<html>
    <head>
      <base href="https://bugs.freedesktop.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Weston crash in multihead/x11/nested client exit, window fade out"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=104239">104239</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Weston crash in multihead/x11/nested client exit, window fade out
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>Wayland
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86-64 (AMD64)
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Linux (All)
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>normal
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>medium
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>weston
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>wayland-bugs@lists.freedesktop.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>ppaalanen@gmail.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>1. Running Xorg, start a parent Weston:
  $ weston --use-pixman --output-count=2 --width=700

2. open a weston-terminal

3. run child Weston from an X11 terminal outside of parent weston
  $ WAYLAND_DISPLAY=wayland-0 weston --use-pixman --fullscreen

4. mouse over the child window

5. Hit Ctrl-C in the X11 terminal where the child is running.

6. After the fade-out animation finishes, the parent Weston crashes:

==10922== Invalid read of size 8
==10922==    at 0x4E43A70: wl_signal_emit (wayland-server-core.h:467)
==10922==    by 0x4E487FB: weston_surface_destroy (compositor.c:1900)
==10922==    by 0xE54B151: fade_out_done_idle_cb (shell.c:2281)
==10922==    by 0x5081C0B: wl_event_loop_dispatch_idle (event-loop.c:600)
==10922==    by 0x5081CC1: wl_event_loop_dispatch (event-loop.c:646)
==10922==    by 0x5080454: wl_display_run (wayland-server.c:1245)
==10922==    by 0x4088E8: main (main.c:2140)
==10922==  Address 0x8 is not stack'd, malloc'd or (recently) free'd

Could be weston_surface destroy_signal list corruption or something.

Note, that I had to do all the steps exactly as above. Skip a step, and the
crash does not happen.</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>