Blender crashes when relocating a library to another library that uses the same "2nd-level" library #107946

Closed
opened 2023-05-15 19:31:20 +02:00 by Rombout Versluijs · 7 comments

System Information
Operating system: Windows-10-10.0.25357-SP0 64 Bits
Graphics card: NVIDIA GeForce GTX 1660 Ti/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 531.79

Blender Version
Broken: version: 3.5.1, branch: blender-v3.5-release, commit date: 2023-04-24 18:11, hash: e1ccd9d4a1d3
Worked: -

Short description of the error

Blender crashes when relocating a library to another library that uses the same "2nd-level" library

Exact steps for others to reproduce the error

  • have some lib_2ndlevel.blend
  • link an ID from lib_2ndlevel.blend into lib.blend
  • also save lib.blend under a different name (e.g. lib2.blend)
  • link the collection from lib.blend into main.blend
  • with main.blend open, try relocating lib.blend to lib2.blend in the Outliner
  • crash

107946_repro.zip

Original report

Relocating linked library file results in instant crash when different file is chosen. I need this because i work on both OSX and Windows. While testing file version, i had issue with indirectly linked files. These are nested files so to say. They are linked blend files inside another linked blend file.

  • Download and Unzip attached RML-test file-bl350.zip file
  • open file "RML-test file-bl350.blend"
  • go to Outliner > Blender File and select the linked lib file with exclamation mark "linked object"
  • Right click and select "Relocate"
  • Point to the file "linked object-bl293"

Blender file browser closes and crashes short after.

Side note
The linked lib blend file is name "linked object", if i rename the "linked object-bl293" to "linked object" it works. But because i work on both OSX and Windows and sometimes also with different version. I need to rename linked files so i dont break anything.

However, i jsut tested these 2 files in an issue folder i created and then it links just fine. When these files are linked in the original folder, blender crashes right after i pick that file "linked object-bl293.blend". See attached screengrab.
folder structure crashing relocate blend.png

**System Information** Operating system: Windows-10-10.0.25357-SP0 64 Bits Graphics card: NVIDIA GeForce GTX 1660 Ti/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 531.79 **Blender Version** Broken: version: 3.5.1, branch: blender-v3.5-release, commit date: 2023-04-24 18:11, hash: `e1ccd9d4a1d3` Worked: - **Short description of the error** Blender crashes when relocating a library to another library that uses the same "2nd-level" library **Exact steps for others to reproduce the error** - have some `lib_2ndlevel.blend` - link an ID from `lib_2ndlevel.blend` into `lib.blend` - also save `lib.blend` under a different name (e.g. `lib2.blend`) - link the collection from `lib.blend` into `main.blend` - with `main.blend` open, try relocating `lib.blend` to `lib2.blend` in the Outliner - crash [107946_repro.zip](/attachments/328d04ef-2bb7-4768-bbe5-39b6d92fa2a8) **Original report** Relocating linked library file results in instant crash when different file is chosen. I need this because i work on both OSX and Windows. While testing file version, i had issue with indirectly linked files. These are nested files so to say. They are linked blend files inside another linked blend file. - Download and Unzip attached `RML-test file-bl350.zip` file - open file "RML-test file-bl350.blend" - go to `Outliner` > `Blender File` and select the linked lib file with exclamation mark "linked object" - Right click and select "Relocate" - Point to the file "linked object-bl293" Blender file browser closes and crashes short after. Side note The linked lib blend file is name "linked object", if i rename the "linked object-bl293" to "linked object" it works. But because i work on both OSX and Windows and sometimes also with different version. I need to rename linked files so i dont break anything. However, i jsut tested these 2 files in an issue folder i created and then it links just fine. When these files are linked in the original folder, blender crashes right after i pick that file "linked object-bl293.blend". See attached screengrab. ![folder structure crashing relocate blend.png](/attachments/23a02804-3c6c-4cd2-a729-2639c1c5ab18)
Rombout Versluijs added the
Priority
Normal
Type
Report
Status
Needs Triage
labels 2023-05-15 19:31:20 +02:00
Iliya Katushenock added the
Interest
Asset Browser
label 2023-05-15 19:31:57 +02:00

As i was reading this post, #95480 #95480, i still seeing it crashing in some cases.

