Segmentation fault while exporting to Plain SVG

[Anshul Bhatnagar]

Inkscape crashes when we try and export the attached SVG from the SVG test suite to Plain SVG.

command used:
inkscape -z orig_shapes-polygon-02-t.svg --export-plain-svg=output.svg

Emergency save activated!
Emergency save completed. Inkscape will close now.
If you can reproduce this crash, please file a bug at www.inkscape.org
with a detailed description of the steps leading to the crash, so we can fix it.
Segmentation fault

Also tried using the UI. Some issue.

[su_v (suv-lp)]

Please provide information about OS/platform and Inkscape version (see Inkscape menu 'Help > About Inkscape').

[Christoffer Holmstedt (christoffer-holmstedt)]

Ubuntu 12.04.2 LTS and Inkscape 0.48.3.1 r9886
Ubuntu 12.04.2 LTS and Inkscape 0.48+devel r12426

With GUI "Save as" plain SVG. Confirmed, crashes for me aswell with both versions listed above.

[su_v (suv-lp)]

Reproduced on OS X 10.7.5 with 0.48.x r9950 and 0.48+devel r12425 (backtrace from trunk r12425 attached).

[su_v (suv-lp)]

Reduced test case based on 'orig_shapes-polygon-02-t.svg' attached: AFAICT the object which triggers the crash is

    <!-- Test polygon without points attribute. -->
    <polygon xml:id="polygon-01" fill="red" stroke="black" />

[Tomasz Boczkowski (penginsbacon)]

This patch adds NULL pointer check in sp_polygon_write, avoiding crash.

[Tomasz Boczkowski (penginsbacon)]

Also sending patch for 0.48.x series.

[su_v (suv-lp)]

Attaching updated version of patch based on current trunk (r12572)

(original one no longer applies - please review new version)

[jazzynico (jazzynico)]

Fix confirmed on Windows XP, 0.48.x branch revision 9663.

[Tomasz Boczkowski (penginsbacon)]

Updated patch for ikscape trunk confirmed on revision 12583 on Debian 7.1

[Kris (kris-degussem)]

Thanks for the path Anshul.
Fix committed to trunk revision 12839.

[Kris (kris-degussem)]

Committed for 0.48.5 in 0.48.x branch revision 9989.