Blender 4.1.0 Alpha crash on interactive loop cut, bevel #115994

New Issue

Jun Mizutani · 2023-12-10T02:14:03+01:00

Jun Mizutani commented

2023-12-10 02:14:03 +01:00

System Information
Operating system: Windows-10-10.0.22000-SP0 64 Bits
Graphics card: NVIDIA GeForce RTX 3070/PCIe/SSE2 NVIDIA Corporation 4.6.0 NVIDIA 537.58

Blender Version
Broken: version: 4.1.0 Alpha, branch: main, commit date: 2023-12-10 00:35, hash: dd9eecaac001
Worked: version: 4.0.2

Short description of error

[Please fill out a short description of the error here]
Error : EXCEPTION_ACCESS_VIOLATION
Address : 0x00007FF79368F6AD
Module : blender.exe
Thread : 00002118

Exact steps for others to reproduce the error
Start from General.
Change to Edit mode.
Execute Loop Cut.
Crash.

**System Information** Operating system: Windows-10-10.0.22000-SP0 64 Bits Graphics card: NVIDIA GeForce RTX 3070/PCIe/SSE2 NVIDIA Corporation 4.6.0 NVIDIA 537.58 **Blender Version** Broken: version: 4.1.0 Alpha, branch: main, commit date: 2023-12-10 00:35, hash: `dd9eecaac001` Worked: version: 4.0.2 **Short description of error** [Please fill out a short description of the error here] Error : EXCEPTION_ACCESS_VIOLATION Address : 0x00007FF79368F6AD Module : blender.exe Thread : 00002118 **Exact steps for others to reproduce the error** Start from General. Change to Edit mode. Execute Loop Cut. Crash.

blender.crash.txt

54 KiB

Jun Mizutani added the

labels 2023-12-10 02:14:04 +01:00

TheRedWaxPolice commented

2023-12-10 04:44:24 +01:00

Yep, same here...

Nahuel Belich commented

2023-12-10 08:52:34 +01:00

also crashes with bevel and other tools.

Warning: 'Editor_PT_LayoutPanel' doesn't have upper case alpha-numeric prefix
Writing: /blender.crash.txt
Segmentation fault (core dumped)

also crashes with bevel and other tools. Warning: 'Editor_PT_LayoutPanel' doesn't have upper case alpha-numeric prefix Writing: /blender.crash.txt Segmentation fault (core dumped)

