crash in ui_def_but_rna #54458

New Issue

Ray molenkamp · 2018-03-29T02:31:20+02:00

Ray molenkamp commented

2018-03-29 02:31:20 +02:00

System Information
Windows x64.

Blender Version
Broken: latest master.
Worked: 2.79

Short description of error
strlen is called on what looks to be freed memory (ASAN will probably have a thing or two to say about this)

Exact steps for others to reproduce the error
Open up .blend, click 'run script'

For repro on windows you need the debug heap enabled, on linux ASAN should be able to catch it.

ui_crash.blend

>	blender.exe!strlen() Line 70	Unknown

 	blender.exe!ui_def_but(uiBlock * block, int type, int retval, const unsigned char * str, int x, int y, short width, short height, void * poin, float min, float max, float a1, float a2, const unsigned char * tip) Line 3182	C
 	blender.exe!ui_def_but_rna(uiBlock * block, int type, int retval, const unsigned char * str, int x, int y, short width, short height, PointerRNA * ptr, PropertyRNA * prop, int index, float min, float max, float a1, float a2, const unsigned char * tip) Line 3575	C
 	blender.exe!uiDefButR_prop(uiBlock * block, int type, int retval, const unsigned char * str, int x, int y, short width, short height, PointerRNA * ptr, PropertyRNA * prop, int index, float min, float max, float a1, float a2, const unsigned char * tip) Line 3831	C
 	blender.exe!uiDefAutoButR(uiBlock * block, PointerRNA * ptr, PropertyRNA * prop, int index, const unsigned char * name, int icon, int x1, int y1, int x2, int y2) Line 112	C
 	blender.exe!ui_item_with_label(uiLayout * layout, uiBlock * block, const unsigned char * name, int icon, PointerRNA * ptr, PropertyRNA * prop, int index, int x, int y, int w, int h, int flag) Line 722	C
 	blender.exe!uiItemFullR(uiLayout * layout, PointerRNA * ptr, PropertyRNA * prop, int index, int value, int flag, const unsigned char * name, int icon) Line 1468	C
 	blender.exe!rna_uiItemR(uiLayout * layout, PointerRNA * ptr, const unsigned char * propname, const unsigned char * name, const unsigned char * text_ctxt, int translate, int icon, int expand, int slider, int toggle, int icon_only, int event, int full_event, int emboss, int index, int icon_value) Line 126	C
 	blender.exe!UILayout_prop_call(bContext * C, ReportList * reports, PointerRNA * _ptr, ParameterList * _parms) Line 1428	C
 	blender.exe!RNA_function_call(bContext * C, ReportList * reports, PointerRNA * ptr, FunctionRNA * func, ParameterList * parms) Line 6474	C
 	blender.exe!pyrna_func_call(BPy_FunctionRNA * self, _object * args, _object * kw) Line 5673	C
 	python36_d.dll!_PyObject_FastCallDict(_object * func, _object * * args, __int64 nargs, _object * kwargs) Line 2316	C
 	python36_d.dll!_PyObject_FastCallKeywords(_object * func, _object * * stack, __int64 nargs, _object * kwnames) Line 2481	C
 	python36_d.dll!call_function(_object * * * pp_stack, __int64 oparg, _object * kwnames) Line 4836	C
 	python36_d.dll!_PyEval_EvalFrameDefault(_frame * f, int throwflag) Line 3312	C
 	python36_d.dll!_PyEval_EvalCodeWithName(_object * _co, _object * globals, _object * locals, _object * * args, __int64 argcount, _object * * kwnames, _object * * kwargs, __int64 kwcount, int kwstep, _object * * defs, __int64 defcount, _object * kwdefs, _object * closure, _object * name, _object * qualname) Line 4139	C
 	python36_d.dll!PyEval_EvalCodeEx(_object * _co, _object * globals, _object * locals, _object * * args, int argcount, _object * * kws, int kwcount, _object * * defs, int defcount, _object * kwdefs, _object * closure) Line 4166	C
 	python36_d.dll!function_call(_object * func, _object * arg, _object * kw) Line 604	C
 	python36_d.dll!PyObject_Call(_object * func, _object * args, _object * kwargs) Line 2246	C
 	blender.exe!bpy_class_call(bContext * C, PointerRNA * ptr, FunctionRNA * func, ParameterList * parms) Line 7757	C
 	blender.exe!panel_draw(const bContext * C, Panel * pnl) Line 148	C
 	blender.exe!ED_region_panels(const bContext * C, ARegion * ar, const unsigned char * context, int contextnr, const bool vertical) Line 1920	C
 	blender.exe!buttons_main_region_draw(const bContext * C, ARegion * ar) Line 147	C
 	blender.exe!ED_region_do_draw(bContext * C, ARegion * ar) Line 522	C
 	blender.exe!wm_method_draw_triple(bContext * C, wmWindow * win) Line 610	C
 	blender.exe!wm_draw_update(bContext * C) Line 1000	C
 	blender.exe!WM_main(bContext * C) Line 523	C
 	blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Line 529	C
 	[External Code]

