LibOverride - Update - Fix handling of temp ID #103062

New Issue

Falk David · 2022-12-09T12:05:37+01:00

Falk David commented

2022-12-09 12:05:37 +01:00

Liboverride 'update' process (the part applying overrides again over a copy of the linked data, BKE_lib_override_library_main_update & co) needs some specific control over its usage of BKE_id_copy_ex to create the temp copy of the linked ID: It needs to prevent any potential modification of any other ID in Main.

This happens e.g. with regular copy of Collections, since the parents lists of their children need to be updated with a new pointer to the new copy. There may be a few other similar cases, this needs to be investigated.

This default behavior prevents from safely using BKE_id_free_ex on that same temp ID later on, even if the temp ID is not explicitly linked to any other ID.

Whether this change requires a new specific tag, or could be part of one of the 'no main' cases, remains to be investigated as well.

Original Report

System Information
Operating system: Linux-5.15.0-10056-tuxedo-x86_64-with-glibc2.35 64 Bits
Graphics card: NVIDIA GeForce RTX 3060/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 525.60.11

Blender Version
Broken: version: 3.5.0 Alpha, branch: master, commit date: Unknown, hash: f06a1368
Worked: -

Short description of error
Blender crashes when appending a collection (twice) from a file where this collection has been linked and overridden.

Exact steps for others to reproduce the error

Note: Using a debug build with ASAN makes this reliable to reproduce.

Open file fileB.blend.
Go to File>Append. Browse into fileA.blend>Collections. Untick the Localize All option. Choose Asset.
Blender crashes.

report_crash_link.zip

ASAN report

=================================================================
==84954==ERROR: AddressSanitizer: heap-use-after-free on address 0x613000267ef2 at pc 0x000002b6fe58 bp 0x7ffc27cb7e40 sp 0x7ffc27cb7e30
READ of size 2 at 0x613000267ef2 thread T0
    - 0 0x2b6fe57 in collection_foreach_id /.../blender/source/blender/blenkernel/intern/collection.c:164
    - 1 0xd2a149 in library_foreach_ID_link /.../blender/source/blender/blenkernel/intern/lib_query.c:334
    - 2 0xd2a317 in BKE_library_foreach_ID_link /.../blender/source/blender/blenkernel/intern/lib_query.c:353
    - 3 0xcce9b3 in BKE_lib_id_clear_library_data /.../blender/source/blender/blenkernel/intern/lib_id.c:224
    - 4 0xcd1d22 in BKE_lib_id_make_local_generic /.../blender/source/blender/blenkernel/intern/lib_id.c:501
    - 5 0xcd2cef in BKE_lib_id_make_local /.../blender/source/blender/blenkernel/intern/lib_id.c:561
    - 6 0xbe3fa23 in BKE_blendfile_append /.../blender/source/blender/blenkernel/intern/blendfile_link_append.c:1111
    - 7 0x3a49cf1 in wm_link_append_exec /.../blender/source/blender/windowmanager/intern/wm_files_link.c:356
    - 8 0x39fe3ed in wm_handler_fileselect_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2724
    - 9 0x39ffd56 in wm_handler_fileselect_call /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2821
    - 10 0x3a04962 in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3315
    - 11 0x3a04e0b in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3369
    - 12 0x3a0e0ed in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3963
    - 13 0x39c81bd in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:640
    - 14 0x801b57 in main /.../blender/source/creator/creator.c:585
    - 15 0x7fdac84b0d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
    - 16 0x7fdac84b0e3f in __libc_start_main_impl ../csu/libc-start.c:392
    - 17 0x800e34 in _start (/.../build_linux_debug/bin/blender+0x800e34)

0x613000267ef2 is located 114 bytes inside of 344-byte region [0x613000267e80,0x613000267fd8)
freed by thread T0 here:
    - 0 0x7fdac8bf0517 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:127
    - 1 0x1dd70304 in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:117
    - 2 0xce415b in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:168
    - 3 0xd254b5 in BKE_lib_override_library_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3793
    - 4 0xd26297 in BKE_lib_override_library_main_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3840
    - 5 0x3b96f2b in library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4526
    - 6 0x3b972ab in BLO_library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4545
    - 7 0xbe42109 in BKE_blendfile_link /.../blender/source/blender/blenkernel/intern/blendfile_link_append.c:1283
    - 8 0x3a49c39 in wm_link_append_exec /.../blender/source/blender/windowmanager/intern/wm_files_link.c:346
    - 9 0x39fe3ed in wm_handler_fileselect_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2724
    - 10 0x39ffd56 in wm_handler_fileselect_call /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2821
    - 11 0x3a04962 in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3315
    - 12 0x3a04e0b in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3369
    - 13 0x3a0e0ed in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3963
    - 14 0x39c81bd in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:640
    - 15 0x801b57 in main /.../blender/source/creator/creator.c:585
    #16 0x7fdac84b0d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

