diff --git a/LayoutTests/ChangeLog b/LayoutTests/ChangeLog
index 6edc36d53cb3..2ffb696c20f6 100644
--- a/LayoutTests/ChangeLog
+++ b/LayoutTests/ChangeLog
@@ -1,3 +1,14 @@
+2011-07-19  Rob Buis  <rbuis@rim.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64673
+        REGRESSION (Safari 5.0.5 - ToT): crash in SVG test http://dev.w3.org/SVG/profiles/1.1F2/test/harness/htmlObjectApproved/styling-pres-02-f.html
+
+        Reviewed by Nikolas Zimmermann.
+
+        * platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.png: Added.
+        * platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.txt: Added.
+        * svg/W3C-SVG-1.1-SE/styling-pres-02-f.svg: Added.
+
 2011-07-19  Chris Fleizach  <cfleizach@apple.com>
 
         If the control associated with a <label> is hidden, the label is also hidden (incorrectly)
diff --git a/LayoutTests/platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.png b/LayoutTests/platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.png
new file mode 100644
index 000000000000..1b642d4d99ff
Binary files /dev/null and b/LayoutTests/platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.png differ
diff --git a/LayoutTests/platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.txt b/LayoutTests/platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.txt
new file mode 100644
index 000000000000..9a7d54b2d923
--- /dev/null
+++ b/LayoutTests/platform/mac/svg/W3C-SVG-1.1-SE/styling-pres-02-f-expected.txt
@@ -0,0 +1,148 @@
+layer at (0,0) size 480x360
+  RenderView at (0,0) size 480x360
+layer at (0,0) size 480x360
+  RenderSVGRoot {svg} at (0,0) size 480x360
+    RenderSVGHiddenContainer {defs} at (0,0) size 0x0
+    RenderSVGContainer {g} at (0,0) size 440x225
+      RenderSVGText {text} at (10,5) size 340x19 contains 1 chunk(s)
+        RenderSVGInlineText {#text} at (0,0) size 340x19
+          chunk 1 text run 1 at (10.00,20.00) startOffset 0 endOffset 1 width 11.00: "T"
+          chunk 1 text run 2 at (19.29,20.00) startOffset 1 endOffset 3 width 19.01: "es"
+          chunk 1 text run 3 at (38.24,20.00) startOffset 3 endOffset 23 width 150.07: "ting inapplicable pr"
+          chunk 1 text run 4 at (188.11,20.00) startOffset 23 endOffset 28 width 44.03: "esent"
+          chunk 1 text run 5 at (232.12,20.00) startOffset 28 endOffset 38 width 70.04: "ation attr"
+          chunk 1 text run 6 at (302.18,20.00) startOffset 38 endOffset 42 width 29.02: "ibut"
+          chunk 1 text run 7 at (330.94,20.00) startOffset 42 endOffset 44 width 19.01: "es"
+      RenderSVGContainer {g} at (0,0) size 40x10
+        RenderSVGPath {path} at (0,0) size 0x0 [fill={[type=SOLID] [color=#000000]}] [data="M 0 0"]
+        RenderSVGImage {image} at (0,0) size 10x10
+        RenderSVGPath {rect} at (0,0) size 10x10 [fill={[type=SOLID] [color=#000000]}] [x=0.00] [y=0.00] [width=10.00] [height=10.00]
+        RenderSVGPath {circle} at (0,0) size 10x10 [fill={[type=SOLID] [color=#000000]}] [cx=0.00] [cy=0.00] [r=10.00]
+        RenderSVGPath {ellipse} at (0,0) size 10x5 [fill={[type=SOLID] [color=#000000]}] [cx=0.00] [cy=0.00] [rx=10.00] [ry=5.00]
+        RenderSVGPath {polyline} at (0,0) size 10x10 [fill={[type=SOLID] [color=#000000]}] [points="0 0 10 10"]
+        RenderSVGText {text} at (0,-15) size 40x19 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 11x19
+            chunk 1 text run 1 at (0.00,0.00) startOffset 0 endOffset 1 width 10.01: "a"
+          RenderSVGTSpan {tspan} at (0,0) size 11x19
+            RenderSVGInlineText {#text} at (10,0) size 11x19
+              chunk 1 text run 1 at (10.01,0.00) startOffset 0 endOffset 1 width 10.01: "b"
