[cairo] crash at XRenderAddGlyphs.

[sunmoon1997]

-----BEGIN PGP MESSAGE-----
Charset: ISO-8859-1
Version: GnuPG v1.4.2 (GNU/Linux)
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=8rrp
-----END PGP MESSAGE-----

-------------- next part --------------
Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x81104d0) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x814b790 "@", owns_data = 1, has_clip = 0,
  width = 13, height = 13, stride = 4, depth = 1, pixman_image = 0x8117eb8}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x8141bc8) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x8118950 " ", owns_data = 1, has_clip = 0,
  width = 13, height = 13, stride = 4, depth = 1, pixman_image = 0x814bb38}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x8141c28) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x814bc20 "\020\001", owns_data = 1,
  has_clip = 0, width = 13, height = 13, stride = 4, depth = 1,
  pixman_image = 0x814bc58}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x8118668) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x814bd60 " ", owns_data = 1, has_clip = 0,
  width = 13, height = 13, stride = 4, depth = 1, pixman_image = 0x814bdc0}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x81186c8) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x814bec8 " ", owns_data = 1, has_clip = 0,
  width = 13, height = 13, stride = 4, depth = 1, pixman_image = 0x814bf28}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x8118728) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x814c030 "\204", owns_data = 1,
  has_clip = 0, width = 13, height = 13, stride = 4, depth = 1,
  pixman_image = 0x814c090}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x8118788) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x814c198 "\030", owns_data = 1,
  has_clip = 0, width = 13, height = 13, stride = 4, depth = 1,
  pixman_image = 0x814c1f8}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x81187e8) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -11, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A1, data = 0x814c300 "\202", owns_data = 1,
  has_clip = 0, width = 13, height = 13, stride = 4, depth = 1,
  pixman_image = 0x814c360}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x8118848) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 0, device_y_offset = -0, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A8, data = 0x0, owns_data = 0, has_clip = 0,
  width = 0, height = 0, stride = 0, depth = 8, pixman_image = 0x814c490}
(gdb)
Continuing.

Breakpoint 1, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x81188a8) at cairo-xlib-surface.c:2076
2076        cairo_image_surface_t *glyph_surface = scaled_glyph->surface;
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 1, device_y_offset = -9, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A8, data = 0x814c598 "h埴è±
", owns_data = 1,
  has_clip = 0, width = 5, height = 9, stride = 8, depth = 8,
  pixman_image = 0x814c610}
(gdb) display glyph_info
6: glyph_info = {width = 53502, height = 47051, x = 10020, y = -18443,
  xOff = -26856, yOff = -16490}
(gdb) b 2195
Breakpoint 2 at 0xb7f1b444: file cairo-xlib-surface.c, line 2195.
(gdb) continue
Continuing.

Breakpoint 2, _cairo_xlib_surface_add_glyph (dpy=0x8099520,
    scaled_font=0x8118c38, scaled_glyph=0x81188a8) at cairo-xlib-surface.c:2195
2195        XSync(dpy, 0);
6: glyph_info = {width = 5, height = 9, x = -1, y = 9, xOff = 0, yOff = 0}
5: *scaled_glyph->surface = {base = {backend = 0xb7f52060, ref_count = 1,
    status = CAIRO_STATUS_SUCCESS, finished = 0, user_data = {size = 0,
      num_elements = 0, element_size = 12, elements = 0x0},
    device_x_offset = 1, device_y_offset = -9, device_x_scale = 1,
    device_y_scale = 1, next_clip_serial = 0, current_clip_serial = 0},
  format = CAIRO_FORMAT_A8, data = 0x814c598 "h埴è±
", owns_data = 1,
  has_clip = 0, width = 5, height = 9, stride = 8, depth = 8,
  pixman_image = 0x814c610}
(gdb)
Continuing.
fcitx: BadLength (poly request too large or internal Xlib length error)
X Error of failed request:  BadLength (poly request too large or internal Xlib length error)
  Major opcode of failed request:  150 (RENDER)
  Minor opcode of failed request:  20 (RenderAddGlyphs)
  Serial number of failed request:  721
  Current serial number in output stream:  722