ubuntu-x-swat team mailing list archive

[Bryce Harrington <705078@xxxxxxxxxxxxxxxxxx>]

Perfect mario, that points to the cause of the crash:

#0 0x00228004 in uxa_solid_rects (op=<value optimized out>, dst=0xbe38080, color=0xbdb73c0, num_rects=4, rects=0xbdb73c8) at ../../uxa/uxa-render.c:1070
        solid = 0x0
        src = 0x0

Code at this location is:

	                solid = uxa_acquire_solid(screen, src->pSourcePict);
                        FreePicture(src, 0);

                        src = solid;
                        src_pixmap = uxa_get_offscreen_pixmap(src->pDrawable,
                                                              &src_off_x, &src_off_y);

uxa_acquire_solid() can return 0 for all manner of different reasons, if
it could not create a solid picture.  Yet the return value isn't checked
before dereferencing it.  Looks like this code has been there for a
while, and doesn't appear to have been fixed in the upstream codebase
(at least, there's no null pointer check).

** Changed in: xorg-server (Ubuntu)
       Status: Incomplete => Triaged

** Changed in: xorg-server (Ubuntu)
     Assignee: (unassigned) => Bryce Harrington (bryce)

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to xorg-server in ubuntu.
https://bugs.launchpad.net/bugs/705078

Title:
  Xorg crashed with SIGSEGV in pixman_image_set_has_client_clip()