+          RenderSVGInline {tref} at (0,0) size 11x19
+            RenderSVGInlineText {#text} at (20,0) size 11x19
+              chunk 1 text run 1 at (20.02,0.00) startOffset 0 endOffset 1 width 10.01: "b"
+          RenderSVGTextPath {textPath} at (0,0) size 0x0
+          RenderSVGTSpan {altGlyph} at (0,0) size 10x19
+            RenderSVGInlineText {#text} at (30,0) size 10x19
+              chunk 1 text run 1 at (30.02,0.00) startOffset 0 endOffset 1 width 9.00: "c"
+        RenderSVGResourceLinearGradient {linearGradient} [id="linearGradient"] [gradientUnits=objectBoundingBox] [start=(0,0)] [end=(1,0)]
+          RenderSVGGradientStop {stop} [offset=0.00] [color=#000000]
+        RenderSVGResourceRadialGradient {radialGradient} [id="radialGradient"] [gradientUnits=objectBoundingBox] [center=(0.50,0.50)] [focal=(0.50,0.50)] [radius=0.50]
+          RenderSVGGradientStop {stop} [offset=0.00] [color=#000000]
+        RenderSVGResourceClipper {clipPath} [id="clipPath"] [clipPathUnits=userSpaceOnUse]
+      RenderSVGContainer {g} at (10,25) size 430x200
+        RenderSVGPath {rect} at (10,25) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=10.00] [y=25.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (40,28) size 75x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 75x15
+            chunk 1 text run 1 at (40.00,40.00) startOffset 0 endOffset 1 width 3.89: "f"
+            chunk 1 text run 2 at (43.86,40.00) startOffset 1 endOffset 13 width 70.80: "ill on image"
+        RenderSVGPath {rect} at (10,55) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=10.00] [y=55.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (40,58) size 133x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 133x15
+            chunk 1 text run 1 at (40.00,70.00) startOffset 0 endOffset 1 width 7.00: "s"
+            chunk 1 text run 2 at (46.96,70.00) startOffset 1 endOffset 2 width 3.89: "t"
+            chunk 1 text run 3 at (50.68,70.00) startOffset 2 endOffset 21 width 122.18: "op-opacity on tspan"
+        RenderSVGPath {rect} at (10,85) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=10.00] [y=85.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (40,88) size 100x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 100x15
+            chunk 1 text run 1 at (40.00,100.00) startOffset 0 endOffset 1 width 3.89: "f"
+            chunk 1 text run 2 at (43.75,100.00) startOffset 1 endOffset 14 width 77.03: "ont-size on r"
+            chunk 1 text run 3 at (120.63,100.00) startOffset 14 endOffset 17 width 18.68: "ect"
+        RenderSVGPath {rect} at (10,115) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=10.00] [y=115.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (40,118) size 113x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 113x15
+            chunk 1 text run 1 at (40.00,130.00) startOffset 0 endOffset 1 width 3.89: "f"
+            chunk 1 text run 2 at (43.75,130.00) startOffset 1 endOffset 6 width 31.12: "ont-s"
+            chunk 1 text run 3 at (74.83,130.00) startOffset 6 endOffset 8 width 10.89: "ty"
+            chunk 1 text run 4 at (85.67,130.00) startOffset 8 endOffset 17 width 49.01: "le on cir"
+            chunk 1 text run 5 at (134.60,130.00) startOffset 17 endOffset 20 width 17.89: "cle"
+        RenderSVGPath {rect} at (10,145) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=10.00] [y=145.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (40,148) size 107x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 107x15
+            chunk 1 text run 1 at (40.00,160.00) startOffset 0 endOffset 1 width 7.00: "s"
+            chunk 1 text run 2 at (46.96,160.00) startOffset 1 endOffset 2 width 3.89: "t"