**System Information** Windows x64. **Blender Version** Broken: latest master. Worked: 2.79 **Short description of error** strlen is called on what looks to be freed memory (ASAN will probably have a thing or two to say about this) **Exact steps for others to reproduce the error** Open up .blend, click 'run script' For repro on windows you need the debug heap enabled, on linux ASAN should be able to catch it. [ui_crash.blend](https://archive.blender.org/developer/F2532213/ui_crash.blend) ``` > blender.exe!strlen() Line 70 Unknown blender.exe!ui_def_but(uiBlock * block, int type, int retval, const unsigned char * str, int x, int y, short width, short height, void * poin, float min, float max, float a1, float a2, const unsigned char * tip) Line 3182 C blender.exe!ui_def_but_rna(uiBlock * block, int type, int retval, const unsigned char * str, int x, int y, short width, short height, PointerRNA * ptr, PropertyRNA * prop, int index, float min, float max, float a1, float a2, const unsigned char * tip) Line 3575 C blender.exe!uiDefButR_prop(uiBlock * block, int type, int retval, const unsigned char * str, int x, int y, short width, short height, PointerRNA * ptr, PropertyRNA * prop, int index, float min, float max, float a1, float a2, const unsigned char * tip) Line 3831 C blender.exe!uiDefAutoButR(uiBlock * block, PointerRNA * ptr, PropertyRNA * prop, int index, const unsigned char * name, int icon, int x1, int y1, int x2, int y2) Line 112 C blender.exe!ui_item_with_label(uiLayout * layout, uiBlock * block, const unsigned char * name, int icon, PointerRNA * ptr, PropertyRNA * prop, int index, int x, int y, int w, int h, int flag) Line 722 C blender.exe!uiItemFullR(uiLayout * layout, PointerRNA * ptr, PropertyRNA * prop, int index, int value, int flag, const unsigned char * name, int icon) Line 1468 C blender.exe!rna_uiItemR(uiLayout * layout, PointerRNA * ptr, const unsigned char * propname, const unsigned char * name, const unsigned char * text_ctxt, int translate, int icon, int expand, int slider, int toggle, int icon_only, int event, int full_event, int emboss, int index, int icon_value) Line 126 C blender.exe!UILayout_prop_call(bContext * C, ReportList * reports, PointerRNA * _ptr, ParameterList * _parms) Line 1428 C blender.exe!RNA_function_call(bContext * C, ReportList * reports, PointerRNA * ptr, FunctionRNA * func, ParameterList * parms) Line 6474 C blender.exe!pyrna_func_call(BPy_FunctionRNA * self, _object * args, _object * kw) Line 5673 C python36_d.dll!_PyObject_FastCallDict(_object * func, _object * * args, __int64 nargs, _object * kwargs) Line 2316 C python36_d.dll!_PyObject_FastCallKeywords(_object * func, _object * * stack, __int64 nargs, _object * kwnames) Line 2481 C python36_d.dll!call_function(_object * * * pp_stack, __int64 oparg, _object * kwnames) Line 4836 C python36_d.dll!_PyEval_EvalFrameDefault(_frame * f, int throwflag) Line 3312 C python36_d.dll!_PyEval_EvalCodeWithName(_object * _co, _object * globals, _object * locals, _object * * args, __int64 argcount, _object * * kwnames, _object * * kwargs, __int64 kwcount, int kwstep, _object * * defs, __int64 defcount, _object * kwdefs, _object * closure, _object * name, _object * qualname) Line 4139 C python36_d.dll!PyEval_EvalCodeEx(_object * _co, _object * globals, _object * locals, _object * * args, int argcount, _object * * kws, int kwcount, _object * * defs, int defcount, _object * kwdefs, _object * closure) Line 4166 C python36_d.dll!function_call(_object * func, _object * arg, _object * kw) Line 604 C python36_d.dll!PyObject_Call(_object * func, _object * args, _object * kwargs) Line 2246 C blender.exe!bpy_class_call(bContext * C, PointerRNA * ptr, FunctionRNA * func, ParameterList * parms) Line 7757 C blender.exe!panel_draw(const bContext * C, Panel * pnl) Line 148 C blender.exe!ED_region_panels(const bContext * C, ARegion * ar, const unsigned char * context, int contextnr, const bool vertical) Line 1920 C blender.exe!buttons_main_region_draw(const bContext * C, ARegion * ar) Line 147 C blender.exe!ED_region_do_draw(bContext * C, ARegion * ar) Line 522 C blender.exe!wm_method_draw_triple(bContext * C, wmWindow * win) Line 610 C blender.exe!wm_draw_update(bContext * C) Line 1000 C blender.exe!WM_main(bContext * C) Line 523 C blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Line 529 C [External Code] ```

