Surface destroy_signal listener list corruption (infinite loops/use-after-frees/segfault in wl_signal_get/wl_signal_emit via get_wm_window/weston_surface_destroy)

transform_handler < wl_signal_emit < weston_view_update_transform < view_list_add < weston_compositor_build_view_list < weston_output_repaint …

The wl_list_for_each loop in wl_signal_get is infinite because an element of the list just points to itself.

This one is happening rather often for me :(