blender crashes when editing in edit mode an object with same object data #86767

New Issue

Mylo Pinto Rizvi · 2021-03-20T18:40:51+01:00

Mylo Pinto Rizvi commented

2021-03-20 18:40:51 +01:00

System Information
Operating system: macOS-10.14.6-x86_64-i386-64bit 64 Bits
Graphics card: Intel(R) HD Graphics 6000 Intel Inc. 4.1 INTEL-12.10.16

Operating system : Windows-10-10.0.18362-SP0 64 Bits
Graphics card : AMD Radeon(TM) 535 ATI Technologies*

Blender Version
Broken: version:
2.93.0 Alpha, branch: master, commit date: 2021-03-19 21:37, hash: 3494946560
2.93.0 Alpha, branch: master, commit date: 2021-03-22 17:02, hash: 62987a6f98
2.93.0 Alpha, branch: master, commit date: 2021-03-24 10:00, hash: 715c746296
2.93.0 Alpha, branch: master, commit date: 2021-03-29 22:00, hash: 91c44fe885
2.93.0 Alpha, branch: master, commit date: 2021-03-31 19:43, hash: 1a100d2d78
2.93.0 Alpha, branch: master, commit date: 2021-04-01 21:49, hash: d91fec1a85
2.93.0 Alpha, branch: master, commit date: 2021-04-03 16:32, hash: 8681504f06
2.93.0 Alpha, branch: master, commit date: 2021-04-05 21:28, hash: 074b0b6da0
2.93.0 Alpha, branch: master, commit date: 2021-04-06 13:34, hash: 24d71acd86
2.93.0 Alpha, branch: master, commit date: 2021-04-06 21:02, hash: e0a1a2f49d

Worked: *490801ba1d , commit date 2021-04-06 , branch : master , version : 2.93.0 alpha

Short description of error
blender crashes when editing in edit mode a object with the same object data

Exact steps for others to reproduce the error

duplicate with alt d the default cube and go into edit mode. If that doesn't crash try bevelling or some other modification.

edit_mode_crash.text
bug 2.rtf
tardis.blend1

tardis.blend

EDIT:
smaller test file
crash.blend

**System Information** Operating system: macOS-10.14.6-x86_64-i386-64bit 64 Bits Graphics card: Intel(R) HD Graphics 6000 Intel Inc. 4.1 INTEL-12.10.16 Operating system : Windows-10-10.0.18362-SP0 64 Bits Graphics card : AMD Radeon(TM) 535 ATI Technologies* **Blender Version** Broken: version: 2.93.0 Alpha, branch: master, commit date: 2021-03-19 21:37, hash: `3494946560` 2.93.0 Alpha, branch: master, commit date: 2021-03-22 17:02, hash: `62987a6f98` 2.93.0 Alpha, branch: master, commit date: 2021-03-24 10:00, hash: `715c746296` 2.93.0 Alpha, branch: master, commit date: 2021-03-29 22:00, hash: `91c44fe885` 2.93.0 Alpha, branch: master, commit date: 2021-03-31 19:43, hash: `1a100d2d78` 2.93.0 Alpha, branch: master, commit date: 2021-04-01 21:49, hash: `d91fec1a85` 2.93.0 Alpha, branch: master, commit date: 2021-04-03 16:32, hash: `8681504f06` 2.93.0 Alpha, branch: master, commit date: 2021-04-05 21:28, hash: `074b0b6da0` 2.93.0 Alpha, branch: master, commit date: 2021-04-06 13:34, hash: `24d71acd86` 2.93.0 Alpha, branch: master, commit date: 2021-04-06 21:02, hash: `e0a1a2f49d` Worked: *`490801ba1d` , commit date 2021-04-06 , branch : master , version : 2.93.0 alpha **Short description of error** blender crashes when editing in edit mode a object with the same object data **Exact steps for others to reproduce the error** duplicate with alt d the default cube and go into edit mode. If that doesn't crash try bevelling or some other modification. [edit_mode_crash.text](https://archive.blender.org/developer/F9901144/edit_mode_crash.text) [bug 2.rtf](https://archive.blender.org/developer/F9901145/bug_2.rtf) [tardis.blend1](https://archive.blender.org/developer/F9901148/tardis.blend1) [tardis.blend](https://archive.blender.org/developer/F9901147/tardis.blend) EDIT: smaller test file [crash.blend](https://archive.blender.org/developer/F9903940/crash.blend)

Mylo Pinto Rizvi commented

2021-03-20 18:40:51 +01:00

Added subscriber: @Low_Polygon42

Mylo Pinto Rizvi commented

2021-03-20 18:41:41 +01:00

instances bug edit mode.mov

[instances bug edit mode.mov](https://archive.blender.org/developer/F9901320/instances_bug_edit_mode.mov)

Mylo Pinto Rizvi commented

2021-03-21 10:18:20 +01:00

it seems the bug involves when the instanced objects are selected, if only one is selected it doesn't happen

Falk David commented

2021-03-22 12:57:59 +01:00

Added subscriber: @filedescriptor

Falk David commented

2021-03-22 12:57:59 +01:00

Changed status from 'Needs Triage' to: 'Confirmed'

Falk David commented

2021-03-22 12:57:59 +01:00

I can confirm this crash on 2.93.0 Alpha, branch: master, commit date: 2021-03-22 11:23, hash: c4c195672d. On Linux, this seems to crash instantly when entering edit mode (EDIT: only sometimes).

