Comment 2 for bug 1580555

Looking closer at SessionMediator::create_surface() there is at least one issue here:

The path with "request->stream_size() > 0" doesn't set buffer_stream_id to a meaningful value - although it is later used. Unfortunately this path is not exercised by our tests and examples so this has gone unnoticed.