Viewport crashes #56140

New Issue

Lincoln Deen · 2018-07-29T20:06:19+02:00

Lincoln Deen commented

2018-07-29 20:06:19 +02:00

System Information
MS Windows 10, intel core i5, Nvidia GTX 745

Blender Version
Broken: bd6d0b94bc (2.8 alpha)
Worked: 7.9b

Crashes consistently when playing particle animations in the viewport, typically gets a few frames in before crashing. Frame dropping dosen't help.

distoringsuzzane.blend

**System Information** MS Windows 10, intel core i5, Nvidia GTX 745 **Blender Version** Broken: bd6d0b94bc1 (2.8 alpha) Worked: 7.9b **Crashes consistently when playing particle animations in the viewport, typically gets a few frames in before crashing. Frame dropping dosen't help.** [distoringsuzzane.blend](https://archive.blender.org/developer/F4078967/distoringsuzzane.blend)

Lincoln Deen commented

2018-07-29 20:06:19 +02:00

Added subscriber: @Lincoln

Bastien Montagne commented

2018-07-30 11:45:11 +02:00

Added subscriber: @mont29

Bastien Montagne commented

2018-07-30 11:45:11 +02:00

Cannot reproduce here on linux with latest 2.8, so this is likely another OpenGL issue. Please:

Give us your exact Blender, OS and GPU (including drivers) versions, as requested in the template!
Ensure both your OS and drivers are fully up-to-date (and use official GPU drivers, not those provided by windows or tablet/laptop maker or open source ones in linux distributions).
Try the latest build from our buildbot.
Try to start Blender in factory settings (--factory-startup commandline option) (this will ensure whether this is a userpref or addon issue or not).
Try to tweak OGL settings in UserPreferences, System tab.
Try to tweak your GPU driver settings (e.g. try different values between 'performance' and 'quality' if you have such slider, etc.).
Attach as text file here the report generated by Help -> System Info (do not paste it directly in comment).
Launch Blender from the command line with --debug-gpu option and attach as text file here any error printed out in the console (do not paste it directly in comment).

Cannot reproduce here on linux with latest 2.8, so this is likely another OpenGL issue. Please: * Give us your exact Blender, OS and GPU (including drivers) versions, as requested in the template! * Ensure both your OS and drivers are fully up-to-date (and use official GPU drivers, not those provided by windows or tablet/laptop maker or open source ones in linux distributions). * Try the latest build from [our buildbot](https://builder.blender.org/download). * Try to start Blender in factory settings (`--factory-startup` commandline option) (this will ensure whether this is a userpref or addon issue or not). * Try to tweak OGL settings in UserPreferences, System tab. * Try to tweak your GPU driver settings (e.g. try different values between 'performance' and 'quality' if you have such slider, etc.). * **Attach as text file** here the report generated by Help -> System Info (**do not** paste it directly in comment). * Launch Blender from the command line with `--debug-gpu` option and **attach as text file** here any error printed out in the console (**do not** paste it directly in comment).

s12a commented

2018-07-31 16:20:57 +02:00

Added subscriber: @s12a

s12a commented

2018-07-31 16:20:57 +02:00

I could reproduce on ff1ca80f01 and:

Windows 10 Pro x64 (1803)
AMD Radeon RX480 4GB with Radeon Software 18.7.1

However, it took several tries. It appears that selecting/deselecting everything and trying to move the view with MMB while the animation is playing increases the chances of seeing the issue.

Attached console output and backtrace from a debug build.

console_output.txt
distoringsuzzane.crash.txt

I could reproduce on ff1ca80f010 and: - Windows 10 Pro x64 (1803) - AMD Radeon RX480 4GB with Radeon Software 18.7.1 However, it took several tries. It appears that selecting/deselecting everything and trying to move the view with MMB while the animation is playing increases the chances of seeing the issue. Attached console output and backtrace from a debug build. [console_output.txt](https://archive.blender.org/developer/F4093529/console_output.txt) [distoringsuzzane.crash.txt](https://archive.blender.org/developer/F4093527/distoringsuzzane.crash.txt)

Bastien Montagne self-assigned this 2018-08-09 11:37:55 +02:00

Bastien Montagne commented

2018-08-09 11:37:55 +02:00

Indeed, using (de)select all could reproduce the crash here on linux too, checking…

Bastien Montagne removed their assignment 2018-08-11 17:25:53 +02:00

Sergey Sharybin was assigned by Bastien Montagne

2018-08-11 17:25:53 +02:00

Bastien Montagne commented

2018-08-11 17:25:53 +02:00

Added subscriber: @Sergey

Bastien Montagne commented

2018-08-11 17:25:53 +02:00

(note: file currently crashes on opening due to another issue, due to #56313, you need to go before 98c304e865 to investigate).

