"Mark Asset" meshobject with Softbody causes Blender to crash #87091

New Issue

Mathias Eimann · 2021-03-31T17:04:07+02:00

Mathias Eimann commented

2021-03-31 17:04:07 +02:00

System Information
Operating system: Windows-10-10.0.19041-SP0 64 Bits
Graphics card: GeForce RTX 2080 SUPER/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 461.92

Blender Version
Broken: version: 2.93.0 Alpha, branch: master, commit date: 2021-03-31 07:46, hash: 645fc0c767
Worked: version: 2.93.0 Alpha, branch: master, commit date: 2021-03-24 17:47, hash: 9ac7946dd0

Short description of error
trying to "mark asset" a object with softbody enabled causes blender to crash

Exact steps for others to reproduce the error
open blender add a object, enable softbody, mark asset the object

EDIT:
Added test file. Steps to reproduce:

Open File
In the Properties Panel, right-click "Cube" -> "Mark Asset"

Blender crashes

softbody_crash.blend

**System Information** Operating system: Windows-10-10.0.19041-SP0 64 Bits Graphics card: GeForce RTX 2080 SUPER/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 461.92 **Blender Version** Broken: version: 2.93.0 Alpha, branch: master, commit date: 2021-03-31 07:46, hash: `645fc0c767` Worked: version: 2.93.0 Alpha, branch: master, commit date: 2021-03-24 17:47, hash: 9ac7946dd03f **Short description of error** trying to "mark asset" a object with softbody enabled causes blender to crash **Exact steps for others to reproduce the error** open blender add a object, enable softbody, mark asset the object EDIT: Added test file. Steps to reproduce: - Open File - In the Properties Panel, right-click "Cube" -> "Mark Asset" # Blender crashes [softbody_crash.blend](https://archive.blender.org/developer/F9916025/softbody_crash.blend)

Mathias Eimann commented

2021-03-31 17:04:07 +02:00

Added subscriber: @ME2

Falk David commented

2021-03-31 18:06:21 +02:00

Added subscriber: @filedescriptor

Falk David commented

2021-03-31 18:06:21 +02:00

Changed status from 'Needs Triage' to: 'Confirmed'

Falk David commented

2021-03-31 18:06:21 +02:00

I can confirm this on the latest 2.93.0 Alpha, branch: master, commit date: 2021-03-31 15:10, hash: 4fd7b1f3db.

I can confirm this on the latest 2.93.0 Alpha, branch: master, commit date: 2021-03-31 15:10, hash: `4fd7b1f3db`.

Falk David commented

2021-03-31 18:09:09 +02:00

With asan enabled this produces the following output:

=================================================================
==123600==ERROR: AddressSanitizer: heap-use-after-free on address 0x6030004a7288 at pc 0x000003ce2fdb bp 0x7fffffffd170 sp 0x7fffffffd160
READ of size 8 at 0x6030004a7288 thread T0
    - 0 0x3ce2fda in BKE_ptcache_id_from_softbody /.../blender/source/blender/blenkernel/intern/pointcache.c:883
    - 1 0x3ce978f in foreach_object_ptcache /.../blender/source/blender/blenkernel/intern/pointcache.c:1218
    - 2 0x3cea1eb in BKE_ptcache_ids_from_object /.../blender/source/blender/blenkernel/intern/pointcache.c:1274
    - 3 0x98d67c2 in timeline_draw_cache /.../blender/source/blender/editors/space_action/action_draw.c:555
    - 4 0x98c0652 in action_main_region_draw /.../blender/source/blender/editors/space_action/space_action.c:221
    - 5 0x7c1103b in ED_region_do_draw /.../blender/source/blender/editors/screen/area.c:558
    - 6 0x521a89c in wm_draw_window_offscreen /.../blender/source/blender/windowmanager/intern/wm_draw.c:724
    - 7 0x521bab0 in wm_draw_window /.../blender/source/blender/windowmanager/intern/wm_draw.c:864
    - 8 0x521cf1f in wm_draw_update /.../blender/source/blender/windowmanager/intern/wm_draw.c:1065
    - 9 0x520d0eb in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:652
    - 10 0x367a449 in main /.../blender/source/creator/creator.c:520
    - 11 0x7ffff6e48cb1 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28cb1)
    #12 0x36795fd in _start (/.../build_linux_debug/bin/blender+0x36795fd)

