Created attachment 698051 [details]
A large image file that caused the described problem

Description of problem: If I open a large png image using eog, eog will often close with the message: 

eog: cairo-mempool.c:160: get_buddy: Assertion `offset + (1 << bits) <= pool->num_blocks' failed.
Aborted

Version-Release number of selected component (if applicable):
eog-3.6.2-1.fc18.x86_64

How reproducible:
Sometimes this happens immediately, sometimes after moving the mouse over the eog window, sometimes after zooming in on the image, but usually within a few seconds of interaction with the window. Then it will not happen again for some time. I can't always reproduce the bug. I haven't been able to reproduce it while running under gdb.

Steps to Reproduce:
1. run: eog big.png
2. If the 'Aborted' message is not received right away, interact with the window, such as zooming, scrolling, or re-sizing.
  
Actual results:

Eog closes with the above 'Aborted' message.

Expected results:

Normal viewing of the window

Additional info:

I also get this message on closing eog. I'm not sure if its related.

(eog:6354): EOG-CRITICAL **: eog_list_store_length: assertion `EOG_IS_LIST_STORE (store)' failed