[Wayland-bugs] [Bug 67231] weston_release_seat() double frees focus_state

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=67231

--- Comment #1 from Mariusz Ceier <mceier+freedesktop at gmail.com> ---
I can confirm this, here's my stacktrace from valgrind:

==10637== Invalid write of size 8
==10637==    at 0x4E3FFD4: wl_list_remove (wayland-util.c:53)
==10637==    by 0xCEB6926: focus_state_destroy (shell.c:421)
==10637==    by 0xCEB6984: focus_state_seat_destroy (shell.c:434)
==10637==    by 0x41047C: wl_signal_emit (wayland-server.h:171)
==10637==    by 0x413BB9: weston_seat_release (input.c:1573)
==10637==    by 0x88343B3: rdp_peer_context_free (compositor-rdp.c:603)
==10637==    by 0x883445D: rdp_client_activity (compositor-rdp.c:622)
==10637==    by 0x4E3C967: wl_event_source_fd_dispatch (event-loop.c:86)
==10637==    by 0x4E3D318: wl_event_loop_dispatch (event-loop.c:421)
==10637==    by 0x4E3B615: wl_display_run (wayland-server.c:836)
==10637==    by 0x410340: main (compositor.c:3373)
==10637==  Address 0x8825968 is 24 bytes inside a block of size 120 free'd
==10637==    at 0x4C2AF7C: free (vg_replace_malloc.c:446)
==10637==    by 0x419EC5: input_method_notifier_destroy (text-backend.c:796)
==10637==    by 0x41047C: wl_signal_emit (wayland-server.h:171)
==10637==    by 0x413BB9: weston_seat_release (input.c:1573)
==10637==    by 0x88343B3: rdp_peer_context_free (compositor-rdp.c:603)
==10637==    by 0x883445D: rdp_client_activity (compositor-rdp.c:622)
==10637==    by 0x4E3C967: wl_event_source_fd_dispatch (event-loop.c:86)
==10637==    by 0x4E3D318: wl_event_loop_dispatch (event-loop.c:421)
==10637==    by 0x4E3B615: wl_display_run (wayland-server.c:836)
==10637==    by 0x410340: main (compositor.c:3373)
==10637==

I compile weston and wayland with -O0 so it includes also inline functions.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/wayland-bugs/attachments/20130723/dbbcc4ed/attachment.html>