@Sergey threading issue in particle code I think, see ASAN log below.

=================================================================
==4917==ERROR: AddressSanitizer: heap-use-after-free on address 0x61800001e080 at pc 0x55ba45a53db5 bp 0x7fd1b2daa9e0 sp 0x7fd1b2daa9d8
READ of size 8 at 0x61800001e080 thread T19
    - 0 0x55ba45a53db4 in MEM_lockfree_allocN_len /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:120
    - 1 0x55ba45a53de8 in MEM_lockfree_freeN /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:130
    - 2 0x55ba44b1d8d9 in ptcache_data_free /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2214
    - 3 0x55ba44b24e87 in BKE_ptcache_id_clear /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3076
    - 4 0x55ba44b26859 in BKE_ptcache_id_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3304
    - 5 0x55ba44b26c73 in BKE_ptcache_object_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3339
    - 6 0x55ba454cb00f in int std::__invoke_impl<int, int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&>(std::__invoke_other, int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&) /usr/include/c++/8/bits/invoke.h:60
    - 7 0x55ba454c908c in std::__invoke_result<int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&>::type std::__invoke<int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&>(int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&) /usr/include/c++/8/bits/invoke.h:95
    - 8 0x55ba454c69c0 in int std::_Bind<int (*(Scene*, Object*, int))(Scene*, Object*, int)>::__call<int, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/8/functional:400
    - 9 0x55ba454c2ea7 in int std::_Bind<int (*(Scene*, Object*, int))(Scene*, Object*, int)>::operator()<Depsgraph*, int>(Depsgraph*&&) /usr/include/c++/8/functional:484
    - 10 0x55ba454bdd28 in std::_Function_handler<void (Depsgraph*), std::_Bind<int (*(Scene*, Object*, int))(Scene*, Object*, int)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/8/bits/std_function.h:297
    - 11 0x55ba454f2ddb in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/8/bits/std_function.h:687
    - 12 0x55ba454f14a6 in deg_task_run_func /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval.cc:94
    - 13 0x55ba45464cce in handle_local_queue /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:419
    - 14 0x55ba45464cce in task_scheduler_thread_run /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:448
    - 15 0x7fd1edc54f29 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7f29)
    #16 0x7fd1e6368ede in __clone (/lib/x86_64-linux-gnu/libc.so.6+0xf7ede)

0x61800001e080 is located 0 bytes inside of 856-byte region [0x61800001e080,0x61800001e3d8)
freed by thread T15 here:
    - 0 0x7fd1ef725b50 in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.5+0xe8b50)
    - 1 0x55ba45a5408e in MEM_lockfree_freeN /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:164
    - 2 0x55ba44b1d8d9 in ptcache_data_free /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2214
    - 3 0x55ba44b24e87 in BKE_ptcache_id_clear /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3076
    - 4 0x55ba44b26859 in BKE_ptcache_id_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3304
    - 5 0x55ba44b26c73 in BKE_ptcache_object_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3339
    - 6 0x55ba44ad8ddd in BKE_particle_system_eval_init /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/particle_system.c:4440
    - 7 0x55ba454caa0d in void std::__invoke_impl<void, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(std::__invoke_other, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:60
    - 8 0x55ba454c8793 in std::__invoke_result<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>::type std::__invoke<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:95
    - 9 0x55ba454c5f64 in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::__call<void, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/8/functional:400
    - 10 0x55ba454c1d3b in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::operator()<Depsgraph*, void>(Depsgraph*&&) /usr/include/c++/8/functional:484
    - 11 0x55ba454bc913 in std::_Function_handler<void (Depsgraph*), std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/8/bits/std_function.h:297
    - 12 0x55ba454f2ddb in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/8/bits/std_function.h:687
    - 13 0x55ba454f14a6 in deg_task_run_func /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval.cc:94
    - 14 0x55ba45464949 in task_scheduler_thread_run /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:441
    - 15 0x7fd1edc54f29 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7f29)

