Page MenuHome
Paste P1112

D5766-Crash
ActivePublic

Authored by Campbell Barton (campbellbarton) on Sep 22 2019, 8:45 AM.
==24947==ERROR: AddressSanitizer: heap-use-after-free on address 0x61100012b288 at pc 0x5561cda00e42 bp 0x7f4ab63e5a00 sp 0x7f4ab63e59f0
READ of size 8 at 0x61100012b288 thread T15
#0 0x5561cda00e41 in manifold_solidify /src/blender/source/blender/modifiers/intern/MOD_solidify.c:1137
#1 0x5561cda300b8 in applyModifier /src/blender/source/blender/modifiers/intern/MOD_solidify.c:3044
#2 0x5561cb1a5ad4 in modwrap_applyModifier /src/blender/source/blender/blenkernel/intern/modifier.c:945
#3 0x5561cb7f22b8 in mesh_calc_modifiers /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1208
#4 0x5561cb7faa40 in mesh_build_data /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1844
#5 0x5561cb7fc379 in makeDerivedMesh /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1973
#6 0x5561cb2da70a in BKE_object_handle_data_update /src/blender/source/blender/blenkernel/intern/object_update.c:187
#7 0x5561cb2dd852 in BKE_object_eval_uber_data /src/blender/source/blender/blenkernel/intern/object_update.c:358
#8 0x5561cbd33b31 in void std::__invoke_impl<void, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(std::__invoke_other, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/9.1.0/bits/invoke.h:60
#9 0x5561cbd2db59 in std::__invoke_result<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>::type std::__invoke<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/9.1.0/bits/invoke.h:95
#10 0x5561cbd2538c in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::__call<void, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/9.1.0/functional:400
#11 0x5561cbd1aa06 in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::operator()<Depsgraph*, void>(Depsgraph*&&) /usr/include/c++/9.1.0/functional:484
#12 0x5561cbd0f956 in std::_Function_handler<void (Depsgraph*), std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/9.1.0/bits/std_function.h:300
#13 0x5561cbd8cba2 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/9.1.0/bits/std_function.h:690
#14 0x5561cbd88e4d in deg_task_run_func /src/blender/source/blender/depsgraph/intern/eval/deg_eval.cc:86
#15 0x5561cbc80918 in task_scheduler_thread_run /src/blender/source/blender/blenlib/intern/task.c:450
#16 0x7f4ada5b157e in start_thread (/usr/lib/libpthread.so.0+0x957e)
#17 0x7f4ad99c40e2 in __clone (/usr/lib/libc.so.6+0xfc0e2)
0x61100012b288 is located 8 bytes inside of 208-byte region [0x61100012b280,0x61100012b350)
freed by thread T15 here:
#0 0x7f4adb6386c0 in __interceptor_free /build/gcc/src/gcc/libsanitizer/asan/asan_malloc_linux.cc:122
#1 0x5561cbf1795e in MEM_lockfree_freeN /src/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:157
#2 0x5561cda00c1c in manifold_solidify /src/blender/source/blender/modifiers/intern/MOD_solidify.c:1117
#3 0x5561cda300b8 in applyModifier /src/blender/source/blender/modifiers/intern/MOD_solidify.c:3044
#4 0x5561cb1a5ad4 in modwrap_applyModifier /src/blender/source/blender/blenkernel/intern/modifier.c:945
#5 0x5561cb7f22b8 in mesh_calc_modifiers /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1208
#6 0x5561cb7faa40 in mesh_build_data /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1844
#7 0x5561cb7fc379 in makeDerivedMesh /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1973
#8 0x5561cb2da70a in BKE_object_handle_data_update /src/blender/source/blender/blenkernel/intern/object_update.c:187
#9 0x5561cb2dd852 in BKE_object_eval_uber_data /src/blender/source/blender/blenkernel/intern/object_update.c:358
#10 0x5561cbd33b31 in void std::__invoke_impl<void, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(std::__invoke_other, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/9.1.0/bits/invoke.h:60
#11 0x5561cbd2db59 in std::__invoke_result<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>::type std::__invoke<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/9.1.0/bits/invoke.h:95
#12 0x5561cbd2538c in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::__call<void, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/9.1.0/functional:400
#13 0x5561cbd1aa06 in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::operator()<Depsgraph*, void>(Depsgraph*&&) /usr/include/c++/9.1.0/functional:484
#14 0x5561cbd0f956 in std::_Function_handler<void (Depsgraph*), std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/9.1.0/bits/std_function.h:300
