clang debug builds crash in various situations #38498

Closed
opened 2014-02-05 11:26:51 +01:00 by Lukas Tönne · 8 comments
Member

System Information
Arch linux 3.11.6 (64 bit)
NVidia GTX 660

Blender Version
Broken: 2.69.10, e996b88
Worked: unknown

Short description of error
Blender built with clang in Debug mode crashes with heap memory errors in several cases.

Exact steps for others to reproduce the error

2 cases i found so far below. Both of these work fine in GCC/Debug, but fail in clang/Debug. Release mode also works fine with both compilers.

  • Add new scene
  • In new scene: enable compositing nodes ("use nodes")

Unlink scene (info space "x" button)

scene_unlink_crash.blend

Address sanitizer report: P13: address sanitizer report from scene unlink crash

=================================================================
==14693==ERROR: AddressSanitizer: heap-use-after-free on address 0x6140001b7ad0 at pc 0xaeaa0d bp 0x7fff64aa8750 sp 0x7fff64aa8720
READ of size 19 at 0x6140001b7ad0 thread T0
    #0 0xaeaa0c in __interceptor_strcmp ??:?
    #1 0xfb9bb2 in snode_set_context /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/space_node/node_edit.c:568
    #2 0x103a725 in node_header_area_draw /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/space_node/space_node.c:715
    #3 0x2ce4875 in ED_region_do_draw /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/screen/area.c:439
    #4 0xb33bf5 in wm_method_draw_triple /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_draw.c:627
    #5 0xb2d383 in wm_draw_update /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_draw.c:856
    #6 0xb16930 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:494
    #7 0xafcca3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741
    #8 0x7ff77c1b3bc4 in __libc_start_main ??:?
    #9 0xafb24c in _start ??:?
0x6140001b7ad0 is located 144 bytes inside of 440-byte region [0x6140001b7a40,0x6140001b7bf8)
freed by thread T0 here:
    #0 0xaed0b4 in __interceptor_free ??:?
    #1 0x76bea6c in MEM_lockfree_freeN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:132
    #2 0x5cf8384 in BKE_scene_free /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:403
    #3 0x56b9771 in BKE_libblock_free_ex /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/library.c:888
    #4 0x56aff1c in BKE_libblock_free /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/library.c:999
    #5 0x5cfb568 in BKE_scene_unlink /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:738
    #6 0x2d601bb in ED_screen_delete_scene /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/screen/screen_edit.c:1713
    #7 0x2d84fff in scene_delete_exec /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/screen/screen_ops.c:3695
    #8 0xb823f8 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1027
    #9 0xb4a17a in wm_operator_call_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1206
    #10 0xb515b9 in WM_operator_name_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1255
    #11 0x20827c3 in ui_apply_but_funcs_after /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:561
    #12 0x20b187f in ui_handler_region_menu /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:8005
    #13 0xb7a47b in wm_handler_ui_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:420
    #14 0xb7327a in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1898
    #15 0xb59dfb in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1982
    #16 0xb563e8 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2228
    #17 0xb168d6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488
    #18 0xafcca3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741
    #19 0x7ff77c1b3bc4 in __libc_start_main ??:?
previously allocated by thread T0 here:
    #0 0xaed194 in __interceptor_malloc ??:?
    #1 0x76bf733 in MEM_lockfree_mallocN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:243
    #2 0x63f62f5 in read_struct /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:1563
    #3 0x643e7b0 in read_data_into_oldnewmap /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7142
    #4 0x63cea9f in read_libblock /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7201
    #5 0x63c9f48 in blo_read_file_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7636
    #6 0x63a9bae in BLO_read_from_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readblenentry.c:267
    #7 0x4fb3a47 in BKE_read_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/blender.c:447
    #8 0xb8769c in WM_file_read /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_files.c:424
    #9 0xbef498 in wm_file_read_opwrap /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2146
    #10 0xc26620 in wm_open_mainfile_exec /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2229
    #11 0xb823f8 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1027
    #12 0xb4a17a in wm_operator_call_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1206
    #13 0xb515b9 in WM_operator_name_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1255
    #14 0x20827c3 in ui_apply_but_funcs_after /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:561
    #15 0x2080148 in ui_handler_popup /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:8064
    #16 0xb7a47b in wm_handler_ui_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:420
    #17 0xb7327a in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1898
    #18 0xb59dfb in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1982
    #19 0xb563e8 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2228
    #20 0xb168d6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488
    #21 0xafcca3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741
    #22 0x7ff77c1b3bc4 in __libc_start_main ??:?
Shadow bytes around the buggy address:
  0x0c288002ef00: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c288002ef10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c288002ef20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c288002ef30: 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa
  0x0c288002ef40: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
=>0x0c288002ef50: fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd
  0x0c288002ef60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c288002ef70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
  0x0c288002ef80: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c288002ef90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c288002efa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:     fa
  Heap right redzone:    fb
  Freed heap region:     fd
  Stack left redzone:    f1
  Stack mid redzone:     f2
  Stack right redzone:   f3
  Stack partial redzone: f4
  Stack after return:    f5
  Stack use after scope: f8
  Global redzone:        f9
  Global init order:     f6
  Poisoned by user:      f7
  ASan internal:         fe
==14693==ABORTING