previously allocated by thread T16 here:
    - 0 0x7fd1ef7260b8 in calloc (/usr/lib/x86_64-linux-gnu/libasan.so.5+0xe90b8)
    - 1 0x55ba45a54513 in MEM_lockfree_callocN /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:282
    - 2 0x55ba44b1d7b3 in ptcache_data_alloc /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2204
    - 3 0x55ba44b22f4b in ptcache_write /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2814
    - 4 0x55ba44b23d0e in BKE_ptcache_write /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2940
    - 5 0x55ba44ad4f22 in system_step /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/particle_system.c:4085
    - 6 0x55ba44ad857a in particle_system_update /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/particle_system.c:4362
    - 7 0x55ba43a020f2 in deformVerts /home/i74700deb64/blender/__work__/src/source/blender/modifiers/intern/MOD_particlesystem.c:215
    - 8 0x55ba449bc7e9 in modifier_deformVerts /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/modifier.c:895
    - 9 0x55ba449bca65 in modifier_deformVerts_ensure_normals /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/modifier.c:921
    - 10 0x55ba445fde91 in mesh_calc_modifiers /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/DerivedMesh.c:2221
    - 11 0x55ba44604350 in mesh_build_data /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/DerivedMesh.c:2950
    - 12 0x55ba44604f63 in makeDerivedMesh /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/DerivedMesh.c:3060
    - 13 0x55ba44a49b27 in BKE_object_handle_data_update /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/object_update.c:205
    - 14 0x55ba44a4a75d in BKE_object_eval_uber_data /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/object_update.c:311
    - 15 0x55ba454caa0d in void std::__invoke_impl<void, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(std::__invoke_other, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:60
    - 16 0x55ba454c8793 in std::__invoke_result<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>::type std::__invoke<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:95
    - 17 0x55ba454c5f64 in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::__call<void, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/8/functional:400
    - 18 0x55ba454c1d3b in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::operator()<Depsgraph*, void>(Depsgraph*&&) /usr/include/c++/8/functional:484
    - 19 0x55ba454bc913 in std::_Function_handler<void (Depsgraph*), std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/8/bits/std_function.h:297
    - 20 0x55ba454f2ddb in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/8/bits/std_function.h:687
    - 21 0x55ba454f14a6 in deg_task_run_func /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval.cc:94
    - 22 0x55ba45464cce in handle_local_queue /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:419
    - 23 0x55ba45464cce in task_scheduler_thread_run /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:448
    #24 0x7fd1edc54f29 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7f29)

Thread T19 created by T0 here:
    - 0 0x7fd1ef686ef0 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x49ef0)
    - 1 0x55ba454652b1 in BLI_task_scheduler_create /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:504
    - 2 0x55ba4546c5e9 in BLI_task_scheduler_get /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/threads.c:176
    - 3 0x55ba4546b00b in BLI_task_parallel_range /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:1099
    - 4 0x55ba454f944d in flush_prepare /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:122
    - 5 0x55ba454f944d in DEG::deg_graph_flush_updates(Main*, DEG::Depsgraph*) /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:359
    - 6 0x55ba454a7d68 in DEG_graph_flush_update /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/depsgraph_tag.cc:635
    - 7 0x55ba44b50d70 in BKE_scene_graph_update_tagged /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/scene.c:1425
    - 8 0x55ba422d4b6d in wm_event_do_depsgraph /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:336
    - 9 0x55ba422f4916 in wm_file_read_post /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:493
    - 10 0x55ba422f62e7 in wm_homefile_read /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:897
    - 11 0x55ba423075e7 in WM_init /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_init_exit.c:253
    - 12 0x55ba422c1464 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:438
    - 13 0x7fd1e6293b16 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x22b16)

