compositor: don't segfault on quitting