Bug 51057

Summary:	[bug] animation->frame_counter invalid memory access.
Product:	Wayland	Reporter:	min2 <min2>
Component:	weston	Assignee:	Wayland bug list <wayland-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	minor
Priority:	medium
Version:	unspecified
Hardware:	Other
OS:	Linux (All)
Whiteboard:
i915 platform:		i915 features:

Description min2 2012-06-13 20:55:51 UTC

==25194== Invalid read of size 4
==25194==    at 0x804F1B3: weston_output_repaint (compositor.c:1077)
==25194==    by 0x804F265: weston_output_finish_frame (compositor.c:1102)
==25194==    by 0x40C894E: finish_frame_handler (compositor-x11.c:287)
==25194==    by 0x40BC0D8: wl_event_source_timer_dispatch (event-loop.c:173)
==25194==    by 0x40BC7DE: wl_event_loop_dispatch (event-loop.c:410)
==25194==    by 0x40BA1DA: wl_display_run (wayland-server.c:1029)
==25194==    by 0x805451A: main (compositor.c:3363)
==25194==  Address 0x63b0898 is 8 bytes inside a block of size 164 free'd
==25194==    at 0x4027C02: free (vg_replace_malloc.c:366)
==25194==    by 0x80565BB: weston_zoom_destroy (util.c:117)
==25194==    by 0x8056643: weston_zoom_frame (util.c:144)
==25194==    by 0x804F1AF: weston_output_repaint (compositor.c:1076)
==25194==    by 0x804F265: weston_output_finish_frame (compositor.c:1102)
==25194==    by 0x40C894E: finish_frame_handler (compositor-x11.c:287)
==25194==    by 0x40BC0D8: wl_event_source_timer_dispatch (event-loop.c:173)
==25194==    by 0x40BC7DE: wl_event_loop_dispatch (event-loop.c:410)
==25194==    by 0x40BA1DA: wl_display_run (wayland-server.c:1029)
==25194==    by 0x805451A: main (compositor.c:3363)
==25194== 
==25194== Invalid write of size 4
==25194==    at 0x804F1BC: weston_output_repaint (compositor.c:1077)
==25194==    by 0x804F265: weston_output_finish_frame (compositor.c:1102)
==25194==    by 0x40C894E: finish_frame_handler (compositor-x11.c:287)
==25194==    by 0x40BC0D8: wl_event_source_timer_dispatch (event-loop.c:173)
==25194==    by 0x40BC7DE: wl_event_loop_dispatch (event-loop.c:410)
==25194==    by 0x40BA1DA: wl_display_run (wayland-server.c:1029)
==25194==    by 0x805451A: main (compositor.c:3363)
==25194==  Address 0x63b0898 is 8 bytes inside a block of size 164 free'd
==25194==    at 0x4027C02: free (vg_replace_malloc.c:366)
==25194==    by 0x80565BB: weston_zoom_destroy (util.c:117)
==25194==    by 0x8056643: weston_zoom_frame (util.c:144)
==25194==    by 0x804F1AF: weston_output_repaint (compositor.c:1076)
==25194==    by 0x804F265: weston_output_finish_frame (compositor.c:1102)
==25194==    by 0x40C894E: finish_frame_handler (compositor-x11.c:287)
==25194==    by 0x40BC0D8: wl_event_source_timer_dispatch (event-loop.c:173)
==25194==    by 0x40BC7DE: wl_event_loop_dispatch (event-loop.c:410)
==25194==    by 0x40BA1DA: wl_display_run (wayland-server.c:1029)
==25194==    by 0x805451A: main (compositor.c:3363)
==25194==

Comment 1 min2 2012-06-14 13:45:27 UTC

http://lists.freedesktop.org/archives/wayland-devel/2012-June/004046.html

Comment 2 Scott Moreau 2012-06-14 14:30:08 UTC

Perhaps we shouldn't close the bug report until a fix is actually committed?

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.