+            chunk 1 text run 3 at (50.68,160.00) startOffset 2 endOffset 15 width 77.81: "op-color on t"
+            chunk 1 text run 4 at (128.30,160.00) startOffset 15 endOffset 16 width 7.78: "e"
+            chunk 1 text run 5 at (135.70,160.00) startOffset 16 endOffset 18 width 10.89: "xt"
+        RenderSVGPath {rect} at (10,175) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=10.00] [y=175.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (40,178) size 133x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 133x15
+            chunk 1 text run 1 at (40.00,190.00) startOffset 0 endOffset 1 width 3.89: "f"
+            chunk 1 text run 2 at (43.75,190.00) startOffset 1 endOffset 6 width 31.12: "ont-v"
+            chunk 1 text run 3 at (74.62,190.00) startOffset 6 endOffset 8 width 12.45: "ar"
+            chunk 1 text run 4 at (87.08,190.00) startOffset 8 endOffset 23 width 85.60: "iant on ellipse"
+        RenderSVGPath {rect} at (10,205) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=10.00] [y=205.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (40,208) size 154x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 154x15
+            chunk 1 text run 1 at (40.00,220.00) startOffset 0 endOffset 2 width 10.89: "le"
+            chunk 1 text run 2 at (50.75,220.00) startOffset 2 endOffset 4 width 7.78: "tt"
+            chunk 1 text run 3 at (58.34,220.00) startOffset 4 endOffset 6 width 12.45: "er"
+            chunk 1 text run 4 at (70.13,220.00) startOffset 6 endOffset 21 width 94.93: "-spacing on pol"
+            chunk 1 text run 5 at (164.99,220.00) startOffset 21 endOffset 22 width 7.00: "y"
+            chunk 1 text run 6 at (171.94,220.00) startOffset 22 endOffset 26 width 21.78: "line"
+        RenderSVGPath {rect} at (250,25) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=250.00] [y=25.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (280,28) size 109x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 109x15
+            chunk 1 text run 1 at (280.00,40.00) startOffset 0 endOffset 1 width 3.89: "f"
+            chunk 1 text run 2 at (283.85,40.00) startOffset 1 endOffset 17 width 93.37: "lood-color on tr"
+            chunk 1 text run 3 at (377.06,40.00) startOffset 17 endOffset 19 width 11.68: "ef"
+        RenderSVGPath {rect} at (250,55) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=250.00] [y=55.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (280,58) size 154x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 154x15
+            chunk 1 text run 1 at (280.00,70.00) startOffset 0 endOffset 1 width 3.89: "f"
+            chunk 1 text run 2 at (283.85,70.00) startOffset 1 endOffset 18 width 102.72: "lood-opacity on t"
+            chunk 1 text run 3 at (386.37,70.00) startOffset 18 endOffset 19 width 7.78: "e"
+            chunk 1 text run 4 at (393.78,70.00) startOffset 19 endOffset 22 width 20.23: "xtP"
+            chunk 1 text run 5 at (413.62,70.00) startOffset 22 endOffset 24 width 11.68: "at"
+            chunk 1 text run 6 at (425.25,70.00) startOffset 24 endOffset 25 width 7.78: "h"
+        RenderSVGPath {rect} at (250,85) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=250.00] [y=85.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (280,88) size 154x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 154x15
+            chunk 1 text run 1 at (280.00,100.00) startOffset 0 endOffset 3 width 14.77: "clr"
+            chunk 1 text run 2 at (294.11,100.00) startOffset 3 endOffset 10 width 35.78: "-intp-f"
+            chunk 1 text run 3 at (329.87,100.00) startOffset 10 endOffset 13 width 10.11: "ilt"
