Comment 3 for bug 862938

Revision history for this message
Jay Taoko (jaytaoko) wrote :

There is a "new []" call in IOpenGLSurface::LockRect() that is matched with a "delete []" in IOpenGLSurface::UnlockRect.
In between, the memory that is allocated is passed to a client that writes it. Could it be that the clients writes beyond the allocated memory area and then corrupts it? It would help to have a detailed stacktrace.