Thread T15 created by T0 here:
    - 0 0x7fd1ef686ef0 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x49ef0)
    - 1 0x55ba454652b1 in BLI_task_scheduler_create /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:504
    - 2 0x55ba4546c5e9 in BLI_task_scheduler_get /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/threads.c:176
    - 3 0x55ba4546b00b in BLI_task_parallel_range /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:1099
    - 4 0x55ba454f944d in flush_prepare /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:122
    - 5 0x55ba454f944d in DEG::deg_graph_flush_updates(Main*, DEG::Depsgraph*) /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:359
    - 6 0x55ba454a7d68 in DEG_graph_flush_update /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/depsgraph_tag.cc:635
    - 7 0x55ba44b50d70 in BKE_scene_graph_update_tagged /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/scene.c:1425
    - 8 0x55ba422d4b6d in wm_event_do_depsgraph /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:336
    - 9 0x55ba422f4916 in wm_file_read_post /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:493
    - 10 0x55ba422f62e7 in wm_homefile_read /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:897
    - 11 0x55ba423075e7 in WM_init /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_init_exit.c:253
    - 12 0x55ba422c1464 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:438
    - 13 0x7fd1e6293b16 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x22b16)

Thread T16 created by T0 here:
    - 0 0x7fd1ef686ef0 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x49ef0)
    - 1 0x55ba454652b1 in BLI_task_scheduler_create /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:504
    - 2 0x55ba4546c5e9 in BLI_task_scheduler_get /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/threads.c:176
    - 3 0x55ba4546b00b in BLI_task_parallel_range /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:1099
    - 4 0x55ba454f944d in flush_prepare /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:122
    - 5 0x55ba454f944d in DEG::deg_graph_flush_updates(Main*, DEG::Depsgraph*) /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:359
    - 6 0x55ba454a7d68 in DEG_graph_flush_update /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/depsgraph_tag.cc:635
    - 7 0x55ba44b50d70 in BKE_scene_graph_update_tagged /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/scene.c:1425
    - 8 0x55ba422d4b6d in wm_event_do_depsgraph /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:336
    - 9 0x55ba422f4916 in wm_file_read_post /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:493
    - 10 0x55ba422f62e7 in wm_homefile_read /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:897
    - 11 0x55ba423075e7 in WM_init /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_init_exit.c:253
    - 12 0x55ba422c1464 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:438
    - 13 0x7fd1e6293b16 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x22b16)

SUMMARY: AddressSanitizer: heap-use-after-free /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:120 in MEM_lockfree_allocN_len
Shadow bytes around the buggy address:
  0x0c307fffbbc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c307fffbbd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c307fffbbe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c307fffbbf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa
  0x0c307fffbc00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c307fffbc10:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c307fffbc20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c307fffbc30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c307fffbc40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c307fffbc50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c307fffbc60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==4917==ABORTING