Ray molenkamp commented

2018-03-29 02:31:20 +02:00

Added subscriber: @LazyDodo

Ray molenkamp commented

2018-03-29 02:32:30 +02:00

Added subscriber: @VukGardasevic

Ray molenkamp commented

2018-03-29 02:32:30 +02:00

script is by @VukGardasevic for testing D2918

script is by @VukGardasevic for testing [D2918](https://archive.blender.org/developer/D2918)

Brecht Van Lommel commented

2018-03-29 07:26:05 +02:00

Added subscriber: @brecht

Brecht Van Lommel commented

2018-03-29 07:26:05 +02:00

I didn't check if it's the same issue, but there is a documented bug that sounds similar:
https://docs.blender.org/api/2.79/bpy.props.html#bpy.props.EnumProperty

I didn't check if it's the same issue, but there is a documented bug that sounds similar: https://docs.blender.org/api/2.79/bpy.props.html#bpy.props.EnumProperty

Campbell Barton commented

2018-03-29 08:59:28 +02:00

Added subscriber: @ideasman42

Campbell Barton commented

2018-03-29 08:59:28 +02:00

@brecht yes, thats the bug. We could workaround this by over allocating the return value of enum_items_from_py, storing the string data at the end.

While this would backfire if Blender ever tries to copy the enum, I don't think we do this at the moment.

Another option could be to allocate or intern strings and have a flag in each EnumPropertyItem to mark is as different.

@brecht yes, thats the bug. We could workaround this by over allocating the return value of `enum_items_from_py`, storing the string data at the end. While this would backfire if Blender ever tries to copy the enum, I don't think we do this at the moment. Another option could be to allocate or intern strings and have a flag in each `EnumPropertyItem` to mark is as different.

Campbell Barton commented

2018-03-29 09:00:03 +02:00

Changed status from 'Open' to: 'Archived'

Campbell Barton closed this issue

2018-03-29 09:00:03 +02:00

Campbell Barton self-assigned this 2018-03-29 09:00:03 +02:00

Campbell Barton commented

2018-03-29 09:00:03 +02:00

Archiving since this is a known issue.

Sign in to join this conversation.

No Label

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

crash in ui_def_but_rna #54458