Case 2: Boolean modifier

Requires carve API patch D274

  • Get D274
  • Make a UV sphere in addition to default cube
  • On default cube: Add boolean modifier
  • Set bool modifier Object to the sphere, let them intersect
    bool_mod_crash.blend

Address sanitizer report: P14: address sanitizer report from boolean modifier crash

=================================================================
==7191==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60f00003b4f4 at pc 0x5263491 bp 0x7fff1dda1450 sp 0x7fff1dda1448
READ of size 20 at 0x60f00003b4f4 thread T0
    #0 0x5263490 in CustomData_copy_data_layer /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/customdata.c:1994
    #1 0x5264559 in CustomData_copy_data /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/customdata.c:2037
    #2 0x407f199 in exporter_SetVert /home/lukas/Development/Blender/bf-blender/blender/source/blender/modifiers/intern/MOD_boolean_util.c:326
    #3 0xf769084 in carve_exportMesh /home/lukas/Development/Blender/bf-blender/blender/extern/carve/carve-capi.cc:436
    #4 0x407ba6d in NewBooleanDerivedMesh /home/lukas/Development/Blender/bf-blender/blender/source/blender/modifiers/intern/MOD_boolean_util.c:627
    #5 0x3edf857 in applyModifier /home/lukas/Development/Blender/bf-blender/blender/source/blender/modifiers/intern/MOD_boolean.c:144
    #6 0x58c4f54 in modwrap_applyModifier /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/modifier.c:737
    #7 0x4ef7378 in mesh_calc_modifiers /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/DerivedMesh.c:1715
    #8 0x4eef9b4 in mesh_build_data /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/DerivedMesh.c:2236
    #9 0x4eed8f0 in makeDerivedMesh /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/DerivedMesh.c:2319
    #10 0x5a2afb9 in BKE_object_handle_update_ex /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/object.c:2932
    #11 0x5d18010 in scene_update_object_func /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1279
    #12 0x6b1243d in BLI_task_pool_work_and_wait /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenlib/intern/task.c:367
    #13 0x5d13e59 in scene_update_objects /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1453
    #14 0x5d0be4c in scene_update_tagged_recursive /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1494
    #15 0x5d0b018 in BKE_scene_update_tagged /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1534
    #16 0xb4d2ce in wm_event_do_notifiers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:377
    #17 0xb1b953 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:491
    #18 0xb01cf3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741
    #19 0x7fd1236b7bc4 in __libc_start_main ??:?
    #20 0xb0029c in _start ??:?
0x60f00003b4f4 is located 12 bytes to the left of 168-byte region [0x60f00003b500,0x60f00003b5a8)
allocated by thread T0 here:
    #0 0xaf21e4 in __interceptor_malloc ??:?
    #1 0x74ba6c3 in MEM_lockfree_mallocN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:243
    #2 0x63fe955 in read_struct /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:1563
    #3 0x6446e10 in read_data_into_oldnewmap /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7142
    #4 0x63d70ff in read_libblock /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7201
    #5 0x63d25a8 in blo_read_file_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7636
    #6 0x63b220e in BLO_read_from_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readblenentry.c:267
    #7 0x4fbbeb7 in BKE_read_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/blender.c:447
    #8 0xb8c6ec in WM_file_read /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_files.c:424
    #9 0xbf44e8 in wm_file_read_opwrap /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2146
    #10 0xc2b670 in wm_open_mainfile_exec /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2229
    #11 0xb87448 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1027
    #12 0xb4f1ca in wm_operator_call_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1206
    #13 0xb56609 in WM_operator_name_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1255
    #14 0x20861e3 in ui_apply_but_funcs_after /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:561
    #15 0x2083b68 in ui_handler_popup /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:8064
    #16 0xb7f4cb in wm_handler_ui_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:420
    #17 0xb782ca in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1898
    #18 0xb5ee4b in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1982
    #19 0xb5b438 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2228
    #20 0xb1b926 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488
    #21 0xb01cf3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741
    #22 0x7fd1236b7bc4 in __libc_start_main ??:?
Shadow bytes around the buggy address:
  0x0c1e7ffff640: fa fa fa fa fa fa 00 00 00 00 00 00 00 00 00 00
  0x0c1e7ffff650: 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa
  0x0c1e7ffff660: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c1e7ffff670: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa
  0x0c1e7ffff680: fa fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c1e7ffff690: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa[fa]fa
  0x0c1e7ffff6a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c1e7ffff6b0: 00 00 00 00 00 fa fa fa fa fa fa fa fa fa 00 00
  0x0c1e7ffff6c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c1e7ffff6d0: 00 00 00 fa fa fa fa fa fa fa fa fa 00 00 00 00
  0x0c1e7ffff6e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:     fa
  Heap right redzone:    fb
  Freed heap region:     fd
  Stack left redzone:    f1
  Stack mid redzone:     f2
  Stack right redzone:   f3
  Stack partial redzone: f4
  Stack after return:    f5
  Stack use after scope: f8
  Global redzone:        f9
  Global init order:     f6
  Poisoned by user:      f7
  ASan internal:         fe
==7191==ABORTING