+            chunk 1 text run 4 at (339.78,100.00) startOffset 13 endOffset 15 width 12.45: "er"
+            chunk 1 text run 5 at (352.28,100.00) startOffset 15 endOffset 25 width 59.14: "s on altGl"
+            chunk 1 text run 6 at (411.35,100.00) startOffset 25 endOffset 28 width 22.57: "yph"
+        RenderSVGPath {rect} at (250,115) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=250.00] [y=115.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (280,118) size 155x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 155x15
+            chunk 1 text run 1 at (280.00,130.00) startOffset 0 endOffset 6 width 36.57: "displa"
+            chunk 1 text run 2 at (316.20,130.00) startOffset 6 endOffset 19 width 80.14: "y on linearGr"
+            chunk 1 text run 3 at (396.27,130.00) startOffset 19 endOffset 25 width 38.14: "adient"
+        RenderSVGPath {rect} at (250,145) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=250.00] [y=145.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (280,148) size 91x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 91x15
+            chunk 1 text run 1 at (280.00,160.00) startOffset 0 endOffset 1 width 3.89: "f"
+            chunk 1 text run 2 at (283.86,160.00) startOffset 1 endOffset 6 width 18.65: "ill-r"
+            chunk 1 text run 3 at (302.54,160.00) startOffset 6 endOffset 14 width 49.03: "ule on s"
+            chunk 1 text run 4 at (351.53,160.00) startOffset 14 endOffset 15 width 3.89: "t"
+            chunk 1 text run 5 at (355.25,160.00) startOffset 15 endOffset 17 width 15.57: "op"
+        RenderSVGPath {rect} at (250,175) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=250.00] [y=175.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (280,178) size 160x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 160x15
+            chunk 1 text run 1 at (280.00,190.00) startOffset 0 endOffset 15 width 76.23: "visibility on r"
+            chunk 1 text run 2 at (356.16,190.00) startOffset 15 endOffset 22 width 45.12: "adialGr"
+            chunk 1 text run 3 at (401.21,190.00) startOffset 22 endOffset 28 width 38.14: "adient"
+        RenderSVGPath {rect} at (250,205) size 20x20 [fill={[type=SOLID] [color=#008000]}] [x=250.00] [y=205.00] [width=20.00] [height=20.00]
+        RenderSVGText {text} at (280,208) size 153x15 contains 1 chunk(s)
+          RenderSVGInlineText {#text} at (0,0) size 153x15
+            chunk 1 text run 1 at (280.00,220.00) startOffset 0 endOffset 23 width 133.04: "lighting-color on clipP"
+            chunk 1 text run 2 at (412.65,220.00) startOffset 23 endOffset 25 width 11.68: "at"
+            chunk 1 text run 3 at (424.28,220.00) startOffset 25 endOffset 26 width 7.78: "h"
+    RenderSVGContainer {g} at (10,314) size 227x33
+      RenderSVGText {text} at (10,314) size 227x33 contains 1 chunk(s)
+        RenderSVGInlineText {#text} at (0,0) size 227x33
+          chunk 1 text run 1 at (10.00,340.00) startOffset 0 endOffset 2 width 40.90: "$R"
+          chunk 1 text run 2 at (50.51,340.00) startOffset 2 endOffset 3 width 17.79: "e"
+          chunk 1 text run 3 at (67.82,340.00) startOffset 3 endOffset 12 width 117.38: "vision: 1"
+          chunk 1 text run 4 at (182.83,340.00) startOffset 12 endOffset 16 width 53.38: ".9 $"
+    RenderSVGPath {rect} at (0,0) size 480x360 [stroke={[type=SOLID] [color=#000000]}] [x=1.00] [y=1.00] [width=478.00] [height=358.00]
diff --git a/LayoutTests/svg/W3C-SVG-1.1-SE/styling-pres-02-f.svg b/LayoutTests/svg/W3C-SVG-1.1-SE/styling-pres-02-f.svg
new file mode 100644
index 000000000000..1fdec539bce1
--- /dev/null
+++ b/LayoutTests/svg/W3C-SVG-1.1-SE/styling-pres-02-f.svg
@@ -0,0 +1,216 @@
