heap-use-after-free when I access an element of bpy.props.Collection stored in Python after adding more elements to the same collection in debug developer version of Blender with gdb #127016

New Issue

Ekaterina-Moskovkina · 2024-08-31T14:56:38+02:00

2024-08-31 14:56:38 +02:00

System Information
Operating system: Linux-6.8.0-40-generic-x86_64-with-glibc2.35 64 Bits, X11 UI
Graphics card: Mesa Intel(R) UHD Graphics 630 (CFL GT2) Intel 4.6 (Core Profile) Mesa 23.2.1-1ubuntu3.1~22.04.2

Blender Version
Broken: version: 4.3.0 Alpha, built with debug developers options
Worked: probably never

Short description of error
When I run the code

import bpy
class GregId(bpy.types.PropertyGroup):
    name: bpy.props.StringProperty(default="")
bpy.utils.register_class(GregId)
bpy.types.Object.my_collection = bpy.props.CollectionProperty(type=GregId)

TEST_VALUE = 5

cube = bpy.data.objects["Cube"]

for i in range(TEST_VALUE):
    new = cube.my_collection.add()
    if i == (TEST_VALUE - 2):
        saved_obj = new
print("before possible crash")
saved_obj.name
print("after possible crash")

in the standard scene with cube in debug-developer build of Blender, it crashes between print("before possible crash") and print("after possible crash") with heap-use-after-free message.

Exact steps for others to reproduce the error

build Blender with "make debug developer" options
run it with gdb
open standard scene with the cube
in Scripting, run attached code (or copy it from this message or open attached .blend file)
observe the output in console

This bug is probably related with #126968 but I'm not sure, so I report them separately.

**System Information** Operating system: Linux-6.8.0-40-generic-x86_64-with-glibc2.35 64 Bits, X11 UI Graphics card: Mesa Intel(R) UHD Graphics 630 (CFL GT2) Intel 4.6 (Core Profile) Mesa 23.2.1-1ubuntu3.1~22.04.2 **Blender Version** Broken: version: 4.3.0 Alpha, built with debug developers options Worked: probably never **Short description of error** When I run the code ```Py import bpy class GregId(bpy.types.PropertyGroup): name: bpy.props.StringProperty(default="") bpy.utils.register_class(GregId) bpy.types.Object.my_collection = bpy.props.CollectionProperty(type=GregId) TEST_VALUE = 5 cube = bpy.data.objects["Cube"] for i in range(TEST_VALUE): new = cube.my_collection.add() if i == (TEST_VALUE - 2): saved_obj = new print("before possible crash") saved_obj.name print("after possible crash") ``` in the standard scene with cube in debug-developer build of Blender, it crashes between `print("before possible crash")` and `print("after possible crash")` with `heap-use-after-free` message. **Exact steps for others to reproduce the error** - build Blender with "make debug developer" options - run it with gdb - open standard scene with the cube - in Scripting, run attached code (or copy it from this message or open attached .blend file) - observe the output in console This bug is probably related with #126968 but I'm not sure, so I report them separately.

test.py

448 B

test.blend

523 KiB

Ekaterina-Moskovkina added the

labels 2024-08-31 14:56:39 +02:00