As i was reading this post, #95480 https://projects.blender.org/blender/blender/issues/95480, i still seeing it crashing in some cases.

Here's also the blend file which is linked into the file linked object-bl293

Here's also the blend file which is linked into the file linked object-bl293

Thank you for the report.
I can confirm the issue.
(I edited the steps a bit to make it a little clearer)

This is the crash call stack:

>	blender.exe!BLI_addtail(ListBase * listbase, void * vlink) Line 118	C++
 	blender.exe!blender::ed::outliner::outliner_add_element(SpaceOutliner * space_outliner, ListBase * lb, void * idv, blender::ed::outliner::TreeElement * parent, short type, short index, const bool expand) Line 828	C++
 	blender.exe!blender::ed::outliner::TreeDisplayLibraries::add_library_contents(Main & mainvar, ListBase & lb, Library * lib) Line 138	C++
 	blender.exe!blender::ed::outliner::TreeDisplayLibraries::buildTree(const blender::ed::outliner::TreeSourceData & source_data) Line 83	C++
 	blender.exe!blender::ed::outliner::outliner_build_tree(Main * mainvar, Scene * scene, ViewLayer * view_layer, SpaceOutliner * space_outliner, ARegion * region) Line 1723	C++
 	blender.exe!blender::ed::outliner::draw_outliner(const bContext * C) Line 3875	C++
 	blender.exe!blender::ed::outliner::outliner_main_region_draw(const bContext * C, ARegion * region) Line 89	C++
 	blender.exe!ED_region_do_draw(bContext * C, ARegion * region) Line 542	C++
 	blender.exe!wm_draw_window_offscreen(bContext * C, wmWindow * win, bool stereo) Line 966	C
 	blender.exe!wm_draw_window(bContext * C, wmWindow * win) Line 1133	C
 	blender.exe!wm_draw_update(bContext * C) Line 1515	C
 	blender.exe!WM_main(bContext * C) Line 653	C
 	blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Line 586	C
 	[External Code]	

