(gdb) r /tmp/sample.svg
Starting program: /usr/bin/eog /home/sauli/Desktop/librsvg/fubwt-1116.svg
[Thread debugging using libthread_db enabled]
[New Thread 0xb7e7db70 (LWP 21478)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb7e7db70 (LWP 21478)]
rsvg_css_parse_xml_attribute_string (
    attribute_string=0x842cca0 "typxt pon\" x=\"350\" {sts=\"ml-tless\" ")
    at rsvg-css.c:1250
1250	rsvg-css.c: No such file or directory.
	in rsvg-css.c
(gdb) backtrace full
#0  rsvg_css_parse_xml_attribute_string (
    attribute_string=0x842cca0 "typxt pon\" x=\"350\" {sts=\"ml-tless\" ")
    at rsvg-css.c:1250
        i = 1
        nb_atts = 3
        attributes = 0x8409600
        _attribute_string = 0x842cd70 "<tag typxt pon\" x=\"350\" {sts=\"ml-tless\"  />\n"
#1  0x01836f5b in rsvg_processing_instruction (ctx=0x83125f8, 
    target=0x8335043 "xml-stylesheet", 
    data=0x842cca0 "typxt pon\" x=\"350\" {sts=\"ml-tless\" ")
    at rsvg-base.c:919
        atts = 0xfc0efb00
        xml_atts = 0xb7e7ce58
#2  0x00cb53b6 in xmlParsePI () from /usr/lib/libxml2.so.2
No symbol table info available.
#3  0x00cbff04 in ?? () from /usr/lib/libxml2.so.2
No symbol table info available.
#4  0x00cc0dc5 in xmlParseChunk () from /usr/lib/libxml2.so.2
No symbol table info available.
#5  0x018366da in rsvg_handle_write_impl (handle=0x83125f8, buf=0x0, 
    count=1552, error=0x840940c) at rsvg-base.c:1128
        real_error = 0x0
        result = <value optimized out>
        __PRETTY_FUNCTION__ = "rsvg_handle_write_impl"
#6  0x0180ca34 in gdk_pixbuf__svg_image_load_increment (data=0x82bdbc0, 
    buf=0x82a7e48 "<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<?xml-stylesheet typxt pon\" x=\"350\" {sts=\"ml-tless\" ?>\n<!DOCTYP120000110\"\" >\n    <reete: SVG 1.0//EN\" \"http://www.w3.org/TR/2001/Rme\" ?>\n</tle\" 4/DTD/svg10."..., size=1552, error=0x840940c) at io-svg.c:128
No locals.
#7  0x00871d1e in IA__gdk_pixbuf_loader_write (loader=0x8319440, 
    buf=0x82a7e48 "<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<?xml-stylesheet typxt pon\" x=\"350\" {sts=\"ml-tless\" ?>\n<!DOCTYP120000110\"\" >\n    <reete: SVG 1.0//EN\" \"http://www.w3.org/TR/2001/Rme\" ?>\n</tle\" 4/DTD/svg10."..., count=1552, error=0x840940c)
    at /build/buildd/gtk+2.0-2.20.1/gdk-pixbuf/gdk-pixbuf-loader.c:473
        priv = 0xa
        __PRETTY_FUNCTION__ = "IA__gdk_pixbuf_loader_write"
#8  0x0807c324 in eog_image_real_load (img=0x80eee10, data2read=15, 
    job=0x8409400, error=0x840940c) at eog-image.c:991
        mime_type = <value optimized out>
        buffer = <value optimized out>
        set_metadata = 1
        input_stream = 0x82f00c0
        failed = <value optimized out>
        md_reader = 0x0
        bytes_read = 1552
        read_image_data = 1
        priv = 0x80eee20
        format = <value optimized out>
        loader = 0x8319440
        bytes_read_total = 0
        first_run = 1
        read_only_dimension = 0
#9  eog_image_load (img=0x80eee10, data2read=15, job=0x8409400, 
    error=0x840940c) at eog-image.c:1206
        priv = 0x80eee20
        success = <value optimized out>
        __PRETTY_FUNCTION__ = "eog_image_load"
#10 0x08088050 in eog_job_load_run (job=0x8409400) at eog-jobs.c:336
        __PRETTY_FUNCTION__ = "eog_job_load_run"
#11 0x08087da4 in eog_job_run (job=0x8409400) at eog-jobs.c:153
        __PRETTY_FUNCTION__ = "eog_job_run"
#12 0x080877d7 in handle_job (data=0x0) at eog-job-queue.c:77
No locals.
