BGE crash #40182

New Issue

lopata · 2014-05-13T20:54:39+02:00

lopata commented

2014-05-13 20:54:39 +02:00

System Information
Win7x64

Blender Version
Broken: (blender-2.70-c08c931-win64-vc12)
Worked: (2.69 r60995 x64)

open scene
press P

water_0.99_optimized.blend

**System Information** Win7x64 **Blender Version** Broken: (blender-2.70-c08c931-win64-vc12) Worked: (2.69 r60995 x64) 1) open scene 2) press P [water_0.99_optimized.blend](https://archive.blender.org/developer/F88865/water_0.99_optimized.blend)

lopata commented

2014-05-13 20:54:39 +02:00

Changed status to: 'Open'

lopata commented

2014-05-13 20:54:39 +02:00

Added subscriber: @lopataasdf

lopata commented

2014-05-13 20:56:16 +02:00

c:\Blender\2014_05_11>blender.exe
Read new prefs: C:\Users\User\AppData\Roaming\Blender Foundation\Blender\2.70\co
nfig\userpref.blend
found bundled python: c:\Blender\2014_05_11\2.70\python
read blend: C:\Downloads\water_0.99_optimized\water_0.99_optimized.blend
libpng warning: iCCP: known incorrect sRGB profile
<!> event has invalid window
Detected GL_ARB_texture_env_combine
Detected GL_ARB_texture_cube_map
Detected GL_ARB_multitexture
Detected GL_ARB_shader_objects
Detected GL_ARB_vertex_shader
Detected GL_ARB_fragment_shader
Detected GL_ARB_vertex_program
Detected GL_ARB_depth_texture
Detected GL_EXT_separate_specular_color

Blender Game Engine Started
libpng warning: iCCP: known incorrect sRGB profile
Writing: C:\Users\User\AppData\Local\Temp\water_0.99_optimized.crash.txt

c:\Blender\2014_05_11>blender.exe Read new prefs: C:\Users\User\AppData\Roaming\Blender Foundation\Blender\2.70\co nfig\userpref.blend found bundled python: c:\Blender\2014_05_11\2.70\python read blend: C:\Downloads\water_0.99_optimized\water_0.99_optimized.blend libpng warning: iCCP: known incorrect sRGB profile <!> event has invalid window Detected GL_ARB_texture_env_combine Detected GL_ARB_texture_cube_map Detected GL_ARB_multitexture Detected GL_ARB_shader_objects Detected GL_ARB_vertex_shader Detected GL_ARB_fragment_shader Detected GL_ARB_vertex_program Detected GL_ARB_depth_texture Detected GL_EXT_separate_specular_color Blender Game Engine Started libpng warning: iCCP: known incorrect sRGB profile Writing: C:\Users\User\AppData\Local\Temp\water_0.99_optimized.crash.txt

lopata commented

2014-05-13 20:57:06 +02:00

crashlog is empty:

Blender 2.70 (sub 5), Commit date: 2014-05-11 01:38, Hash c08c931

crashlog is empty: - Blender 2.70 (sub 5), Commit date: 2014-05-11 01:38, Hash c08c931

Bastien Montagne commented

2014-05-13 21:44:42 +02:00

Added subscriber: @mont29

Bastien Montagne commented

2014-05-13 21:44:42 +02:00

Asan report:

P62: #40182, asan report

Disabling SWAP INTERVALS extension
=================================================================
==9597== ERROR: AddressSanitizer: heap-use-after-free on address 0x603c0003bf80 at pc 0x43a3313 bp 0x7fff0976e5d0 sp 0x7fff0976e5c8
READ of size 8 at 0x603c0003bf80 thread T0
    #0 0x43a3312 in _ZN10CListValue9FindValueEPKc /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Expressions/ListValue.cpp:138
    #1 0x43a3cfe in listvalue_mapping_subscript /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Expressions/ListValue.cpp:358
    #2 0x7fb17d5c74b1 in PyEval_EvalFrameEx ??:?
    #3 0x7fb17d6c0fc5 in PyEval_EvalCodeEx ??:?
    #4 0x7fb17d6c175a in PyEval_EvalCode ??:?
    #5 0x4335006 in _ZN20SCA_PythonController7TriggerEP16SCA_LogicManager /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/GameLogic/SCA_PythonController.cpp:412
    #6 0x4325069 in _ZN16SCA_LogicManager10BeginFrameEdd /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/GameLogic/SCA_LogicManager.cpp:200 (discriminator 2)
    #7 0x422f7d3 in _ZN8KX_Scene15LogicBeginFrameEd /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_Scene.cpp:1583
    #8 0x41b0779 in _ZN15KX_KetsjiEngine9NextFrameEv /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_KetsjiEngine.cpp:667
    #9 0x3fbf691 in BL_KetsjiNextFrame /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/BlenderRoutines/BL_KetsjiEmbedStart.cpp:130
    #10 0x3fc2bc8 in StartKetsjiShell /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/BlenderRoutines/BL_KetsjiEmbedStart.cpp:566
    #11 0x1fd1f25 in game_engine_exec /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/space_view3d/view3d_view.c:1627
    #12 0x1d06bdc in wm_operator_invoke /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1040
    #13 0x1d09bb7 in wm_handler_operator_call /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1625
    #14 0x1d0b13a in wm_handlers_do_intern /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1893
    #15 0x1d0b9d0 in wm_handlers_do /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2002
    #16 0x1d0d39a in wm_event_do_handlers /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2299
    #17 0x1cf3324 in WM_main /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm.c:491 (discriminator 1)
    #18 0x1cf1640 in main /home/i7deb64/blender-2.5-svn/__work__/src/source/creator/creator.c:1755
    #19 0x7fb175c51b44 in __libc_start_main /build/eglibc-GQ9ljS/eglibc-2.18/csu/libc-start.c:287
    #20 0x1cec761 in _start ??:?
0x603c0003bf80 is located 0 bytes inside of 744-byte region [0x603c0003bf80,0x603c0003c268)
freed by thread T0 here:
    #0 0x7fb17e8c296a in _ZdlPv ??:?
    #1 0x4185129 in _ZN14KX_EmptyObjectD0Ev /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_EmptyObject.cpp:37
    #2 0x3fe3925 in _ZN6CValue7ReleaseEv /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Expressions/Value.h:283 (discriminator 1)
    #3 0x419eb62 in _ZN13KX_GameObject9PyrayCastEP7_objectS1_ /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_GameObject.cpp:3403
    #4 0x41a35a6 in _ZN13KX_GameObject10sPyrayCastEP7_objectS1_S1_ /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_GameObject.h:991 (discriminator 2)
    #5 0x7fb17d5cde4c in PyEval_EvalFrameEx ??:?
previously allocated by thread T0 here:
    #0 0x7fb17e8c27aa in _Znwm ??:?
    #1 0x3fdcb95 in gameobject_from_blenderobject /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Converter/BL_BlenderDataConversion.cpp:1672
    #2 0x3fdf8ad in _Z24BL_ConvertBlenderObjectsP4MainP8KX_SceneP15KX_KetsjiEngine15e_PhysicsEngineP15RAS_IRasterizerP11RAS_ICanvasP24KX_BlenderSceneConverterbb /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Converter/BL_BlenderDataConversion.cpp:2063
    #3 0x401834d in _ZN24KX_BlenderSceneConverter12ConvertSceneEP8KX_SceneP15RAS_IRasterizerP11RAS_ICanvasb /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Converter/KX_BlenderSceneConverter.cpp:301
    #4 0x3fc26f9 in StartKetsjiShell /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/BlenderRoutines/BL_KetsjiEmbedStart.cpp:518
    #5 0x1fd1f25 in game_engine_exec /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/space_view3d/view3d_view.c:1627
    #6 0x1d06bdc in wm_operator_invoke /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1040
    #7 0x1d09bb7 in wm_handler_operator_call /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1625
    #8 0x1d0b13a in wm_handlers_do_intern /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1893
    #9 0x1d0b9d0 in wm_handlers_do /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2002
    #10 0x1d0d39a in wm_event_do_handlers /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2299
    #11 0x1cf3324 in WM_main /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm.c:491 (discriminator 1)
    #12 0x1cf1640 in main /home/i7deb64/blender-2.5-svn/__work__/src/source/creator/creator.c:1755
    #13 0x7fb175c51b44 in __libc_start_main /build/eglibc-GQ9ljS/eglibc-2.18/csu/libc-start.c:287
Shadow bytes around the buggy address:
  0x0c07fffff7a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c07fffff7b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c07fffff7c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c07fffff7d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa
  0x0c07fffff7e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c07fffff7f0:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c07fffff800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c07fffff810: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c07fffff820: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c07fffff830: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c07fffff840: fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:     fa
  Heap righ redzone:     fb
  Freed Heap region:     fd
  Stack left redzone:    f1
  Stack mid redzone:     f2
  Stack right redzone:   f3
  Stack partial redzone: f4
  Stack after return:    f5
  Stack use after scope: f8
  Global redzone:        f9
  Global init order:     f6
  Poisoned by user:      f7
  ASan internal:         fe
==9597== ABORTING

