[cairo-bugs] [Bug 91967] New: Assertion "(_cairo_atomic_int_get (&(&surface->ref_count)->ref_count) > 0)"

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=91967

            Bug ID: 91967
           Summary: Assertion "(_cairo_atomic_int_get
                    (&(&surface->ref_count)->ref_count) > 0)"
           Product: cairo
           Version: unspecified
          Hardware: Other
                OS: All
            Status: NEW
          Severity: major
          Priority: medium
         Component: xlib backend
          Assignee: chris at chris-wilson.co.uk
          Reporter: alberts.muktupavels at gmail.com
        QA Contact: cairo-bugs at cairographics.org

In _get_image_surface function I get assertion:
Assertion "(_cairo_atomic_int_get (&(&surface->ref_count)->ref_count) > 0)"
failed.

1) image is created in "if (try_shm && pixman_format)", line 785
2) then image->base is destroyed in same if, line 809
3) then cairo enters "if (ximage == NULL)", line 836
4) then it fails to get ximage and enters "if (ximage == NULL)", line 879
5) that moves to BAIL where cairo_surface_destroy is called on destroyed?
surface.

Application crash. I tried to add "if (cairo_surface_get_reference_count
(&image->base) != )" and it "fixed" assertion/crash. But I guess that is not
right way to fix it.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cairographics.org/archives/cairo-bugs/attachments/20150910/0cb93d95/attachment.html>