I can confirm this crash on 2.93.0 Alpha, branch: master, commit date: 2021-03-22 11:23, hash: `c4c195672d`. On Linux, this seems to crash instantly when entering edit mode (EDIT: only sometimes).

Philipp Oeser commented

2021-03-22 13:05:22 +01:00

Added subscriber: @lichtwerk

Philipp Oeser commented

2021-03-22 13:05:22 +01:00

There was #86561 (Crash when entering edit mode with multiple objects sharing the same mesh) already, seems fix was not enough.

Falk David commented

2021-03-22 13:25:22 +01:00

When entering Edit mode, then back to Object Mode and again Edit mode, I get a segfault in blender/source/blender/blenkernel/intern/DerivedMesh.cc:1886 because mesh is NULL.

Call stack:

mesh_runtime_check_normals_valid(const Mesh * mesh) (/.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1889)
editbmesh_build_data(Depsgraph * depsgraph, Scene * scene, Object * obedit, BMEditMesh * em, CustomData_MeshMasks * dataMask) (/.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2003)
makeDerivedMesh(Depsgraph * depsgraph, Scene * scene, Object * ob, BMEditMesh * em, const CustomData_MeshMasks * dataMask) (/.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067)
BKE_object_handle_data_update(Depsgraph * depsgraph, Scene * scene, Object * ob) (/.../blender/source/blender/blenkernel/intern/object_update.c:192)
BKE_object_eval_uber_data(Depsgraph * depsgraph, Scene * scene, Object * ob) (/.../blender/source/blender/blenkernel/intern/object_update.c:381)
operator()(const struct {...} * const __closure, Depsgraph * depsgraph) (/.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351)
std::__invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*>(std::__invoke_other, struct {...} &)(struct {...} & __f) (/usr/include/c++/10/bits/invoke.h:60)
std::__invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*>(struct {...} &)(struct {...} & __fn) (/usr/include/c++/10/bits/invoke.h:110)
std::_Function_handler<void(Depsgraph*), blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)> >::_M_invoke(const std::_Any_data &, Depsgraph *&&)(const std::_Any_data & __functor,  __args#0) (/usr/include/c++/10/bits/std_function.h:291)
std::function<void (Depsgraph*)>::operator()(Depsgraph*) const(const std::function<void(Depsgraph*)> * const this,  __args#0) (/usr/include/c++/10/bits/std_function.h:622)
blender::deg::(anonymous namespace)::evaluate_node(const blender::deg::(anonymous namespace)::DepsgraphEvalState * state, blender::deg::OperationNode * operation_node) (/.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113)
blender::deg::(anonymous namespace)::deg_task_run_func(TaskPool * pool, void * taskdata) (/.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124)
Task::operator()() const::{lambda()#1}::operator()() const(const struct {...} * const __closure) (/.../blender/source/blender/blenlib/intern/task_pool.cc:118)
tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const(const tbb::interface7::internal::delegated_function<const Task::operator()() const::<lambda()>, void> * const this) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96)
tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (Unknown Source:0)
tbb::interface7::internal::isolate_impl<void, Task::operator()() const::{lambda()#1} const>(Task::operator()() const::{lambda()#1} const&)(const struct {...} & f) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:216)
tbb::interface7::this_task_arena::isolate<Task::operator()() const::{lambda()#1}>(tbb::interface7::internal::return_type_or_void const&)(const struct {...} & f) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:472)
Task::operator()(const Task * const this) (/.../blender/source/blender/blenlib/intern/task_pool.cc:118)
tbb::internal::function_task<Task>::execute(tbb::internal::function_task<Task> * const this) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task.h:1059)
tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (Unknown Source:0)

When I just enter Edit Mode and try to e.g. move the vertices, memory gets corrupted. Here are two examples (use-after-free and double-free).

Use-after-free crash:

==67755==ERROR: AddressSanitizer: heap-use-after-free on address 0x61c000076590 at pc 0x7ffff766044e bp 0x7fffbbfa8e00 sp 0x7fffbbfa85a8
READ of size 204 at 0x61c000076590 thread T17
    - 0 0x7ffff766044d  (/lib/x86_64-linux-gnu/libasan.so.6+0x9044d)
    - 1 0x7ffff76609d6 in memcmp (/lib/x86_64-linux-gnu/libasan.so.6+0x909d6)
    - 2 0x4e05702 in customdata_typemap_is_valid /.../blender/source/blender/blenkernel/intern/customdata.c:2094
    - 3 0x4e07f4c in CustomData_get_active_layer_index /.../blender/source/blender/blenkernel/intern/customdata.c:2337
    - 4 0x4e13264 in CustomData_get_layer /.../blender/source/blender/blenkernel/intern/customdata.c:3190
    - 5 0x394f62e in BKE_mesh_update_customdata_pointers /.../blender/source/blender/blenkernel/intern/mesh.c:783
    - 6 0x39502c9 in mesh_clear_geometry /.../blender/source/blender/blenkernel/intern/mesh.c:824
    - 7 0x39437a1 in mesh_free_data /.../blender/source/blender/blenkernel/intern/mesh.c:159
    - 8 0x389f4bb in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81
    - 9 0x389fa89 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164
    - 10 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208
    - 11 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154
    - 12 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986
    - 13 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067
    - 14 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192
    - 15 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381
    - 16 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351
    - 17 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60
    - 18 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110
    - 19 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291
    - 20 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622
    - 21 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113
    - 22 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124
    - 23 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 24 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96
    - 25 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594)
    - 26 0x21f83698 in void tbb::interface7::internal::isolate_impl<void, Task::operator()() const::{lambda()#1} const>(Task::operator()() const::{lambda()#1} const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:216
    - 27 0x21f8335f in tbb::interface7::internal::return_type_or_void<Task::operator()() const::{lambda()#1}>::type tbb::interface7::this_task_arena::isolate<Task::operator()() const::{lambda()#1}>(tbb::interface7::internal::return_type_or_void const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:472
    - 28 0x21f83115 in Task::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 29 0x21f84283 in tbb::internal::function_task<Task>::execute() /.../lib/linux_centos7_x86_64/tbb/include/tbb/task.h:1059
    - 30 0x51cb3f4 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (/.../build_linux_debug/bin/blender+0x51cb3f4)
    - 31 0x51cb6aa in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (/.../build_linux_debug/bin/blender+0x51cb6aa)
    - 32 0x51ba2a6 in tbb::internal::arena::process(tbb::internal::generic_scheduler&) (/.../build_linux_debug/bin/blender+0x51ba2a6)
    - 33 0x51c50df in tbb::internal::market::process(rml::job&) (/.../build_linux_debug/bin/blender+0x51c50df)
    - 34 0x51c711b in tbb::internal::rml::private_worker::run() (/.../build_linux_debug/bin/blender+0x51c711b)
    - 35 0x51c7318 in tbb::internal::rml::private_worker::thread_routine(void*) (/.../build_linux_debug/bin/blender+0x51c7318)
    - 36 0x7ffff75b258f in start_thread nptl/pthread_create.c:463
    - 37 0x7ffff6f39222 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x119222)

0x61c000076590 is located 1296 bytes inside of 1800-byte region [0x61c000076080,0x61c000076788)
freed by thread T13 here:
    - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7)
    - 1 0x21fc19ca in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:129
    - 2 0x389fc0c in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:193
    - 3 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208
    - 4 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154
    - 5 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986
    - 6 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067
    - 7 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192
    - 8 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381
    - 9 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351
    - 10 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60
    - 11 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110
    - 12 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291
    - 13 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622
    - 14 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113
    - 15 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124
    - 16 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 17 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96
    - 18 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594)
    - 19 0x7fffbcfad91f  (<unknown module>)

previously allocated by thread T0 here:
    - 0 0x7ffff76806e7 in calloc (/lib/x86_64-linux-gnu/libasan.so.6+0xb06e7)
    - 1 0x21fc20b8 in MEM_lockfree_callocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:235
    - 2 0x389249e in BKE_libblock_alloc_notest /.../blender/source/blender/blenkernel/intern/lib_id.c:1046
    - 3 0x3892602 in BKE_libblock_alloc /.../blender/source/blender/blenkernel/intern/lib_id.c:1064
    - 4 0x38932c3 in BKE_id_new_nomain /.../blender/source/blender/blenkernel/intern/lib_id.c:1198
    - 5 0x39e9459 in BKE_mesh_wrapper_from_editmesh_with_coords /.../blender/source/blender/blenkernel/intern/mesh_wrapper.c:60
    - 6 0x4c3ad09 in editbmesh_calc_modifiers /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1647
    - 7 0x4c3dd46 in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1992
    - 8 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067
    - 9 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192
    - 10 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381
    - 11 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351
    - 12 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60
    - 13 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110
    - 14 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291
    - 15 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622
    - 16 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113
    - 17 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124
    - 18 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 19 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96
    - 20 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594)
    - 21 0x7fffffffd19f  ([stack]+0x2019f)

Thread T17 created by T14 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x62d0001fc17f  (<unknown module>)

Thread T14 created by T12 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x60c0000274bf  (<unknown module>)

Thread T12 created by T0 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x60c00002ba7f  (<unknown module>)

Thread T13 created by T0 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x62d0001fc37f  (<unknown module>)

SUMMARY: AddressSanitizer: heap-use-after-free (/lib/x86_64-linux-gnu/libasan.so.6+0x9044d) 
Shadow bytes around the buggy address:
  0x0c3880006c60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006c70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006c80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006c90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006ca0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0c3880006cb0: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006cc0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006cd0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006ce0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3880006cf0: fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c3880006d00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==67755==ABORTING