**System Information** Arch linux 3.11.6 (64 bit) NVidia GTX 660 **Blender Version** Broken: 2.69.10, e996b88 Worked: unknown **Short description of error** Blender built with clang in Debug mode crashes with heap memory errors in several cases. **Exact steps for others to reproduce the error** 2 cases i found so far below. Both of these work fine in GCC/Debug, but fail in clang/Debug. Release mode also works fine with both compilers. ### Case 1: Scene unlink - Add new scene - In new scene: enable compositing nodes ("use nodes") # Unlink scene (info space "x" button) [scene_unlink_crash.blend](https://archive.blender.org/developer/F76069/scene_unlink_crash.blend) Address sanitizer report: [P13: address sanitizer report from scene unlink crash](https://archive.blender.org/developer/P13.txt) ```text ================================================================= ==14693==ERROR: AddressSanitizer: heap-use-after-free on address 0x6140001b7ad0 at pc 0xaeaa0d bp 0x7fff64aa8750 sp 0x7fff64aa8720 READ of size 19 at 0x6140001b7ad0 thread T0 #0 0xaeaa0c in __interceptor_strcmp ??:? #1 0xfb9bb2 in snode_set_context /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/space_node/node_edit.c:568 #2 0x103a725 in node_header_area_draw /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/space_node/space_node.c:715 #3 0x2ce4875 in ED_region_do_draw /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/screen/area.c:439 #4 0xb33bf5 in wm_method_draw_triple /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_draw.c:627 #5 0xb2d383 in wm_draw_update /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_draw.c:856 #6 0xb16930 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:494 #7 0xafcca3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741 #8 0x7ff77c1b3bc4 in __libc_start_main ??:? #9 0xafb24c in _start ??:? 0x6140001b7ad0 is located 144 bytes inside of 440-byte region [0x6140001b7a40,0x6140001b7bf8) freed by thread T0 here: #0 0xaed0b4 in __interceptor_free ??:? #1 0x76bea6c in MEM_lockfree_freeN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:132 #2 0x5cf8384 in BKE_scene_free /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:403 #3 0x56b9771 in BKE_libblock_free_ex /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/library.c:888 #4 0x56aff1c in BKE_libblock_free /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/library.c:999 #5 0x5cfb568 in BKE_scene_unlink /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:738 #6 0x2d601bb in ED_screen_delete_scene /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/screen/screen_edit.c:1713 #7 0x2d84fff in scene_delete_exec /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/screen/screen_ops.c:3695 #8 0xb823f8 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1027 #9 0xb4a17a in wm_operator_call_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1206 #10 0xb515b9 in WM_operator_name_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1255 #11 0x20827c3 in ui_apply_but_funcs_after /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:561 #12 0x20b187f in ui_handler_region_menu /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:8005 #13 0xb7a47b in wm_handler_ui_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:420 #14 0xb7327a in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1898 #15 0xb59dfb in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1982 #16 0xb563e8 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2228 #17 0xb168d6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488 #18 0xafcca3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741 #19 0x7ff77c1b3bc4 in __libc_start_main ??:? previously allocated by thread T0 here: #0 0xaed194 in __interceptor_malloc ??:? #1 0x76bf733 in MEM_lockfree_mallocN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:243 #2 0x63f62f5 in read_struct /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:1563 #3 0x643e7b0 in read_data_into_oldnewmap /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7142 #4 0x63cea9f in read_libblock /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7201 #5 0x63c9f48 in blo_read_file_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7636 #6 0x63a9bae