+<svg id="svg-root" width="100%" height="100%"
+  viewBox="0 0 480 360" xmlns="http://www.w3.org/2000/svg"
+  xmlns:xlink="http://www.w3.org/1999/xlink">
+  <!--======================================================================-->
+  <!--=  Copyright 2008 World Wide Web Consortium, (Massachusetts          =-->
+  <!--=  Institute of Technology, European Research Consortium for         =-->
+  <!--=  Informatics and Mathematics (ERCIM), Keio University).            =-->
+  <!--=  All Rights Reserved.                                              =-->
+  <!--=  See http://www.w3.org/Consortium/Legal/.                          =-->
+  <!--======================================================================-->
+  <d:SVGTestCase xmlns:d="http://www.w3.org/2000/02/svg/testsuite/description/"
+    template-version="1.3" reviewer="CL" author="CM" status="accepted"
+    version="$Revision: 1.9 $" testname="$RCSfile: styling-pres-02-f.svg,v $">
+    <d:testDescription xmlns="http://www.w3.org/1999/xhtml" href="http://www.w3.org/TR/SVG11/styling.html#UsingPresentationAttributes">
+        <p>
+          This tests that a presentation attribute that is not relevant
+          to a given element which is otherwise stylable is correctly stored
+          in the property collection for that element.  In particular,
+          it tests the following presentation attributes:
+        </p>
+        <ul>
+          <li>fill on image</li>
+          <li>stop-opacity on tspan</li>
+          <li>font-size on rect</li>
+          <li>font-style on circle</li>
+          <li>stop-color on text</li>
+          <li>font-variant on ellipse</li>
+          <li>letter-spacing on polyline</li>
+          <li>flood-color on tref</li>
+          <li>flood-opacity on textPath</li>
+          <li>color-interpolation-filters on altGlyph</li>
+          <li>display on linearGradient</li>
+          <li>fill-rule on stop</li>
+          <li>visibility on radialGradient</li>
+          <li>lighting-color on clipPath</li>
+        </ul>
+    </d:testDescription>
+    <d:operatorScript xmlns="http://www.w3.org/1999/xhtml">
+      <p>
+        The test comprises 14 sub-tests, each with a rectangle that indicates
+        whether a given presentation attribute of the 14 listed in the test
+        description affects the style of the element on which it is specified.  A rectangle
+        is black if the sub-test did not run, red if the sub-test failed and
+        green if the sub-test succeeded.
+      </p>
+    </d:operatorScript>
+    <d:passCriteria xmlns="http://www.w3.org/1999/xhtml">
+      <p>
+        The test is passed if all 14 rectangles are green.
+      </p>
+    </d:passCriteria>
+  </d:SVGTestCase>
+  <title id="test-title">$RCSfile: styling-pres-02-f.svg,v $</title>
+  <defs>
+    <font-face
+      font-family="SVGFreeSansASCII"
+      unicode-range="U+0-7F">
+      <font-face-src>
+        <font-face-uri xlink:href="../custom/resources/SVGFreeSans.svg#ascii"/>
+      </font-face-src>
+    </font-face>
+  </defs>
+  <g id="test-body-content" font-family="SVGFreeSansASCII,sans-serif" font-size="18">
+    <text x='10' y='20'>Testing inapplicable presentation attributes</text>
+
+    <g visibility='hidden'>
+    	<path id="path" d="M0,0"/>
+      <image id='image' xlink:href='../images/20x20.png' width='10' height='10' fill='rgb(0, 0, 255)'/>
+      <rect id='rect' width='10' height='10' font-size='123px'/>
+      <circle id='circle' r='10' font-style='italic'/>
+      <ellipse id='ellipse' rx='10' ry='5' font-variant='small-caps'/>
+      <polyline id='polyline' points='0,0 10,10' letter-spacing='20px'/>
