=================================================================
==8688== ERROR: AddressSanitizer: heap-use-after-free on address 0x7fe986a89d90 at pc 0x413f84 bp 0x7fff61f48bb0 sp 0x7fff61f48ba8
READ of size 4 at 0x7fe986a89d90 thread T0
    #0 0x413f83 in weston_surface_from_global_float /home/david/dev/git/weston/output/src/../../src/compositor.c:763
    #1 0x4140b9 in weston_surface_from_global_fixed /home/david/dev/git/weston/output/src/../../src/compositor.c:794
    #2 0x414ca3 in weston_compositor_pick_surface /home/david/dev/git/weston/output/src/../../src/compositor.c:948
    #3 0x424bc1 in default_grab_focus /home/david/dev/git/weston/output/src/../../src/input.c:109
    #4 0x41f8ae in notify_motion_absolute /home/david/dev/git/weston/output/src/../../src/input.c:661
    #5 0x7fe982e8f1f7 in xf_mouseEvent /home/david/dev/git/weston/output/src/../../src/compositor-rdp.c:780
    #6 0x7fe98281b6e8 in fastpath_recv_input_event_mouse /home/david/dev/git/FreeRDP/libfreerdp/core/fastpath.c:533 (discriminator 1)
    #7 0x7fe98281ba31 in fastpath_recv_input_event /home/david/dev/git/FreeRDP/libfreerdp/core/fastpath.c:601
    #8 0x7fe98281bb7a in fastpath_recv_inputs /home/david/dev/git/FreeRDP/libfreerdp/core/fastpath.c:647
    #9 0x7fe98282be5c in peer_recv_fastpath_pdu /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:248
    #10 0x7fe98282beab in peer_recv_pdu /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:256
    #11 0x7fe98282c19c in peer_recv_callback /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:336
    #12 0x7fe98281e401 in transport_check_fds /home/david/dev/git/FreeRDP/libfreerdp/core/transport.c:741
    #13 0x7fe982819630 in rdp_check_fds /home/david/dev/git/FreeRDP/libfreerdp/core/rdp.c:968
    #14 0x7fe98282b7de in freerdp_peer_check_fds /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:63
    #15 0x7fe982e8f56a in rdp_client_activity /home/david/dev/git/weston/output/src/../../src/compositor-rdp.c:617
    #16 0x7fe9867b5d22 in wl_event_loop_dispatch /home/david/dev/git/wayland_/output/src/../../src/event-loop.c:421
    #17 0x86b235c000000000
0x7fe986a89d90 is located 336 bytes inside of 840-byte region [0x7fe986a89c40,0x7fe986a89f88)
freed by thread T0 here:
    #0 0x449cc0 in __interceptor_free ??:?
    #1 0x7fe9867b7af5 in for_each_helper /home/david/dev/git/wayland_/output/src/../../src/wayland-util.c:353
previously allocated by thread T0 here:
    #0 0x449df1 in calloc ??:?
    #1 0x4114cc in weston_surface_create /home/david/dev/git/weston/output/src/../../src/compositor.c:275
    #2 0x41b7f9 in compositor_create_surface /home/david/dev/git/weston/output/src/../../src/compositor.c:1685
    #3 0x7fe984d6cc17 in ?? ??:0
Shadow byte and word:
  0x1ffd30d513b2: fd
  0x1ffd30d513b0: fd fd fd fd fd fd fd fd
More shadow bytes:
  0x1ffd30d51390: fd fd fd fd fd fd fd fd
  0x1ffd30d51398: fd fd fd fd fd fd fd fd
  0x1ffd30d513a0: fd fd fd fd fd fd fd fd
  0x1ffd30d513a8: fd fd fd fd fd fd fd fd
=>0x1ffd30d513b0: fd fd fd fd fd fd fd fd
  0x1ffd30d513b8: fd fd fd fd fd fd fd fd
  0x1ffd30d513c0: fd fd fd fd fd fd fd fd
  0x1ffd30d513c8: fd fd fd fd fd fd fd fd
  0x1ffd30d513d0: fd fd fd fd fd fd fd fd
Stats: 71M malloced (9M for red zones) by 23086 calls
Stats: 63M realloced by 2079 calls
Stats: 64M freed by 17806 calls
Stats: 3M really freed by 10384 calls
Stats: 81M (20744 full pages) mmaped in 147 calls
  mmaps   by size class: 7:16380; 8:6141; 9:2046; 10:511; 11:255; 12:128; 13:128; 14:32; 15:64; 16:984; 17:4; 18:4; 22:2;
  mallocs by size class: 7:14627; 8:5381; 9:1391; 10:186; 11:135; 12:119; 13:135; 14:25; 15:64; 16:1013; 17:4; 18:4; 22:2;
  frees   by size class: 7:9944; 8:4924; 9:1334; 10:172; 11:93; 12:113; 13:129; 14:24; 15:61; 16:1012;
  rfrees  by size class: 7:6472; 8:3484; 9:191; 10:88; 11:33; 12:23; 13:13; 14:6; 15:40; 16:34;
Stats: malloc large: 1087 small slow: 204
==8688== ABORTING