Regression: Crash after deleting color attributes and switching mode #102670

New Issue

Dominic Hauser · 2022-11-21T22:42:58+01:00

Dominic Hauser commented

2022-11-21 22:42:58 +01:00

System Information
Operating system: Windows-10-10.0.19045-SP0 64 Bits
Graphics card: NVIDIA GeForce GTX 970/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 526.98

Blender Version
Broken: version: 3.3 and above
Working: 3.2
Caused by 6eea5f70e3

Short description of error
Blender crashes when you try to switch the mode after deleting any of the color attributes while in edit mode

Exact steps for others to reproduce the error

Open attached .blend file
Enter edit mode
Open "Object Data Properties" and remove any of the color attributes
Try to switch to any other mode, which one doesn´t matter

crash.blend

**System Information** Operating system: Windows-10-10.0.19045-SP0 64 Bits Graphics card: NVIDIA GeForce GTX 970/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 526.98 **Blender Version** Broken: version: 3.3 and above Working: 3.2 Caused by 6eea5f70e3 **Short description of error** Blender crashes when you try to switch the mode after deleting any of the color attributes while in edit mode **Exact steps for others to reproduce the error** * Open attached .blend file * Enter edit mode * Open "Object Data Properties" and remove any of the color attributes * Try to switch to any other mode, which one doesn´t matter ![image.png](https://archive.blender.org/developer/F13957458/image.png) [crash.blend](https://archive.blender.org/developer/F13957449/crash.blend)

Dominic Hauser commented

2022-11-21 22:42:58 +01:00

Added subscriber: @rollschuh2282

Omar Emara commented

2022-11-22 07:39:07 +01:00

Added subscriber: @OmarEmaraDev

Omar Emara commented

2022-11-22 07:39:07 +01:00

Changed status from 'Needs Triage' to: 'Confirmed'

Omar Emara commented

2022-11-22 07:39:07 +01:00

Worked in 3.2, broken in 3.3. Not sure if it needs to be set to high priority. Let me know if you want a bisect.

* thread #1, name = 'blender', stop reason = signal SIGSEGV: invalid address (fault address: 0x0)
    frame #0: 0x000000000e75c170 blender`BLI_mempool_destroy(pool=0x0000000000000000) at BLI_mempool.c:709:32
   706
   707  void BLI_mempool_destroy(BLI_mempool *pool)
   708  {
-> 709    mempool_chunk_free_all(pool->chunks);
   710
   711  #ifdef WITH_MEM_VALGRIND
   712    VALGRIND_DESTROY_MEMPOOL(pool);
(lldb) bt
* thread #1, name = 'blender', stop reason = signal SIGSEGV: invalid address (fault address: 0x0)
  * frame #0: 0x000000000e75c170 blender`BLI_mempool_destroy(pool=0x0000000000000000) at BLI_mempool.c:709:32
    frame #1: 0x0000000000c41043 blender`::BM_mesh_data_free(bm=0x000000001cd1dea8) at bmesh_mesh.cc:186:5
    frame #2: 0x0000000000c41355 blender`::BM_mesh_free(bm=0x000000001cd1dea8) at bmesh_mesh.cc:260:3
    frame #3: 0x00000000004d78c9 blender`::BKE_editmesh_free_data(em=0x000000001bd0ebc8) at editmesh.cc:179:5
    frame #4: 0x0000000001e38177 blender`EDBM_mesh_free_data(em=0x000000001bd0ebc8) at editmesh_utils.c:341:3
    frame #5: 0x0000000001e7e058 blender`ED_object_editmode_load_free_ex(bmain=0x000000001fc34268, obedit=0x000000001e1740e8, load_data=true, free_data=true) at object_edit.c:540:7
