<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW --- - weston_release_seat() double frees focus_state" href="https://bugs.freedesktop.org/show_bug.cgi?id=67231#c1">Comment # 1</a> on <a class="bz_bug_link bz_status_NEW " title="NEW --- - weston_release_seat() double frees focus_state" href="https://bugs.freedesktop.org/show_bug.cgi?id=67231">bug 67231</a> from <a class="email" href="mailto:mceier+freedesktop@gmail.com" title="Mariusz Ceier <mceier+freedesktop@gmail.com>"> Mariusz Ceier</a> <pre>I can confirm this, here's my stacktrace from valgrind: ==10637== Invalid write of size 8 ==10637== at 0x4E3FFD4: wl_list_remove (wayland-util.c:53) ==10637== by 0xCEB6926: focus_state_destroy (shell.c:421) ==10637== by 0xCEB6984: focus_state_seat_destroy (shell.c:434) ==10637== by 0x41047C: wl_signal_emit (wayland-server.h:171) ==10637== by 0x413BB9: weston_seat_release (input.c:1573) ==10637== by 0x88343B3: rdp_peer_context_free (compositor-rdp.c:603) ==10637== by 0x883445D: rdp_client_activity (compositor-rdp.c:622) ==10637== by 0x4E3C967: wl_event_source_fd_dispatch (event-loop.c:86) ==10637== by 0x4E3D318: wl_event_loop_dispatch (event-loop.c:421) ==10637== by 0x4E3B615: wl_display_run (wayland-server.c:836) ==10637== by 0x410340: main (compositor.c:3373) ==10637== Address 0x8825968 is 24 bytes inside a block of size 120 free'd ==10637== at 0x4C2AF7C: free (vg_replace_malloc.c:446) ==10637== by 0x419EC5: input_method_notifier_destroy (text-backend.c:796) ==10637== by 0x41047C: wl_signal_emit (wayland-server.h:171) ==10637== by 0x413BB9: weston_seat_release (input.c:1573) ==10637== by 0x88343B3: rdp_peer_context_free (compositor-rdp.c:603) ==10637== by 0x883445D: rdp_client_activity (compositor-rdp.c:622) ==10637== by 0x4E3C967: wl_event_source_fd_dispatch (event-loop.c:86) ==10637== by 0x4E3D318: wl_event_loop_dispatch (event-loop.c:421) ==10637== by 0x4E3B615: wl_display_run (wayland-server.c:836) ==10637== by 0x410340: main (compositor.c:3373) ==10637== I compile weston and wayland with -O0 so it includes also inline functions.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>