Thank you for the report. I can confirm the issue. (I edited the steps a bit to make it a little clearer) This is the crash call stack: ``` > blender.exe!BLI_addtail(ListBase * listbase, void * vlink) Line 118 C++ blender.exe!blender::ed::outliner::outliner_add_element(SpaceOutliner * space_outliner, ListBase * lb, void * idv, blender::ed::outliner::TreeElement * parent, short type, short index, const bool expand) Line 828 C++ blender.exe!blender::ed::outliner::TreeDisplayLibraries::add_library_contents(Main & mainvar, ListBase & lb, Library * lib) Line 138 C++ blender.exe!blender::ed::outliner::TreeDisplayLibraries::buildTree(const blender::ed::outliner::TreeSourceData & source_data) Line 83 C++ blender.exe!blender::ed::outliner::outliner_build_tree(Main * mainvar, Scene * scene, ViewLayer * view_layer, SpaceOutliner * space_outliner, ARegion * region) Line 1723 C++ blender.exe!blender::ed::outliner::draw_outliner(const bContext * C) Line 3875 C++ blender.exe!blender::ed::outliner::outliner_main_region_draw(const bContext * C, ARegion * region) Line 89 C++ blender.exe!ED_region_do_draw(bContext * C, ARegion * region) Line 542 C++ blender.exe!wm_draw_window_offscreen(bContext * C, wmWindow * win, bool stereo) Line 966 C blender.exe!wm_draw_window(bContext * C, wmWindow * win) Line 1133 C blender.exe!wm_draw_update(bContext * C) Line 1515 C blender.exe!WM_main(bContext * C) Line 653 C blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Line 586 C [External Code] ```
Germano Cavalcante added
Module
Core
Status
Confirmed
and removed
Status
Needs Triage
labels 2023-05-16 17:09:42 +02:00
Member
==506653==ERROR: AddressSanitizer: heap-use-after-free on address 0x61d0010770a0 at pc 0x000000dfc9be bp 0x7ffc29b46480 sp 0x7ffc29b46478
READ of size 8 at 0x61d0010770a0 thread T0
    #0 0xdfc9bd in lib_override_sort_libraries_func /blender/source/blender/blenkernel/intern/lib_override.cc:3199
    #1 0xe2041d in BKE_lib_query_foreachid_process /blender/source/blender/blenkernel/intern/lib_query.c:87
    #2 0xe2e9f8 in library_foreach_id /blender/source/blender/blenkernel/intern/library.c:56
    #3 0xe22917 in library_foreach_ID_link /blender/source/blender/blenkernel/intern/lib_query.c:344
    #4 0xe22aa7 in BKE_library_foreach_ID_link /blender/source/blender/blenkernel/intern/lib_query.c:363
    #5 0xdfd807 in lib_override_libraries_index_define /blender/source/blender/blenkernel/intern/lib_override.cc:3250
    #6 0xdfde24 in BKE_lib_override_library_main_resync /blender/source/blender/blenkernel/intern/lib_override.cc:3294
    #7 0xc810999 in BKE_blendfile_library_relocate /blender/source/blender/blenkernel/intern/blendfile_link_append.c:1762
    #8 0x3eafe4f in wm_lib_relocate_exec_do /blender/source/blender/windowmanager/intern/wm_files_link.c:778
    #9 0x3eb0006 in wm_lib_relocate_exec /blender/source/blender/windowmanager/intern/wm_files_link.c:803
    #10 0x3e5eb77 in wm_handler_fileselect_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:2779
    #11 0x3e604ea in wm_handler_fileselect_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:2876
    #12 0x3e659dd in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3375
    #13 0x3e6605b in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3429
    #14 0x3e70591 in wm_event_do_handlers /blender/source/blender/windowmanager/intern/wm_event_system.cc:4056
    #15 0x3e27510 in WM_main /blender/source/blender/windowmanager/intern/wm.c:646
    #16 0x90c366 in main /blender/source/creator/creator.c:583
    #17 0x7f7a2444a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f)
    #18 0x7f7a2444a5c8 in __libc_start_main@GLIBC_2.2.5 (/lib64/libc.so.6+0x275c8)
    #19 0x90b544 in _start (/build_linux_debug/bin/blender+0x90b544)

0x61d0010770a0 is located 32 bytes inside of 2296-byte region [0x61d001077080,0x61d001077978)
freed by thread T0 here:
    #0 0x7f7a2dcb9388 in __interceptor_free.part.0 (/lib64/libasan.so.8+0xb9388)
    #1 0x1eccdd0e in MEM_lockfree_freeN /blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:102
    #2 0xdc24e4 in BKE_id_free_ex /blender/source/blender/blenkernel/intern/lib_id_delete.c:168
    #3 0xdc2515 in BKE_id_free /blender/source/blender/blenkernel/intern/lib_id_delete.c:174
    #4 0xc80fdd0 in BKE_blendfile_library_relocate /blender/source/blender/blenkernel/intern/blendfile_link_append.c:1739
    #5 0x3eafe4f in wm_lib_relocate_exec_do /blender/source/blender/windowmanager/intern/wm_files_link.c:778
    #6 0x3eb0006 in wm_lib_relocate_exec /blender/source/blender/windowmanager/intern/wm_files_link.c:803
    #7 0x3e5eb77 in wm_handler_fileselect_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:2779
    #8 0x3e604ea in wm_handler_fileselect_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:2876
    #9 0x3e659dd in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3375
    #10 0x3e6605b in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3429
    #11 0x3e70591 in wm_event_do_handlers /blender/source/blender/windowmanager/intern/wm_event_system.cc:4056
    #12 0x3e27510 in WM_main /blender/source/blender/windowmanager/intern/wm.c:646
    #13 0x90c366 in main /blender/source/creator/creator.c:583
    #14 0x7f7a2444a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f)