Double-free crash:

==68013==ERROR: AddressSanitizer: attempting double-free on 0x60200026fdd0 in thread T17:
    - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7)
    - 1 0x21fc19ca in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:129
    - 2 0x3943888 in mesh_free_data /.../blender/source/blender/blenkernel/intern/mesh.c:160
    - 3 0x389f4bb in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81
    - 4 0x389fa89 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164
    - 5 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208
    - 6 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154
    - 7 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986
    - 8 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067
    - 9 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192
    - 10 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381
    - 11 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351
    - 12 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60
    - 13 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110
    - 14 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291
    - 15 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622
    - 16 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113
    - 17 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124
    - 18 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 19 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96
    - 20 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594)
    - 21 0x21f83698 in void tbb::interface7::internal::isolate_impl<void, Task::operator()() const::{lambda()#1} const>(Task::operator()() const::{lambda()#1} const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:216
    - 22 0x21f8335f in tbb::interface7::internal::return_type_or_void<Task::operator()() const::{lambda()#1}>::type tbb::interface7::this_task_arena::isolate<Task::operator()() const::{lambda()#1}>(tbb::interface7::internal::return_type_or_void const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:472
    - 23 0x21f83115 in Task::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 24 0x21f84283 in tbb::internal::function_task<Task>::execute() /.../lib/linux_centos7_x86_64/tbb/include/tbb/task.h:1059
    - 25 0x51cb3f4 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (/.../build_linux_debug/bin/blender+0x51cb3f4)
    - 26 0x51cb6aa in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (/.../build_linux_debug/bin/blender+0x51cb6aa)
    - 27 0x51ba2a6 in tbb::internal::arena::process(tbb::internal::generic_scheduler&) (/.../build_linux_debug/bin/blender+0x51ba2a6)
    - 28 0x51c50df in tbb::internal::market::process(rml::job&) (/.../build_linux_debug/bin/blender+0x51c50df)
    - 29 0x51c711b in tbb::internal::rml::private_worker::run() (/.../build_linux_debug/bin/blender+0x51c711b)
    - 30 0x51c7318 in tbb::internal::rml::private_worker::thread_routine(void*) (/.../build_linux_debug/bin/blender+0x51c7318)
    - 31 0x7ffff75b258f in start_thread nptl/pthread_create.c:463
    #32 0x7ffff6f39222 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x119222)

0x60200026fdd0 is located 0 bytes inside of 16-byte region [0x60200026fdd0,0x60200026fde0)
freed by thread T14 here:
    - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7)
    - 1 0x21fc19ca in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:129
    - 2 0x3943888 in mesh_free_data /.../blender/source/blender/blenkernel/intern/mesh.c:160
    - 3 0x389f4bb in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81
    - 4 0x389fa89 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164
    - 5 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208
    - 6 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154
    - 7 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986
    - 8 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067
    - 9 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192
    - 10 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381
    - 11 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351
    - 12 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60
    - 13 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110
    - 14 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291
    - 15 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622
    - 16 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113
    - 17 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124
    - 18 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 19 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96
    - 20 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594)
    - 21 0x7fffbcbac91f  (<unknown module>)

previously allocated by thread T0 here:
    - 0 0x7ffff7680517 in malloc (/lib/x86_64-linux-gnu/libasan.so.6+0xb0517)
    - 1 0x21fc2424 in MEM_lockfree_mallocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:276
    - 2 0x21fc1b33 in MEM_lockfree_dupallocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:145
    - 3 0x3951f0b in BKE_mesh_copy_settings /.../blender/source/blender/blenkernel/intern/mesh.c:928
    - 4 0x39e9470 in BKE_mesh_wrapper_from_editmesh_with_coords /.../blender/source/blender/blenkernel/intern/mesh_wrapper.c:61
    - 5 0x4c3ad09 in editbmesh_calc_modifiers /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1647
    - 6 0x4c3dd46 in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1992
    - 7 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067
    - 8 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192
    - 9 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381
    - 10 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351
    - 11 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60
    - 12 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110
    - 13 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291
    - 14 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622
    - 15 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113
    - 16 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124
    - 17 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118
    - 18 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96
    - 19 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594)
    #20 0x7fffffffd19f  ([stack]+0x2019f)

Thread T17 created by T13 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x62d0001fc17f  (<unknown module>)

Thread T13 created by T12 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x60c0000274bf  (<unknown module>)

Thread T12 created by T0 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x60c00002ba7f  (<unknown module>)

Thread T14 created by T12 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008)
    #2 0x62d0001fc27f  (<unknown module>)

SUMMARY: AddressSanitizer: double-free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7) in __interceptor_free
==68013==ABORTING

