Weston crash in multihead/x11/nested client exit, window fade out

Submitted by Pekka Paalanen

Assigned to Wayland bug list

Link to original bug (#104239)

Description

1. Running Xorg, start a parent Weston: $ weston --use-pixman --output-count=2 --width=700

2. open a weston-terminal

3. run child Weston from an X11 terminal outside of parent weston $ WAYLAND_DISPLAY=wayland-0 weston --use-pixman --fullscreen

4. mouse over the child window

5. Hit Ctrl-C in the X11 terminal where the child is running.

6. After the fade-out animation finishes, the parent Weston crashes:

==10922== Invalid read of size 8
==10922==    at 0x4E43A70: wl_signal_emit (wayland-server-core.h:467)
==10922==    by 0x4E487FB: weston_surface_destroy (compositor.c:1900)
==10922==    by 0xE54B151: fade_out_done_idle_cb (shell.c:2281)
==10922==    by 0x5081C0B: wl_event_loop_dispatch_idle (event-loop.c:600)
==10922==    by 0x5081CC1: wl_event_loop_dispatch (event-loop.c:646)
==10922==    by 0x5080454: wl_display_run (wayland-server.c:1245)
==10922==    by 0x4088E8: main (main.c:2140)
==10922==  Address 0x8 is not stack'd, malloc'd or (recently) free'd

Could be weston_surface destroy_signal list corruption or something.

Note, that I had to do all the steps exactly as above. Skip a step, and the crash does not happen.