#13 eog_render_thread (data=0x0) at eog-job-queue.c:146
        job = 0x8409400
#14 0x00bfbdef in ?? () from /lib/libglib-2.0.so.0
No symbol table info available.
#15 0x00b3d96e in start_thread (arg=0xb7e7db70) at pthread_create.c:300
        __res = <value optimized out>
        __ignore1 = <value optimized out>
        __ignore2 = <value optimized out>
        pd = 0xb7e7db70
        now = <value optimized out>
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {11853812, 0, 4001536, 
                -1209543688, 675892679, -2141384535}, mask_was_saved = 0}}, 
          priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, 
              cleanup = 0x0, canceltype = 0}}}
        not_first_call = <value optimized out>
        robust = <value optimized out>
        freesize = <value optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#16 0x00faaa4e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130
No locals.
(gdb) info registers
eax            0x0	0
ecx            0xa	10
edx            0x0	0
ebx            0x1841ff4	25436148
esp            0xb7e7cdd0	0xb7e7cdd0
ebp            0xb7e7ce18	0xb7e7ce18
esi            0x8409610	138450448
edi            0x1	1
eip            0x181687b	0x181687b <rsvg_css_parse_xml_attribute_string+203>
eflags         0x10246	[ PF ZF IF RF ]
cs             0x73	115
ss             0x7b	123
ds             0x7b	123
es             0x7b	123
fs             0x0	0
gs             0x33	51
(gdb) x/16i $pc
=> 0x181687b <rsvg_css_parse_xml_attribute_string+203>:	movsbl (%edx),%ecx
   0x181687e <rsvg_css_parse_xml_attribute_string+206>:	
    movzbl -0x40f4(%ebx,%ecx,1),%ecx
   0x1816886 <rsvg_css_parse_xml_attribute_string+214>:	sub    $0x5,%ecx
   0x1816889 <rsvg_css_parse_xml_attribute_string+217>:	cmp    $0x18,%cl
   0x181688c <rsvg_css_parse_xml_attribute_string+220>:	
    ja     0x1816838 <rsvg_css_parse_xml_attribute_string+136>
   0x181688e <rsvg_css_parse_xml_attribute_string+222>:	movzbl %cl,%ecx
   0x1816891 <rsvg_css_parse_xml_attribute_string+225>:	
    mov    -0x4168(%ebx,%ecx,4),%ecx
   0x1816898 <rsvg_css_parse_xml_attribute_string+232>:	add    %ebx,%ecx
   0x181689a <rsvg_css_parse_xml_attribute_string+234>:	jmp    *%ecx
   0x181689c <rsvg_css_parse_xml_attribute_string+236>:	
    lea    0x0(%esi,%eiz,1),%esi
   0x18168a0 <rsvg_css_parse_xml_attribute_string+240>:	add    $0x1,%edx
   0x18168a3 <rsvg_css_parse_xml_attribute_string+243>:	
    jmp    0x181687b <rsvg_css_parse_xml_attribute_string+203>
   0x18168a5 <rsvg_css_parse_xml_attribute_string+245>:	lea    0x0(%esi),%esi
   0x18168a8 <rsvg_css_parse_xml_attribute_string+248>:	add    $0x4,%edx
   0x18168ab <rsvg_css_parse_xml_attribute_string+251>:	
    jmp    0x181687b <rsvg_css_parse_xml_attribute_string+203>
