Regression: Expand operator on open boundaries causes crash #100479

New Issue

Julien Kaspar · 2022-08-18T15:59:06+02:00

Julien Kaspar commented

2022-08-18 15:59:06 +02:00

System Information
Operating system: Linux-5.15.0-46-generic-x86_64-with-glibc2.35 64 Bits
Graphics card: Quadro GP100/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 510.85.02

Blender Version
Broken: version: 3.4.0 Alpha, branch: master, commit date: 2022-08-18 05:55, hash: 0aaff9a07d
Worked: version 3.3.0 Beta
Caused by d7cfb6ac71

i couldn't get exact dates of when the bug was introduced. But it's older than the daily alpha build from the 8th of August.

Short description of error
When using the expand operator in sculpt mode via the shortcuts Shift A or Shift W on an open boundary, it will expand a mask or face set along the edge loop of that boundary.
In recent alpha versions of Blender this will cause a crash.

Exact steps for others to reproduce the error

Delete one side of the default cube in edit mode
Enter sculpt mode
Use the face set expand operator with Shift W while pointing at the open boundary

**System Information** Operating system: Linux-5.15.0-46-generic-x86_64-with-glibc2.35 64 Bits Graphics card: Quadro GP100/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 510.85.02 **Blender Version** Broken: version: 3.4.0 Alpha, branch: master, commit date: 2022-08-18 05:55, hash: `0aaff9a07d` Worked: version 3.3.0 Beta Caused by d7cfb6ac71 i couldn't get exact dates of when the bug was introduced. But it's older than the daily alpha build from the 8th of August. **Short description of error** When using the expand operator in sculpt mode via the shortcuts `Shift A` or `Shift W` on an open boundary, it will expand a mask or face set along the edge loop of that boundary. In recent alpha versions of Blender this will cause a crash. **Exact steps for others to reproduce the error** - Delete one side of the default cube in edit mode - Enter sculpt mode - Use the face set expand operator with `Shift W` while pointing at the open boundary

Julien Kaspar commented

2022-08-18 15:59:06 +02:00

Added subscriber: @JulienKaspar

Richard Antalik commented

2022-08-18 18:01:56 +02:00

Added subscriber: @iss

Richard Antalik commented

2022-08-18 18:01:56 +02:00

Changed status from 'Needs Triage' to: 'Confirmed'

Richard Antalik commented

2022-08-18 18:01:56 +02:00

Seems to be reading freed/uninitialized memory. Trace:

>	blender.exe!sculpt_boundary_edit_data_init(SculptSession * ss, SculptBoundary * boundary, const PBVHVertRef initial_vertex, const float radius) Řádek 438	C

 	blender.exe!SCULPT_boundary_data_init(Object * object, Brush * brush, const PBVHVertRef initial_vertex, const float radius) Řádek 540	C
 	blender.exe!sculpt_expand_boundary_topology_falloff_create(Object * ob, const PBVHVertRef v) Řádek 612	C
 	blender.exe!sculpt_expand_falloff_factors_from_vertex_and_symm_create(ExpandCache * expand_cache, Sculpt * sd, Object * ob, const PBVHVertRef v, eSculptExpandFalloffType falloff_type) Řádek 1048	C
 	blender.exe!sculpt_expand_invoke(bContext * C, wmOperator * op, const wmEvent * event) Řádek 2161	C
 	blender.exe!wm_operator_invoke(bContext * C, wmOperatorType * ot, const wmEvent * event, PointerRNA * properties, ReportList * reports, const bool poll_only, bool use_last_properties) Řádek 1412	C++
 	blender.exe!wm_handler_operator_call(bContext * C, ListBase * handlers, wmEventHandler * handler_base, wmEvent * event, PointerRNA * properties, const char * kmi_idname) Řádek 2446	C++
 	blender.exe!wm_handlers_do_keymap_with_keymap_handler(bContext * C, wmEvent * event, ListBase * handlers, wmEventHandler_Keymap * handler, wmKeyMap * keymap, const bool do_debug_handler) Řádek 2838	C++
 	blender.exe!wm_handlers_do_intern(bContext * C, wmWindow * win, wmEvent * event, ListBase * handlers) Řádek 3164	C++
 	blender.exe!wm_handlers_do(bContext * C, wmEvent * event, ListBase * handlers) Řádek 3302	C++
 	blender.exe!wm_event_do_region_handlers(bContext * C, wmEvent * event, ARegion * region) Řádek 3722	C++
 	blender.exe!wm_event_do_handlers_area_regions(bContext * C, wmEvent * event, ScrArea * area) Řádek 3752	C++
 	blender.exe!wm_event_do_handlers(bContext * C) Řádek 3947	C++
 	blender.exe!WM_main(bContext * C) Řádek 640	C
 	blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Řádek 550	C

