Crash on entering in Edit mode with ASAN build #65226

New Issue

Bastien Montagne · 2019-05-28T10:07:08+02:00

Bastien Montagne commented

2019-05-28 10:07:08 +02:00

Since 01f5ef82af, I get that crash on entering Edit mode (even with startup cube), with my debug ASAN builds:

=================================================================
==8476==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffd5896fc40 at pc 0x7f3797e3331e bp 0x7ffd5896f8a0 sp 0x7ffd5896f050
READ of size 4 at 0x7ffd5896fc40 thread T0
    - 0 0x7f3797e3331d  (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x3f31d)
    - 1 0x7f378efdd02e  (/usr/lib/x86_64-linux-gnu/dri/i965_dri.so+0x30a02e)
    - 2 0x7f378efde6b6  (/usr/lib/x86_64-linux-gnu/dri/i965_dri.so+0x30b6b6)
    - 3 0x55dc38b997c7 in GPU_shader_uniform_vector /home/i74700deb64/blender/__work__/src/source/blender/gpu/intern/gpu_shader.c:725
    - 4 0x55dc36cc05d6 in draw_update_uniforms /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:807
    - 5 0x55dc36cc115f in draw_shgroup /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:919
    - 6 0x55dc36cc26e5 in drw_draw_pass_ex /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:1001
    - 7 0x55dc36cc2a56 in DRW_draw_pass /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:1041
    - 8 0x55dc36cd6a97 in EDIT_MESH_draw_scene /home/i74700deb64/blender/__work__/src/source/blender/draw/modes/edit_mesh_mode.c:841
    - 9 0x55dc36ca2aff in drw_engines_draw_scene /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager.c:1161
    - 10 0x55dc36ca5100 in DRW_draw_render_loop_ex /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager.c:1636
    - 11 0x55dc36ca439e in DRW_draw_view /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager.c:1502
    - 12 0x55dc37a240b3 in view3d_draw_view /home/i74700deb64/blender/__work__/src/source/blender/editors/space_view3d/view3d_draw.c:1443
    - 13 0x55dc37a241ab in view3d_main_region_draw /home/i74700deb64/blender/__work__/src/source/blender/editors/space_view3d/view3d_draw.c:1464
    - 14 0x55dc37c3f1d6 in ED_region_do_draw /home/i74700deb64/blender/__work__/src/source/blender/editors/screen/area.c:567
    - 15 0x55dc366bbef4 in wm_draw_window_offscreen /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_draw.c:596
    - 16 0x55dc366bca17 in wm_draw_window /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_draw.c:732
    - 17 0x55dc366bd448 in wm_draw_update /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_draw.c:895
    - 18 0x55dc366b23f5 in WM_main /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm.c:423
    - 19 0x55dc356767f6 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:500
    - 20 0x7f3796b1309a in __libc_start_main ../csu/libc-start.c:308
    - 21 0x55dc35675d89 in _start (/home/i74700deb64/blender/__work__/build_lite/bin/blender+0x1712d89)

Address 0x7ffd5896fc40 is located in stack of thread T0 at offset 48 in frame
    #0 0x55dc36cd63cc in EDIT_MESH_draw_scene /home/i74700deb64/blender/__work__/src/source/blender/draw/modes/edit_mesh_mode.c:801

  This frame has 1 object(s):
    [32, 48) 'clearcol' <== Memory access at offset 48 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x3f31d) 
Shadow bytes around the buggy address:
  0x10002b125f30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10002b125f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10002b125f50: 00 00 f1 f1 f1 f1 04 f2 f2 f2 f2 f2 f2 f2 00 00
  0x10002b125f60: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00
  0x10002b125f70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x10002b125f80: 00 00 f1 f1 f1 f1 00 00[f2]f2 f3 f3 f3 f3 00 00
  0x10002b125f90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10002b125fa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x10002b125fb0: f1 f1 f1 f1 00 00 f2 f2 f2 f2 f2 f2 f8 f8 f8 f2
  0x10002b125fc0: f2 f2 f2 f2 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
  0x10002b125fd0: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==8476==ABORTING