Philipp Oeser commented

2023-12-10 13:32:53 +01:00

Can confirm, will check

🎉 4

Philipp Oeser added

and removed

labels 2023-12-10 13:33:37 +01:00

Philipp Oeser added

and removed

labels 2023-12-10 13:56:43 +01:00

Philipp Oeser commented

2023-12-10 14:35:34 +01:00

Caused by 0b1049b41d

CC @HooglyBoogly

==1223782==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x615000036868 at pc 0x000005a5188a bp 0x7ffdc7089b70 sp 0x7ffdc7089b68
READ of size 8 at 0x615000036868 thread T0
    #0 0x5a51889 in extract_tris_single_mat_iter_looptri_bm /blender/source/blender/draw/intern/mesh_extractors/extract_mesh_ibo_tris.cc:176
    #1 0x59e4138 in extract_range_iter_looptri_bm /blender/source/blender/draw/intern/draw_cache_extract_mesh.cc:264
    #2 0x43b61f6 in BLI_task_parallel_range /blender/source/blender/blenlib/intern/task_range.cc:131
    #3 0x59e8552 in extract_task_range_run_iter /blender/source/blender/draw/intern/draw_cache_extract_mesh.cc:415
    #4 0x59e8552 in extract_task_range_run /blender/source/blender/draw/intern/draw_cache_extract_mesh.cc:438
    #5 0x19f8aebb in TaskNode::run(tbb::flow::interface11::continue_msg) /blender/source/blender/blenlib/intern/task_graph.cc:82
    #6 0x19f89ca7 in TaskNode::TaskNode(TaskGraph*, void (*)(void*), void*, void (*)(void*))::{lambda(tbb::flow::interface11::continue_msg)#1}::operator()(tbb::flow::interface11::continue_msg) const /blender/source/blender/blenlib/intern/task_graph.cc:58
    #7 0x19f95fe0 in tbb::flow::interface11::internal::function_body_leaf<tbb::flow::interface11::continue_msg, tbb::flow::interface11::continue_msg, TaskNode::TaskNode(TaskGraph*, void (*)(void*), void*, void (*)(void*))::{lambda(tbb::flow::interface11::continue_msg)#1}>::operator()(tbb::flow::interface11::continue_msg const&) /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_body_impl.h:204
    #8 0x19f995d5 in tbb::flow::interface11::internal::continue_input<tbb::flow::interface11::continue_msg, tbb::flow::interface11::internal::Policy<void> >::apply_body_bypass(tbb::flow::interface11::continue_msg) /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_node_impl.h:821
    #9 0x19f9cc60 in tbb::flow::interface11::internal::apply_body_task_bypass<tbb::flow::interface11::internal::continue_input<tbb::flow::interface11::continue_msg, tbb::flow::interface11::internal::Policy<void> >, tbb::flow::interface11::continue_msg>::execute() /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_body_impl.h:370
    #10 0x7fa71485fb44 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (/build_linux_debug/bin/lib/libtbb.so.2+0x29b44) (BuildId: fd1b75ecf1e86e48915c450fac6674e4a6a1ba33)
    #11 0x7fa71485fe77 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (/build_linux_debug/bin/lib/libtbb.so.2+0x29e77) (BuildId: fd1b75ecf1e86e48915c450fac6674e4a6a1ba33)
    #12 0x43b3627 in tbb::task::wait_for_all() /lib/linux_x86_64_glibc_228/tbb/include/tbb/task.h:820
    #13 0x19f809c4 in tbb::flow::interface10::graph::wait_functor::operator()() const /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_impl.h:252
    #14 0x19f96360 in tbb::interface7::internal::delegated_function<tbb::flow::interface10::graph::wait_functor const, void>::operator()() const /lib/linux_x86_64_glibc_228/tbb/include/tbb/task_arena.h:96
    #15 0x7fa714849ca4 in tbb::interface7::internal::task_arena_base::internal_execute(tbb::interface7::internal::delegate_base&) const (/build_linux_debug/bin/lib/libtbb.so.2+0x13ca4) (BuildId: fd1b75ecf1e86e48915c450fac6674e4a6a1ba33)
    #16 0x19f8e8e5 in void tbb::interface7::task_arena::execute_impl<void, tbb::flow::interface10::graph::wait_functor const>(tbb::flow::interface10::graph::wait_functor const&) /lib/linux_x86_64_glibc_228/tbb/include/tbb/task_arena.h:271
    #17 0x19f8b5f5 in tbb::interface7::internal::return_type_or_void<tbb::flow::interface10::graph::wait_functor>::type tbb::interface7::task_arena::execute<tbb::flow::interface10::graph::wait_functor>(tbb::flow::interface10::graph::wait_functor const&) /lib/linux_x86_64_glibc_228/tbb/include/tbb/task_arena.h:433
    #18 0x19f81c30 in tbb::flow::interface10::graph::wait_for_all() /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_impl.h:345
    #19 0x19f7f82d in BLI_task_graph_work_and_wait /blender/source/blender/blenlib/intern/task_graph.cc:113
    #20 0x5bec5af in DRW_mesh_batch_cache_create_requested(TaskGraph*, Object*, Mesh*, Scene const*, bool, bool) /blender/source/blender/draw/intern/draw_cache_impl_mesh.cc:1942
    #21 0x59e2d08 in drw_batch_cache_generate_requested /blender/source/blender/draw/intern/draw_cache.cc:3358
    #22 0x53633ec in drw_engines_cache_populate /blender/source/blender/draw/intern/draw_manager_c.cc:1091
    #23 0x53690ef in DRW_draw_render_loop_ex /blender/source/blender/draw/intern/draw_manager_c.cc:1730
    #24 0x5367f92 in DRW_draw_view /blender/source/blender/draw/intern/draw_manager_c.cc:1634
    #25 0xbbff83d in view3d_draw_view /blender/source/blender/editors/space_view3d/view3d_draw.cc:1596
    #26 0xbbffbc0 in view3d_main_region_draw /blender/source/blender/editors/space_view3d/view3d_draw.cc:1630
    #27 0x751ee17 in ED_region_do_draw(bContext*, ARegion*) /blender/source/blender/editors/screen/area.cc:532
    #28 0x4699c9d in wm_draw_window_offscreen /blender/source/blender/windowmanager/intern/wm_draw.cc:1007
    #29 0x469b393 in wm_draw_window /blender/source/blender/windowmanager/intern/wm_draw.cc:1174
    #30 0x469e4a1 in wm_draw_update(bContext*) /blender/source/blender/windowmanager/intern/wm_draw.cc:1572
    #31 0x4681fb6 in WM_main(bContext*) /blender/source/blender/windowmanager/intern/wm.cc:619
    #32 0x874e28 in main /blender/source/creator/creator.cc:594
    #33 0x7fa70a449b89 in __libc_start_call_main (/lib64/libc.so.6+0x27b89) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24)
    #34 0x7fa70a449c4a in __libc_start_main_alias_2 (/lib64/libc.so.6+0x27c4a) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24)
    #35 0x874184 in _start (/build_linux_debug/bin/blender+0x874184) (BuildId: dfb85e1a22498382ff20c545146a0ac52549fd52)