previously allocated by thread T0 here:
    - 0 0x7fdac8bf0a37 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:154
    - 1 0x1dd70a49 in MEM_lockfree_callocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:223
    - 2 0xcd81aa in BKE_libblock_alloc_notest /.../blender/source/blender/blenkernel/intern/lib_id.c:1101
    - 3 0xcd8341 in BKE_libblock_alloc /.../blender/source/blender/blenkernel/intern/lib_id.c:1113
    - 4 0xcd9ac6 in BKE_libblock_copy_ex /.../blender/source/blender/blenkernel/intern/lib_id.c:1274
    - 5 0xcd388a in BKE_id_copy_ex /.../blender/source/blender/blenkernel/intern/lib_id.c:637
    - 6 0xd241f3 in BKE_lib_override_library_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3725
    - 7 0xd26297 in BKE_lib_override_library_main_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3840
    - 8 0x3b96f2b in library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4526
    - 9 0x3b972ab in BLO_library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4545
    - 10 0xbe42109 in BKE_blendfile_link /.../blender/source/blender/blenkernel/intern/blendfile_link_append.c:1283
    - 11 0x3a49c39 in wm_link_append_exec /.../blender/source/blender/windowmanager/intern/wm_files_link.c:346
    - 12 0x39fe3ed in wm_handler_fileselect_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2724
    - 13 0x39ffd56 in wm_handler_fileselect_call /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2821
    - 14 0x3a04962 in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3315
    - 15 0x3a04e0b in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3369
    - 16 0x3a0e0ed in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3963
    - 17 0x39c81bd in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:640
    - 18 0x801b57 in main /.../blender/source/creator/creator.c:585
    - 19 0x7fdac84b0d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58

SUMMARY: AddressSanitizer: heap-use-after-free /.../blender/source/blender/blenkernel/intern/collection.c:164 in collection_foreach_id
Shadow bytes around the buggy address:
  0x0c2680044f80: 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa
  0x0c2680044f90: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c2680044fa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c2680044fb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c2680044fc0: 00 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c2680044fd0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd
  0x0c2680044fe0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c2680044ff0: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa
  0x0c2680045000: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x0c2680045010: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c2680045020: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==84954==ABORTING

Liboverride 'update' process (the part applying overrides again over a copy of the linked data, `BKE_lib_override_library_main_update` & co) needs some specific control over its usage of `BKE_id_copy_ex` to create the temp copy of the linked ID: It needs to prevent any potential modification of any other ID in Main. This happens e.g. with regular copy of Collections, since the `parents` lists of their children need to be updated with a new pointer to the new copy. There may be a few other similar cases, this needs to be investigated. This default behavior prevents from safely using `BKE_id_free_ex` on that same temp ID later on, even if the temp ID is not explicitly linked to any other ID. Whether this change requires a new specific tag, or could be part of one of the 'no main' cases, remains to be investigated as well. -------------------- ## Original Report **System Information** Operating system: Linux-5.15.0-10056-tuxedo-x86_64-with-glibc2.35 64 Bits Graphics card: NVIDIA GeForce RTX 3060/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 525.60.11 **Blender Version** Broken: version: 3.5.0 Alpha, branch: master, commit date: Unknown, hash: f06a1368 Worked: - **Short description of error** Blender crashes when appending a collection (twice) from a file where this collection has been linked and overridden. **Exact steps for others to reproduce the error** *Note: Using a debug build with ASAN makes this reliable to reproduce.* 1. Open file `fileB.blend`. 2. Go to `File`>`Append`. Browse into `fileA.blend`>`Collections`. Untick the `Localize All` option. Choose `Asset`. 3. Blender crashes. [report_crash_link.zip](https://archive.blender.org/developer/F14046516/report_crash_link.zip) **ASAN report** ``` ================================================================= ==84954==ERROR: AddressSanitizer: heap-use-after-free on address 0x613000267ef2 at pc 0x000002b6fe58 bp 0x7ffc27cb7e40 sp 0x7ffc27cb7e30 READ of size 2 at 0x613000267ef2 thread T0 - 0 0x2b6fe57 in collection_foreach_id /.../blender/source/blender/blenkernel/intern/collection.c:164 - 1 0xd2a149 in library_foreach_ID_link /.../blender/source/blender/blenkernel/intern/lib_query.c:334 - 2 0xd2a317 in BKE_library_foreach_ID_link /.../blender/source/blender/blenkernel/intern/lib_query.c:353 - 3 0xcce9b3 in BKE_lib_id_clear_library_data /.../blender/source/blender/blenkernel/intern/lib_id.c:224 - 4 0xcd1d22 in BKE_lib_id_make_local_generic /.../blender/source/blender/blenkernel/intern/lib_id.c:501 - 5 0xcd2cef in BKE_lib_id_make_local /.../blender/source/blender/blenkernel/intern/lib_id.c:561 - 6 0xbe3fa23 in BKE_blendfile_append /.../blender/source/blender/blenkernel/intern/blendfile_link_append.c:1111 - 7 0x3a49cf1 in wm_link_append_exec /.../blender/source/blender/windowmanager/intern/wm_files_link.c:356 - 8 0x39fe3ed in wm_handler_fileselect_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2724 - 9 0x39ffd56 in wm_handler_fileselect_call /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2821 - 10 0x3a04962 in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3315 - 11 0x3a04e0b in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3369 - 12 0x3a0e0ed in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3963 - 13 0x39c81bd in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:640 - 14 0x801b57 in main /.../blender/source/creator/creator.c:585 - 15 0x7fdac84b0d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58 - 16 0x7fdac84b0e3f in __libc_start_main_impl ../csu/libc-start.c:392 - 17 0x800e34 in _start (/.../build_linux_debug/bin/blender+0x800e34) 0x613000267ef2 is located 114 bytes inside of 344-byte region [0x613000267e80,0x613000267fd8) freed by thread T0 here: - 0 0x7fdac8bf0517 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:127 - 1 0x1dd70304 in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:117 - 2 0xce415b in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:168 - 3 0xd254b5 in BKE_lib_override_library_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3793 - 4 0xd26297 in BKE_lib_override_library_main_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3840 - 5 0x3b96f2b in library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4526 - 6 0x3b972ab in BLO_library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4545 - 7 0xbe42109 in BKE_blendfile_link /.../blender/source/blender/blenkernel/intern/blendfile_link_append.c:1283 - 8 0x3a49c39 in wm_link_append_exec /.../blender/source/blender/windowmanager/intern/wm_files_link.c:346 - 9 0x39fe3ed in wm_handler_fileselect_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2724 - 10 0x39ffd56 in wm_handler_fileselect_call /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2821 - 11 0x3a04962 in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3315 - 12 0x3a04e0b in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3369 - 13 0x3a0e0ed in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3963 - 14 0x39c81bd in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:640 - 15 0x801b57 in main /.../blender/source/creator/creator.c:585 #16 0x7fdac84b0d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58 previously allocated by thread T0 here: - 0 0x7fdac8bf0a37 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:154 - 1 0x1dd70a49 in MEM_lockfree_callocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:223 - 2 0xcd81aa in BKE_libblock_alloc_notest /.../blender/source/blender/blenkernel/intern/lib_id.c:1101 - 3 0xcd8341 in BKE_libblock_alloc /.../blender/source/blender/blenkernel/intern/lib_id.c:1113 - 4 0xcd9ac6 in BKE_libblock_copy_ex /.../blender/source/blender/blenkernel/intern/lib_id.c:1274 - 5 0xcd388a in BKE_id_copy_ex /.../blender/source/blender/blenkernel/intern/lib_id.c:637 - 6 0xd241f3 in BKE_lib_override_library_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3725 - 7 0xd26297 in BKE_lib_override_library_main_update /.../blender/source/blender/blenkernel/intern/lib_override.cc:3840 - 8 0x3b96f2b in library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4526 - 9 0x3b972ab in BLO_library_link_end /.../blender/source/blender/blenloader/intern/readfile.cc:4545 - 10 0xbe42109 in BKE_blendfile_link /.../blender/source/blender/blenkernel/intern/blendfile_link_append.c:1283 - 11 0x3a49c39 in wm_link_append_exec /.../blender/source/blender/windowmanager/intern/wm_files_link.c:346 - 12 0x39fe3ed in wm_handler_fileselect_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2724 - 13 0x39ffd56 in wm_handler_fileselect_call /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:2821 - 14 0x3a04962 in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3315 - 15 0x3a04e0b in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3369 - 16 0x3a0e0ed in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.cc:3963 - 17 0x39c81bd in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:640 - 18 0x801b57 in main /.../blender/source/creator/creator.c:585 - 19 0x7fdac84b0d8f in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58 SUMMARY: AddressSanitizer: heap-use-after-free /.../blender/source/blender/blenkernel/intern/collection.c:164 in collection_foreach_id Shadow bytes around the buggy address: 0x0c2680044f80: 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa 0x0c2680044f90: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c2680044fa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c2680044fb0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c2680044fc0: 00 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c2680044fd0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd 0x0c2680044fe0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2680044ff0: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa 0x0c2680045000: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c2680045010: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2680045020: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Shadow gap: cc ==84954==ABORTING ```