Seems to be reading freed/uninitialized memory. Trace: ``` > blender.exe!sculpt_boundary_edit_data_init(SculptSession * ss, SculptBoundary * boundary, const PBVHVertRef initial_vertex, const float radius) Řádek 438 C blender.exe!SCULPT_boundary_data_init(Object * object, Brush * brush, const PBVHVertRef initial_vertex, const float radius) Řádek 540 C blender.exe!sculpt_expand_boundary_topology_falloff_create(Object * ob, const PBVHVertRef v) Řádek 612 C blender.exe!sculpt_expand_falloff_factors_from_vertex_and_symm_create(ExpandCache * expand_cache, Sculpt * sd, Object * ob, const PBVHVertRef v, eSculptExpandFalloffType falloff_type) Řádek 1048 C blender.exe!sculpt_expand_invoke(bContext * C, wmOperator * op, const wmEvent * event) Řádek 2161 C blender.exe!wm_operator_invoke(bContext * C, wmOperatorType * ot, const wmEvent * event, PointerRNA * properties, ReportList * reports, const bool poll_only, bool use_last_properties) Řádek 1412 C++ blender.exe!wm_handler_operator_call(bContext * C, ListBase * handlers, wmEventHandler * handler_base, wmEvent * event, PointerRNA * properties, const char * kmi_idname) Řádek 2446 C++ blender.exe!wm_handlers_do_keymap_with_keymap_handler(bContext * C, wmEvent * event, ListBase * handlers, wmEventHandler_Keymap * handler, wmKeyMap * keymap, const bool do_debug_handler) Řádek 2838 C++ blender.exe!wm_handlers_do_intern(bContext * C, wmWindow * win, wmEvent * event, ListBase * handlers) Řádek 3164 C++ blender.exe!wm_handlers_do(bContext * C, wmEvent * event, ListBase * handlers) Řádek 3302 C++ blender.exe!wm_event_do_region_handlers(bContext * C, wmEvent * event, ARegion * region) Řádek 3722 C++ blender.exe!wm_event_do_handlers_area_regions(bContext * C, wmEvent * event, ScrArea * area) Řádek 3752 C++ blender.exe!wm_event_do_handlers(bContext * C) Řádek 3947 C++ blender.exe!WM_main(bContext * C) Řádek 640 C blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Řádek 550 C ```

Julien Kaspar commented

2022-08-18 18:14:27 +02:00

Added subscriber: @JosephEagar

Julien Kaspar commented

2022-08-18 18:14:27 +02:00

@JosephEagar You interested in looking into this?

Pratik Borhade commented

2022-08-19 06:54:41 +02:00

Added subscriber: @PratikPB2123

Pratik Borhade commented

2022-08-19 06:54:41 +02:00

Crash introduced in- d7cfb6ac71

Crash introduced in- d7cfb6ac71

Pratik Borhade changed title from ~~Expand operator on open boundaries causes crash~~ to Regression: Expand operator on open boundaries causes crash

2022-08-19 06:55:07 +02:00

blender-admin commented

2022-08-31 19:19:34 +02:00

This issue was referenced by d7b33cd8c8

This issue was referenced by d7b33cd8c881b9a4c13eef9b6bd6192a56710f78

Joseph Eagar commented

2022-08-31 19:20:48 +02:00

Changed status from 'Confirmed' to: 'Resolved'

Joseph Eagar closed this issue

2022-08-31 19:20:48 +02:00

Joseph Eagar self-assigned this 2022-08-31 19:20:48 +02:00

blender-admin commented

2022-09-20 19:00:41 +02:00

This issue was referenced by 32b766223a

This issue was referenced by 32b766223a1b2a562e657a729e7d9f2926d42417

Sign in to join this conversation.

No Label

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

Regression: Expand operator on open boundaries causes crash #100479