0x615000036868 is located 0 bytes after 488-byte region [0x615000036680,0x615000036868)
allocated by thread T0 here:
    #0 0x7fa7140d92ef in malloc (/lib64/libasan.so.8+0xd92ef) (BuildId: 542ad02088f38edfdba9d4bfa465b2299f512d3e)
    #1 0x46703a6 in MEM_lockfree_mallocN /blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:258
    #2 0x37528f6 in editmesh_tessface_calc_intern /blender/source/blender/blenkernel/intern/editmesh.cc:104
    #3 0x3752aa9 in BKE_editmesh_looptri_calc_ex(BMEditMesh*, BMeshCalcTessellation_Params const*) /blender/source/blender/blenkernel/intern/editmesh.cc:116
    #4 0x3752b9f in BKE_editmesh_looptri_calc(BMEditMesh*) /blender/source/blender/blenkernel/intern/editmesh.cc:123
    #5 0x9c1992d in EDBM_update(Mesh*, EDBMUpdate_Params const*) /blender/source/blender/editors/mesh/editmesh_utils.cc:1675
    #6 0x9d70ee7 in ringsel_finish /blender/source/blender/editors/mesh/editmesh_loopcut.cc:204
    #7 0x9d756d7 in loopcut_finish /blender/source/blender/editors/mesh/editmesh_loopcut.cc:534
    #8 0x9d761bf in loopcut_modal /blender/source/blender/editors/mesh/editmesh_loopcut.cc:577
    #9 0x474c9f2 in wm_macro_modal /blender/source/blender/windowmanager/intern/wm_operator_type.cc:396
    #10 0x46b7a1c in wm_handler_operator_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:2480
    #11 0x46c7e7e in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3400
    #12 0x46c84b7 in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3450
    #13 0x46d2a01 in wm_event_do_handlers(bContext*) /blender/source/blender/windowmanager/intern/wm_event_system.cc:4077
    #14 0x4681f9e in WM_main(bContext*) /blender/source/blender/windowmanager/intern/wm.cc:613
    #15 0x874e28 in main /blender/source/creator/creator.cc:594
    #16 0x7fa70a449b89 in __libc_start_call_main (/lib64/libc.so.6+0x27b89) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24)
    #17 0x7fa70a449c4a in __libc_start_main_alias_2 (/lib64/libc.so.6+0x27c4a) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24)
    #18 0x874184 in _start (/build_linux_debug/bin/blender+0x874184) (BuildId: dfb85e1a22498382ff20c545146a0ac52549fd52)

