Crash after de-tiling

[humdinger]

This is hrev43630.

I had the following crash while de-tiling two windows. Not reproducible.
From the syslog:

KERN: vm_soft_fault: va 0x0 not covered by area in address space
KERN: vm_page_fault: vm_soft_fault returned error 'Bad address' on fault at 0x0, ip 0x318a05, write 0, user 1, thread 0x72
KERN: vm_page_fault: thread "event loop" (114) in team "app_server" (72) tried to read address 0x0, ip 0x318a05 ("app_server_seg0ro" +0x118a05)
KERN: debug_server: Thread 114 entered the debugger: Segment violation
KERN: stack trace, current PC 0x318a05  GetDecorator__C9SATWindow + 0x19:
KERN:   (0x70184c1c)  0x3190f4  AdjustSizeLimits__9SATWindowG5BRect + 0x24
KERN:   (0x70184c7c)  0x312c44  _MoveToSAT__10WindowAreaP9SATWindow + 0x10c
KERN:   (0x70184d0c)  0x31178e  DoGroupLayout__10WindowArea + 0x1b6
KERN:   (0x70184d6c)  0x3190c7  DoGroupLayout__9SATWindow + 0x37
KERN:   (0x70184d9c)  0x314db8  RemoveWindow__8SATGroupP9SATWindowb + 0xc4
KERN:   (0x70184ddc)  0x31b087  _StartSAT__12StackAndTile + 0x43
KERN:   (0x70184e0c)  0x31aaa4  MouseDown__12StackAndTileP6WindowP8BMessageRC6BPoint + 0xe4
KERN:   (0x70184e4c)  0x26c9d3  NotifyMouseDown__17DesktopObservableP6WindowP8BMessageRC6BPoint + 0x57
KERN:   (0x70184e7c)  0x26254c  Filter__11MouseFilterP8BMessagePP11EventTargetPlT1 + 0x2d4
KERN:   (0x70184eec)  0x273f5e  _EventLoop__15EventDispatcher + 0x28e
KERN:   (0x70184f7c)  0x2745d7  _event_looper__15EventDispatcherPv + 0x1f
KERN:   (0x70184fac)  0x8548d3  thread_entry + 0x23

[yourpalal]

I've found a way to reproduce what I believe is this same crash.

1. Create three Terminal windows
2. Tile them in an L shape like so:

    ____          ______
   |____|________|______|_____
   |          1  |        2   |
   |             |            |
   |_____________|____________|
   |_____|_______
   |     3       |
   |             |
   |_____________|
   

3. Save any open documents

4. Close window 3

[humdinger]

Cannot reproduce yourpalal's recipe to crash. Haven't seen a crash when un-tiling as far as I can remember.

[nielx]

Remove milestone for tickets with status = closed and resolution != fixed