Reduced test case based on 'orig_shapes-polygon-02-t.svg' attached: AFAICT the object which triggers the crash is
<!-- Test polygon without points attribute. --> <polygon xml:id="polygon-01" fill="red" stroke="black" />
Reduced test case based on 'orig_shapes- polygon- 02-t.svg' attached: AFAICT the object which triggers the crash is
<!-- Test polygon without points attribute. -->
<polygon xml:id="polygon-01" fill="red" stroke="black" />