Bug 7040

I get the following segfault in my application, when it draws a filled rectangle
using a source pattern, with a scaling matrix.

I'm using the 1.1.6 snapshot of cairo, built with mingw on Ubuntu Breezy. The
build is statically linked to my application, and both cairo and my application
are compiled with profiling enabled.

Program received signal SIGSEGV, Segmentation fault.
0x0044fc22 in fbFetch_a8 (bits=0x0, x=36051646, width=58472014,
    buffer=0x228b94, indexed=0x0) at fbcompose.c:390
390     fbcompose.c: No such file or directory.
        in fbcompose.c
(gdb) bt
#0  0x0044fc22 in fbFetch_a8 (bits=0x0, x=36051646, width=58472014,
    buffer=0x228b94, indexed=0x0) at fbcompose.c:390
#1  0x004552ba in fbFetch (pict=0xc92520, x=0, y=0, width=14, buffer=0x228b94,
    mask=0x0, maskBits=0) at fbcompose.c:2741
#2  0x00458ea9 in pixman_compositeGeneral (op=PIXMAN_OPERATOR_OVER,
    pSrc=0xc92af0, pMask=0xc92520, pDst=0xc92280, xSrc=3, ySrc=11, xMask=0,
    yMask=0, xDst=0, yDst=0, width=14, height=13) at fbcompose.c:3839
#3  0x0042f40d in _cairo_image_surface_composite_trapezoids (
    op=CAIRO_OPERATOR_OVER, pattern=0x22f1c4, abstract_dst=0xc92320,
    antialias=CAIRO_ANTIALIAS_DEFAULT, src_x=3, src_y=11, dst_x=0, dst_y=0,
    width=14, height=13, traps=0xc92390, num_traps=1)
    at cairo-image-surface.c:840
#4  0x0042a0db in _cairo_surface_composite_trapezoids (op=CAIRO_OPERATOR_OVER,
    pattern=0x22f1c4, dst=0xc92320, antialias=CAIRO_ANTIALIAS_DEFAULT,
    src_x=3, src_y=11, dst_x=0, dst_y=0, width=14, height=13, traps=0xc92390,
    num_traps=1) at cairo-surface.c:1218
#5  0x00437fa6 in _cairo_surface_fallback_composite_trapezoids (
    op=CAIRO_OPERATOR_OVER, pattern=0x22f1c4, dst=0xc92f30,
    antialias=CAIRO_ANTIALIAS_DEFAULT, src_x=3, src_y=11, dst_x=3, dst_y=11,
    width=14, height=13, traps=0xc92390, num_traps=1)
    at cairo-surface-fallback.c:1157
#6  0x00437007 in _composite_traps_draw_func (closure=0x22efec,
    op=CAIRO_OPERATOR_OVER, src=0x22f1c4, dst=0xc92f30, dst_x=0, dst_y=0,
---Type <return> to continue, or q <return> to quit---
    extents=0x22eff4) at cairo-surface-fallback.c:492
#7  0x00436d21 in _clip_and_composite (clip=0x0, op=CAIRO_OPERATOR_OVER,
    src=0x22f1c4, draw_func=0x436f70 <_composite_traps_draw_func>,
    draw_closure=0x22efec, dst=0xc92f30, extents=0x22eff4)
    at cairo-surface-fallback.c:391
#8  0x00437492 in _clip_and_composite_trapezoids (src=0x22f1c4,
    op=CAIRO_OPERATOR_OVER, dst=0xc92f30, traps=0x22f134, clip=0x0,
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:640
#9  0x00437989 in _cairo_surface_fallback_fill (surface=0xc92f30,
    op=CAIRO_OPERATOR_OVER, source=0x22f1c4, path=0xc92fa8,
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001,
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface-fallback.c:832
#10 0x0042ab95 in _cairo_surface_fill (surface=0xc92f30,
    op=CAIRO_OPERATOR_OVER, source=0x22f284, path=0xc92fa8,
    fill_rule=CAIRO_FILL_RULE_WINDING, tolerance=0.10000000000000001,
    antialias=CAIRO_ANTIALIAS_DEFAULT) at cairo-surface.c:1176
#11 0x0043161f in _cairo_gstate_fill (gstate=0xc92100, path=0xc92fa8)
    at cairo-gstate.c:1023
#12 0x0042857f in cairo_fill_preserve (cr=0xc92fa0) at cairo.c:1835
#13 0x004285ba in cairo_fill (cr=0xc92fa0) at cairo.c:1813
#14 0x0042489a in mouttextxy (x=50, y=12, t=0x45f9b4 " T-TEC 3.01 ", nsav=1)
    at spectraw/wgraphic.c:2550
#15 0x00424982 in ttw_outtextxy (x=50, y=12, t=0x45f9b4 " T-TEC 3.01 ")
---Type <return> to continue, or q <return> to quit---
    at spectraw/wgraphic.c:2626
#16 0x00410212 in plotversion () at spectra/spesubg.c:143
#17 0x0041060f in cleargraphwindow2 () at spectra/spesubg.c:209
#18 0x0040e98b in C_CLEAR () at spectra/speintes.c:202
#19 0x0040f011 in interprete (intext=0x22f6c4 "clear Window;drawnl;", len=20)
    at spectra/speintes.c:429
#20 0x00417943 in myinterprete (t=0x22f6c4 "clear Window;drawnl;")
    at spectraw/t-twprc.c:193
#21 0x00418430 in plocur (command_id=108) at spectraw/t-twprc.c:433
#22 0x004164ef in WndProc (hWnd=0x1a0136, Message=15, wParam=0, lParam=0)
    at spectraw/t-tecw.c:943
#23 0x77d48734 in _libuser32_a_iname ()
#24 0x77d48816 in _libuser32_a_iname ()
#25 0x77d4b4c0 in _libuser32_a_iname ()
#26 0x77d4b50c in _libuser32_a_iname ()
#27 0x7c90eae3 in _libuser32_a_iname ()
#28 0x77d496c7 in _libuser32_a_iname ()
#29 0x00415e51 in WinMain (hInstance=0x400000, hPrevInstance=0x0,
    lpszCmdLine=0x241ef4 "", nCmdShow=10) at spectraw/t-tecw.c:554
#30 0x0045d877 in main ()