<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - _cairo_clip_set_all_clipped returns const value as non-const, caller modifies it -> crash on some platforms" href="https://bugs.freedesktop.org/show_bug.cgi?id=75819#c3">Comment # 3</a> on <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - _cairo_clip_set_all_clipped returns const value as non-const, caller modifies it -> crash on some platforms" href="https://bugs.freedesktop.org/show_bug.cgi?id=75819">bug 75819</a> from <a class="email" href="mailto:psychon@znc.in" title="Uli Schlachter <psychon@znc.in>"> Uli Schlachter</a> <pre>Chris, done. For something completely different (which really doesn't belong into this comment): Could you take a look at _cairo_clip_reduce_to_boxes()? That function has an unconditional "return clip" with wrong indentation as its first executed statement. That doesn't seem right... commit ed175b2a2bebb6def85133257bc11a875d13b0dd Author: Uli Schlachter <<a href="mailto:psychon@znc.in">psychon@znc.in</a>> Date: Thu Mar 6 09:45:08 2014 +0100 clip: Fix handling of special all-clipped cairo_clip_t _cairo_clip_intersect_box() wasn't checking if it was called with the special, read-only all-clipped clip and thus could have ended up writing to read-only memory. References: <a class="bz_bug_link bz_status_RESOLVED bz_closed" title="RESOLVED FIXED - _cairo_clip_set_all_clipped returns const value as non-const, caller modifies it -> crash on some platforms" href="show_bug.cgi?id=75819">https://bugs.freedesktop.org/show_bug.cgi?id=75819</a> Signed-off-by: Uli Schlachter <<a href="mailto:psychon@znc.in">psychon@znc.in</a>></pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> </ul> </body> </html>