crash while rendering a scene with copositing nodes using another scene #39985

New Issue

Ghislain Huet · 2014-05-01T18:32:35+02:00

Ghislain Huet commented

2014-05-01 18:32:35 +02:00

System Information
platform: 'Windows 8.1 64bit'

renderer: 'GeForce GTX 680/PCIe/SSE2'
vendor: 'NVIDIA Corporation'
version: '4.3.0'

Blender Version
Broken: blender-2.70a-windows64
Worked: (optional)

Short description of error
The crash occured during the rendering of the main scene ("scene"). This scene has compositing nodes activated. On the nodes editor window, there is only two nodes : a file output, and a "Render Layers" configured on another scene ("Left_Camera").
The crash doesn't occure any more when this node point to the "scene" scene...

Exact steps for others to reproduce the error

open the given File
click on the "Annimation" button to launch the rendering

crash_rendering_with_compositing_node_with_another_scene.blend

**System Information** platform: 'Windows 8.1 64bit' renderer: 'GeForce GTX 680/PCIe/SSE2' vendor: 'NVIDIA Corporation' version: '4.3.0' **Blender Version** Broken: blender-2.70a-windows64 Worked: (optional) **Short description of error** The crash occured during the rendering of the main scene ("scene"). This scene has compositing nodes activated. On the nodes editor window, there is only two nodes : a file output, and a "Render Layers" configured on another scene ("Left_Camera"). The crash doesn't occure any more when this node point to the "scene" scene... **Exact steps for others to reproduce the error** - open the given File - click on the "Annimation" button to launch the rendering [crash_rendering_with_compositing_node_with_another_scene.blend](https://archive.blender.org/developer/F86565/crash_rendering_with_compositing_node_with_another_scene.blend)

Ghislain Huet commented

2014-05-01 18:32:35 +02:00

Changed status to: 'Open'

Ghislain Huet commented

2014-05-01 18:32:35 +02:00

Added subscriber: @ghuet

blender-admin commented

2014-05-01 18:32:35 +02:00

#40098 was marked as duplicate of this issue

Kévin Dietrich commented

2014-05-01 19:13:43 +02:00

Added subscriber: @kevindietrich

Kévin Dietrich commented

2014-05-01 19:13:43 +02:00

Your file doesn't crash here, Linux 64bit 95b93b5. Tried with regular and debug build.

Could you try with a nightly build ?

Your file doesn't crash here, Linux 64bit 95b93b5. Tried with regular and debug build. Could you try with a [nightly build ](http://builder.blender.org/download) ?

Willi commented

2014-05-01 19:40:48 +02:00

Added subscriber: @willi-2

Willi commented

2014-05-01 19:40:48 +02:00

Crash confirmed on Win7/64 when pressing F12 with 2.70, 2.70a and latest build. Works with 2.69.

Ghislain Huet commented

2014-05-01 22:51:22 +02:00

It still crashes with the last nightly build (blender-2.70-4849ca8-win64)...

Bastien Montagne commented

2014-05-02 08:33:17 +02:00

Added subscriber: @mont29

Bastien Montagne commented

2014-05-02 08:36:17 +02:00

This is a segfault (we get an NULL ibuf->rect):

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffc9c39700 (LWP 628)]

0x00007ffff4e68895 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0

(gdb) up

#1 0x00007ffff4e5d343 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0

(gdb) up

#2 0x0000000003a760c4 in IMB_partial_display_buffer_update (ibuf=0x605600058b88, linear_buffer=0x7fffb93698a8, byte_buffer=0x0, stride=132, offset_x=768, offset_y=384,

    view_settings=0x602e00229880, display_settings=0x602e00229920, xmin=768, ymin=384, xmax=896, ymax=407, copy_display_to_byte_buffer=true)
    at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/imbuf/intern/colormanagement.c:2808

2808 memcpy(ibuf->rect + index, display_buffer + index, (xmax - xmin) * 4);