Falk David commented

2022-12-09 12:05:38 +01:00

Added subscriber: @filedescriptor

Iliya Katushenock commented

2022-12-12 12:06:10 +01:00

Added subscriber: @mod_moder

Iliya Katushenock commented

2022-12-12 12:06:10 +01:00

Changed status from 'Needs Triage' to: 'Confirmed'

Iliya Katushenock commented

2022-12-12 12:06:10 +01:00

Can confirm crash in windows lite debug build (11.12.2022) following reproduce steps

Iliya Katushenock commented

2022-12-12 12:07:12 +01:00

P3383: (An Untitled Masterwork)

# Blender 3.5.0, Unknown revision
Read library:  'C:\Users\rfnei\Downloads\report_crash_link\report_crash_link\asset.blend', '//asset.blend', parent '<direct>'  # Info
bpy.data.window_managers["WinMan"].(null) = False  # Property

# backtrace
Exception Record:

ExceptionCode         : EXCEPTION_ACCESS_VIOLATION
Exception Address     : 0x00007FF6D23960EC
Exception Module      : blender.exe
Exception Flags       : 0x00000000
Exception Parameters  : 0x2
	Parameters- [x] : 0x0000000000000000
	Parameters- [x] : 0xFFFFFFFFFFFFFFFF


Stack trace:
blender.exe         :0x00007FF6D23960C0  BLI_freelistN F:\Blender_build\first\blender\source\blender\blenlib\intern\listbase.c:472
blender.exe         :0x00007FF6CEDFFC00  collection_object_cache_free F:\Blender_build\first\blender\source\blender\blenkernel\intern\collection.c:850
blender.exe         :0x00007FF6CEDFFC00  collection_object_cache_free F:\Blender_build\first\blender\source\blender\blenkernel\intern\collection.c:854
blender.exe         :0x00007FF6CEDFCC00  BKE_collection_object_cache_free F:\Blender_build\first\blender\source\blender\blenkernel\intern\collection.c:860
blender.exe         :0x00007FF6CECFF810  BKE_main_collection_sync_remap F:\Blender_build\first\blender\source\blender\blenkernel\intern\layer.cc:1456
blender.exe         :0x00007FF6CECC35A0  id_delete F:\Blender_build\first\blender\source\blender\blenkernel\intern\lib_id_delete.c:294
blender.exe         :0x00007FF6CECC32F0  BKE_id_multi_tagged_delete F:\Blender_build\first\blender\source\blender\blenkernel\intern\lib_id_delete.c:387
blender.exe         :0x00007FF6D2822920  BKE_blendfile_append F:\Blender_build\first\blender\source\blender\blenkernel\intern\blendfile_link_append.c:1205
blender.exe         :0x00007FF6CF714DB0  wm_link_append_exec F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_files_link.c:359
blender.exe         :0x00007FF6CF6C4F20  wm_handler_fileselect_do F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:2724
blender.exe         :0x00007FF6CF6C4E50  wm_handler_fileselect_call F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:2822
blender.exe         :0x00007FF6CF6C8A60  wm_handlers_do_intern F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:3315
blender.exe         :0x00007FF6CF6C6F70  wm_handlers_do F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:3369
blender.exe         :0x00007FF6CF6D3CC0  wm_event_do_handlers F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:3963
blender.exe         :0x00007FF6CF69C9D0  WM_main F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm.c:643
blender.exe         :0x00007FF6CEB8BAC0  main F:\Blender_build\first\blender\source\creator\creator.c:589
blender.exe         :0x00007FF6D280F490  invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:79
blender.exe         :0x00007FF6D280F240  __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
blender.exe         :0x00007FF6D280F220  __scrt_common_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:331
blender.exe         :0x00007FF6D280F550  mainCRTStartup D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_main.cpp:17
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Threads:
Thread : 00002cac
ntdll.dll           :0x00007FF891B90B00  ZwWaitForWorkViaWorkerFactory
ntdll.dll           :0x00007FF891B426D0  TpReleaseCleanupGroupMembers
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00003464
ntdll.dll           :0x00007FF891B90B00  ZwWaitForWorkViaWorkerFactory
ntdll.dll           :0x00007FF891B426D0  TpReleaseCleanupGroupMembers
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 000014f8
ntdll.dll           :0x00007FF891B90B00  ZwWaitForWorkViaWorkerFactory
ntdll.dll           :0x00007FF891B426D0  TpReleaseCleanupGroupMembers
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00001624
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
nvoglv64.dll        :0x00007FF85E7E1C00  DrvValidateVersion
nvoglv64.dll        :0x00007FF85E56F73C  Symbols not available


Thread : 0000320c
ntdll.dll           :0x00007FF891B8DC00  ZwWaitForMultipleObjects
KERNELBASE.dll      :0x00007FF88F2B0370  WaitForMultipleObjectsEx
KERNELBASE.dll      :0x00007FF88F2B0350  WaitForMultipleObjects
nvoglv64.dll        :0x00007FF85E817770  DrvPresentBuffers
nvoglv64.dll        :0x00007FF85E817770  DrvPresentBuffers
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00002e7c
win32u.dll          :0x00007FF88F5EA0F0  NtUserMsgWaitForMultipleObjectsEx
USER32.dll          :0x00007FF8918F0730  MsgWaitForMultipleObjectsEx
nvoglv64.dll        :0x00007FF85E7E1C00  DrvValidateVersion
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00002ba0
ntdll.dll           :0x00007FF891B90B00  ZwWaitForWorkViaWorkerFactory
ntdll.dll           :0x00007FF891B426D0  TpReleaseCleanupGroupMembers
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00003588
ntdll.dll           :0x00007FF891B90B00  ZwWaitForWorkViaWorkerFactory
ntdll.dll           :0x00007FF891B426D0  TpReleaseCleanupGroupMembers
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00003568
ntdll.dll           :0x00007FF891B8DC00  ZwWaitForMultipleObjects
KERNELBASE.dll      :0x00007FF88F2B0370  WaitForMultipleObjectsEx
combase.dll         :0x00007FF890DB3390  InternalTlsAllocData
combase.dll         :0x00007FF890DB3390  InternalTlsAllocData
combase.dll         :0x00007FF890DB3390  InternalTlsAllocData
combase.dll         :0x00007FF890DB3390  InternalTlsAllocData
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00001564
win32u.dll          :0x00007FF88F5EA0F0  NtUserMsgWaitForMultipleObjectsEx
USER32.dll          :0x00007FF8918F0730  MsgWaitForMultipleObjectsEx
directmanipulation.dll:0x00007FF87BE5458B  Symbols not available


Thread : 0000072c
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00002820
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 000038b8
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 0000265c
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00003498
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 000003f8
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00002c84
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00001344
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00003c3c
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00000a74
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00001ef8
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 000031bc
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 000002e4
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00003424
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Thread : 00000d44
ntdll.dll           :0x00007FF891B8D130  NtWaitForSingleObject
KERNELBASE.dll      :0x00007FF88F282FE0  WaitForSingleObjectEx
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
tbb_debug.dll       :0x00007FF877152176  tbb::spin_rw_mutex_v3::internal_release_writer
ucrtbased.dll       :0x00007FF86E504B90  register_onexit_function
KERNEL32.DLL        :0x00007FF8913B74A0  BaseThreadInitThunk
ntdll.dll           :0x00007FF891B42680  RtlUserThreadStart


