[cairo] Bug: Crash in cairo-1.9.8

[Jonathan Morton]

On 17 June 2010 11:37, Chris Wilson <chris at chris-wilson.co.uk> wrote:
> The bug was simply one path was using round() to check if the trapezoids
> were boxes and a later path used round_down() to finally convert the boxes
> into pixels, so causing us to attempt to fill from row 0 to -1.

I thought it might be something like that - just a case of finding it!

 - Jonathan Morton