   0x18168ad <rsvg_css_parse_xml_attribute_string+253>:	lea    0x0(%esi),%esi
(gdb) thread apply all backtrace

Thread 2 (Thread 0xb7e7db70 (LWP 21478)):
#0  rsvg_css_parse_xml_attribute_string (
    attribute_string=0x842cca0 "typxt pon\" x=\"350\" {sts=\"ml-tless\" ")
    at rsvg-css.c:1250
#1  0x01836f5b in rsvg_processing_instruction (ctx=0x83125f8, 
    target=0x8335043 "xml-stylesheet", 
    data=0x842cca0 "typxt pon\" x=\"350\" {sts=\"ml-tless\" ")
    at rsvg-base.c:919
#2  0x00cb53b6 in xmlParsePI () from /usr/lib/libxml2.so.2
#3  0x00cbff04 in ?? () from /usr/lib/libxml2.so.2
#4  0x00cc0dc5 in xmlParseChunk () from /usr/lib/libxml2.so.2
#5  0x018366da in rsvg_handle_write_impl (handle=0x83125f8, buf=0x0, 
    count=1552, error=0x840940c) at rsvg-base.c:1128
#6  0x0180ca34 in gdk_pixbuf__svg_image_load_increment (data=0x82bdbc0, 
    buf=0x82a7e48 "<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<?xml-stylesheet typxt pon\" x=\"350\" {sts=\"ml-tless\" ?>\n<!DOCTYP120000110\"\" >\n    <reete: SVG 1.0//EN\" \"http://www.w3.org/TR/2001/Rme\" ?>\n</tle\" 4/DTD/svg10."..., size=1552, error=0x840940c) at io-svg.c:128
#7  0x00871d1e in IA__gdk_pixbuf_loader_write (loader=0x8319440, 
    buf=0x82a7e48 "<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<?xml-stylesheet typxt pon\" x=\"350\" {sts=\"ml-tless\" ?>\n<!DOCTYP120000110\"\" >\n    <reete: SVG 1.0//EN\" \"http://www.w3.org/TR/2001/Rme\" ?>\n</tle\" 4/DTD/svg10."..., count=1552, error=0x840940c)
    at /build/buildd/gtk+2.0-2.20.1/gdk-pixbuf/gdk-pixbuf-loader.c:473
#8  0x0807c324 in eog_image_real_load (img=0x80eee10, data2read=15, 
    job=0x8409400, error=0x840940c) at eog-image.c:991
#9  eog_image_load (img=0x80eee10, data2read=15, job=0x8409400, 
    error=0x840940c) at eog-image.c:1206
#10 0x08088050 in eog_job_load_run (job=0x8409400) at eog-jobs.c:336
#11 0x08087da4 in eog_job_run (job=0x8409400) at eog-jobs.c:153
#12 0x080877d7 in handle_job (data=0x0) at eog-job-queue.c:77
#13 eog_render_thread (data=0x0) at eog-job-queue.c:146
#14 0x00bfbdef in ?? () from /lib/libglib-2.0.so.0
#15 0x00b3d96e in start_thread (arg=0xb7e7db70) at pthread_create.c:300
#16 0x00faaa4e in clone () at ../sysdeps/unix/sysv/linux/i386/clone.S:130

Thread 1 (Thread 0xb7fdd760 (LWP 21475)):
#0  0x0012d422 in __kernel_vsyscall ()
#1  0x00f9cb86 in *__GI___poll (fds=0x1032ff4, nfds=9, timeout=-1)
    at ../sysdeps/unix/sysv/linux/poll.c:87
#2  0x00be24eb in g_poll () from /lib/libglib-2.0.so.0
#3  0x00bd50ac in ?? () from /lib/libglib-2.0.so.0
#4  0x00bd5817 in g_main_loop_run () from /lib/libglib-2.0.so.0
#5  0x00517309 in IA__gtk_main ()
    at /build/buildd/gtk+2.0-2.20.1/gtk/gtkmain.c:1219
#6  0x08060801 in main (argc=1, argv=0xbffff4e4) at main.c:239