Loaded Modules :
0x00007FF6CCAD0000 3.5.0.0              blender.exe F:\Blender_build\first\ninja_lite_debug\source\creator\Debug\blender_private.pdb 
0x00007FF891AF0000 10.0.19041.2130      ntdll.dll  
0x00007FF8913A0000 10.0.19041.2251      KERNEL32.DLL  
0x00007FF88F260000 10.0.19041.2193      KERNELBASE.dll  
0x00007FF8918D0000 10.0.19041.2130      USER32.dll  
0x00007FF88F5E0000 10.0.19041.2251      win32u.dll  
0x00007FF891070000 10.0.19041.2130      GDI32.dll  
0x00007FF877150000                      tbb_debug.dll  
0x00007FF88F610000 10.0.19041.2130      gdi32full.dll  
0x00007FF88F540000 10.0.19041.789       msvcp_win.dll  
0x00007FF88F720000 10.0.19041.789       ucrtbase.dll  
0x00007FF890560000 10.0.19041.2075      SHELL32.dll  
0x00007FF88FCF0000 10.0.19041.2130      ADVAPI32.dll  
0x00007FF88CA50000 14.32.31332.0        VCRUNTIME140_1D.dll  
0x00007FF88B2A0000 14.32.31332.0        VCRUNTIME140D.dll  
0x00007FF8911D0000 7.0.19041.546        msvcrt.dll  
0x00007FF8743A0000 14.32.31332.0        MSVCP140D.dll  
0x00007FF8916E0000 10.0.19041.1865      sechost.dll  
0x00007FF8917A0000 10.0.19041.1806      RPCRT4.dll  
0x00007FF874180000                      epoxy-0.dll  
0x00007FF891270000 10.0.19041.1202      ole32.dll  
0x00007FF86E490000 10.0.19041.685       ucrtbased.dll  
0x00007FF890D10000 10.0.19041.2130      combase.dll  
0x00007FF87EF70000 6.10.19041.1110      COMCTL32.dll  
0x00007FF891110000 10.0.19041.2075      SHLWAPI.dll  
0x00007FF88A2B0000 10.0.19041.546       VERSION.dll  
0x00007FF8904B0000 10.0.19041.1865      shcore.dll  
0x00007FF88B220000 14.32.31332.0        VCRUNTIME140.dll  
0x00007FF87D0B0000 10.0.19041.867       dbghelp.dll  
0x00007FF88CD00000 10.0.19041.746       dwmapi.dll  
0x00007FF860A70000 3.10.8150.1013       python310_d.dll  
0x00007FF8910A0000 10.0.19041.546       WS2_32.dll  
0x00007FF891A70000 10.0.19041.2193      IMM32.DLL  
0x00007FF88D2D0000 10.0.19041.2251      windows.storage.dll  
0x00007FF88EC50000 10.0.19041.2075      Wldp.dll  
0x00007FF88F130000 10.0.19041.844       profapi.dll  
0x00007FF88CBB0000 10.0.19041.2193      uxtheme.dll  
0x00007FF88D0D0000 10.0.19041.546       kernel.appcore.dll  
0x00007FF88FAB0000 10.0.19041.1415      bcryptPrimitives.dll  
0x00007FF88ACE0000                      tbbmalloc_debug.dll  
0x00007FF891460000 10.0.19041.2193      MSCTF.dll  
0x00007FF8902F0000 10.0.19041.985       OLEAUT32.dll  
0x00007FF866200000 10.0.19041.2193      OPENGL32.DLL  
0x00007FF88B1F0000 10.0.19041.2193      GLU32.dll  
0x00007FF890220000 2001.12.10941.16384  clbcatq.dll  
0x00007FF88A590000 10.0.19041.2075      AppXDeploymentClient.dll  
0x00007FF85DAB0000 30.0.14.9649         nvoglv64.dll  
0x00007FF88FDA0000 10.0.19041.2193      SETUPAPI.dll  
0x00007FF88F8D0000 10.0.19041.1620      cfgmgr32.dll  
0x00007FF88F920000 10.0.19041.1023      bcrypt.dll  
0x00007FF88C790000 10.0.19041.546       WTSAPI32.dll  
0x00007FF88EBC0000 10.0.19041.546       CRYPTBASE.DLL  
0x00007FF88EDE0000 10.0.19041.2251      msasn1.dll  
0x00007FF88A270000 10.0.19041.906       cryptnet.dll  
0x00007FF88F950000 10.0.19041.1889      CRYPT32.dll  
0x00007FF887390000 10.0.19041.1949      drvstore.dll  
0x00007FF88EFA0000 10.0.19041.1620      devobj.dll  
0x00007FF88F1F0000 10.0.19041.2193      WINTRUST.dll  
0x00007FF88E3A0000 10.0.19041.546       ntmarta.dll  
0x00007FF8884E0000 10.0.19041.546       dxcore.dll  
0x00007FF88E7C0000 10.0.19041.546       powrprof.dll  
0x00007FF88E630000                      UMPDC.dll  
0x00007FF88DEF0000 10.0.19041.2075      WINSTA.dll  
0x00007FF87CA30000 10.0.19041.1387      dataexchange.dll  
0x00007FF88C140000 10.0.19041.2075      dcomp.dll  
0x00007FF88AED0000 10.0.19041.2075      d3d11.dll  
0x00007FF88DAB0000 10.0.19041.2075      dxgi.dll  
0x00007FF889640000 10.0.19041.1865      twinapi.appcore.dll  
0x00007FF87F630000 10.0.19041.2075      textinputframework.dll  
0x00007FF88C430000 10.0.19041.2193      CoreMessaging.dll  
0x00007FF88BD50000 10.0.19041.546       CoreUIComponents.dll  
0x00007FF88AD70000 10.0.19041.2130      wintypes.dll  
0x00007FF87ACF0000 7.2.19041.746        Oleacc.dll  
0x00007FF8773A0000 10.0.19041.1949      explorerframe.dll  
0x00007FF87BE40000 10.0.19041.1566      directmanipulation.dll  
0x00007FF88EBA0000 10.0.19041.546       CRYPTSP.dll  
0x00007FF88E260000 10.0.19041.1052      rsaenh.dll  