in BLO_read_from_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readblenentry.c:267 #7 0x4fb3a47 in BKE_read_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/blender.c:447 #8 0xb8769c in WM_file_read /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_files.c:424 #9 0xbef498 in wm_file_read_opwrap /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2146 #10 0xc26620 in wm_open_mainfile_exec /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2229 #11 0xb823f8 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1027 #12 0xb4a17a in wm_operator_call_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1206 #13 0xb515b9 in WM_operator_name_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1255 #14 0x20827c3 in ui_apply_but_funcs_after /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:561 #15 0x2080148 in ui_handler_popup /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:8064 #16 0xb7a47b in wm_handler_ui_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:420 #17 0xb7327a in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1898 #18 0xb59dfb in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1982 #19 0xb563e8 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2228 #20 0xb168d6 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488 #21 0xafcca3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741 #22 0x7ff77c1b3bc4 in __libc_start_main ??:? Shadow bytes around the buggy address: 0x0c288002ef00: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c288002ef10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c288002ef20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c288002ef30: 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa 0x0c288002ef40: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd =>0x0c288002ef50: fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd 0x0c288002ef60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c288002ef70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa 0x0c288002ef80: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c288002ef90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c288002efa0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 ASan internal: fe ==14693==ABORTING ``` ### Case 2: Boolean modifier **Requires carve API patch** [D274](https://archive.blender.org/developer/D274) - Get [D274](https://archive.blender.org/developer/D274) - Make a UV sphere in addition to default cube - On default cube: Add boolean modifier - Set bool modifier Object to the sphere, let them intersect [bool_mod_crash.blend](https://archive.blender.org/developer/F76071/bool_mod_crash.blend) Address sanitizer report: [P14: address sanitizer report from boolean modifier crash](https://archive.blender.org/developer/P14.txt) ```text ================================================================= ==7191==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60f00003b4f4 at pc 0x5263491 bp 0x7fff1dda1450 sp 0x7fff1dda1448 READ of size 20 at 0x60f00003b4f4 thread T0 #0 0x5263490 in CustomData_copy_data_layer /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/customdata.c:1994 #1 0x5264559 in CustomData_copy_data /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/customdata.c:2037 #2 0x407f199 in exporter_SetVert /home/lukas/Development/Blender/bf-blender/blender/source/blender/modifiers/intern/MOD_boolean_util.c:326 #3 0xf769084 in carve_exportMesh /home/lukas/Development/Blender/bf-blender/blender/extern/carve/carve-capi.cc:436 #4 0x407ba6d in NewBooleanDerivedMesh /home/lukas/Development/Blender/bf-blender/blender/source/blender/modifiers/intern/MOD_boolean_util.c:627 #5 0x3edf857 in applyModifier /home/lukas/Development/Blender/bf-blender/blender/source/blender/modifiers/intern/MOD_boolean.c:144 #6 0x58c4f54 in modwrap_applyModifier /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/modifier.c:737 #7 0x4ef7378 in mesh_calc_modifiers /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/DerivedMesh.c:1715 #8 0x4eef9b4 in mesh_build_data /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/DerivedMesh.c:2236 #9 0x4eed8f0 in makeDerivedMesh /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/DerivedMesh.c:2319 #10 0x5a2afb9 