(gdb) print ibuf
$1 = (ImBuf *) 0x605600058b88
(gdb) print ibuf->rect
$2 = (unsigned int *) 0x0
(gdb) bt

0 0x00007ffff4e68895 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0
1 0x00007ffff4e5d343 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0
#2 0x0000000003a760c4 in IMB_partial_display_buffer_update (ibuf=0x605600058b88, linear_buffer=0x7fffb93698a8, byte_buffer=0x0, stride=132, offset_x=768, offset_y=384,

    view_settings=0x602e00229880, display_settings=0x602e00229920, xmin=768, ymin=384, xmax=896, ymax=407, copy_display_to_byte_buffer=true)
    at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/imbuf/intern/colormanagement.c:2808

#3 0x000000000273fdb0 in image_buffer_rect_update (rj=0x602e002297e8, rr=0x601c000dff68, ibuf=0x605600058b88, iuser=0x602e00229820, renrect=0x601c000dffc8)

    at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/render/render_internal.c:235

#4 0x00000000027426e5 in image_rect_update (rjv=0x602e002297e8, rr=0x601c000dff68, renrect=0x601c000dffc8)

    at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/render/render_internal.c:556

5 0x00000000029c8241 in threaded_tile_processor (re=0x606e00058308) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/render/intern/source/pipeline.c:1115
6 0x00000000029c8cb4 in do_render_3d (re=0x606e00058308) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/render/intern/source/pipeline.c:1220
7 0x00000000029cbba2 in do_render_fields_blur_3d (re=0x606e00058308) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/render/intern/source/pipeline.c:1519
8 0x00000000029cc557 in render_scene (re=0x606e00047508, sce=0x605e000fa588, cfra=271) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/render/intern/source/pipeline.c:1597
9 0x00000000029cdbb9 in ntree_render_scenes (re=0x606e00047508) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/render/intern/source/pipeline.c:1798
10 0x00000000029d0a51 in do_render_composite_fields_blur_3d (re=0x606e00047508) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/render/intern/source/pipeline.c:2145
11 0x00000000029d23a0 in do_render_all_options (re=0x606e00047508) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/render/intern/source/pipeline.c:2317
12 0x00000000029d4866 in RE_BlenderFrame (re=0x606e00047508, bmain=0x605000033888, scene=0x605e000f9688, srl=0x0, camera_override=0x0, lay_override=0, frame=271, write_still=false)

    at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:2648

#13 0x0000000002742c9d in render_startjob (rjv=0x602e002297e8, stop=0x602800089abc, do_update=0x602800089aba, progress=0x602800089ac0)

    at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/render/render_internal.c:578

14 0x0000000001d18332 in do_job_thread (job_v=0x602800089a48) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/windowmanager/intern/wm_jobs.c:330
15 0x0000000003bd08ae in tslot_thread_start (tslot_p=0x600c006ebc48) at /home/i7deb64/blender-2.5-svn/work/src/source/blender/blenlib/intern/threads.c:251
16 0x00007ffff4e67a58 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0
17 0x00007ffff2a8d062 in start_thread (arg=0x7fffc9c39700) at pthread_create.c:312
18 0x00007fffec2b8a3d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