# Python backtrace

[P3383: (An Untitled Masterwork)](https://archive.blender.org/developer/P3383.txt) ``` # Blender 3.5.0, Unknown revision Read library: 'C:\Users\rfnei\Downloads\report_crash_link\report_crash_link\asset.blend', '//asset.blend', parent '<direct>' # Info bpy.data.window_managers["WinMan"].(null) = False # Property # backtrace Exception Record: ExceptionCode : EXCEPTION_ACCESS_VIOLATION Exception Address : 0x00007FF6D23960EC Exception Module : blender.exe Exception Flags : 0x00000000 Exception Parameters : 0x2 Parameters- [x] : 0x0000000000000000 Parameters- [x] : 0xFFFFFFFFFFFFFFFF Stack trace: blender.exe :0x00007FF6D23960C0 BLI_freelistN F:\Blender_build\first\blender\source\blender\blenlib\intern\listbase.c:472 blender.exe :0x00007FF6CEDFFC00 collection_object_cache_free F:\Blender_build\first\blender\source\blender\blenkernel\intern\collection.c:850 blender.exe :0x00007FF6CEDFFC00 collection_object_cache_free F:\Blender_build\first\blender\source\blender\blenkernel\intern\collection.c:854 blender.exe :0x00007FF6CEDFCC00 BKE_collection_object_cache_free F:\Blender_build\first\blender\source\blender\blenkernel\intern\collection.c:860 blender.exe :0x00007FF6CECFF810 BKE_main_collection_sync_remap F:\Blender_build\first\blender\source\blender\blenkernel\intern\layer.cc:1456 blender.exe :0x00007FF6CECC35A0 id_delete F:\Blender_build\first\blender\source\blender\blenkernel\intern\lib_id_delete.c:294 blender.exe :0x00007FF6CECC32F0 BKE_id_multi_tagged_delete F:\Blender_build\first\blender\source\blender\blenkernel\intern\lib_id_delete.c:387 blender.exe :0x00007FF6D2822920 BKE_blendfile_append F:\Blender_build\first\blender\source\blender\blenkernel\intern\blendfile_link_append.c:1205 blender.exe :0x00007FF6CF714DB0 wm_link_append_exec F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_files_link.c:359 blender.exe :0x00007FF6CF6C4F20 wm_handler_fileselect_do F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:2724 blender.exe :0x00007FF6CF6C4E50 wm_handler_fileselect_call F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:2822 blender.exe :0x00007FF6CF6C8A60 wm_handlers_do_intern F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:3315 blender.exe :0x00007FF6CF6C6F70 wm_handlers_do F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:3369 blender.exe :0x00007FF6CF6D3CC0 wm_event_do_handlers F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm_event_system.cc:3963 blender.exe :0x00007FF6CF69C9D0 WM_main F:\Blender_build\first\blender\source\blender\windowmanager\intern\wm.c:643 blender.exe :0x00007FF6CEB8BAC0 main F:\Blender_build\first\blender\source\creator\creator.c:589 blender.exe :0x00007FF6D280F490 invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:79 blender.exe :0x00007FF6D280F240 __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288 blender.exe :0x00007FF6D280F220 __scrt_common_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:331 blender.exe :0x00007FF6D280F550 mainCRTStartup D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_main.cpp:17 KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Threads: Thread : 00002cac ntdll.dll :0x00007FF891B90B00 ZwWaitForWorkViaWorkerFactory ntdll.dll :0x00007FF891B426D0 TpReleaseCleanupGroupMembers KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00003464 ntdll.dll :0x00007FF891B90B00 ZwWaitForWorkViaWorkerFactory ntdll.dll :0x00007FF891B426D0 TpReleaseCleanupGroupMembers KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 000014f8 ntdll.dll :0x00007FF891B90B00 ZwWaitForWorkViaWorkerFactory ntdll.dll :0x00007FF891B426D0 TpReleaseCleanupGroupMembers KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00001624 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx nvoglv64.dll :0x00007FF85E7E1C00 DrvValidateVersion nvoglv64.dll :0x00007FF85E56F73C Symbols not available Thread : 0000320c ntdll.dll :0x00007FF891B8DC00 ZwWaitForMultipleObjects KERNELBASE.dll :0x00007FF88F2B0370 WaitForMultipleObjectsEx KERNELBASE.dll :0x00007FF88F2B0350 WaitForMultipleObjects nvoglv64.dll :0x00007FF85E817770 DrvPresentBuffers nvoglv64.dll :0x00007FF85E817770 DrvPresentBuffers KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00002e7c win32u.dll :0x00007FF88F5EA0F0 NtUserMsgWaitForMultipleObjectsEx USER32.dll :0x00007FF8918F0730 MsgWaitForMultipleObjectsEx nvoglv64.dll :0x00007FF85E7E1C00 DrvValidateVersion KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00002ba0 ntdll.dll :0x00007FF891B90B00 ZwWaitForWorkViaWorkerFactory ntdll.dll :0x00007FF891B426D0 TpReleaseCleanupGroupMembers KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00003588 ntdll.dll :0x00007FF891B90B00 ZwWaitForWorkViaWorkerFactory ntdll.dll :0x00007FF891B426D0 TpReleaseCleanupGroupMembers KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00003568 ntdll.dll :0x00007FF891B8DC00 ZwWaitForMultipleObjects KERNELBASE.dll :0x00007FF88F2B0370 WaitForMultipleObjectsEx combase.dll :0x00007FF890DB3390 InternalTlsAllocData combase.dll :0x00007FF890DB3390 InternalTlsAllocData combase.dll :0x00007FF890DB3390 InternalTlsAllocData combase.dll :0x00007FF890DB3390 InternalTlsAllocData KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00001564 win32u.dll :0x00007FF88F5EA0F0 