When entering Edit mode, then back to Object Mode and again Edit mode, I get a segfault in `blender/source/blender/blenkernel/intern/DerivedMesh.cc:1886` because `mesh` is `NULL`. Call stack: ``` mesh_runtime_check_normals_valid(const Mesh * mesh) (/.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1889) editbmesh_build_data(Depsgraph * depsgraph, Scene * scene, Object * obedit, BMEditMesh * em, CustomData_MeshMasks * dataMask) (/.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2003) makeDerivedMesh(Depsgraph * depsgraph, Scene * scene, Object * ob, BMEditMesh * em, const CustomData_MeshMasks * dataMask) (/.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067) BKE_object_handle_data_update(Depsgraph * depsgraph, Scene * scene, Object * ob) (/.../blender/source/blender/blenkernel/intern/object_update.c:192) BKE_object_eval_uber_data(Depsgraph * depsgraph, Scene * scene, Object * ob) (/.../blender/source/blender/blenkernel/intern/object_update.c:381) operator()(const struct {...} * const __closure, Depsgraph * depsgraph) (/.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351) std::__invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*>(std::__invoke_other, struct {...} &)(struct {...} & __f) (/usr/include/c++/10/bits/invoke.h:60) std::__invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*>(struct {...} &)(struct {...} & __fn) (/usr/include/c++/10/bits/invoke.h:110) std::_Function_handler<void(Depsgraph*), blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)> >::_M_invoke(const std::_Any_data &, Depsgraph *&&)(const std::_Any_data & __functor, __args#0) (/usr/include/c++/10/bits/std_function.h:291) std::function<void (Depsgraph*)>::operator()(Depsgraph*) const(const std::function<void(Depsgraph*)> * const this, __args#0) (/usr/include/c++/10/bits/std_function.h:622) blender::deg::(anonymous namespace)::evaluate_node(const blender::deg::(anonymous namespace)::DepsgraphEvalState * state, blender::deg::OperationNode * operation_node) (/.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113) blender::deg::(anonymous namespace)::deg_task_run_func(TaskPool * pool, void * taskdata) (/.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124) Task::operator()() const::{lambda()#1}::operator()() const(const struct {...} * const __closure) (/.../blender/source/blender/blenlib/intern/task_pool.cc:118) tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const(const tbb::interface7::internal::delegated_function<const Task::operator()() const::<lambda()>, void> * const this) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96) tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (Unknown Source:0) tbb::interface7::internal::isolate_impl<void, Task::operator()() const::{lambda()#1} const>(Task::operator()() const::{lambda()#1} const&)(const struct {...} & f) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:216) tbb::interface7::this_task_arena::isolate<Task::operator()() const::{lambda()#1}>(tbb::interface7::internal::return_type_or_void const&)(const struct {...} & f) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:472) Task::operator()(const Task * const this) (/.../blender/source/blender/blenlib/intern/task_pool.cc:118) tbb::internal::function_task<Task>::execute(tbb::internal::function_task<Task> * const this) (/.../lib_master/linux_centos7_x86_64/tbb/include/tbb/task.h:1059) tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (Unknown Source:0) ``` When I just enter Edit Mode and try to e.g. move the vertices, memory gets corrupted. Here are two examples (use-after-free and double-free). Use-after-free crash: ``` ==67755==ERROR: AddressSanitizer: heap-use-after-free on address 0x61c000076590 at pc 0x7ffff766044e bp 0x7fffbbfa8e00 sp 0x7fffbbfa85a8 READ of size 204 at 0x61c000076590 thread T17 - 0 0x7ffff766044d (/lib/x86_64-linux-gnu/libasan.so.6+0x9044d) - 1 0x7ffff76609d6 in memcmp (/lib/x86_64-linux-gnu/libasan.so.6+0x909d6) - 2 0x4e05702 in customdata_typemap_is_valid /.../blender/source/blender/blenkernel/intern/customdata.c:2094 - 3 0x4e07f4c in CustomData_get_active_layer_index /.../blender/source/blender/blenkernel/intern/customdata.c:2337 - 4 0x4e13264 in CustomData_get_layer /.../blender/source/blender/blenkernel/intern/customdata.c:3190 - 5 0x394f62e in BKE_mesh_update_customdata_pointers /.../blender/source/blender/blenkernel/intern/mesh.c:783 - 6 0x39502c9 in mesh_clear_geometry /.../blender/source/blender/blenkernel/intern/mesh.c:824 - 7 0x39437a1 in mesh_free_data /.../blender/source/blender/blenkernel/intern/mesh.c:159 - 8 0x389f4bb in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81 - 9 0x389fa89 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164 - 10 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208 - 11 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154 - 12 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986 - 13 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067 - 14 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192 - 15 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381 - 16 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351 - 17 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60 - 18 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110 - 19 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291 - 20 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622 - 21 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113 - 22 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124 - 23 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 24 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96 - 25 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594) - 26 0x21f83698 in void tbb::interface7::internal::isolate_impl<void, Task::operator()() const::{lambda()#1} const>(Task::operator()() const::{lambda()#1} const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:216 - 27 0x21f8335f in tbb::interface7::internal::return_type_or_void<Task::operator()() const::{lambda()#1}>::type tbb::interface7::this_task_arena::isolate<Task::operator()() const::{lambda()#1}>(tbb::interface7::internal::return_type_or_void const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:472 - 28 0x21f83115 in Task::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 29 0x21f84283 in tbb::internal::function_task<Task>::execute() /.../lib/linux_centos7_x86_64/tbb/include/tbb/task.h:1059 - 30 0x51cb3f4 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (/.../build_linux_debug/bin/blender+0x51cb3f4) - 31 0x51cb6aa in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (/.../build_linux_debug/bin/blender+0x51cb6aa) - 32 0x51ba2a6 in tbb::internal::arena::process(tbb::internal::generic_scheduler&) (/.../build_linux_debug/bin/blender+0x51ba2a6) - 33 0x51c50df in tbb::internal::market::process(rml::job&) (/.../build_linux_debug/bin/blender+0x51c50df) - 34 0x51c711b in tbb::internal::rml::private_worker::run() (/.../build_linux_debug/bin/blender+0x51c711b) - 35 0x51c7318 in tbb::internal::rml::private_worker::thread_routine(void*) (/.../build_linux_debug/bin/blender+0x51c7318) - 36 0x7ffff75b258f in start_thread nptl/pthread_create.c:463 - 37 0x7ffff6f39222 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x119222) 0x61c000076590 is located 1296 bytes inside of 1800-byte region [0x61c000076080,0x61c000076788) freed by thread T13 here: - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7) - 1 0x21fc19ca in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:129 - 2 0x389fc0c in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:193 - 3 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208 - 4 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154 - 5 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986 - 6 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067 - 7 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192 - 8 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381 - 9 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351 - 10 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60 - 11 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110 - 12 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291 - 13 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622 - 14 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113 - 15 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124 - 16 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 17 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96 - 18 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594) - 19 0x7fffbcfad91f (<unknown module>) previously allocated by thread T0 here: - 0 0x7ffff76806e7 in calloc (/lib/x86_64-linux-gnu/libasan.so.6+0xb06e7) - 1 0x21fc20b8 in MEM_lockfree_callocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:235 - 2 0x389249e in BKE_libblock_alloc_notest /.../blender/source/blender/blenkernel/intern/lib_id.c:1046 - 3 0x3892602 in BKE_libblock_alloc /.../blender/source/blender/blenkernel/intern/lib_id.c:1064 - 4 0x38932c3 in BKE_id_new_nomain /.../blender/source/blender/blenkernel/intern/lib_id.c:1198 - 5 0x39e9459 in BKE_mesh_wrapper_from_editmesh_with_coords /.../blender/source/blender/blenkernel/intern/mesh_wrapper.c:60 - 6 0x4c3ad09 in editbmesh_calc_modifiers /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1647 - 7 0x4c3dd46 in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1992 - 8 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067 - 9 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192 - 10 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381 - 11 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351 - 12 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60 - 13 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110 - 14 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291 - 15 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622 - 16 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113 - 17 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124 - 18 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 19 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96 - 20 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594) - 21 0x7fffffffd19f ([stack]+0x2019f) Thread T17 created by T14 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x62d0001fc17f (<unknown module>) Thread T14 created by T12 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x60c0000274bf (<unknown module>) Thread T12 created by T0 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x60c00002ba7f (<unknown module>) Thread T13 created by T0 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x62d0001fc37f (<unknown module>) SUMMARY: AddressSanitizer: heap-use-after-free (/lib/x86_64-linux-gnu/libasan.so.6+0x9044d) Shadow bytes around the buggy address: 0x0c3880006c60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006c70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006c80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006c90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006ca0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd =>0x0c3880006cb0: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006cc0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006cd0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006ce0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3880006cf0: fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3880006d00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Shadow gap: cc ==67755==ABORTING ``` Double-free crash: ``` ==68013==ERROR: AddressSanitizer: attempting double-free on 0x60200026fdd0 in thread T17: - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7) - 1 0x21fc19ca in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:129 - 2 0x3943888 in mesh_free_data /.../blender/source/blender/blenkernel/intern/mesh.c:160 - 3 0x389f4bb in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81 - 4 0x389fa89 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164 - 5 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208 - 6 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154 - 7 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986 - 8 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067 - 9 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192 - 10 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381 - 11 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351 - 12 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60 - 13 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110 - 14 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291 - 15 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622 - 16 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113 - 17 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124 - 18 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 19 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96 - 20 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594) - 21 0x21f83698 in void tbb::interface7::internal::isolate_impl<void, Task::operator()() const::{lambda()#1} const>(Task::operator()() const::{lambda()#1} const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:216 - 22 0x21f8335f in tbb::interface7::internal::return_type_or_void<Task::operator()() const::{lambda()#1}>::type tbb::interface7::this_task_arena::isolate<Task::operator()() const::{lambda()#1}>(tbb::interface7::internal::return_type_or_void const&) /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:472 - 23 0x21f83115 in Task::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 24 0x21f84283 in tbb::internal::function_task<Task>::execute() /.../lib/linux_centos7_x86_64/tbb/include/tbb/task.h:1059 - 25 0x51cb3f4 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (/.../build_linux_debug/bin/blender+0x51cb3f4) - 26 0x51cb6aa in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (/.../build_linux_debug/bin/blender+0x51cb6aa) - 27 0x51ba2a6 in tbb::internal::arena::process(tbb::internal::generic_scheduler&) (/.../build_linux_debug/bin/blender+0x51ba2a6) - 28 0x51c50df in tbb::internal::market::process(rml::job&) (/.../build_linux_debug/bin/blender+0x51c50df) - 29 0x51c711b in tbb::internal::rml::private_worker::run() (/.../build_linux_debug/bin/blender+0x51c711b) - 30 0x51c7318 in tbb::internal::rml::private_worker::thread_routine(void*) (/.../build_linux_debug/bin/blender+0x51c7318) - 31 0x7ffff75b258f in start_thread nptl/pthread_create.c:463 #32 0x7ffff6f39222 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x119222) 0x60200026fdd0 is located 0 bytes inside of 16-byte region [0x60200026fdd0,0x60200026fde0) freed by thread T14 here: - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7) - 1 0x21fc19ca in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:129 - 2 0x3943888 in mesh_free_data /.../blender/source/blender/blenkernel/intern/mesh.c:160 - 3 0x389f4bb in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81 - 4 0x389fa89 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164 - 5 0x389fc41 in BKE_id_free /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:208 - 6 0x4ecce36 in BKE_editmesh_free_derivedmesh /.../blender/source/blender/blenkernel/intern/editmesh.c:154 - 7 0x4c3dd0a in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1986 - 8 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067 - 9 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192 - 10 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381 - 11 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351 - 12 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60 - 13 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110 - 14 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291 - 15 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622 - 16 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113 - 17 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124 - 18 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 19 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96 - 20 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594) - 21 0x7fffbcbac91f (<unknown module>) previously allocated by thread T0 here: - 0 0x7ffff7680517 in malloc (/lib/x86_64-linux-gnu/libasan.so.6+0xb0517) - 1 0x21fc2424 in MEM_lockfree_mallocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:276 - 2 0x21fc1b33 in MEM_lockfree_dupallocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:145 - 3 0x3951f0b in BKE_mesh_copy_settings /.../blender/source/blender/blenkernel/intern/mesh.c:928 - 4 0x39e9470 in BKE_mesh_wrapper_from_editmesh_with_coords /.../blender/source/blender/blenkernel/intern/mesh_wrapper.c:61 - 5 0x4c3ad09 in editbmesh_calc_modifiers /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1647 - 6 0x4c3dd46 in editbmesh_build_data /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:1992 - 7 0x4c3ec31 in makeDerivedMesh /.../blender/source/blender/blenkernel/intern/DerivedMesh.cc:2067 - 8 0x3b34fe1 in BKE_object_handle_data_update /.../blender/source/blender/blenkernel/intern/object_update.c:192 - 9 0x3b37d82 in BKE_object_eval_uber_data /.../blender/source/blender/blenkernel/intern/object_update.c:381 - 10 0x2041b11e in operator() /.../blender/source/blender/depsgraph/intern/builder/deg_builder_nodes.cc:1351 - 11 0x20448e07 in __invoke_impl<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:60 - 12 0x20441c7f in __invoke_r<void, blender::deg::DepsgraphNodeBuilder::build_object_data_geometry(Object*, bool)::<lambda(Depsgraph*)>&, Depsgraph*> /usr/include/c++/10/bits/invoke.h:110 - 13 0x2043b016 in _M_invoke /usr/include/c++/10/bits/std_function.h:291 - 14 0x203b15e0 in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/10/bits/std_function.h:622 - 15 0x203acbb1 in evaluate_node /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:113 - 16 0x203acbff in deg_task_run_func /.../blender/source/blender/depsgraph/intern/eval/deg_eval.cc:124 - 17 0x21f83044 in Task::operator()() const::{lambda()#1}::operator()() const /.../blender/source/blender/blenlib/intern/task_pool.cc:118 - 18 0x21f843e0 in tbb::interface7::internal::delegated_function<Task::operator()() const::{lambda()#1} const, void>::operator()() const /.../lib/linux_centos7_x86_64/tbb/include/tbb/task_arena.h:96 - 19 0x51ba594 in tbb::interface7::internal::isolate_within_arena(tbb::interface7::internal::delegate_base&, long) (/.../build_linux_debug/bin/blender+0x51ba594) #20 0x7fffffffd19f ([stack]+0x2019f) Thread T17 created by T13 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x62d0001fc17f (<unknown module>) Thread T13 created by T12 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x60c0000274bf (<unknown module>) Thread T12 created by T0 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x60c00002ba7f (<unknown module>) Thread T14 created by T12 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x51c7008 in tbb::internal::rml::private_server::wake_some(int) (/.../build_linux_debug/bin/blender+0x51c7008) #2 0x62d0001fc27f (<unknown module>) SUMMARY: AddressSanitizer: double-free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7) in __interceptor_free ==68013==ABORTING ```