in BKE_object_handle_update_ex /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/object.c:2932 #11 0x5d18010 in scene_update_object_func /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1279 #12 0x6b1243d in BLI_task_pool_work_and_wait /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenlib/intern/task.c:367 #13 0x5d13e59 in scene_update_objects /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1453 #14 0x5d0be4c in scene_update_tagged_recursive /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1494 #15 0x5d0b018 in BKE_scene_update_tagged /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/scene.c:1534 #16 0xb4d2ce in wm_event_do_notifiers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:377 #17 0xb1b953 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:491 #18 0xb01cf3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741 #19 0x7fd1236b7bc4 in __libc_start_main ??:? #20 0xb0029c in _start ??:? 0x60f00003b4f4 is located 12 bytes to the left of 168-byte region [0x60f00003b500,0x60f00003b5a8) allocated by thread T0 here: #0 0xaf21e4 in __interceptor_malloc ??:? #1 0x74ba6c3 in MEM_lockfree_mallocN /home/lukas/Development/Blender/bf-blender/blender/intern/guardedalloc/intern/mallocn_lockfree_impl.c:243 #2 0x63fe955 in read_struct /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:1563 #3 0x6446e10 in read_data_into_oldnewmap /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7142 #4 0x63d70ff in read_libblock /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7201 #5 0x63d25a8 in blo_read_file_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readfile.c:7636 #6 0x63b220e in BLO_read_from_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenloader/intern/readblenentry.c:267 #7 0x4fbbeb7 in BKE_read_file /home/lukas/Development/Blender/bf-blender/blender/source/blender/blenkernel/intern/blender.c:447 #8 0xb8c6ec in WM_file_read /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_files.c:424 #9 0xbf44e8 in wm_file_read_opwrap /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2146 #10 0xc2b670 in wm_open_mainfile_exec /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_operators.c:2229 #11 0xb87448 in wm_operator_invoke /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1027 #12 0xb4f1ca in wm_operator_call_internal /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1206 #13 0xb56609 in WM_operator_name_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1255 #14 0x20861e3 in ui_apply_but_funcs_after /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:561 #15 0x2083b68 in ui_handler_popup /home/lukas/Development/Blender/bf-blender/blender/source/blender/editors/interface/interface_handlers.c:8064 #16 0xb7f4cb in wm_handler_ui_call /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:420 #17 0xb782ca in wm_handlers_do_intern /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1898 #18 0xb5ee4b in wm_handlers_do /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:1982 #19 0xb5b438 in wm_event_do_handlers /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm_event_system.c:2228 #20 0xb1b926 in WM_main /home/lukas/Development/Blender/bf-blender/blender/source/blender/windowmanager/intern/wm.c:488 #21 0xb01cf3 in main /home/lukas/Development/Blender/bf-blender/blender/source/creator/creator.c:1741 #22 0x7fd1236b7bc4 in __libc_start_main ??:? Shadow bytes around the buggy address: 0x0c1e7ffff640: fa fa fa fa fa fa 00 00 00 00 00 00 00 00 00 00 0x0c1e7ffff650: 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa 0x0c1e7ffff660: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 0x0c1e7ffff670: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa 0x0c1e7ffff680: fa fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c1e7ffff690: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa[fa]fa 0x0c1e7ffff6a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c1e7ffff6b0: 00 00 00 00 00 fa fa fa fa fa fa fa fa fa 00 00 0x0c1e7ffff6c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c1e7ffff6d0: 00 00 00 fa fa fa fa fa fa fa fa fa 00 00 00 00 0x0c1e7ffff6e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 ASan internal: fe ==7191==ABORTING ```
Author
Member