This is a segfault (we get an NULL ibuf->rect): ``` Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7fffc9c39700 (LWP 628)] ``` 0x00007ffff4e68895 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0 ``` (gdb) up ``` #1 0x00007ffff4e5d343 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0 ``` (gdb) up ``` #2 0x0000000003a760c4 in IMB_partial_display_buffer_update (ibuf=0x605600058b88, linear_buffer=0x7fffb93698a8, byte_buffer=0x0, stride=132, offset_x=768, offset_y=384, ``` view_settings=0x602e00229880, display_settings=0x602e00229920, xmin=768, ymin=384, xmax=896, ymax=407, copy_display_to_byte_buffer=true) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/imbuf/intern/colormanagement.c:2808 ``` 2808 memcpy(ibuf->rect + index, display_buffer + index, (xmax - xmin) * 4); ``` (gdb) print ibuf $1 = (ImBuf *) 0x605600058b88 (gdb) print ibuf->rect $2 = (unsigned int *) 0x0 (gdb) bt ``` - 0 0x00007ffff4e68895 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0 - 1 0x00007ffff4e5d343 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0 #2 0x0000000003a760c4 in IMB_partial_display_buffer_update (ibuf=0x605600058b88, linear_buffer=0x7fffb93698a8, byte_buffer=0x0, stride=132, offset_x=768, offset_y=384, ``` view_settings=0x602e00229880, display_settings=0x602e00229920, xmin=768, ymin=384, xmax=896, ymax=407, copy_display_to_byte_buffer=true) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/imbuf/intern/colormanagement.c:2808 ``` #3 0x000000000273fdb0 in image_buffer_rect_update (rj=0x602e002297e8, rr=0x601c000dff68, ibuf=0x605600058b88, iuser=0x602e00229820, renrect=0x601c000dffc8) ``` at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/render/render_internal.c:235 ``` #4 0x00000000027426e5 in image_rect_update (rjv=0x602e002297e8, rr=0x601c000dff68, renrect=0x601c000dffc8) ``` at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/render/render_internal.c:556 ``` - 5 0x00000000029c8241 in threaded_tile_processor (re=0x606e00058308) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:1115 - 6 0x00000000029c8cb4 in do_render_3d (re=0x606e00058308) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:1220 - 7 0x00000000029cbba2 in do_render_fields_blur_3d (re=0x606e00058308) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:1519 - 8 0x00000000029cc557 in render_scene (re=0x606e00047508, sce=0x605e000fa588, cfra=271) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:1597 - 9 0x00000000029cdbb9 in ntree_render_scenes (re=0x606e00047508) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:1798 - 10 0x00000000029d0a51 in do_render_composite_fields_blur_3d (re=0x606e00047508) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:2145 - 11 0x00000000029d23a0 in do_render_all_options (re=0x606e00047508) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:2317 - 12 0x00000000029d4866 in RE_BlenderFrame (re=0x606e00047508, bmain=0x605000033888, scene=0x605e000f9688, srl=0x0, camera_override=0x0, lay_override=0, frame=271, write_still=false) ``` at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/render/intern/source/pipeline.c:2648 ``` #13 0x0000000002742c9d in render_startjob (rjv=0x602e002297e8, stop=0x602800089abc, do_update=0x602800089aba, progress=0x602800089ac0) ``` at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/editors/render/render_internal.c:578 ``` - 14 0x0000000001d18332 in do_job_thread (job_v=0x602800089a48) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/windowmanager/intern/wm_jobs.c:330 - 15 0x0000000003bd08ae in tslot_thread_start (tslot_p=0x600c006ebc48) at /home/i7deb64/blender-2.5-svn/__work__/src/source/blender/blenlib/intern/threads.c:251 - 16 0x00007ffff4e67a58 in ?? () from /usr/lib/x86_64-linux-gnu/libasan.so.0 - 17 0x00007ffff2a8d062 in start_thread (arg=0x7fffc9c39700) at pthread_create.c:312 - 18 0x00007fffec2b8a3d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Lukas Tönne commented

2014-05-02 10:56:05 +02:00

Added subscriber: @LukasTonne

Lukas Tönne commented

2014-05-02 10:56:05 +02:00

Can confirm the crash. Got both the ibuf->rect==NULL error as well as aborts from address sanitizer:

==15260==ERROR: AddressSanitizer: heap-use-after-free on address 0x6140001e71c0 at pc 0x2a1964a bp 0x7fffd0745bb0 sp 0x7fffd0745ba8
READ of size 1 at 0x6140001e71c0 thread T28

