Comment 30 for bug 705078

Revision history for this message
Bryce Harrington (bryce) wrote :

While not precisely the same crash, deb #596155 and fdo #28882 bugs are all faulting on the same bit of code. create_bits_picture() attempts to instantiate an image via a call to pixman_image_create_bits(), however that call can fail under a variety of circumstances and return a NULL image pointer. This is then passed unchecked to pixman_image_set_has_client_clip() where it is dereferenced and generates a seg fault as a result.