A crash reproducible in Path::isEmpty() under RenderSVGShape::paint()