    frame #6: 0x0000000001e7e3cf blender`ED_object_editmode_exit_ex(bmain=0x000000001fc34268, scene=0x000000001e2e69a8, obedit=0x000000001e1740e8, flag=1) at object_edit.c:656:7
    frame #7: 0x0000000001e7f021 blender`editmode_toggle_exec(C=0x0000000017d16338, op=0x000000001ee112f8) at object_edit.c:875:5
    frame #8: 0x0000000000a5c499 blender`wm_operator_invoke(C=0x0000000017d16338, ot=0x00000000181ce878, event=0x0000000000000000, properties=0x0000000000000000, reports=0x0000000000000000, poll_only=false, use_last_properties=true) at wm_event_system.cc:1460:16
    frame #9: 0x0000000000a51f97 blender`wm_operator_call_internal(C=0x0000000017d16338, ot=0x00000000181ce878, properties=0x0000000000000000, reports=0x0000000000000000, context=WM_OP_EXEC_REGION_WIN, poll_only=false, event=0x0000000000000000) at wm_event_system.cc:1654:18
    frame #10: 0x0000000000a529ba blender`::WM_operator_name_call_ptr(C=0x0000000017d16338, ot=0x00000000181ce878, context=WM_OP_EXEC_REGION_WIN, properties=0x0000000000000000, event=0x0000000000000000) at wm_event_system.cc:1702:10
    frame #11: 0x0000000001e8f5dc blender`ED_object_mode_set_ex(C=0x0000000017d16338, mode=OB_MODE_OBJECT, use_undo=true, reports=0x000000001acc2938) at object_modes.c:220:3
    frame #12: 0x0000000001e81296 blender`object_mode_set_exec(C=0x0000000017d16338, op=0x000000001de6de08) at object_edit.c:1744:11
    frame #13: 0x0000000000a5c499 blender`wm_operator_invoke(C=0x0000000017d16338, ot=0x00000000181cdf18, event=0x000000001ebb1138, properties=0x000000001a908f28, reports=0x0000000000000000, poll_only=false, use_last_properties=true) at wm_event_system.cc:1460:16
    frame #14: 0x0000000000a5f2da blender`wm_handler_operator_call(C=0x0000000017d16338, handlers=0x000000001fd5fe80, handler_base=0x0000000018bc3a08, event=0x000000001ebb1138, properties=0x000000001a908f28, kmi_idname="OBJECT_OT_mode_set") at wm_event_system.cc:2483:16
    frame #15: 0x0000000000a5dce7 blender`wm_handlers_do_keymap_with_keymap_handler(C=0x0000000017d16338, event=0x000000001ebb1138, handlers=0x000000001fd5fe80, handler=0x0000000018bc3a08, keymap=0x000000001a908bd8, do_debug_handler=false) at wm_event_system.cc:2875:21
    frame #16: 0x0000000000a5d34f blender`wm_handlers_do_intern(C=0x0000000017d16338, win=0x000000001db2cdd8, event=0x000000001ebb1138, handlers=0x000000001fd5fe80) at wm_event_system.cc:3201:26
    frame #17: 0x0000000000a5528f blender`wm_handlers_do(C=0x0000000017d16338, event=0x000000001ebb1138, handlers=0x000000001fd5fe80) at wm_event_system.cc:3339:16
    frame #18: 0x0000000000a5ff1e blender`wm_event_do_region_handlers(C=0x0000000017d16338, event=0x000000001ebb1138, region=0x000000001fd5fd48) at wm_event_system.cc:3758:10
    frame #19: 0x0000000000a56404 blender`wm_event_do_handlers_area_regions(C=0x0000000017d16338, event=0x000000001ebb1138, area=0x000000001fd33058) at wm_event_system.cc:3788:10
    frame #20: 0x0000000000a54631 blender`::wm_event_do_handlers(C=0x0000000017d16338) at wm_event_system.cc:3984:23
    frame #21: 0x0000000000a46627 blender`WM_main(C=0x0000000017d16338) at wm.c:640:5
    frame #22: 0x000000000022d56e blender`main(argc=1, argv=0x00007fffffffe9d8) at creator.c:577:5
    frame #23: 0x00007ffff7de3290 libc.so.6`___lldb_unnamed_symbol3141 + 128
    frame #24: 0x00007ffff7de334a libc.so.6`__libc_start_main + 138
    frame #25: 0x000000000022d125 blender`_start at start.S:115