  - 0 0x2a19649 in render_drawlock /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:725
  - 1 0x3267173 in do_render_3d /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1205
  - 2 0x327030e in do_render_fields_blur_3d /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1519
  - 3 0x3274a01 in render_scene /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1597
  - 4 0x3271d9a in ntree_render_scenes /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1798
  - 5 0x326e990 in do_render_composite_fields_blur_3d /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:2145
  - 6 0x325f295 in do_render_all_options /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:2317
  - 7 0x325c26a in RE_BlenderFrame /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:2648
  - 8 0x2a17c48 in render_startjob /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:578
  - 9 0xa0a75a in do_job_thread /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_jobs.c:330
  - 10 0x6707006 in tslot_thread_start /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenlib/intern/threads.c:251
  - 11 0x952fa3 in _ZN6__asan10AsanThread11ThreadStartEm ??:?
  - 12 0x7ffff32500a1 in start_thread pthread_create.c:?
  - 13 0x7ffff384e43c in __clone ??:?

0x6140001e71c0 is located 384 bytes inside of 392-byte region [0x6140001e7040,0x6140001e71c8)

freed by thread T0 here:

  - 0 0x94c924 in __interceptor_free ??:?
  - 1 0x68d4ac0 in MEM_lockfree_freeN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:127
  - 2 0x2a16ee2 in render_freejob /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:338
  - 3 0xa0da3e in wm_jobs_timer /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_jobs.c:579
  - 4 0xaa3a38 in wm_window_timer /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_window.c:1053
  - 5 0xaa2e0d in wm_window_process_events /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_window.c:1086
  - 6 0x9759c9 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488
  - 7 0x95c518 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1755
  #8 0x7ffff378abc4 in __libc_start_main ??:?

previously allocated by thread T0 here:

  - 0 0x94ca73 in __interceptor_calloc ??:?
  - 1 0x68d7acd in MEM_lockfree_callocN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:215
  - 2 0x2a02b1c in screen_render_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:866
  - 3 0x9e2c04 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1030
  - 4 0x9dc97d in wm_handler_operator_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1625
  - 5 0x9d63a6 in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1893
  - 6 0x9b849b in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2002
  - 7 0x9b60c6 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2332
  - 8 0x9759f6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:491
  - 9 0x95c518 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1755
  #10 0x7ffff378abc4 in __libc_start_main ??:?

Thread T28 created by T0 here:

  #0 0x948970

 (/home/lukas/Development/Blender/bf-blender/cmake-debug/bin/blender+0x948970)

  - 11 0x6706d86 in BLI_insert_thread /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenlib/intern/threads.c:267
  - 12 0xa0969b in WM_jobs_start /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_jobs.c:413
  - 13 0x2a04bfe in screen_render_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:953
  - 14 0x9e2c04 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1030
  - 15 0x9dc97d in wm_handler_operator_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1625
  - 16 0x9d63a6 in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1893
  - 17 0x9b849b in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2002
  - 18 0x9b60c6 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2332
  - 19 0x9759f6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:491
  - 20 0x95c518 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1755
  #21 0x7ffff378abc4 in __libc_start_main ??:?

Shadow bytes around the buggy address:

0x0c2880034de0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c2880034df0: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa
0x0c2880034e00: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
0x0c2880034e10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c2880034e20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd

=>0x0c2880034e30: fd fd fd fd fd fd fd fd[fd]fa fa fa fa fa fa fa

0x0c2880034e40: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
0x0c2880034e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c2880034e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c2880034e70: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa
0x0c2880034e80: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00

Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:     fa
  Heap right redzone:    fb
  Freed heap region:     fd
  Stack left redzone:    f1
  Stack mid redzone:     f2
  Stack right redzone:   f3
  Stack partial redzone: f4
  Stack after return:    f5
  Stack use after scope: f8
  Global redzone:        f9
  Global init order:     f6
  Poisoned by user:      f7
  ASan internal:         fe
==15260==ABORTING

It looks like the render job gets freed prematurely for some reason ...