NtUserMsgWaitForMultipleObjectsEx USER32.dll :0x00007FF8918F0730 MsgWaitForMultipleObjectsEx directmanipulation.dll:0x00007FF87BE5458B Symbols not available Thread : 0000072c ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00002820 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 000038b8 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 0000265c ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00003498 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 000003f8 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00002c84 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00001344 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00003c3c ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00000a74 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00001ef8 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 000031bc ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 000002e4 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00003424 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Thread : 00000d44 ntdll.dll :0x00007FF891B8D130 NtWaitForSingleObject KERNELBASE.dll :0x00007FF88F282FE0 WaitForSingleObjectEx tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer tbb_debug.dll :0x00007FF877152176 tbb::spin_rw_mutex_v3::internal_release_writer ucrtbased.dll :0x00007FF86E504B90 register_onexit_function KERNEL32.DLL :0x00007FF8913B74A0 BaseThreadInitThunk ntdll.dll :0x00007FF891B42680 RtlUserThreadStart Loaded Modules : 0x00007FF6CCAD0000 3.5.0.0 blender.exe F:\Blender_build\first\ninja_lite_debug\source\creator\Debug\blender_private.pdb 0x00007FF891AF0000 10.0.19041.2130 ntdll.dll 0x00007FF8913A0000 10.0.19041.2251 KERNEL32.DLL 0x00007FF88F260000 10.0.19041.2193 KERNELBASE.dll 0x00007FF8918D0000 10.0.19041.2130 USER32.dll 0x00007FF88F5E0000 10.0.19041.2251 win32u.dll 0x00007FF891070000 10.0.19041.2130 GDI32.dll 0x00007FF877150000 tbb_debug.dll 0x00007FF88F610000 10.0.19041.2130 gdi32full.dll 0x00007FF88F540000 10.0.19041.789 msvcp_win.dll 0x00007FF88F720000 10.0.19041.789 ucrtbase.dll 0x00007FF890560000 10.0.19041.2075 SHELL32.dll 0x00007FF88FCF0000 10.0.19041.2130 ADVAPI32.dll 0x00007FF88CA50000 14.32.31332.0 VCRUNTIME140_1D.dll 0x00007FF88B2A0000 14.32.31332.0 VCRUNTIME140D.dll 0x00007FF8911D0000 7.0.19041.546 msvcrt.dll 0x00007FF8743A0000 14.32.31332.0 MSVCP140D.dll 0x00007FF8916E0000 10.0.19041.1865 sechost.dll 0x00007FF8917A0000 10.0.19041.1806 RPCRT4.dll 0x00007FF874180000 epoxy-0.dll 0x00007FF891270000 10.0.19041.1202 ole32.dll 0x00007FF86E490000 10.0.19041.685 ucrtbased.dll 0x00007FF890D10000 10.0.19041.2130 combase.dll 0x00007FF87EF70000 6.10.19041.1110 COMCTL32.dll 0x00007FF891110000 10.0.19041.2075 SHLWAPI.dll 0x00007FF88A2B0000 10.0.19041.546 VERSION.dll 0x00007FF8904B0000 10.0.19041.1865 shcore.dll 0x00007FF88B220000 14.32.31332.0 VCRUNTIME140.dll 0x00007FF87D0B0000 10.0.19041.867 dbghelp.dll 0x00007FF88CD00000 10.0.19041.746 dwmapi.dll 0x00007FF860A70000 3.10.8150.1013 python310_d.dll 0x00007FF8910A0000 10.0.19041.546 WS2_32.dll 0x00007FF891A70000 10.0.19041.2193 IMM32.DLL 0x00007FF88D2D0000 10.0.19041.2251 windows.storage.dll 0x00007FF88EC50000 10.0.19041.2075 Wldp.dll 0x00007FF88F130000 10.0.19041.844 profapi.dll 0x00007FF88CBB0000 10.0.19041.2193 uxtheme.dll 0x00007FF88D0D0000 10.0.19041.546 kernel.appcore.dll 0x00007FF88FAB0000 10.0.19041.1415 bcryptPrimitives.dll 0x00007FF88ACE0000 tbbmalloc_debug.dll 0x00007FF891460000 10.0.19041.2193 MSCTF.dll 0x00007FF8902F0000 10.0.19041.985 OLEAUT32.dll 0x00007FF866200000 10.0.19041.2193 OPENGL32.DLL 0x00007FF88B1F0000 10.0.19041.2193 GLU32.dll 0x00007FF890220000 2001.12.10941.16384 clbcatq.dll 0x00007FF88A590000 10.0.19041.2075 AppXDeploymentClient.dll 0x00007FF85DAB0000 30.0.14.9649 nvoglv64.dll 0x00007FF88FDA0000 10.0.19041.2193 SETUPAPI.dll 0x00007FF88F8D0000 10.0.19041.1620 cfgmgr32.dll 0x00007FF88F920000 10.0.19041.1023 bcrypt.dll 0x00007FF88C790000 10.0.19041.546 WTSAPI32.dll 0x00007FF88EBC0000 10.0.19041.546 CRYPTBASE.DLL 0x00007FF88EDE0000 10.0.19041.2251 msasn1.dll 0x00007FF88A270000 10.0.19041.906 cryptnet.dll 0x00007FF88F950000 10.0.19041.1889 CRYPT32.dll 0x00007FF887390000 10.0.19041.1949 drvstore.dll 0x00007FF88EFA0000 10.0.19041.1620 devobj.dll 0x00007FF88F1F0000 10.0.19041.2193 WINTRUST.dll 0x00007FF88E3A0000 10.0.19041.546 ntmarta.dll 0x00007FF8884E0000 10.0.19041.546 dxcore.dll 0x00007FF88E7C0000 10.0.19041.546 powrprof.dll 0x00007FF88E630000 UMPDC.dll 0x00007FF88DEF0000 10.0.19041.2075 WINSTA.dll 0x00007FF87CA30000 10.0.19041.1387 dataexchange.dll 0x00007FF88C140000 10.0.19041.2075 dcomp.dll 0x00007FF88AED0000 10.0.19041.2075 d3d11.dll 0x00007FF88DAB0000 10.0.19041.2075 dxgi.dll 0x00007FF889640000 10.0.19041.1865 twinapi.appcore.dll 0x00007FF87F630000 10.0.19041.2075 textinputframework.dll 0x00007FF88C430000 10.0.19041.2193 CoreMessaging.dll 0x00007FF88BD50000 10.0.19041.546 CoreUIComponents.dll 0x00007FF88AD70000 10.0.19041.2130 wintypes.dll 0x00007FF87ACF0000 7.2.19041.746 Oleacc.dll 0x00007FF8773A0000 10.0.19041.1949 explorerframe.dll 0x00007FF87BE40000 10.0.19041.1566 directmanipulation.dll 0x00007FF88EBA0000 10.0.19041.546 CRYPTSP.dll 0x00007FF88E260000 10.0.19041.1052 rsaenh.dll # Python backtrace ```