+      <text id='text' stop-color='rgb(0, 255, 0)'>a<tspan id='tspan' stop-opacity='0.5'>b</tspan><tref id='tref' xlink:href='#tspan' flood-color='rgb(255, 0, 0)'/><textPath id='textPath' xlink:href='#path' flood-opacity='0.25'/><altGlyph id='altGlyph' glyphRef='blah' color-interpolation-filters='auto'>c</altGlyph></text>
+      <linearGradient id='linearGradient' display='block'><stop id='stop' offset='0' fill-rule='evenodd'/></linearGradient>
+      <radialGradient id='radialGradient' visibility='hidden'><stop offset='0'/></radialGradient>
+      <clipPath id='clipPath' lighting-color='rgb(255, 255, 255)'/>
+    </g>
+
+    <g font-size='14'>
+      <rect id='r1' x='10' y='25' width='20' height='20'/>
+      <text x='40' y='40'>fill on image</text>
+
+      <rect id='r2' x='10' y='55' width='20' height='20'/>
+      <text x='40' y='70'>stop-opacity on tspan</text>
+
+      <rect id='r3' x='10' y='85' width='20' height='20'/>
+      <text x='40' y='100'>font-size on rect</text>
+
+      <rect id='r4' x='10' y='115' width='20' height='20'/>
+      <text x='40' y='130'>font-style on circle</text>
+
+      <rect id='r5' x='10' y='145' width='20' height='20'/>
+      <text x='40' y='160'>stop-color on text</text>
+
+      <rect id='r6' x='10' y='175' width='20' height='20'/>
+      <text x='40' y='190'>font-variant on ellipse</text>
+
+      <rect id='r7' x='10' y='205' width='20' height='20'/>
+      <text x='40' y='220'>letter-spacing on polyline</text>
+
+      <rect id='r11' x='250' y='25' width='20' height='20'/>
+      <text x='280' y='40'>flood-color on tref</text>
+
+      <rect id='r12' x='250' y='55' width='20' height='20'/>
+      <text x='280' y='70'>flood-opacity on textPath</text>
+
+      <rect id='r13' x='250' y='85' width='20' height='20'/>
+      <text x='280' y='100'>clr-intp-filters on altGlyph</text>
+
+      <rect id='r14' x='250' y='115' width='20' height='20'/>
+      <text x='280' y='130'>display on linearGradient</text>
+
+      <rect id='r15' x='250' y='145' width='20' height='20'/>
+      <text x='280' y='160'>fill-rule on stop</text>
+
+      <rect id='r16' x='250' y='175' width='20' height='20'/>
+      <text x='280' y='190'>visibility on radialGradient</text>
+
+      <rect id='r17' x='250' y='205' width='20' height='20'/>
+      <text x='280' y='220'>lighting-color on clipPath</text>
+    </g>
+
+    <script><![CDATA[
+      function $(x) { return document.getElementById(x) }
+      function decimalToHex(d) {
+        var hex = Number(d).toString(16);
+        while (hex.length < 2) {
+            hex = "0" + hex;
+        }
+        return hex;
+      }
+  
+      function checkSVGColor(e, p, r, g, b) {
+        var v;
+        try {
+          var cssstyledecl = document.defaultView.getComputedStyle(e,null);
+          var v = cssstyledecl.getPropertyValue(p);
+          var longhex = "#" + decimalToHex(r) + decimalToHex(g) + decimalToHex(b);
+          return v == "rgb(" + r + ", " + g + ", " + b + ")" ||
+                 v == "rgba(" + r + ", " + g + ", " + b + ", 1)" ||
+                 v == longhex ||
+                 v == longhex.toUpperCase();
+        } catch (ex) {
+        }
+        return false;
+      }
+
+      function checkFloat(e, p, f) {
+        var v;
+        try {
+          var cssstyledecl = document.defaultView.getComputedStyle(e,null);
+          v = cssstyledecl.getPropertyValue(p);
+          return parseFloat(v) == f;
+        } catch (ex) {
+        }
+        return false;
+      }
+
+      function checkPx(e, p, f) {
+        var v;
+        try {
+          var cssstyledecl = document.defaultView.getComputedStyle(e,null);
+          v = cssstyledecl.getPropertyValue(p);