previously allocated by thread T0 here:
    #0 0x7f7a2dcba6af in __interceptor_malloc (/lib64/libasan.so.8+0xba6af)
    #1 0x1ecce6a8 in MEM_lockfree_mallocN /blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:247
    #2 0x406e55c in read_struct /blender/source/blender/blenloader/intern/readfile.cc:1764
    #3 0x407f106 in read_libblock /blender/source/blender/blenloader/intern/readfile.cc:3274
    #4 0x4087e8f in blo_read_file_internal /blender/source/blender/blenloader/intern/readfile.cc:3886
    #5 0x405a4e8 in BLO_read_from_file /blender/source/blender/blenloader/intern/readblenentry.cc:413
    #6 0x92af29 in BKE_blendfile_read /blender/source/blender/blenkernel/intern/blendfile.cc:589
    #7 0x3e93c89 in WM_file_read /blender/source/blender/windowmanager/intern/wm_files.cc:1016
    #8 0x3ea08fb in wm_file_read_opwrap /blender/source/blender/windowmanager/intern/wm_files.cc:2685
    #9 0x3ea1930 in wm_open_mainfile__open /blender/source/blender/windowmanager/intern/wm_files.cc:2808
    #10 0x3ea0c8d in operator_state_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2721
    #11 0x3ea1b8e in wm_open_mainfile_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2832
    #12 0x3ea0f4d in wm_open_mainfile__discard_changes /blender/source/blender/windowmanager/intern/wm_files.cc:2760
    #13 0x3ea0c8d in operator_state_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2721
    #14 0x3ea1b8e in wm_open_mainfile_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2832
    #15 0x3ea1bb7 in wm_open_mainfile_invoke /blender/source/blender/windowmanager/intern/wm_files.cc:2837
    #16 0x3e521a1 in wm_operator_invoke /blender/source/blender/windowmanager/intern/wm_event_system.cc:1529
    #17 0x3e5405b in wm_operator_call_internal /blender/source/blender/windowmanager/intern/wm_event_system.cc:1764
    #18 0x3e54160 in WM_operator_name_call_ptr /blender/source/blender/windowmanager/intern/wm_event_system.cc:1778
    #19 0x3e55673 in WM_operator_name_call_ptr_with_depends_on_cursor /blender/source/blender/windowmanager/intern/wm_event_system.cc:1971
    #20 0xa4132e5 in ui_apply_but_funcs_after /blender/source/blender/editors/interface/interface_handlers.cc:1022
    #21 0xa4a648e in ui_popup_handler /blender/source/blender/editors/interface/interface_handlers.cc:11597
    #22 0x3e4afa8 in wm_handler_ui_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:816
    #23 0x3e64ca4 in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3312
    #24 0x3e6605b in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3429
    #25 0x3e70591 in wm_event_do_handlers /blender/source/blender/windowmanager/intern/wm_event_system.cc:4056
    #26 0x3e27510 in WM_main /blender/source/blender/windowmanager/intern/wm.c:646
    #27 0x90c366 in main /blender/source/creator/creator.c:583
    #28 0x7f7a2444a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f)