Philipp Oeser commented

2022-12-15 09:05:04 +01:00

Added subscriber: @lichtwerk

Philipp Oeser commented

2022-12-15 09:05:04 +01:00

Cannot repro here (but havent checked with ASAN)

**System Information**
Operating system: Linux-6.0.5-200.fc36.x86_64-x86_64-with-glibc2.35 64 Bits
Graphics card: NVIDIA GeForce RTX 3080 Laptop GPU/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 520.56.06
version: 3.5.0 Alpha, branch: master (modified), commit date: 2022-12-15 07:44, hash: `rB9e47db4f43a2`

But if others can, it should be tagged with the corresponding module to check further

Cannot repro here (but havent checked with ASAN) ``` **System Information** Operating system: Linux-6.0.5-200.fc36.x86_64-x86_64-with-glibc2.35 64 Bits Graphics card: NVIDIA GeForce RTX 3080 Laptop GPU/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 520.56.06 version: 3.5.0 Alpha, branch: master (modified), commit date: 2022-12-15 07:44, hash: `rB9e47db4f43a2` ``` But if others can, it should be tagged with the corresponding module to check further

Falk David commented

2022-12-15 12:20:39 +01:00

@lichtwerk Was this in a debug build? The crash seems only consistent with that.

Philipp Oeser commented

2022-12-15 12:38:32 +01:00

@filedescriptor : debug build does not complain on its own (still havent tried ASAN)

Falk David commented

2022-12-15 12:42:11 +01:00

@lichtwerk Ok interesting.

Bastien Montagne commented

2022-12-26 12:10:08 +01:00

Added subscriber: @mont29

Bastien Montagne commented

2022-12-26 12:10:08 +01:00

This a problem related to how liboverride applying/updating code duplicate and then frees its temp IDs during the process, in relation with the specific case of collections, where duplicating a collection will implicitly modify its children such that the new copy is added to their parents list.

For the time being I will commit a band-aid fix.

Will keep this task open as a sub-task of #90610 and update its description to what needs to be done here for a proper fix.

This a problem related to how liboverride applying/updating code duplicate and then frees its temp IDs during the process, in relation with the specific case of collections, where duplicating a collection will implicitly modify its children such that the new copy is added to their parents list. For the time being I will commit a band-aid fix. Will keep this task open as a sub-task of #90610 and update its description to what needs to be done here for a proper fix.

Bastien Montagne changed title from ~~Crash when appending an overridden collection~~ to LibOverride - Update - Fix handling of temp ID

2022-12-26 12:36:46 +01:00

Philipp Oeser removed the

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

LibOverride - Update - Fix handling of temp ID #103062

Original Report