Since 01f5ef82af, I get that crash on entering Edit mode (even with startup cube), with my debug ASAN builds: ```lines=20 ================================================================= ==8476==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffd5896fc40 at pc 0x7f3797e3331e bp 0x7ffd5896f8a0 sp 0x7ffd5896f050 READ of size 4 at 0x7ffd5896fc40 thread T0 - 0 0x7f3797e3331d (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x3f31d) - 1 0x7f378efdd02e (/usr/lib/x86_64-linux-gnu/dri/i965_dri.so+0x30a02e) - 2 0x7f378efde6b6 (/usr/lib/x86_64-linux-gnu/dri/i965_dri.so+0x30b6b6) - 3 0x55dc38b997c7 in GPU_shader_uniform_vector /home/i74700deb64/blender/__work__/src/source/blender/gpu/intern/gpu_shader.c:725 - 4 0x55dc36cc05d6 in draw_update_uniforms /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:807 - 5 0x55dc36cc115f in draw_shgroup /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:919 - 6 0x55dc36cc26e5 in drw_draw_pass_ex /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:1001 - 7 0x55dc36cc2a56 in DRW_draw_pass /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager_exec.c:1041 - 8 0x55dc36cd6a97 in EDIT_MESH_draw_scene /home/i74700deb64/blender/__work__/src/source/blender/draw/modes/edit_mesh_mode.c:841 - 9 0x55dc36ca2aff in drw_engines_draw_scene /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager.c:1161 - 10 0x55dc36ca5100 in DRW_draw_render_loop_ex /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager.c:1636 - 11 0x55dc36ca439e in DRW_draw_view /home/i74700deb64/blender/__work__/src/source/blender/draw/intern/draw_manager.c:1502 - 12 0x55dc37a240b3 in view3d_draw_view /home/i74700deb64/blender/__work__/src/source/blender/editors/space_view3d/view3d_draw.c:1443 - 13 0x55dc37a241ab in view3d_main_region_draw /home/i74700deb64/blender/__work__/src/source/blender/editors/space_view3d/view3d_draw.c:1464 - 14 0x55dc37c3f1d6 in ED_region_do_draw /home/i74700deb64/blender/__work__/src/source/blender/editors/screen/area.c:567 - 15 0x55dc366bbef4 in wm_draw_window_offscreen /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_draw.c:596 - 16 0x55dc366bca17 in wm_draw_window /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_draw.c:732 - 17 0x55dc366bd448 in wm_draw_update /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_draw.c:895 - 18 0x55dc366b23f5 in WM_main /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm.c:423 - 19 0x55dc356767f6 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:500 - 20 0x7f3796b1309a in __libc_start_main ../csu/libc-start.c:308 - 21 0x55dc35675d89 in _start (/home/i74700deb64/blender/__work__/build_lite/bin/blender+0x1712d89) Address 0x7ffd5896fc40 is located in stack of thread T0 at offset 48 in frame #0 0x55dc36cd63cc in EDIT_MESH_draw_scene /home/i74700deb64/blender/__work__/src/source/blender/draw/modes/edit_mesh_mode.c:801 This frame has 1 object(s): [32, 48) 'clearcol' <== Memory access at offset 48 overflows this variable HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext (longjmp and C++ exceptions *are* supported) SUMMARY: AddressSanitizer: stack-buffer-overflow (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x3f31d) Shadow bytes around the buggy address: 0x10002b125f30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x10002b125f40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x10002b125f50: 00 00 f1 f1 f1 f1 04 f2 f2 f2 f2 f2 f2 f2 00 00 0x10002b125f60: 00 00 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 0x10002b125f70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x10002b125f80: 00 00 f1 f1 f1 f1 00 00[f2]f2 f3 f3 f3 f3 00 00 0x10002b125f90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x10002b125fa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x10002b125fb0: f1 f1 f1 f1 00 00 f2 f2 f2 f2 f2 f2 f8 f8 f8 f2 0x10002b125fc0: f2 f2 f2 f2 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 0x10002b125fd0: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==8476==ABORTING ```

Clément Foucault was assigned by Bastien Montagne

2019-05-28 10:07:08 +02:00

Bastien Montagne commented

2019-05-28 10:07:08 +02:00

Added subscriber: @mont29

blender-admin commented

2019-05-28 14:37:40 +02:00

This issue was referenced by 433c2d1dea

This issue was referenced by 433c2d1dea3347548bfd017889629fdd361a7f59

Clément Foucault commented

2019-05-28 14:44:53 +02:00

Changed status from 'Open' to: 'Resolved'

Clément Foucault closed this issue

2019-05-28 14:44:53 +02:00

Sign in to join this conversation.

No Label

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

Crash on entering in Edit mode with ASAN build #65226