0x6030004a7288 is located 8 bytes inside of 32-byte region [0x6030004a7280,0x6030004a72a0)
freed by thread T18 here:
    - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7)
    - 1 0x22cce64c in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:130
    - 2 0x3dde5f9 in sbFree /.../blender/source/blender/blenkernel/intern/softbody.c:3192
    - 3 0x3b14266 in BKE_object_free_softbody /.../blender/source/blender/blenkernel/intern/object.c:1183
    - 4 0x3b14887 in BKE_object_free_modifiers /.../blender/source/blender/blenkernel/intern/object.c:1216
    - 5 0x3b04ac6 in object_free_data /.../blender/source/blender/blenkernel/intern/object.c:280
    - 6 0x38d39c6 in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81
    - 7 0x38d3f94 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164
    - 8 0x391cd5e in BKE_main_free /.../blender/source/blender/blenkernel/intern/main.c:74
    - 9 0xe105a7c in object_preview_render /.../blender/source/blender/editors/render/render_preview.c:806
    - 10 0xe10ef79 in icon_preview_startjob_all_sizes /.../blender/source/blender/editors/render/render_preview.c:1520
    - 11 0x52950de in do_job_thread /.../blender/source/blender/windowmanager/intern/wm_jobs.c:389
    - 12 0x22ca5c63 in tslot_thread_start /.../blender/source/blender/blenlib/intern/threads.cc:231
    - 13 0x7ffff75b258f in start_thread nptl/pthread_create.c:463

previously allocated by thread T0 here:
    - 0 0x7ffff7680517 in malloc (/lib/x86_64-linux-gnu/libasan.so.6+0xb0517)
    - 1 0x22ccf0a6 in MEM_lockfree_mallocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:277
    - 2 0x53762f1 in read_struct /.../blender/source/blender/blenloader/intern/readfile.c:2211
    - 3 0x5382a08 in read_data_into_datamap /.../blender/source/blender/blenloader/intern/readfile.c:3372
    - 4 0x5385572 in read_libblock /.../blender/source/blender/blenloader/intern/readfile.c:3706
    - 5 0x538bfad in blo_read_file_internal /.../blender/source/blender/blenloader/intern/readfile.c:4183
    - 6 0x535f452 in BLO_read_from_file /.../blender/source/blender/blenloader/intern/readblenentry.c:378
    - 7 0xa208e28 in BKE_blendfile_read /.../blender/source/blender/blenkernel/intern/blendfile.c:479
    - 8 0x525d9aa in WM_file_read /.../blender/source/blender/windowmanager/intern/wm_files.c:766
    - 9 0x52685d6 in wm_file_read_opwrap /.../blender/source/blender/windowmanager/intern/wm_files.c:2262
    - 10 0x52697e5 in wm_open_mainfile__open /.../blender/source/blender/windowmanager/intern/wm_files.c:2390
    - 11 0x5268941 in operator_state_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2298
    - 12 0x5269a5a in wm_open_mainfile_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2414
    - 13 0x5268e5e in wm_open_mainfile__discard_changes /.../blender/source/blender/windowmanager/intern/wm_files.c:2343
    - 14 0x5268941 in operator_state_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2298
    - 15 0x5269a5a in wm_open_mainfile_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2414
    - 16 0x5269a87 in wm_open_mainfile_invoke /.../blender/source/blender/windowmanager/intern/wm_files.c:2419
    - 17 0x522b703 in wm_operator_invoke /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1350
    - 18 0x522d79f in wm_operator_call_internal /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1591
    - 19 0x522d898 in WM_operator_name_call_ptr /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1605
    - 20 0x953c7c8 in ui_apply_but_funcs_after /.../blender/source/blender/editors/interface/interface_handlers.c:937
    - 21 0x95c78e8 in ui_popup_handler /.../blender/source/blender/editors/interface/interface_handlers.c:10952
    - 22 0x5224ea3 in wm_handler_ui_call /.../blender/source/blender/windowmanager/intern/wm_event_system.c:693
    - 23 0x523b31d in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2815
    - 24 0x523c605 in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2931
    - 25 0x52415b0 in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.c:3348
    - 26 0x520d0d3 in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:646
    - 27 0x367a449 in main /.../blender/source/creator/creator.c:520
    #28 0x7ffff6e48cb1 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28cb1)