Mylo Pinto Rizvi changed title from ~~blender crashes when editing in edit mode an instanced object~~ to blender crashes when editing in edit mode an object with same object data

2021-04-02 16:24:48 +02:00

Mylo Pinto Rizvi commented

2021-04-02 16:25:13 +02:00

renamed for clarity

Mylo Pinto Rizvi commented

2021-04-04 09:27:34 +02:00

i've noticed that it crashes more, with larger amounts of duplicates. If you duplicate it once it doesn't crash.

Pratik Borhade commented

2021-04-06 07:27:44 +02:00

Added subscriber: @PratikPB2123

Pratik Borhade commented

2021-04-06 07:27:44 +02:00

duplicate with alt d the default cube and go into edit mode. If that doesn't crash try bevelling or some other modification.

I tried to test with small test file from the report. Blender did not crash.

System Information :
Operating system : Windows-10-10.0.18362-SP0 64 Bits
Graphics card : AMD Radeon(TM) 535 ATI Technologies .

> duplicate with alt d the default cube and go into edit mode. If that doesn't crash try bevelling or some other modification. I tried to test with small test file from the report. Blender did not crash. --- System Information : Operating system : Windows-10-10.0.18362-SP0 64 Bits Graphics card : AMD Radeon(TM) 535 ATI Technologies .

Mylo Pinto Rizvi commented

2021-04-06 07:30:42 +02:00

i've noticed it doesn't crash if you duplicate it once, The more you duplicate it the more unstable it is it seems

Mylo Pinto Rizvi commented

2021-04-06 07:30:59 +02:00

did you try once or twice

Pratik Borhade commented

2021-04-06 07:52:10 +02:00

@Low_Polygon42 attaching the video :

Blender [C__Users_Pratik_Downloads_crash.blend] 2021-04-06 11-06-31.mp4

@Low_Polygon42 attaching the video : [Blender [C__Users_Pratik_Downloads_crash.blend] 2021-04-06 11-06-31.mp4](https://archive.blender.org/developer/F9921439/Blender__C__Users_Pratik_Downloads_crash.blend__2021-04-06_11-06-31.mp4)

Mylo Pinto Rizvi commented

2021-04-06 17:56:06 +02:00

In #86767#1141339, @PratikPB2123 wrote:
@Low_Polygon42 attaching the video :

Blender [C__Users_Pratik_Downloads_crash.blend] 2021-04-06 11-06-31.mp4

what build was this? i'm updating the task description

> In #86767#1141339, @PratikPB2123 wrote: > @Low_Polygon42 attaching the video : > > [Blender [C__Users_Pratik_Downloads_crash.blend] 2021-04-06 11-06-31.mp4](https://archive.blender.org/developer/F9921439/Blender__C__Users_Pratik_Downloads_crash.blend__2021-04-06_11-06-31.mp4) what build was this? i'm updating the task description

Pratik Borhade commented

2021-04-07 07:49:15 +02:00

what build was this?...

Hash : 490801ba1d , commit date 2021-04-06 , branch : master , version : 2.93.0 alpha

>what build was this?... Hash : `490801ba1d` , commit date `2021-04-06` , branch : master , version : 2.93.0 alpha

Mylo Pinto Rizvi commented

2021-04-07 07:54:58 +02:00

In #86767#1141957, @PratikPB2123 wrote:

what build was this?...

Hash : 490801ba1d , commit date 2021-04-06 , branch : master , version : 2.93.0 alpha

thanks

> In #86767#1141957, @PratikPB2123 wrote: >>what build was this?... > Hash : `490801ba1d` , commit date `2021-04-06` , branch : master , version : 2.93.0 alpha thanks

Pratik Borhade commented

2021-04-07 08:06:59 +02:00

for older builds also I did not notice any crash ( eg. b547ac32d94 )

I think crash may be an OS specific.

for older builds also I did not notice any crash ( eg. `b547ac32d94` ) I think crash may be an OS specific.

Mylo Pinto Rizvi commented

2021-04-07 08:08:03 +02:00

yeah

Campbell Barton self-assigned this 2021-04-07 09:54:14 +02:00

Campbell Barton commented

2021-04-07 10:07:06 +02:00

Exposed by 2b60d7d09c,

Although the bug existed before this change, with the previous behavior, edit-mode wouldn't enter for multiple objects at once (at least not with common usage).

I'll look into resolving this in a way that doesn't cause #85974 to fail.

Exposed by 2b60d7d09c, Although the bug existed before this change, with the previous behavior, edit-mode wouldn't enter for multiple objects at once (at least not with common usage). ---- I'll look into resolving this in a way that doesn't cause #85974 to fail.

Campbell Barton commented

2021-04-08 12:54:42 +02:00

Changed status from 'Confirmed' to: 'Resolved'

Campbell Barton closed this issue

2021-04-08 12:54:42 +02:00

Campbell Barton commented

2021-04-08 12:54:42 +02:00

Fixed 0c0e9390d1

Fixed 0c0e9390d1

Sign in to join this conversation.