compiz assert failure: *** glibc detected *** compiz: double free or corruption (!prev): 0x00007fa248593900 ***

Thank you for taking the time to report this crash and helping to make Ubuntu better. This particular crash has already been reported and is a duplicate of bug #857738, so is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Please continue to report any other bugs you may find.

There is a "new []" call in IOpenGLSurface::LockRect() that is matched with a "delete []" in IOpenGLSurface::UnlockRect.
In between, the memory that is allocated is passed to a client that writes it. Could it be that the clients writes beyond the allocated memory area and then corrupts it? It would help to have a detailed stacktrace.

Status changed to 'Confirmed' because the bug affects multiple users.

It happened after coming back after screensaver activated (blank with no lock)

I got this crash when wallpaper has tried to switch to another.

PanelMenuView.cpp was using potentially uninitialized memory

happened after logging in (screen lock) after hibernate

This bug was fixed in the package unity - 4.22.0-0ubuntu1

---------------
unity (4.22.0-0ubuntu1) oneiric; urgency=low

  * New upstream release.
    - unity 3d firefox window borders disappear (LP: #861143)
    - Desktop drawn with offset (LP: #862743)
    - Crash when selecting Evolution in alt-tab (LP: #859431)
    - unity-panel-service crashed with SIGSEGV in g_type_check_instance_cast()
      - with a11y enabled (LP: #829367)
    - compiz crashed with SIGSEGV in
      unity::switcher::SwitcherController::~SwitcherController() (LP: #863302)
    - compiz assert failure: *** glibc detected *** compiz: double free or
      corruption (!prev): 0x00007fa248593900 *** (LP: #862938)
    - Onboard can cause unity to crash (LP: #863693)
    - compiz crashed with SIGSEGV in LauncherIcon::SetHasWindowOnViewport()
      (LP: #863652)
    - Dash opens the wrong application after scrolling in the application list
      (LP: #863555)
    - Categories "Applications" and "Files and folders" are untranslated
      (LP: #865430)
    - focus nautilus desktop to get focus at startup (LP: #863037)
    - The 'Desktop' label isn't shown if you use "Show desktop" in alt + tab
      (LP: #863129)
    - UIFe: Remove Ubuntu logo again from desktop title (LP: #865150)
    - compiz assert failure: *** glibc detected *** compiz: free(): corrupted
      unsorted chunks: 0x0000000004a1d390 *** (LP: #863303)
    - Fix a mem leak
    - compiz crashed with SIGSEGV in unity::dash::LensView::~LensView()
      (LP: #863191)
 -- Didier Roche <email address hidden> Tue, 04 Oct 2011 15:45:58 +0200

got this crash again today

giovanni@whale:~$ apt-cache policy unity
unity:
  Installato: 4.22.0-0ubuntu2
  Candidato: 4.22.0-0ubuntu2
  Tabella versione:
 *** 4.22.0-0ubuntu2 0
        500 http://it.archive.ubuntu.com/ubuntu/ oneiric/main i386 Packages
        100 /var/lib/dpkg/status
giovanni@whale:~$

Same here, apparently not fixed yet.