SUMMARY: AddressSanitizer: heap-use-after-free /blender/source/blender/blenkernel/intern/lib_override.cc:3199 in lib_override_sort_libraries_func
Shadow bytes around the buggy address:
  0x0c3a80206dc0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206dd0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206de0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206df0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa
  0x0c3a80206e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c3a80206e10: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206e20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c3a80206e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==506653==ABORTING
``` ==506653==ERROR: AddressSanitizer: heap-use-after-free on address 0x61d0010770a0 at pc 0x000000dfc9be bp 0x7ffc29b46480 sp 0x7ffc29b46478 READ of size 8 at 0x61d0010770a0 thread T0 #0 0xdfc9bd in lib_override_sort_libraries_func /blender/source/blender/blenkernel/intern/lib_override.cc:3199 #1 0xe2041d in BKE_lib_query_foreachid_process /blender/source/blender/blenkernel/intern/lib_query.c:87 #2 0xe2e9f8 in library_foreach_id /blender/source/blender/blenkernel/intern/library.c:56 #3 0xe22917 in library_foreach_ID_link /blender/source/blender/blenkernel/intern/lib_query.c:344 #4 0xe22aa7 in BKE_library_foreach_ID_link /blender/source/blender/blenkernel/intern/lib_query.c:363 #5 0xdfd807 in lib_override_libraries_index_define /blender/source/blender/blenkernel/intern/lib_override.cc:3250 #6 0xdfde24 in BKE_lib_override_library_main_resync /blender/source/blender/blenkernel/intern/lib_override.cc:3294 #7 0xc810999 in BKE_blendfile_library_relocate /blender/source/blender/blenkernel/intern/blendfile_link_append.c:1762 #8 0x3eafe4f in wm_lib_relocate_exec_do /blender/source/blender/windowmanager/intern/wm_files_link.c:778 #9 0x3eb0006 in wm_lib_relocate_exec /blender/source/blender/windowmanager/intern/wm_files_link.c:803 #10 0x3e5eb77 in wm_handler_fileselect_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:2779 #11 0x3e604ea in wm_handler_fileselect_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:2876 #12 0x3e659dd in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3375 #13 0x3e6605b in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3429 #14 0x3e70591 in wm_event_do_handlers /blender/source/blender/windowmanager/intern/wm_event_system.cc:4056 #15 0x3e27510 in WM_main /blender/source/blender/windowmanager/intern/wm.c:646 #16 0x90c366 in main /blender/source/creator/creator.c:583 #17 0x7f7a2444a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f) #18 0x7f7a2444a5c8 in __libc_start_main@GLIBC_2.2.5 (/lib64/libc.so.6+0x275c8) #19 0x90b544 in _start (/build_linux_debug/bin/blender+0x90b544) 0x61d0010770a0 is located 32 bytes inside of 2296-byte region [0x61d001077080,0x61d001077978) freed by thread T0 here: #0 0x7f7a2dcb9388 in __interceptor_free.part.0 (/lib64/libasan.so.8+0xb9388) #1 0x1eccdd0e in MEM_lockfree_freeN /blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:102 #2 0xdc24e4 in BKE_id_free_ex /blender/source/blender/blenkernel/intern/lib_id_delete.c:168 #3 0xdc2515 in BKE_id_free /blender/source/blender/blenkernel/intern/lib_id_delete.c:174 #4 0xc80fdd0 in BKE_blendfile_library_relocate /blender/source/blender/blenkernel/intern/blendfile_link_append.c:1739 #5 0x3eafe4f in wm_lib_relocate_exec_do /blender/source/blender/windowmanager/intern/wm_files_link.c:778 #6 0x3eb0006 in wm_lib_relocate_exec /blender/source/blender/windowmanager/intern/wm_files_link.c:803 #7 0x3e5eb77 in wm_handler_fileselect_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:2779 #8 0x3e604ea in wm_handler_fileselect_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:2876 #9 0x3e659dd in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3375 #10 0x3e6605b in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3429 #11 0x3e70591 in wm_event_do_handlers /blender/source/blender/windowmanager/intern/wm_event_system.cc:4056 #12 0x3e27510 in WM_main /blender/source/blender/windowmanager/intern/wm.c:646 #13 0x90c366 in main /blender/source/creator/creator.c:583 #14 0x7f7a2444a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f) previously allocated by thread T0 here: #0 0x7f7a2dcba6af in __interceptor_malloc (/lib64/libasan.so.8+0xba6af) #1 0x1ecce6a8 in MEM_lockfree_mallocN /blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:247 #2 0x406e55c in read_struct /blender/source/blender/blenloader/intern/readfile.cc:1764 #3 0x407f106 in read_libblock /blender/source/blender/blenloader/intern/readfile.cc:3274 #4 0x4087e8f in blo_read_file_internal /blender/source/blender/blenloader/intern/readfile.cc:3886 #5 0x405a4e8 in BLO_read_from_file /blender/source/blender/blenloader/intern/readblenentry.cc:413 #6 0x92af29 in BKE_blendfile_read /blender/source/blender/blenkernel/intern/blendfile.cc:589 #7 0x3e93c89 in WM_file_read /blender/source/blender/windowmanager/intern/wm_files.cc:1016 #8 0x3ea08fb in wm_file_read_opwrap /blender/source/blender/windowmanager/intern/wm_files.cc:2685 #9 0x3ea1930 in wm_open_mainfile__open /blender/source/blender/windowmanager/intern/wm_files.cc:2808 #10 0x3ea0c8d in operator_state_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2721 #11 0x3ea1b8e in wm_open_mainfile_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2832 #12 0x3ea0f4d in wm_open_mainfile__discard_changes /blender/source/blender/windowmanager/intern/wm_files.cc:2760 #13 0x3ea0c8d in operator_state_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2721 #14 0x3ea1b8e in wm_open_mainfile_dispatch /blender/source/blender/windowmanager/intern/wm_files.cc:2832 #15 0x3ea1bb7 in wm_open_mainfile_invoke /blender/source/blender/windowmanager/intern/wm_files.cc:2837 #16 0x3e521a1 in wm_operator_invoke /blender/source/blender/windowmanager/intern/wm_event_system.cc:1529 #17 0x3e5405b in wm_operator_call_internal /blender/source/blender/windowmanager/intern/wm_event_system.cc:1764 #18 0x3e54160 in WM_operator_name_call_ptr /blender/source/blender/windowmanager/intern/wm_event_system.cc:1778 #19 0x3e55673 in WM_operator_name_call_ptr_with_depends_on_cursor /blender/source/blender/windowmanager/intern/wm_event_system.cc:1971 #20 0xa4132e5 in ui_apply_but_funcs_after /blender/source/blender/editors/interface/interface_handlers.cc:1022 #21 0xa4a648e in ui_popup_handler /blender/source/blender/editors/interface/interface_handlers.cc:11597 #22 0x3e4afa8 in wm_handler_ui_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:816 #23 0x3e64ca4 in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3312 #24 0x3e6605b in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3429 #25 0x3e70591 in wm_event_do_handlers /blender/source/blender/windowmanager/intern/wm_event_system.cc:4056 #26 0x3e27510 in WM_main /blender/source/blender/windowmanager/intern/wm.c:646 #27 0x90c366 in main /blender/source/creator/creator.c:583 #28 0x7f7a2444a50f in __libc_start_call_main (/lib64/libc.so.6+0x2750f) SUMMARY: AddressSanitizer: heap-use-after-free /blender/source/blender/blenkernel/intern/lib_override.cc:3199 in lib_override_sort_libraries_func Shadow bytes around the buggy address: 0x0c3a80206dc0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206dd0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206de0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206df0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa 0x0c3a80206e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c3a80206e10: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206e20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c3a80206e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==506653==ABORTING ```
Julian Eisel removed the
