ok, thanks to Maarten's debugging we've found the issue. listener->grab
is not copied but rather referenced, leaving the grab stale once it was
deleted. Reproducible test case is simply:

XGrabButton()
pointer-emulating touch down
XUngrabButton()
trigger touch update/end

This doesn't necessarily crash, but once you run through valgrind to
reset memory after freeing it we have a reliable crasher.

-- 
You received this bug notification because you are a member of Ubuntu-X,
which is subscribed to xorg-server in Ubuntu.
https://bugs.launchpad.net/bugs/1068994

Title:
  button1 gets stuck after a while

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/1068994/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~ubuntu-x-swat
Post to     : ubuntu-x-swat@lists.launchpad.net
Unsubscribe : https://launchpad.net/~ubuntu-x-swat
More help   : https://help.launchpad.net/ListHelp

Reply via email to