Thread T18 created by T0 here:
    - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95)
    - 1 0x22ca5e8d in BLI_threadpool_insert /.../blender/source/blender/blenlib/intern/threads.cc:245
    - 2 0x5296102 in WM_jobs_start /.../blender/source/blender/windowmanager/intern/wm_jobs.c:484
    - 3 0xe1104fc in ED_preview_icon_job /.../blender/source/blender/editors/render/render_preview.c:1692
    - 4 0x95e2d30 in icon_set_image /.../blender/source/blender/editors/interface/interface_icons.c:1421
    - 5 0x95e852d in ui_id_preview_image_render_size /.../blender/source/blender/editors/interface/interface_icons.c:1954
    - 6 0x95e8718 in UI_icon_render_id /.../blender/source/blender/editors/interface/interface_icons.c:1972
    - 7 0xe0aab12 in ED_asset_mark_id /.../blender/source/blender/editors/asset/asset_edit.cc:46
    - 8 0xe0ab531 in AssetMarkHelper::operator()(bContext const&, blender::Vector<PointerRNA, 4l, blender::GuardedAllocator>&) /.../blender/source/blender/editors/asset/asset_ops.cc:97
    - 9 0xe0abbac in asset_mark_exec /.../blender/source/blender/editors/asset/asset_ops.cc:139
    - 10 0x522bcd0 in wm_operator_invoke /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1362
    - 11 0x522d79f in wm_operator_call_internal /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1591
    - 12 0x522d898 in WM_operator_name_call_ptr /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1605
    - 13 0x953c7c8 in ui_apply_but_funcs_after /.../blender/source/blender/editors/interface/interface_handlers.c:937
    - 14 0x95c78e8 in ui_popup_handler /.../blender/source/blender/editors/interface/interface_handlers.c:10952
    - 15 0x5224ea3 in wm_handler_ui_call /.../blender/source/blender/windowmanager/intern/wm_event_system.c:693
    - 16 0x523b31d in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2815
    - 17 0x523c605 in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2931
    - 18 0x52415b0 in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.c:3348
    - 19 0x520d0d3 in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:646
    - 20 0x367a449 in main /.../blender/source/creator/creator.c:520
    - 21 0x7ffff6e48cb1 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28cb1)

SUMMARY: AddressSanitizer: heap-use-after-free /.../blender/source/blender/blenkernel/intern/pointcache.c:883 in BKE_ptcache_id_from_softbody
Shadow bytes around the buggy address:
  0x0c068008ce00: fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa 00 00
  0x0c068008ce10: 00 00 fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa
  0x0c068008ce20: 00 00 00 00 fa fa 00 00 00 00 fa fa 00 00 00 00
  0x0c068008ce30: fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa 00 00
  0x0c068008ce40: 00 00 fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa
=>0x0c068008ce50: fd[fd]fd fd fa fa 00 00 00 fa fa fa 00 00 00 fa
  0x0c068008ce60: fa fa 00 00 00 00 fa fa 00 00 00 fa fa fa 00 00
  0x0c068008ce70: 00 fa fa fa 00 00 00 00 fa fa 00 00 00 fa fa fa
  0x0c068008ce80: 00 00 00 fa fa fa 00 00 00 fa fa fa 00 00 00 fa
  0x0c068008ce90: fa fa 00 00 00 fa fa fa 00 00 00 fa fa fa 00 00
  0x0c068008cea0: 00 fa fa fa 00 00 00 fa fa fa 00 00 00 fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==123600==ABORTING