Interest
Asset Browser
label 2023-06-07 14:11:52 +02:00

bug confirmed, and also present in 3.6.1 (with parameters imported from 3.5.1 option selected)

bug confirmed, and also present in 3.6.1 (with parameters imported from 3.5.1 option selected)
Member

OK, I think I got an easier repro case and it seems it happens in this case:

  • have some lib_2ndlevel.blend
  • link an ID from lib_2ndlevel.blend into lib.blend
  • also save lib.blend under a different name (e.g. lib2.blend)
  • link the collection from lib.blend into main.blend
  • with main.blend open, try relocating lib.blend to lib2.blend in the Outliner
  • crash
OK, I think I got an easier repro case and it seems it happens in this case: - have some `lib_2ndlevel.blend` - link an ID from `lib_2ndlevel.blend` into `lib.blend` - also save `lib.blend` under a different name (e.g. `lib2.blend`) - link the collection from `lib.blend` into `main.blend` - with `main.blend` open, try relocating `lib.blend` to `lib2.blend` in the Outliner - crash
Philipp Oeser changed title from Blender keeps crashing relocating linked library [3.5.1] to Blender crashes when relocating a library to another library that uses the same "2nd-level" library 2024-02-20 14:04:48 +01:00
Member

@mont29 : raising the priority (since this is a crasher that is not unlikely to run into)

@mont29 : raising the priority (since this is a crasher that is not unlikely to run into)
Philipp Oeser added
Priority
High
and removed
Priority
Normal
labels 2024-02-20 14:05:42 +01:00
Blender Bot added
Status
Resolved
and removed
Status
Confirmed
labels 2024-02-21 18:19:16 +01:00
Sign in to join this conversation.
No Label
Interest
Alembic
Interest
Animation & Rigging
Interest
Asset Browser
Interest
Asset Browser Project Overview
Interest
Audio
Interest
Automated Testing
Interest
Blender Asset Bundle
Interest
BlendFile
Interest
Collada
Interest
Compatibility
Interest
Compositing
Interest
Core
Interest
Cycles
Interest
Dependency Graph
Interest
Development Management
Interest
EEVEE
Interest
EEVEE & Viewport
Interest
Freestyle
Interest
Geometry Nodes
Interest
Grease Pencil
Interest
ID Management
Interest
Images & Movies
Interest
Import Export
Interest
Line Art
Interest
Masking
Interest
Metal
Interest
Modeling
Interest
Modifiers
Interest
Motion Tracking
Interest
Nodes & Physics
Interest
OpenGL
Interest
Overlay
Interest
Overrides
Interest
Performance
Interest
Physics
Interest
Pipeline, Assets & IO
Interest
Platforms, Builds & Tests
Interest
Python API
Interest
Render & Cycles
Interest
Render Pipeline
Interest
Sculpt, Paint & Texture
Interest
Text Editor
Interest
Translations
Interest
Triaging
Interest
Undo
Interest
USD
Interest
User Interface
Interest
UV Editing
Interest
VFX & Video
Interest
Video Sequencer
Interest
Virtual Reality
Interest
Vulkan
Interest
Wayland
Interest
Workbench
Interest: X11
Legacy
Blender 2.8 Project
Legacy
Milestone 1: Basic, Local Asset Browser
Legacy
OpenGL Error
Meta
Good First Issue
Meta
Papercut
Meta
Retrospective
Meta
Security
Module
Animation & Rigging
Module
Core
Module
Development Management
Module
EEVEE & Viewport
Module
Grease Pencil
Module
Modeling
Module
Nodes & Physics
Module
Pipeline, Assets & IO
Module
Platforms, Builds & Tests
Module
Python API
Module
Render & Cycles
Module
Sculpt, Paint & Texture
Module
Triaging
Module
User Interface
Module
VFX & Video
Platform
FreeBSD
Platform
Linux
Platform
macOS
Platform
Windows
Priority
High
Priority
Low
Priority
Normal
Priority
Unbreak Now!
Status
Archived
Status
Confirmed
Status
Duplicate
Status
Needs Info from Developers
Status
Needs Information from User
Status
Needs Triage
Status
Resolved
Type
Bug
Type
Design
Type
Known Issue
Type
Patch
Type
Report
Type
To Do
No Milestone
No project
No Assignees
4 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: blender/blender#107946
No description provided.