#15 0x5561cbd8cba2 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/9.1.0/bits/std_function.h:690
#16 0x5561cbd88e4d in deg_task_run_func /src/blender/source/blender/depsgraph/intern/eval/deg_eval.cc:86
#17 0x5561cbc80918 in task_scheduler_thread_run /src/blender/source/blender/blenlib/intern/task.c:450
#18 0x7f4ada5b157e in start_thread (/usr/lib/libpthread.so.0+0x957e)
previously allocated by thread T15 here:
#0 0x7f4adb638ce8 in __interceptor_calloc /build/gcc/src/gcc/libsanitizer/asan/asan_malloc_linux.cc:153
#1 0x5561cbf18108 in MEM_lockfree_callocN /src/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:267
#2 0x5561cbf183f3 in MEM_lockfree_calloc_arrayN /src/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:299
#3 0x5561cd9fbe81 in manifold_solidify /src/blender/source/blender/modifiers/intern/MOD_solidify.c:892
#4 0x5561cda300b8 in applyModifier /src/blender/source/blender/modifiers/intern/MOD_solidify.c:3044
#5 0x5561cb1a5ad4 in modwrap_applyModifier /src/blender/source/blender/blenkernel/intern/modifier.c:945
#6 0x5561cb7f22b8 in mesh_calc_modifiers /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1208
#7 0x5561cb7faa40 in mesh_build_data /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1844
#8 0x5561cb7fc379 in makeDerivedMesh /src/blender/source/blender/blenkernel/intern/DerivedMesh.c:1973
#9 0x5561cb2da70a in BKE_object_handle_data_update /src/blender/source/blender/blenkernel/intern/object_update.c:187
#10 0x5561cb2dd852 in BKE_object_eval_uber_data /src/blender/source/blender/blenkernel/intern/object_update.c:358
#11 0x5561cbd33b31 in void std::__invoke_impl<void, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(std::__invoke_other, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/9.1.0/bits/invoke.h:60
#12 0x5561cbd2db59 in std::__invoke_result<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>::type std::__invoke<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/9.1.0/bits/invoke.h:95
#13 0x5561cbd2538c in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::__call<void, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/9.1.0/functional:400
#14 0x5561cbd1aa06 in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::operator()<Depsgraph*, void>(Depsgraph*&&) /usr/include/c++/9.1.0/functional:484
#15 0x5561cbd0f956 in std::_Function_handler<void (Depsgraph*), std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/9.1.0/bits/std_function.h:300
#16 0x5561cbd8cba2 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/9.1.0/bits/std_function.h:690
#17 0x5561cbd88e4d in deg_task_run_func /src/blender/source/blender/depsgraph/intern/eval/deg_eval.cc:86
#18 0x5561cbc80918 in task_scheduler_thread_run /src/blender/source/blender/blenlib/intern/task.c:450
#19 0x7f4ada5b157e in start_thread (/usr/lib/libpthread.so.0+0x957e)
Thread T15 created by T0 here:
#0 0x7f4adb562367 in __interceptor_pthread_create /build/gcc/src/gcc/libsanitizer/asan/asan_interceptors.cc:208
#1 0x5561cbc81dd0 in BLI_task_scheduler_create /src/blender/source/blender/blenlib/intern/task.c:517
#2 0x5561cbc8fbb9 in BLI_task_scheduler_get /src/blender/source/blender/blenlib/intern/threads.c:177
#3 0x5561cbc8d41c in BLI_task_parallel_range /src/blender/source/blender/blenlib/intern/task.c:1198
#4 0x5561cbdae206 in flush_prepare /src/blender/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:118
#5 0x5561cbdae206 in DEG::deg_graph_flush_updates(Main*, DEG::Depsgraph*) /src/blender/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:365
#6 0x5561cbcb4c50 in DEG_evaluate_on_refresh /src/blender/source/blender/depsgraph/intern/depsgraph_eval.cc:63
#7 0x5561cb4938f0 in scene_graph_update_tagged /src/blender/source/blender/blenkernel/intern/scene.c:1334
#8 0x5561cb4939f1 in BKE_scene_graph_update_tagged /src/blender/source/blender/blenkernel/intern/scene.c:1360
#9 0x5561cca2be96 in wm_event_do_depsgraph /src/blender/source/blender/windowmanager/intern/wm_event_system.c:370
#10 0x5561cca6bfba in wm_file_read_post /src/blender/source/blender/windowmanager/intern/wm_files.c:555
#11 0x5561cca6ee69 in wm_homefile_read /src/blender/source/blender/windowmanager/intern/wm_files.c:1059
#12 0x5561cca9d2d2 in WM_init /src/blender/source/blender/windowmanager/intern/wm_init_exit.c:293
#13 0x5561caaa6548 in main /src/blender/source/creator/creator.c:414
#14 0x7f4ad98eeee2 in __libc_start_main (/usr/lib/libc.so.6+0x26ee2)

Event Timeline

Campbell Barton (campbellbarton) changed the title of this paste from untitled to D5766-Crash.Sep 22 2019, 8:51 AM