SUMMARY: AddressSanitizer: heap-buffer-overflow /blender/source/blender/draw/intern/mesh_extractors/extract_mesh_ibo_tris.cc:176 in extract_tris_single_mat_iter_looptri_bm
Shadow bytes around the buggy address:
  0x615000036580: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x615000036600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x615000036680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x615000036700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x615000036780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x615000036800: 00 00 00 00 00 00 00 00 00 00 00 00 00[fa]fa fa
  0x615000036880: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x615000036900: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x615000036980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x615000036a00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x615000036a80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==1223782==ABORTING

Caused by 0b1049b41d5f767bb26bc18722a4a4488748af91 CC @HooglyBoogly ``` ==1223782==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x615000036868 at pc 0x000005a5188a bp 0x7ffdc7089b70 sp 0x7ffdc7089b68 READ of size 8 at 0x615000036868 thread T0 #0 0x5a51889 in extract_tris_single_mat_iter_looptri_bm /blender/source/blender/draw/intern/mesh_extractors/extract_mesh_ibo_tris.cc:176 #1 0x59e4138 in extract_range_iter_looptri_bm /blender/source/blender/draw/intern/draw_cache_extract_mesh.cc:264 #2 0x43b61f6 in BLI_task_parallel_range /blender/source/blender/blenlib/intern/task_range.cc:131 #3 0x59e8552 in extract_task_range_run_iter /blender/source/blender/draw/intern/draw_cache_extract_mesh.cc:415 #4 0x59e8552 in extract_task_range_run /blender/source/blender/draw/intern/draw_cache_extract_mesh.cc:438 #5 0x19f8aebb in TaskNode::run(tbb::flow::interface11::continue_msg) /blender/source/blender/blenlib/intern/task_graph.cc:82 #6 0x19f89ca7 in TaskNode::TaskNode(TaskGraph*, void (*)(void*), void*, void (*)(void*))::{lambda(tbb::flow::interface11::continue_msg)#1}::operator()(tbb::flow::interface11::continue_msg) const /blender/source/blender/blenlib/intern/task_graph.cc:58 #7 0x19f95fe0 in tbb::flow::interface11::internal::function_body_leaf<tbb::flow::interface11::continue_msg, tbb::flow::interface11::continue_msg, TaskNode::TaskNode(TaskGraph*, void (*)(void*), void*, void (*)(void*))::{lambda(tbb::flow::interface11::continue_msg)#1}>::operator()(tbb::flow::interface11::continue_msg const&) /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_body_impl.h:204 #8 0x19f995d5 in tbb::flow::interface11::internal::continue_input<tbb::flow::interface11::continue_msg, tbb::flow::interface11::internal::Policy<void> >::apply_body_bypass(tbb::flow::interface11::continue_msg) /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_node_impl.h:821 #9 0x19f9cc60 in tbb::flow::interface11::internal::apply_body_task_bypass<tbb::flow::interface11::internal::continue_input<tbb::flow::interface11::continue_msg, tbb::flow::interface11::internal::Policy<void> >, tbb::flow::interface11::continue_msg>::execute() /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_body_impl.h:370 #10 0x7fa71485fb44 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::process_bypass_loop(tbb::internal::context_guard_helper<false>&, tbb::task*, long) (/build_linux_debug/bin/lib/libtbb.so.2+0x29b44) (BuildId: fd1b75ecf1e86e48915c450fac6674e4a6a1ba33) #11 0x7fa71485fe77 in