================================================================= ==60514==ERROR: AddressSanitizer: heap-use-after-free on address 0x0002d8f0c218 at pc 0x00010dc43a00 bp 0x00016b191b40 sp 0x00016b191b38 READ of size 8 at 0x0002d8f0c218 thread T0 #0 0x10dc439fc in screen_animation_step_invoke+0x3f58 (Blender:arm64+0x108fdb9fc) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #1 0x1099ba0ec in wm_operator_invoke(bContext*, wmOperatorType*, wmEvent const*, PointerRNA*, ReportList*, bool, bool)+0x1180 (Blender:arm64+0x104d520ec) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #2 0x1099ee808 in wm_handler_operator_call(bContext*, ListBase*, wmEventHandler*, wmEvent*, PointerRNA*, char const*)+0x1bf8 (Blender:arm64+0x104d86808) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #3 0x1099e3a28 in wm_handlers_do_keymap_with_keymap_handler(bContext*, wmEvent*, ListBase*, wmEventHandler_Keymap*, wmKeyMap*, bool)+0x2618 (Blender:arm64+0x104d7ba28) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #4 0x1099dea1c in wm_handlers_do_intern(bContext*, wmWindow*, wmEvent*, ListBase*)+0x1038 (Blender:arm64+0x104d76a1c) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #5 0x1099d3b8c in wm_handlers_do(bContext*, wmEvent*, ListBase*)+0x190 (Blender:arm64+0x104d6bb8c) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #6 0x1099d0848 in wm_event_do_handlers+0x53fc (Blender:arm64+0x104d68848) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #7 0x1099635ac in WM_main+0x28 (Blender:arm64+0x104cfb5ac) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #8 0x104dbd06c in main creator.c:576 #9 0x19fc73f24 () 0x0002d8f0c218 is located 8 bytes inside of 48-byte region [0x0002d8f0c210,0x0002d8f0c240) freed by thread T0 here: #0 0x16bf02fa4 in wrap_free+0x98 (libclang_rt.asan_osx_dynamic.dylib:arm64e+0x42fa4) (BuildId: f0a7ac5c49bc3abc851181b6f92b308a32000000200000000100000000000b00) #1 0x12b355798 in MEM_lockfree_freeN+0x790 (Blender:arm64+0x1266ed798) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #2 0x109b3a7d8 in WM_event_remove_timer+0xa4c (Blender:arm64+0x104ed27d8) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #3 0x10dbd3e74 in ED_screen_animation_timer+0x138 (Blender:arm64+0x108f6be74) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #4 0x10dbf42dc in ED_screen_animation_play+0x80 (Blender:arm64+0x108f8c2dc) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #5 0x10dc46e58 in screen_animation_cancel_exec+0x554 (Blender:arm64+0x108fdee58) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #6 0x1099ba7e0 in wm_operator_invoke(bContext*, wmOperatorType*, wmEvent const*, PointerRNA*, ReportList*, bool, bool)+0x1874 (Blender:arm64+0x104d527e0) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #7 0x1099b8ee4 in wm_operator_call_internal(bContext*, wmOperatorType*, PointerRNA*, ReportList*, wmOperatorCallContext, bool, wmEvent const*)+0x79c (Blender:arm64+0x104d50ee4) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #8 0x1099c3fd8 in WM_operator_call_py+0x1ac (Blender:arm64+0x104d5bfd8) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #9 0x10da0970c in pyop_call+0xcc4 (Blender:arm64+0x108da170c) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #10 0x12b6ceac4 in cfunction_call methodobject.c:552 #11 0x12b687e9c in _PyObject_MakeTpCall call.c:215 #12 0x12b75bfc8 in call_function ceval.c #13 0x12b758d60 in _PyEval_EvalFrameDefault ceval.c:4213 #14 0x12b753050 in _PyEval_Vector ceval.c:5067 #15 0x12b687cc4 in _PyObject_FastCallDictTstate call.c:142 #16 0x12b688790 in _PyObject_Call_Prepend call.c:431 #17 0x12b6f01e8 in slot_tp_call typeobject.c:7494 #18 0x12b687e9c in _PyObject_MakeTpCall call.c:215 #19 0x12b75bfc8 in call_function ceval.c #20 0x12b758ce8 in _PyEval_EvalFrameDefault ceval.c:4181 #21 0x12b753050 in _PyEval_Vector ceval.c:5067 #22 0x10d9d2c04 in bpy_app_generic_callback+0x164c (Blender:arm64+0x108d6ac04) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #23 0x1051ff8ec in BKE_callback_exec+0x46c (Blender:arm64+0x1005978ec) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #24 0x1051ffe14 in BKE_callback_exec_id_depsgraph+0x250 (Blender:arm64+0x100597e14) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #25 0x1076a7134 in BKE_scene_graph_update_for_newframe_ex+0x348 (Blender:arm64+0x102a3f134) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #26 0x1076a72a8 in BKE_scene_graph_update_for_newframe+0x1c (Blender:arm64+0x102a3f2a8) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #27 0x10dbd6bb0 in ED_update_for_newframe+0x45c (Blender:arm64+0x108f6ebb0) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #28 0x10dc43680 in screen_animation_step_invoke+0x3bdc (Blender:arm64+0x108fdb680) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #29 0x1099ba0ec in wm_operator_invoke(bContext*, wmOperatorType*, wmEvent const*, PointerRNA*, ReportList*, bool, bool)+0x1180 (Blender:arm64+0x104d520ec) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) previously allocated by thread T0 here: #0 0x16bf03234 in wrap_calloc+0x9c (libclang_rt.asan_osx_dynamic.dylib:arm64e+0x43234) (BuildId: f0a7ac5c49bc3abc851181b6f92b308a32000000200000000100000000000b00) #1 0x12b3571c8 in MEM_lockfree_callocN+0x40 (Blender:arm64+0x1266ef1c8) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #2 0x10dbd3f68 in ED_screen_animation_timer+0x22c (Blender:arm64+0x108f6bf68) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #3 0x10dbf44a4 in ED_screen_animation_play+0x248 (Blender:arm64+0x108f8c4a4) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #4 0x10dc468f4 in screen_animation_play_exec+0x240 (Blender:arm64+0x108fde8f4) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #5 0x1099ba7e0 in wm_operator_invoke(bContext*, wmOperatorType*, wmEvent const*, PointerRNA*, ReportList*, bool, bool)+0x1874 (Blender:arm64+0x104d527e0) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #6 0x1099ee808 in wm_handler_operator_call(bContext*, ListBase*, wmEventHandler*, wmEvent*, PointerRNA*, char const*)+0x1bf8 (Blender:arm64+0x104d86808) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #7 0x1099e3a28 in wm_handlers_do_keymap_with_keymap_handler(bContext*, wmEvent*, ListBase*, wmEventHandler_Keymap*, wmKeyMap*, bool)+0x2618 (Blender:arm64+0x104d7ba28) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #8 0x1099dea1c in wm_handlers_do_intern(bContext*, wmWindow*, wmEvent*, ListBase*)+0x1038 (Blender:arm64+0x104d76a1c) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #9 0x1099d3b8c in wm_handlers_do(bContext*, wmEvent*, ListBase*)+0x190 (Blender:arm64+0x104d6bb8c) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #10 0x1099fb1f4 in wm_event_do_region_handlers(bContext*, wmEvent*, ARegion*)+0x584 (Blender:arm64+0x104d931f4) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #11 0x1099dca98 in wm_event_do_handlers_area_regions(bContext*, wmEvent*, ScrArea*)+0x5bc (Blender:arm64+0x104d74a98) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #12 0x1099d04fc in wm_event_do_handlers+0x50b0 (Blender:arm64+0x104d684fc) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #13 0x1099635ac in WM_main+0x28 (Blender:arm64+0x104cfb5ac) (BuildId: 9a1316ea6ebb330eba857c5807f5e34a32000000200000000100000000000b00) #14 0x104dbd06c in main creator.c:576 #15 0x19fc73f24 ()