps to add a comment as no one investigated the failure.

&gt; LayoutTests/platform/chromium/TestExpectations:1974
&gt; +# webkit.org/b/100463 mathml/msubsup-fuzz.html [ Crash Pass ] -- is this ok now?

We don&apos;t usually comment an entry: if it passes, we should just remove it.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>785598</commentid>
    <comment_count>16</comment_count>
    <who name="Dave Barton">dbarton</who>
    <bug_when>2012-12-06 21:03:59 -0800</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 98791 ***</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>170816</attachid>
            <date>2012-10-25 22:42:33 -0700</date>
            <delta_ts>2012-10-25 22:42:33 -0700</delta_ts>
            <desc>Testcase 1</desc>
            <filename>fuzz-twister-crash-textPath-attributes-iframe1349955709.81 (1).svg</filename>
            <type>image/svg+xml</type>
            <size>1224</size>
            <attacher name="Abhishek Arya">inferno</attacher>
            
              <data encoding="base64">PGJvZHkgaWQ9InRDRjEiPjxzdmcgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>171075</attachid>
            <date>2012-10-26 22:35:46 -0700</date>
            <delta_ts>2012-10-26 22:35:46 -0700</delta_ts>
            <desc>Reduced test case</desc>
            <filename>463.html</filename>
            <type>text/html</type>
            <size>80</size>
            <attacher name="Dave Barton">dbarton</attacher>
            
              <data encoding="base64">PG1hdGg+PG1zdWJzdXA+PG10ZXh0IHN0eWxlPSJkaXNwbGF5OiBub25lIj48L210ZXh0Pjxtbj4z
PC9tbj48L21zdWJzdXA+PC9tYXRoPgo=
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>171109</attachid>
            <date>2012-10-27 16:45:27 -0700</date>
            <delta_ts>2012-10-29 14:34:33 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-100463-20121027164356.patch</filename>
            <type>text/plain</type>
            <size>1411</size>
            <attacher name="Dave Barton">dbarton</attacher>
            
              <data encoding="base64">SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9D
aGFuZ2VMb2cJKHJldmlzaW9uIDEzMjc0MCkKKysrIExheW91dFRlc3RzL0NoYW5nZUxvZwkod29y
a2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDEyLTEwLTI3ICBEYXZpZCBCYXJ0b24gIDxk
YmFydG9uQG1hdGhzY3JpYmUuY29tPgorCisgICAgICAgIE1hdGhNTCBmdXp6aW5nIGJ1Z3MgLSAx
CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMDA0NjMK
KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBUaGUgcGF0
Y2ggZm9yIGJ1ZyA5ODc5MSBmaXhlZCB0aGlzLCBzbyB3ZSBqdXN0IGFkZCBhIHRlc3QuCisKKyAg
ICAgICAgKiBtYXRobWwvbXN1YnN1cC1mdXp6LWV4cGVjdGVkLnR4dDogQWRkZWQuCisgICAgICAg
ICogbWF0aG1sL21zdWJzdXAtZnV6ei5odG1sOiBBZGRlZC4KKwogMjAxMi0xMC0yNyAgRGF2aWQg
QmFydG9uICA8ZGJhcnRvbkBtYXRoc2NyaWJlLmNvbT4KIAogICAgICAgICBbTWF0aE1MXSBJbXBy
b3ZlIHNvbWUgYWRkQ2hpbGQgbWV0aG9kcwpJbmRleDogTGF5b3V0VGVzdHMvbWF0aG1sL21zdWJz
dXAtZnV6ei1leHBlY3RlZC50eHQKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvbWF0aG1sL21z
dWJzdXAtZnV6ei1leHBlY3RlZC50eHQJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0cy9tYXRo
bWwvbXN1YnN1cC1mdXp6LWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMCkKQEAgLTAsMCArMSw0IEBA
CitUaGlzIHRlc3QgcGFzc2VzIGlmIGl0IGRvZXMgbm90IGNyYXNoLgorCiszCisKSW5kZXg6IExh
eW91dFRlc3RzL21hdGhtbC9tc3Vic3VwLWZ1enouaHRtbAo9PT09PT09PT09PT09PT09PT09PT09
PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlvdXRU
ZXN0cy9tYXRobWwvbXN1YnN1cC1mdXp6Lmh0bWwJKHJldmlzaW9uIDApCisrKyBMYXlvdXRUZXN0
cy9tYXRobWwvbXN1YnN1cC1mdXp6Lmh0bWwJKHJldmlzaW9uIDApCkBAIC0wLDAgKzEsOCBAQAor
PHNjcmlwdD4KKyAgICBpZiAod2luZG93LnRlc3RSdW5uZXIpCisgICAgICAgIHRlc3RSdW5uZXIu
ZHVtcEFzVGV4dCgpOworPC9zY3JpcHQ+CisKKzxwPlRoaXMgdGVzdCBwYXNzZXMgaWYgaXQgZG9l
cyBub3QgY3Jhc2guPC9wPgorCis8bWF0aD48bXN1YnN1cD48bXRleHQgc3R5bGU9ImRpc3BsYXk6
IG5vbmUiPjwvbXRleHQ+PG1uPjM8L21uPjwvbXN1YnN1cD48L21hdGg+Cg==
</data>

          </attachment>
          <attachment
              isobsolete="1"
              ispatch="1"
              isprivate="0"
          >
            <attachid>171314</attachid>
            <date>2012-10-29 14:34:35 -0700</date>
            <delta_ts>2012-12-06 21:01:02 -0800</delta_ts>
            <desc>Patch</desc>
            <filename>bug-100463-20121029143301.patch</filename>
            <type>text/plain</type>
            <size>1958</size>
            <attacher name="Dave Barton">dbarton</attacher>
            
              <data encoding="base64">SW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09PT09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</data>

          </attachment>
      

    </bug>

</bugzilla>