tbb::internal::custom_scheduler<tbb::internal::IntelSchedulerTraits>::local_wait_for_all(tbb::task&, tbb::task*) (/build_linux_debug/bin/lib/libtbb.so.2+0x29e77) (BuildId: fd1b75ecf1e86e48915c450fac6674e4a6a1ba33) #12 0x43b3627 in tbb::task::wait_for_all() /lib/linux_x86_64_glibc_228/tbb/include/tbb/task.h:820 #13 0x19f809c4 in tbb::flow::interface10::graph::wait_functor::operator()() const /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_impl.h:252 #14 0x19f96360 in tbb::interface7::internal::delegated_function<tbb::flow::interface10::graph::wait_functor const, void>::operator()() const /lib/linux_x86_64_glibc_228/tbb/include/tbb/task_arena.h:96 #15 0x7fa714849ca4 in tbb::interface7::internal::task_arena_base::internal_execute(tbb::interface7::internal::delegate_base&) const (/build_linux_debug/bin/lib/libtbb.so.2+0x13ca4) (BuildId: fd1b75ecf1e86e48915c450fac6674e4a6a1ba33) #16 0x19f8e8e5 in void tbb::interface7::task_arena::execute_impl<void, tbb::flow::interface10::graph::wait_functor const>(tbb::flow::interface10::graph::wait_functor const&) /lib/linux_x86_64_glibc_228/tbb/include/tbb/task_arena.h:271 #17 0x19f8b5f5 in tbb::interface7::internal::return_type_or_void<tbb::flow::interface10::graph::wait_functor>::type tbb::interface7::task_arena::execute<tbb::flow::interface10::graph::wait_functor>(tbb::flow::interface10::graph::wait_functor const&) /lib/linux_x86_64_glibc_228/tbb/include/tbb/task_arena.h:433 #18 0x19f81c30 in tbb::flow::interface10::graph::wait_for_all() /lib/linux_x86_64_glibc_228/tbb/include/tbb/internal/_flow_graph_impl.h:345 #19 0x19f7f82d in BLI_task_graph_work_and_wait /blender/source/blender/blenlib/intern/task_graph.cc:113 #20 0x5bec5af in DRW_mesh_batch_cache_create_requested(TaskGraph*, Object*, Mesh*, Scene const*, bool, bool) /blender/source/blender/draw/intern/draw_cache_impl_mesh.cc:1942 #21 0x59e2d08 in drw_batch_cache_generate_requested /blender/source/blender/draw/intern/draw_cache.cc:3358 #22 0x53633ec in drw_engines_cache_populate /blender/source/blender/draw/intern/draw_manager_c.cc:1091 #23 0x53690ef in DRW_draw_render_loop_ex /blender/source/blender/draw/intern/draw_manager_c.cc:1730 #24 0x5367f92 in DRW_draw_view /blender/source/blender/draw/intern/draw_manager_c.cc:1634 #25 0xbbff83d in view3d_draw_view /blender/source/blender/editors/space_view3d/view3d_draw.cc:1596 #26 0xbbffbc0 in view3d_main_region_draw /blender/source/blender/editors/space_view3d/view3d_draw.cc:1630 #27 0x751ee17 in ED_region_do_draw(bContext*, ARegion*) /blender/source/blender/editors/screen/area.cc:532 #28 0x4699c9d in wm_draw_window_offscreen /blender/source/blender/windowmanager/intern/wm_draw.cc:1007 #29 0x469b393 in wm_draw_window /blender/source/blender/windowmanager/intern/wm_draw.cc:1174 #30 0x469e4a1 in wm_draw_update(bContext*) /blender/source/blender/windowmanager/intern/wm_draw.cc:1572 #31 0x4681fb6 in WM_main(bContext*) /blender/source/blender/windowmanager/intern/wm.cc:619 #32 0x874e28 in main /blender/source/creator/creator.cc:594 #33 0x7fa70a449b89 in __libc_start_call_main (/lib64/libc.so.6+0x27b89) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24) #34 0x7fa70a449c4a in __libc_start_main_alias_2 (/lib64/libc.so.6+0x27c4a) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24) #35 0x874184 in _start (/build_linux_debug/bin/blender+0x874184) (BuildId: dfb85e1a22498382ff20c545146a0ac52549fd52) 0x615000036868 is located 0 bytes after 488-byte region [0x615000036680,0x615000036868) allocated by thread T0 here: #0 0x7fa7140d92ef in malloc (/lib64/libasan.so.8+0xd92ef) (BuildId: 542ad02088f38edfdba9d4bfa465b2299f512d3e) #1 0x46703a6 in MEM_lockfree_mallocN /blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:258 #2 0x37528f6 in editmesh_tessface_calc_intern /blender/source/blender/blenkernel/intern/editmesh.cc:104 #3 0x3752aa9 in BKE_editmesh_looptri_calc_ex(BMEditMesh*, BMeshCalcTessellation_Params const*) /blender/source/blender/blenkernel/intern/editmesh.cc:116 #4 0x3752b9f in BKE_editmesh_looptri_calc(BMEditMesh*) /blender/source/blender/blenkernel/intern/editmesh.cc:123 #5 0x9c1992d in EDBM_update(Mesh*, EDBMUpdate_Params const*) /blender/source/blender/editors/mesh/editmesh_utils.cc:1675 #6 0x9d70ee7 in ringsel_finish /blender/source/blender/editors/mesh/editmesh_loopcut.cc:204 #7 0x9d756d7 in loopcut_finish /blender/source/blender/editors/mesh/editmesh_loopcut.cc:534 #8 0x9d761bf in loopcut_modal /blender/source/blender/editors/mesh/editmesh_loopcut.cc:577 #9 0x474c9f2 in wm_macro_modal /blender/source/blender/windowmanager/intern/wm_operator_type.cc:396 #10 0x46b7a1c in wm_handler_operator_call /blender/source/blender/windowmanager/intern/wm_event_system.cc:2480 #11 0x46c7e7e in wm_handlers_do_intern /blender/source/blender/windowmanager/intern/wm_event_system.cc:3400 #12 0x46c84b7 in wm_handlers_do /blender/source/blender/windowmanager/intern/wm_event_system.cc:3450 #13 0x46d2a01 in wm_event_do_handlers(bContext*) /blender/source/blender/windowmanager/intern/wm_event_system.cc:4077 #14 0x4681f9e in WM_main(bContext*) /blender/source/blender/windowmanager/intern/wm.cc:613 #15 0x874e28 in main /blender/source/creator/creator.cc:594 #16 0x7fa70a449b89 in __libc_start_call_main (/lib64/libc.so.6+0x27b89) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24) #17 0x7fa70a449c4a in __libc_start_main_alias_2 (/lib64/libc.so.6+0x27c4a) (BuildId: 7026fe8c129a523e07856d7c96306663ceab6e24) #18 0x874184 in _start (/build_linux_debug/bin/blender+0x874184) (BuildId: dfb85e1a22498382ff20c545146a0ac52549fd52) SUMMARY: AddressSanitizer: heap-buffer-overflow /blender/source/blender/draw/intern/mesh_extractors/extract_mesh_ibo_tris.cc:176 in extract_tris_single_mat_iter_looptri_bm Shadow bytes around the buggy address: 0x615000036580: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x615000036600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x615000036680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x615000036700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x615000036780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x615000036800: 00 00 00 00 00 00 00 00 00 00 00 00 00[fa]fa fa 0x615000036880: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x615000036900: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x615000036980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x615000036a00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x615000036a80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==1223782==ABORTING ```

TheRedWaxPolice referenced this issue

2023-12-11 02:47:55 +01:00

Inset Faces causes Crash in Edit Mode #116016

Jesse Yurkovich referenced this issue

2023-12-11 04:27:34 +01:00

Inset Faces causes Crash in Edit Mode #116016

Jesse Yurkovich referenced this issue

2023-12-11 04:28:11 +01:00

Slide Vertices causes Crash in Edit mode #116017

Philipp Oeser changed title from ~~Blender 4.1.0 Alpha crash on loop cut~~ to Blender 4.1.0 Alpha crash on interactive loop cut, bevel

2023-12-11 10:24:59 +01:00

Philipp Oeser referenced this issue