Changed status to: 'Open'

Changed status to: 'Open'
Author
Member

Added subscriber: @LukasTonne

Added subscriber: @LukasTonne
Lukas Tönne was assigned by Sergey Sharybin 2014-02-06 09:52:50 +01:00

Added subscriber: @Sergey

Added subscriber: @Sergey

Fixed boolean modifier.

Here's patch which solves issue with unlinking the scene: http://www.pasteall.org/49316/diff

Lukas is looking further.

Fixed boolean modifier. Here's patch which solves issue with unlinking the scene: http://www.pasteall.org/49316/diff Lukas is looking further.

This issue was referenced by blender/blender-addons-contrib@11112d4d22

This issue was referenced by blender/blender-addons-contrib@11112d4d222d62d62ff8b7b2bcfae62c89d62162

This issue was referenced by 11112d4d22

This issue was referenced by 11112d4d222d62d62ff8b7b2bcfae62c89d62162
Author
Member

Changed status from 'Open' to: 'Resolved'

Changed status from 'Open' to: 'Resolved'
Author
Member

Closed by commit 11112d4d22.

Closed by commit 11112d4d22.
Sign in to join this conversation.
No Label
Interest
Alembic
Interest
Animation & Rigging
Interest
Asset Browser
Interest
Asset Browser Project Overview
Interest
Audio
Interest
Automated Testing
Interest
Blender Asset Bundle
Interest
BlendFile
Interest
Collada
Interest
Compatibility
Interest
Compositing
Interest
Core
Interest
Cycles
Interest
Dependency Graph
Interest
Development Management
Interest
EEVEE
Interest
EEVEE & Viewport
Interest
Freestyle
Interest
Geometry Nodes
Interest
Grease Pencil
Interest
ID Management
Interest
Images & Movies
Interest
Import Export
Interest
Line Art
Interest
Masking
Interest
Metal
Interest
Modeling
Interest
Modifiers
Interest
Motion Tracking
Interest
Nodes & Physics
Interest
OpenGL
Interest
Overlay
Interest
Overrides
Interest
Performance
Interest
Physics
Interest
Pipeline, Assets & IO
Interest
Platforms, Builds & Tests
Interest
Python API
Interest
Render & Cycles
Interest
Render Pipeline
Interest
Sculpt, Paint & Texture
Interest
Text Editor
Interest
Translations
Interest
Triaging
Interest
Undo
Interest
USD
Interest
User Interface
Interest
UV Editing
Interest
VFX & Video
Interest
Video Sequencer
Interest
Virtual Reality
Interest
Vulkan
Interest
Wayland
Interest
Workbench
Interest: X11
Legacy
Blender 2.8 Project
Legacy
Milestone 1: Basic, Local Asset Browser
Legacy
OpenGL Error
Meta
Good First Issue
Meta
Papercut
Meta
Retrospective
Meta
Security
Module
Animation & Rigging
Module
Core
Module
Development Management
Module
EEVEE & Viewport
Module
Grease Pencil
Module
Modeling
Module
Nodes & Physics
Module
Pipeline, Assets & IO
Module
Platforms, Builds & Tests
Module
Python API
Module
Render & Cycles
Module
Sculpt, Paint & Texture
Module
Triaging
Module
User Interface
Module
VFX & Video
Platform
FreeBSD
Platform
Linux
Platform
macOS
Platform
Windows
Priority
High
Priority
Low
Priority
Normal
Priority
Unbreak Now!
Status
Archived
Status
Confirmed
Status
Duplicate
Status
Needs Info from Developers
Status
Needs Information from User
Status
Needs Triage
Status
Resolved
Type
Bug
Type
Design
Type
Known Issue
Type
Patch
Type
Report
Type
To Do
No Milestone
No project
No Assignees
3 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: blender/blender#38498
No description provided.