Nice, thanks for sharing!
I don't see any obvious flaws in "canvas.pattern" that could cause a segfault. If you're able to zero in on a reproduction case for the crash, please file a bug report.
