[Wayland-bugs] [Bug 81194] New: Weston sends input events from freed surface

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=81194

          Priority: medium
            Bug ID: 81194
          Assignee: wayland-bugs at lists.freedesktop.org
           Summary: Weston sends input events from freed surface
          Severity: normal
    Classification: Unclassified
                OS: All
          Reporter: ricardo.vieira at tecnico.ulisboa.pt
          Hardware: Other
            Status: NEW
           Version: 1.5.0
         Component: weston
           Product: Wayland

when a wl_surface is destroyed it looks like the pointer and keyboard signals
are sent after the window is destroyed (for example the leave singnal)  and the
surface argument was already freed for example if we call 
wl_surface_get_user_data(surface) from pointer leave signal it segfaults

Steps to reproduce:

-Create a window
-Wait until the pointer handle enter event
-destroy the wl_surface from the window
-wait for events
-call wl_surface_get_user_data(surface) from pointer handle leave
-Segfault


I found this bug running the reopen test from glfw a multi-platform library for
OpenGL

Tested on Weston 7b9820766(master)

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/wayland-bugs/attachments/20140710/542c6ad1/attachment.html>