Can confirm the crash. Got both the `ibuf->rect==NULL` error as well as aborts from address sanitizer: ``` ==15260==ERROR: AddressSanitizer: heap-use-after-free on address 0x6140001e71c0 at pc 0x2a1964a bp 0x7fffd0745bb0 sp 0x7fffd0745ba8 READ of size 1 at 0x6140001e71c0 thread T28 ``` - 0 0x2a19649 in render_drawlock /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:725 - 1 0x3267173 in do_render_3d /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1205 - 2 0x327030e in do_render_fields_blur_3d /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1519 - 3 0x3274a01 in render_scene /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1597 - 4 0x3271d9a in ntree_render_scenes /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:1798 - 5 0x326e990 in do_render_composite_fields_blur_3d /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:2145 - 6 0x325f295 in do_render_all_options /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:2317 - 7 0x325c26a in RE_BlenderFrame /home/lukas/Development/Blender/bf-blender/blender/source/blender/render/intern/source/pipeline.c:2648 - 8 0x2a17c48 in render_startjob /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:578 - 9 0xa0a75a in do_job_thread /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_jobs.c:330 - 10 0x6707006 in tslot_thread_start /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenlib/intern/threads.c:251 - 11 0x952fa3 in _ZN6__asan10AsanThread11ThreadStartEm ??:? - 12 0x7ffff32500a1 in start_thread pthread_create.c:? - 13 0x7ffff384e43c in __clone ??:? 0x6140001e71c0 is located 384 bytes inside of 392-byte region [0x6140001e7040,0x6140001e71c8) ``` freed by thread T0 here: ``` - 0 0x94c924 in __interceptor_free ??:? - 1 0x68d4ac0 in MEM_lockfree_freeN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:127 - 2 0x2a16ee2 in render_freejob /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:338 - 3 0xa0da3e in wm_jobs_timer /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_jobs.c:579 - 4 0xaa3a38 in wm_window_timer /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_window.c:1053 - 5 0xaa2e0d in wm_window_process_events /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_window.c:1086 - 6 0x9759c9 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488 - 7 0x95c518 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1755 #8 0x7ffff378abc4 in __libc_start_main ??:? ``` previously allocated by thread T0 here: ``` - 0 0x94ca73 in __interceptor_calloc ??:? - 1 0x68d7acd in MEM_lockfree_callocN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:215 - 2 0x2a02b1c in screen_render_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:866 - 3 0x9e2c04 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1030 - 4 0x9dc97d in wm_handler_operator_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1625 - 5 0x9d63a6 in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1893 - 6 0x9b849b in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2002 - 7 0x9b60c6 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2332 - 8 0x9759f6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:491 - 9 0x95c518 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1755 #10 0x7ffff378abc4 in __libc_start_main ??:? ``` Thread T28 created by T0 here: ``` #0 0x948970 ``` (/home/lukas/Development/Blender/bf-blender/cmake-debug/bin/blender+0x948970) ``` - 11 0x6706d86 in BLI_insert_thread /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenlib/intern/threads.c:267 - 12 0xa0969b in WM_jobs_start /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_jobs.c:413 - 13 0x2a04bfe in screen_render_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/render/render_internal.c:953 - 14 0x9e2c04 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1030 - 15 0x9dc97d in wm_handler_operator_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1625 - 16 0x9d63a6 in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1893 - 17 0x9b849b in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2002 - 18 0x9b60c6 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2332 - 19 0x9759f6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:491 - 20 0x95c518 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1755 #21 0x7ffff378abc4 in __libc_start_main ??:? ``` Shadow bytes around the buggy address: ``` 0x0c2880034de0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2880034df0: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa 0x0c2880034e00: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c2880034e10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2880034e20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd ``` =>0x0c2880034e30: fd fd fd fd fd fd fd fd[fd]fa fa fa fa fa fa fa ``` 0x0c2880034e40: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c2880034e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2880034e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2880034e70: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa 0x0c2880034e80: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 ``` Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 ASan internal: fe ==15260==ABORTING ``` It looks like the render job gets freed prematurely for some reason ...

Lukas Tönne commented

2014-05-02 11:19:50 +02:00

Error is caused by the "Save Buffers" option. This is enabled in both scenes. Disabling it in "Scene" has not effect, but disabling it in the "Left_Camera" scene avoids the bug afaict.