Worked in 3.2, broken in 3.3. Not sure if it needs to be set to high priority. Let me know if you want a bisect. ``` * thread #1, name = 'blender', stop reason = signal SIGSEGV: invalid address (fault address: 0x0) frame #0: 0x000000000e75c170 blender`BLI_mempool_destroy(pool=0x0000000000000000) at BLI_mempool.c:709:32 706 707 void BLI_mempool_destroy(BLI_mempool *pool) 708 { -> 709 mempool_chunk_free_all(pool->chunks); 710 711 #ifdef WITH_MEM_VALGRIND 712 VALGRIND_DESTROY_MEMPOOL(pool); (lldb) bt * thread #1, name = 'blender', stop reason = signal SIGSEGV: invalid address (fault address: 0x0) * frame #0: 0x000000000e75c170 blender`BLI_mempool_destroy(pool=0x0000000000000000) at BLI_mempool.c:709:32 frame #1: 0x0000000000c41043 blender`::BM_mesh_data_free(bm=0x000000001cd1dea8) at bmesh_mesh.cc:186:5 frame #2: 0x0000000000c41355 blender`::BM_mesh_free(bm=0x000000001cd1dea8) at bmesh_mesh.cc:260:3 frame #3: 0x00000000004d78c9 blender`::BKE_editmesh_free_data(em=0x000000001bd0ebc8) at editmesh.cc:179:5 frame #4: 0x0000000001e38177 blender`EDBM_mesh_free_data(em=0x000000001bd0ebc8) at editmesh_utils.c:341:3 frame #5: 0x0000000001e7e058 blender`ED_object_editmode_load_free_ex(bmain=0x000000001fc34268, obedit=0x000000001e1740e8, load_data=true, free_data=true) at object_edit.c:540:7 frame #6: 0x0000000001e7e3cf blender`ED_object_editmode_exit_ex(bmain=0x000000001fc34268, scene=0x000000001e2e69a8, obedit=0x000000001e1740e8, flag=1) at object_edit.c:656:7 frame #7: 0x0000000001e7f021 blender`editmode_toggle_exec(C=0x0000000017d16338, op=0x000000001ee112f8) at object_edit.c:875:5 frame #8: 0x0000000000a5c499 blender`wm_operator_invoke(C=0x0000000017d16338, ot=0x00000000181ce878, event=0x0000000000000000, properties=0x0000000000000000, reports=0x0000000000000000, poll_only=false, use_last_properties=true) at wm_event_system.cc:1460:16 frame #9: 0x0000000000a51f97 blender`wm_operator_call_internal(C=0x0000000017d16338, ot=0x00000000181ce878, properties=0x0000000000000000, reports=0x0000000000000000, context=WM_OP_EXEC_REGION_WIN, poll_only=false, event=0x0000000000000000) at wm_event_system.cc:1654:18 frame #10: 0x0000000000a529ba blender`::WM_operator_name_call_ptr(C=0x0000000017d16338, ot=0x00000000181ce878, context=WM_OP_EXEC_REGION_WIN, properties=0x0000000000000000, event=0x0000000000000000) at wm_event_system.cc:1702:10 frame #11: 0x0000000001e8f5dc blender`ED_object_mode_set_ex(C=0x0000000017d16338, mode=OB_MODE_OBJECT, use_undo=true, reports=0x000000001acc2938) at object_modes.c:220:3 frame #12: 0x0000000001e81296 blender`object_mode_set_exec(C=0x0000000017d16338, op=0x000000001de6de08) at object_edit.c:1744:11 frame #13: 0x0000000000a5c499 blender`wm_operator_invoke(C=0x0000000017d16338, ot=0x00000000181cdf18, event=0x000000001ebb1138, properties=0x000000001a908f28, reports=0x0000000000000000, poll_only=false, use_last_properties=true) at wm_event_system.cc:1460:16 frame #14: 0x0000000000a5f2da blender`wm_handler_operator_call(C=0x0000000017d16338, handlers=0x000000001fd5fe80, handler_base=0x0000000018bc3a08, event=0x000000001ebb1138, properties=0x000000001a908f28, kmi_idname="OBJECT_OT_mode_set") at wm_event_system.cc:2483:16 frame #15: 0x0000000000a5dce7 blender`wm_handlers_do_keymap_with_keymap_handler(C=0x0000000017d16338, event=0x000000001ebb1138, handlers=0x000000001fd5fe80, handler=0x0000000018bc3a08, keymap=0x000000001a908bd8, do_debug_handler=false) at wm_event_system.cc:2875:21 frame #16: 0x0000000000a5d34f blender`wm_handlers_do_intern(C=0x0000000017d16338, win=0x000000001db2cdd8, event=0x000000001ebb1138, handlers=0x000000001fd5fe80) at wm_event_system.cc:3201:26 frame #17: 0x0000000000a5528f blender`wm_handlers_do(C=0x0000000017d16338, event=0x000000001ebb1138, handlers=0x000000001fd5fe80) at wm_event_system.cc:3339:16 frame #18: 0x0000000000a5ff1e blender`wm_event_do_region_handlers(C=0x0000000017d16338, event=0x000000001ebb1138, region=0x000000001fd5fd48) at wm_event_system.cc:3758:10 frame #19: 0x0000000000a56404 blender`wm_event_do_handlers_area_regions(C=0x0000000017d16338, event=0x000000001ebb1138, area=0x000000001fd33058) at wm_event_system.cc:3788:10 frame #20: 0x0000000000a54631 blender`::wm_event_do_handlers(C=0x0000000017d16338) at wm_event_system.cc:3984:23 frame #21: 0x0000000000a46627 blender`WM_main(C=0x0000000017d16338) at wm.c:640:5 frame #22: 0x000000000022d56e blender`main(argc=1, argv=0x00007fffffffe9d8) at creator.c:577:5 frame #23: 0x00007ffff7de3290 libc.so.6`___lldb_unnamed_symbol3141 + 128 frame #24: 0x00007ffff7de334a libc.so.6`__libc_start_main + 138 frame #25: 0x000000000022d125 blender`_start at start.S:115 ```

Pratik Borhade commented

2022-11-22 15:32:20 +01:00

Added subscribers: @HooglyBoogly, @PratikPB2123

Pratik Borhade commented

2022-11-22 15:32:20 +01:00

@HooglyBoogly hi, can you check? Crashes after your commit 6eea5f70e3

@HooglyBoogly hi, can you check? Crashes after your commit 6eea5f70e3

Pratik Borhade changed title from ~~Crash after deleting color attributes and switching mode~~ to Regression: Crash after deleting color attributes and switching mode

2022-11-22 15:33:02 +01:00

Hans Goudey self-assigned this 2022-11-22 15:37:32 +01:00

blender-admin commented

2022-11-22 20:44:13 +01:00

This issue was referenced by 4107e04c45

This issue was referenced by 4107e04c45e4420177d32224776c6874992c6aa7

blender-admin commented

2022-11-22 20:44:13 +01:00

This issue was referenced by 461cb550cc

This issue was referenced by 461cb550cc0756595f2096edf31db91730decba8

Hans Goudey commented

2022-11-22 20:50:19 +01:00