Asan report: [P62: #40182, asan report](https://archive.blender.org/developer/P62.txt) ``` Disabling SWAP INTERVALS extension ================================================================= ==9597== ERROR: AddressSanitizer: heap-use-after-free on address 0x603c0003bf80 at pc 0x43a3313 bp 0x7fff0976e5d0 sp 0x7fff0976e5c8 READ of size 8 at 0x603c0003bf80 thread T0 #0 0x43a3312 in _ZN10CListValue9FindValueEPKc /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Expressions/ListValue.cpp:138 #1 0x43a3cfe in listvalue_mapping_subscript /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Expressions/ListValue.cpp:358 #2 0x7fb17d5c74b1 in PyEval_EvalFrameEx ??:? #3 0x7fb17d6c0fc5 in PyEval_EvalCodeEx ??:? #4 0x7fb17d6c175a in PyEval_EvalCode ??:? #5 0x4335006 in _ZN20SCA_PythonController7TriggerEP16SCA_LogicManager /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/GameLogic/SCA_PythonController.cpp:412 #6 0x4325069 in _ZN16SCA_LogicManager10BeginFrameEdd /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/GameLogic/SCA_LogicManager.cpp:200 (discriminator 2) #7 0x422f7d3 in _ZN8KX_Scene15LogicBeginFrameEd /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_Scene.cpp:1583 #8 0x41b0779 in _ZN15KX_KetsjiEngine9NextFrameEv /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_KetsjiEngine.cpp:667 #9 0x3fbf691 in BL_KetsjiNextFrame /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/BlenderRoutines/BL_KetsjiEmbedStart.cpp:130 #10 0x3fc2bc8 in StartKetsjiShell /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/BlenderRoutines/BL_KetsjiEmbedStart.cpp:566 #11 0x1fd1f25 in game_engine_exec /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/space_view3d/view3d_view.c:1627 #12 0x1d06bdc in wm_operator_invoke /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1040 #13 0x1d09bb7 in wm_handler_operator_call /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1625 #14 0x1d0b13a in wm_handlers_do_intern /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1893 #15 0x1d0b9d0 in wm_handlers_do /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2002 #16 0x1d0d39a in wm_event_do_handlers /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2299 #17 0x1cf3324 in WM_main /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm.c:491 (discriminator 1) #18 0x1cf1640 in main /home/i7deb64/blender-2.5-svn/__work__/src/source/creator/creator.c:1755 #19 0x7fb175c51b44 in __libc_start_main /build/eglibc-GQ9ljS/eglibc-2.18/csu/libc-start.c:287 #20 0x1cec761 in _start ??:? 0x603c0003bf80 is located 0 bytes inside of 744-byte region [0x603c0003bf80,0x603c0003c268) freed by thread T0 here: #0 0x7fb17e8c296a in _ZdlPv ??:? #1 0x4185129 in _ZN14KX_EmptyObjectD0Ev /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_EmptyObject.cpp:37 #2 0x3fe3925 in _ZN6CValue7ReleaseEv /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Expressions/Value.h:283 (discriminator 1) #3 0x419eb62 in _ZN13KX_GameObject9PyrayCastEP7_objectS1_ /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_GameObject.cpp:3403 #4 0x41a35a6 in _ZN13KX_GameObject10sPyrayCastEP7_objectS1_S1_ /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Ketsji/KX_GameObject.h:991 (discriminator 2) #5 0x7fb17d5cde4c in PyEval_EvalFrameEx ??:? previously allocated by thread T0 here: #0 0x7fb17e8c27aa in _Znwm ??:? #1 0x3fdcb95 in gameobject_from_blenderobject /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Converter/BL_BlenderDataConversion.cpp:1672 #2 0x3fdf8ad in _Z24BL_ConvertBlenderObjectsP4MainP8KX_SceneP15KX_KetsjiEngine15e_PhysicsEngineP15RAS_IRasterizerP11RAS_ICanvasP24KX_BlenderSceneConverterbb /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Converter/BL_BlenderDataConversion.cpp:2063 #3 0x401834d in _ZN24KX_BlenderSceneConverter12ConvertSceneEP8KX_SceneP15RAS_IRasterizerP11RAS_ICanvasb /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/Converter/KX_BlenderSceneConverter.cpp:301 #4 0x3fc26f9 in StartKetsjiShell /home/i7deb64/blender-2.5-svn/__work__/src/source/gameengine/BlenderRoutines/BL_KetsjiEmbedStart.cpp:518 #5 0x1fd1f25 in game_engine_exec /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/space_view3d/view3d_view.c:1627 #6 0x1d06bdc in wm_operator_invoke /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1040 #7 0x1d09bb7 in wm_handler_operator_call /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1625 #8 0x1d0b13a in wm_handlers_do_intern /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:1893 #9 0x1d0b9d0 in wm_handlers_do /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2002 #10 0x1d0d39a in wm_event_do_handlers /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:2299 #11 0x1cf3324 in WM_main /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm.c:491 (discriminator 1) #12 0x1cf1640 in main /home/i7deb64/blender-2.5-svn/__work__/src/source/creator/creator.c:1755 #13 0x7fb175c51b44 in __libc_start_main /build/eglibc-GQ9ljS/eglibc-2.18/csu/libc-start.c:287 Shadow bytes around the buggy address: 0x0c07fffff7a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c07fffff7b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c07fffff7c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c07fffff7d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa 0x0c07fffff7e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c07fffff7f0:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c07fffff800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c07fffff810: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c07fffff820: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c07fffff830: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c07fffff840: fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap righ redzone: fb Freed Heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 ASan internal: fe ==9597== ABORTING ```

Mitchell Stokes commented

2014-05-14 06:09:54 +02:00

Added subscriber: @Moguri