Program: 74003
Project: 74003
Buggy source:
/** 
 * Render report content from design file
 * @param out
 * @throws Exception
 */
private void __renderReport(OutputStream out) throws Exception {
  HttpServletRequest request=(HttpServletRequest)pageContext.getRequest();
  Locale locale=(Locale)this.options.getOption(InputOptions.OPT_LOCALE);
  Boolean isMasterPageContent=(Boolean)this.options.getOption(InputOptions.OPT_IS_MASTER_PAGE_CONTENT);
  Boolean svgFlag=(Boolean)this.options.getOption(InputOptions.OPT_SVG_FLAG);
  String format=(String)this.options.getOption(InputOptions.OPT_FORMAT);
  Boolean isRtl=(Boolean)this.options.getOption(InputOptions.OPT_RTL);
  String servletPath=(String)this.options.getOption(InputOptions.OPT_SERVLET_PATH);
  IReportRunnable runnable=(IReportRunnable)this.reportDesignHandle.getDesignObject();
  String reportTitle=ParameterAccessor.htmlDecode(BirtUtility.getTitleFromDesign(reportDesignHandle));
  Map params=__handleParameters(reportDesignHandle,null);
  Collection parameterDefList=getReportService().getParameterDefinitions(reportDesignHandle,options,false);
  Map displayTexts=BirtUtility.getDisplayTexts(parameterDefList,null,(HttpServletRequest)pageContext.getRequest());
  String realReportletId=viewer.getReportletId();
  if (realReportletId == null) {
    if (viewer.getBookmark() != null && "String_Node_Str".equalsIgnoreCase(viewer.getIsReportlet())) {
      realReportletId=viewer.getBookmark();
    }
  }
  if (realReportletId != null) {
    String documentName=ParameterAccessor.getReportDocument(request,viewer.getReportDesign(),viewer.getId());
    ReportEngineService.getInstance().runReport(request,runnable,documentName,locale,parameters,displayTexts);
    IReportDocument doc=ReportEngineService.getInstance().openReportDocument(null,documentName,BirtTagUtil.getModuleOptions(viewer));
    ReportEngineService.getInstance().renderReportlet(out,request,doc,realReportletId,format,isMasterPageContent,svgFlag,null,locale,isRtl.booleanValue(),servletPath);
  }
 else {
    ReportEngineService.getInstance().runAndRenderReport(request,runnable,out,format,locale,isRtl.booleanValue(),params,isMasterPageContent.booleanValue(),svgFlag.booleanValue(),Boolean.TRUE,null,null,displayTexts,servletPath,reportTitle);
  }
}

Fixed version (ground truth):
/** 
 * Render report content from design file
 * @param out
 * @throws Exception
 */
private void __renderReport(OutputStream out) throws Exception {
  HttpServletRequest request=(HttpServletRequest)pageContext.getRequest();
  Locale locale=(Locale)this.options.getOption(InputOptions.OPT_LOCALE);
  Boolean isMasterPageContent=(Boolean)this.options.getOption(InputOptions.OPT_IS_MASTER_PAGE_CONTENT);
  Boolean svgFlag=(Boolean)this.options.getOption(InputOptions.OPT_SVG_FLAG);
  String format=(String)this.options.getOption(InputOptions.OPT_FORMAT);
  Boolean isRtl=(Boolean)this.options.getOption(InputOptions.OPT_RTL);
  String servletPath=(String)this.options.getOption(InputOptions.OPT_SERVLET_PATH);
  IReportRunnable runnable=(IReportRunnable)this.reportDesignHandle.getDesignObject();
  String reportTitle=ParameterAccessor.htmlDecode(BirtUtility.getTitleFromDesign(reportDesignHandle));
  Map params=__handleParameters(reportDesignHandle,null);
  Collection parameterDefList=getReportService().getParameterDefinitions(reportDesignHandle,options,false);
  Map displayTexts=BirtUtility.getDisplayTexts(parameterDefList,null,(HttpServletRequest)pageContext.getRequest());
  String realReportletId=viewer.getReportletId();
  if (realReportletId == null) {
    if (viewer.getBookmark() != null && "String_Node_Str".equalsIgnoreCase(viewer.getIsReportlet())) {
      realReportletId=viewer.getBookmark();
    }
  }
  if (realReportletId != null) {
    String documentName=ParameterAccessor.getReportDocument(request,viewer.getReportDesign(),viewer.getId());
    ReportEngineService.getInstance().runReport(request,runnable,documentName,locale,parameters,displayTexts);
    IReportDocument doc=ReportEngineService.getInstance().openReportDocument(null,documentName,BirtTagUtil.getModuleOptions(viewer));
    ReportEngineService.getInstance().renderReportlet(out,request,doc,realReportletId,format,isMasterPageContent.booleanValue(),svgFlag.booleanValue(),null,locale,isRtl.booleanValue(),servletPath);
  }
 else {
    ReportEngineService.getInstance().runAndRenderReport(request,runnable,out,format,locale,isRtl.booleanValue(),params,isMasterPageContent.booleanValue(),svgFlag.booleanValue(),Boolean.TRUE,null,null,displayTexts,servletPath,reportTitle);
  }
}