[cairo] pixman patch: crash in fbFetchPixel_a8r8g8b8

[Vladimir Vukicevic]

Howdy,

We're seeing a crash in fbFetchPixel_a8r8g8b8 as described in 
https://bugzilla.mozilla.org/show_bug.cgi?id=390898 -- I'll try to get a 
reduced test case, but I haven't done so yet.  Mats put together a patch 
that I've attached here, but I think it's a bandaid.  The problem is 
when we're in fbFetchTransformed, we MOD the x/y coordinates by the 
picture width/height correctly for the PIXMAN_REPEAT_NORMAL case -- but 
no such coordinate fixups are happening for REPEAT_{NONE,PAD,REFLECT} 
case (I'm not even sure if we ever get here for PAD/REFLECT).  We're 
seeing the y coordinate go negative, and thus we crash.  Any idea what's 
supposed to actually be happening here?  (And is the patch correct?)

     - Vlad

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: pixman-compose.patch
Url: http://lists.cairographics.org/archives/cairo/attachments/20070810/d9626b19/attachment.ksh