With asan enabled this produces the following output: ``` ================================================================= ==123600==ERROR: AddressSanitizer: heap-use-after-free on address 0x6030004a7288 at pc 0x000003ce2fdb bp 0x7fffffffd170 sp 0x7fffffffd160 READ of size 8 at 0x6030004a7288 thread T0 - 0 0x3ce2fda in BKE_ptcache_id_from_softbody /.../blender/source/blender/blenkernel/intern/pointcache.c:883 - 1 0x3ce978f in foreach_object_ptcache /.../blender/source/blender/blenkernel/intern/pointcache.c:1218 - 2 0x3cea1eb in BKE_ptcache_ids_from_object /.../blender/source/blender/blenkernel/intern/pointcache.c:1274 - 3 0x98d67c2 in timeline_draw_cache /.../blender/source/blender/editors/space_action/action_draw.c:555 - 4 0x98c0652 in action_main_region_draw /.../blender/source/blender/editors/space_action/space_action.c:221 - 5 0x7c1103b in ED_region_do_draw /.../blender/source/blender/editors/screen/area.c:558 - 6 0x521a89c in wm_draw_window_offscreen /.../blender/source/blender/windowmanager/intern/wm_draw.c:724 - 7 0x521bab0 in wm_draw_window /.../blender/source/blender/windowmanager/intern/wm_draw.c:864 - 8 0x521cf1f in wm_draw_update /.../blender/source/blender/windowmanager/intern/wm_draw.c:1065 - 9 0x520d0eb in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:652 - 10 0x367a449 in main /.../blender/source/creator/creator.c:520 - 11 0x7ffff6e48cb1 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28cb1) #12 0x36795fd in _start (/.../build_linux_debug/bin/blender+0x36795fd) 0x6030004a7288 is located 8 bytes inside of 32-byte region [0x6030004a7280,0x6030004a72a0) freed by thread T18 here: - 0 0x7ffff76801b7 in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.6+0xb01b7) - 1 0x22cce64c in MEM_lockfree_freeN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:130 - 2 0x3dde5f9 in sbFree /.../blender/source/blender/blenkernel/intern/softbody.c:3192 - 3 0x3b14266 in BKE_object_free_softbody /.../blender/source/blender/blenkernel/intern/object.c:1183 - 4 0x3b14887 in BKE_object_free_modifiers /.../blender/source/blender/blenkernel/intern/object.c:1216 - 5 0x3b04ac6 in object_free_data /.../blender/source/blender/blenkernel/intern/object.c:280 - 6 0x38d39c6 in BKE_libblock_free_datablock /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:81 - 7 0x38d3f94 in BKE_id_free_ex /.../blender/source/blender/blenkernel/intern/lib_id_delete.c:164 - 8 0x391cd5e in BKE_main_free /.../blender/source/blender/blenkernel/intern/main.c:74 - 9 0xe105a7c in object_preview_render /.../blender/source/blender/editors/render/render_preview.c:806 - 10 0xe10ef79 in icon_preview_startjob_all_sizes /.../blender/source/blender/editors/render/render_preview.c:1520 - 11 0x52950de in do_job_thread /.../blender/source/blender/windowmanager/intern/wm_jobs.c:389 - 12 0x22ca5c63 in tslot_thread_start /.../blender/source/blender/blenlib/intern/threads.cc:231 - 13 0x7ffff75b258f in start_thread nptl/pthread_create.c:463 previously allocated by thread T0 here: - 0 0x7ffff7680517 in malloc (/lib/x86_64-linux-gnu/libasan.so.6+0xb0517) - 1 0x22ccf0a6 in MEM_lockfree_mallocN /.../blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:277 - 2 0x53762f1 in read_struct /.../blender/source/blender/blenloader/intern/readfile.c:2211 - 3 0x5382a08 in read_data_into_datamap /.../blender/source/blender/blenloader/intern/readfile.c:3372 - 4 0x5385572 in read_libblock /.../blender/source/blender/blenloader/intern/readfile.c:3706 - 5 0x538bfad in blo_read_file_internal /.../blender/source/blender/blenloader/intern/readfile.c:4183 - 6 0x535f452 in BLO_read_from_file /.../blender/source/blender/blenloader/intern/readblenentry.c:378 - 7 0xa208e28 in BKE_blendfile_read /.../blender/source/blender/blenkernel/intern/blendfile.c:479 - 8 0x525d9aa in WM_file_read /.../blender/source/blender/windowmanager/intern/wm_files.c:766 - 9 0x52685d6 in wm_file_read_opwrap /.../blender/source/blender/windowmanager/intern/wm_files.c:2262 - 10 0x52697e5 in wm_open_mainfile__open /.../blender/source/blender/windowmanager/intern/wm_files.c:2390 - 11 0x5268941 in operator_state_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2298 - 12 0x5269a5a in wm_open_mainfile_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2414 - 13 0x5268e5e in wm_open_mainfile__discard_changes /.../blender/source/blender/windowmanager/intern/wm_files.c:2343 - 14 0x5268941 in operator_state_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2298 - 15 0x5269a5a in wm_open_mainfile_dispatch /.../blender/source/blender/windowmanager/intern/wm_files.c:2414 - 16 0x5269a87 in wm_open_mainfile_invoke /.../blender/source/blender/windowmanager/intern/wm_files.c:2419 - 17 0x522b703 in wm_operator_invoke /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1350 - 18 0x522d79f in wm_operator_call_internal /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1591 - 19 0x522d898 in WM_operator_name_call_ptr /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1605 - 20 0x953c7c8 in ui_apply_but_funcs_after /.../blender/source/blender/editors/interface/interface_handlers.c:937 - 21 0x95c78e8 in ui_popup_handler /.../blender/source/blender/editors/interface/interface_handlers.c:10952 - 22 0x5224ea3 in wm_handler_ui_call /.../blender/source/blender/windowmanager/intern/wm_event_system.c:693 - 23 0x523b31d in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2815 - 24 0x523c605 in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2931 - 25 0x52415b0 in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.c:3348 - 26 0x520d0d3 in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:646 - 27 0x367a449 in main /.../blender/source/creator/creator.c:520 #28 0x7ffff6e48cb1 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28cb1) Thread T18 created by T0 here: - 0 0x7ffff7627a95 in __interceptor_pthread_create (/lib/x86_64-linux-gnu/libasan.so.6+0x57a95) - 1 0x22ca5e8d in BLI_threadpool_insert /.../blender/source/blender/blenlib/intern/threads.cc:245 - 2 0x5296102 in WM_jobs_start /.../blender/source/blender/windowmanager/intern/wm_jobs.c:484 - 3 0xe1104fc in ED_preview_icon_job /.../blender/source/blender/editors/render/render_preview.c:1692 - 4 0x95e2d30 in icon_set_image /.../blender/source/blender/editors/interface/interface_icons.c:1421 - 5 0x95e852d in ui_id_preview_image_render_size /.../blender/source/blender/editors/interface/interface_icons.c:1954 - 6 0x95e8718 in UI_icon_render_id /.../blender/source/blender/editors/interface/interface_icons.c:1972 - 7 0xe0aab12 in ED_asset_mark_id /.../blender/source/blender/editors/asset/asset_edit.cc:46 - 8 0xe0ab531 in AssetMarkHelper::operator()(bContext const&, blender::Vector<PointerRNA, 4l, blender::GuardedAllocator>&) /.../blender/source/blender/editors/asset/asset_ops.cc:97 - 9 0xe0abbac in asset_mark_exec /.../blender/source/blender/editors/asset/asset_ops.cc:139 - 10 0x522bcd0 in wm_operator_invoke /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1362 - 11 0x522d79f in wm_operator_call_internal /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1591 - 12 0x522d898 in WM_operator_name_call_ptr /.../blender/source/blender/windowmanager/intern/wm_event_system.c:1605 - 13 0x953c7c8 in ui_apply_but_funcs_after /.../blender/source/blender/editors/interface/interface_handlers.c:937 - 14 0x95c78e8 in ui_popup_handler /.../blender/source/blender/editors/interface/interface_handlers.c:10952 - 15 0x5224ea3 in wm_handler_ui_call /.../blender/source/blender/windowmanager/intern/wm_event_system.c:693 - 16 0x523b31d in wm_handlers_do_intern /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2815 - 17 0x523c605 in wm_handlers_do /.../blender/source/blender/windowmanager/intern/wm_event_system.c:2931 - 18 0x52415b0 in wm_event_do_handlers /.../blender/source/blender/windowmanager/intern/wm_event_system.c:3348 - 19 0x520d0d3 in WM_main /.../blender/source/blender/windowmanager/intern/wm.c:646 - 20 0x367a449 in main /.../blender/source/creator/creator.c:520 - 21 0x7ffff6e48cb1 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28cb1) SUMMARY: AddressSanitizer: heap-use-after-free /.../blender/source/blender/blenkernel/intern/pointcache.c:883 in BKE_ptcache_id_from_softbody Shadow bytes around the buggy address: 0x0c068008ce00: fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa 00 00 0x0c068008ce10: 00 00 fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa 0x0c068008ce20: 00 00 00 00 fa fa 00 00 00 00 fa fa 00 00 00 00 0x0c068008ce30: fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa 00 00 0x0c068008ce40: 00 00 fa fa 00 00 00 00 fa fa 00 00 00 00 fa fa =>0x0c068008ce50: fd[fd]fd fd fa fa 00 00 00 fa fa fa 00 00 00 fa 0x0c068008ce60: fa fa 00 00 00 00 fa fa 00 00 00 fa fa fa 00 00 0x0c068008ce70: 00 fa fa fa 00 00 00 00 fa fa 00 00 00 fa fa fa 0x0c068008ce80: 00 00 00 fa fa fa 00 00 00 fa fa fa 00 00 00 fa 0x0c068008ce90: fa fa 00 00 00 fa fa fa 00 00 00 fa fa fa 00 00 0x0c068008cea0: 00 fa fa fa 00 00 00 fa fa fa 00 00 00 fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Shadow gap: cc ==123600==ABORTING ```

Bastien Montagne commented

2021-09-29 17:21:23 +02:00

Added subscriber: @mont29

Bastien Montagne commented

2021-09-29 17:21:23 +02:00

Changed status from 'Confirmed' to: 'Resolved'

Bastien Montagne closed this issue

2021-09-29 17:21:23 +02:00

Bastien Montagne self-assigned this 2021-09-29 17:21:23 +02:00

Bastien Montagne commented

2021-09-29 17:21:23 +02:00

I cannot reproduce the crash anymore, so will assume this has been solved in some of the commits fixing preview code since then. Thanks for the report anyway.

Thomas Dinges added this to the 3.0 milestone 2023-02-08 15:59:28 +01:00

Sign in to join this conversation.

No Label

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

"Mark Asset" meshobject with Softbody causes Blender to crash #87091

Blender crashes