+          return v == f;
+        } catch (ex) {
+        }
+        return false;
+      }
+
+      function checkIdent(e, p, i) {
+        var v;
+        i = i.toLowerCase();
+        try {
+          var cssstyledecl = document.defaultView.getComputedStyle(e,null);
+          v = cssstyledecl.getPropertyValue(p);
+          return v.toLowerCase() == i;
+        } catch (ex) {
+        }
+        return false;
+      }
+
+      function report(n, b) {
+        $('r' + n).setAttribute('fill', b ? 'green' : 'red');
+      }
+
+      report(1, checkSVGColor($('image'), 'fill', 0, 0, 255));
+      report(2, checkFloat($('tspan'), 'stop-opacity', 0.5));
+      report(3, checkPx($('rect'), 'font-size', '123px'));
+      report(4, checkIdent($('circle'), 'font-style', 'italic'));
+      report(5, checkSVGColor($('text'), 'stop-color', 0, 255, 0));
+      report(6, checkIdent($('ellipse'), 'font-variant', 'small-caps'));
+      report(7, checkPx($('polyline'), 'letter-spacing', '20px'));
+      
+      report(11, checkSVGColor($('tref'), 'flood-color', 255, 0, 0));
+      report(12, checkFloat($('textPath'), 'flood-opacity', 0.25));
+      report(13, checkIdent($('altGlyph'), 'color-interpolation-filters', 'auto'));
+      report(14, checkIdent($('linearGradient'), 'display', 'block'));
+      report(15, checkIdent($('stop'), 'fill-rule', 'evenodd'));
+      report(16, checkIdent($('radialGradient'), 'visibility', 'hidden'));
+      report(17, checkSVGColor($('clipPath'), 'lighting-color', 255, 255, 255));
+    ]]></script>
+  </g>
+  <g font-family="SVGFreeSansASCII,sans-serif" font-size="32">
+    <text id="revision" x="10" y="340" stroke="none"
+      fill="black">$Revision: 1.9 $</text>
+  </g>
+  <rect id="test-frame" x="1" y="1" width="478" height="358" fill="none" stroke="#000"/>
+  <!-- comment out this watermark once the test is approved -->
+  <!--
+  <g id="draft-watermark">
+    <rect x="1" y="1" width="478" height="20" fill="red" stroke="black" stroke-width="1"/>
+    <text font-family="SVGFreeSansASCII,sans-serif" font-weight="bold" font-size="20" x="240"
+      text-anchor="middle" y="18" stroke-width="0.5" stroke="black" fill="white">DRAFT</text>
+  </g>
+  -->
+</svg>
diff --git a/Source/WebCore/ChangeLog b/Source/WebCore/ChangeLog
index d1e28e7c81e4..bb3eefe8c63b 100644
--- a/Source/WebCore/ChangeLog
+++ b/Source/WebCore/ChangeLog
@@ -1,3 +1,17 @@
+2011-07-19  Rob Buis  <rbuis@rim.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64673
+        REGRESSION (Safari 5.0.5 - ToT): crash in SVG test http://dev.w3.org/SVG/profiles/1.1F2/test/harness/htmlObjectApproved/styling-pres-02-f.html
+
+        Reviewed by Nikolas Zimmermann.
+
+        Prevent calling back to the owning SVGTRefElement upon handling DOMSubtreeModified events.
+
+        Test: svg/W3C-SVG-1.1-SE/styling-pres-02-f.svg
+
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SubtreeModificationEventListener::handleEvent):
+
 2011-07-19  Tony Chang  <tony@chromium.org>
 
         use more specific types in CSSFlexValue
diff --git a/Source/WebCore/svg/SVGTRefElement.cpp b/Source/WebCore/svg/SVGTRefElement.cpp
index 76b5337e7df7..1afca63eca80 100644
--- a/Source/WebCore/svg/SVGTRefElement.cpp
+++ b/Source/WebCore/svg/SVGTRefElement.cpp
@@ -101,7 +101,7 @@ bool SubtreeModificationEventListener::operator==(const EventListener& listener)
 
 void SubtreeModificationEventListener::handleEvent(ScriptExecutionContext*, Event* event)
 {
-    if (event->type() == eventNames().DOMSubtreeModifiedEvent)
+    if (event->type() == eventNames().DOMSubtreeModifiedEvent && m_trefElement != event->target())
         m_trefElement->updateReferencedText();
 }