(note: file currently crashes on opening due to another issue, due to #56313, you need to go before 98c304e865 to investigate). @Sergey threading issue in particle code I think, see ASAN log below. ```lines=20 ================================================================= ==4917==ERROR: AddressSanitizer: heap-use-after-free on address 0x61800001e080 at pc 0x55ba45a53db5 bp 0x7fd1b2daa9e0 sp 0x7fd1b2daa9d8 READ of size 8 at 0x61800001e080 thread T19 - 0 0x55ba45a53db4 in MEM_lockfree_allocN_len /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:120 - 1 0x55ba45a53de8 in MEM_lockfree_freeN /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:130 - 2 0x55ba44b1d8d9 in ptcache_data_free /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2214 - 3 0x55ba44b24e87 in BKE_ptcache_id_clear /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3076 - 4 0x55ba44b26859 in BKE_ptcache_id_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3304 - 5 0x55ba44b26c73 in BKE_ptcache_object_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3339 - 6 0x55ba454cb00f in int std::__invoke_impl<int, int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&>(std::__invoke_other, int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&) /usr/include/c++/8/bits/invoke.h:60 - 7 0x55ba454c908c in std::__invoke_result<int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&>::type std::__invoke<int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&>(int (*&)(Scene*, Object*, int), Scene*&, Object*&, int&) /usr/include/c++/8/bits/invoke.h:95 - 8 0x55ba454c69c0 in int std::_Bind<int (*(Scene*, Object*, int))(Scene*, Object*, int)>::__call<int, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/8/functional:400 - 9 0x55ba454c2ea7 in int std::_Bind<int (*(Scene*, Object*, int))(Scene*, Object*, int)>::operator()<Depsgraph*, int>(Depsgraph*&&) /usr/include/c++/8/functional:484 - 10 0x55ba454bdd28 in std::_Function_handler<void (Depsgraph*), std::_Bind<int (*(Scene*, Object*, int))(Scene*, Object*, int)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/8/bits/std_function.h:297 - 11 0x55ba454f2ddb in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/8/bits/std_function.h:687 - 12 0x55ba454f14a6 in deg_task_run_func /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval.cc:94 - 13 0x55ba45464cce in handle_local_queue /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:419 - 14 0x55ba45464cce in task_scheduler_thread_run /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:448 - 15 0x7fd1edc54f29 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7f29) #16 0x7fd1e6368ede in __clone (/lib/x86_64-linux-gnu/libc.so.6+0xf7ede) 0x61800001e080 is located 0 bytes inside of 856-byte region [0x61800001e080,0x61800001e3d8) freed by thread T15 here: - 0 0x7fd1ef725b50 in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.5+0xe8b50) - 1 0x55ba45a5408e in MEM_lockfree_freeN /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:164 - 2 0x55ba44b1d8d9 in ptcache_data_free /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2214 - 3 0x55ba44b24e87 in BKE_ptcache_id_clear /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3076 - 4 0x55ba44b26859 in BKE_ptcache_id_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3304 - 5 0x55ba44b26c73 in BKE_ptcache_object_reset /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:3339 - 6 0x55ba44ad8ddd in BKE_particle_system_eval_init /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/particle_system.c:4440 - 7 0x55ba454caa0d in void std::__invoke_impl<void, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(std::__invoke_other, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:60 - 8 0x55ba454c8793 in std::__invoke_result<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>::type std::__invoke<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:95 - 9 0x55ba454c5f64 in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::__call<void, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/8/functional:400 - 10 0x55ba454c1d3b in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::operator()<Depsgraph*, void>(Depsgraph*&&) /usr/include/c++/8/functional:484 - 11 0x55ba454bc913 in std::_Function_handler<void (Depsgraph*), std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/8/bits/std_function.h:297 - 12 0x55ba454f2ddb in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/8/bits/std_function.h:687 - 13 0x55ba454f14a6 in deg_task_run_func /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval.cc:94 - 14 0x55ba45464949 in task_scheduler_thread_run /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:441 - 15 0x7fd1edc54f29 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7f29) previously allocated by thread T16 here: - 0 0x7fd1ef7260b8 in calloc (/usr/lib/x86_64-linux-gnu/libasan.so.5+0xe90b8) - 1 0x55ba45a54513 in MEM_lockfree_callocN /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:282 - 2 0x55ba44b1d7b3 in ptcache_data_alloc /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2204 - 3 0x55ba44b22f4b in ptcache_write /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2814 - 4 0x55ba44b23d0e in BKE_ptcache_write /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/pointcache.c:2940 - 5 0x55ba44ad4f22 in system_step /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/particle_system.c:4085 - 6 0x55ba44ad857a in particle_system_update /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/particle_system.c:4362 - 7 0x55ba43a020f2 in deformVerts /home/i74700deb64/blender/__work__/src/source/blender/modifiers/intern/MOD_particlesystem.c:215 - 8 0x55ba449bc7e9 in modifier_deformVerts /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/modifier.c:895 - 9 0x55ba449bca65 in modifier_deformVerts_ensure_normals /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/modifier.c:921 - 10 0x55ba445fde91 in mesh_calc_modifiers /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/DerivedMesh.c:2221 - 11 0x55ba44604350 in mesh_build_data /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/DerivedMesh.c:2950 - 12 0x55ba44604f63 in makeDerivedMesh /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/DerivedMesh.c:3060 - 13 0x55ba44a49b27 in BKE_object_handle_data_update /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/object_update.c:205 - 14 0x55ba44a4a75d in BKE_object_eval_uber_data /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/object_update.c:311 - 15 0x55ba454caa0d in void std::__invoke_impl<void, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(std::__invoke_other, void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:60 - 16 0x55ba454c8793 in std::__invoke_result<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>::type std::__invoke<void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*, Scene*&, Object*&>(void (*&)(Depsgraph*, Scene*, Object*), Depsgraph*&&, Scene*&, Object*&) /usr/include/c++/8/bits/invoke.h:95 - 17 0x55ba454c5f64 in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::__call<void, Depsgraph*&&, 0ul, 1ul, 2ul>(std::tuple<Depsgraph*&&>&&, std::_Index_tuple<0ul, 1ul, 2ul>) /usr/include/c++/8/functional:400 - 18 0x55ba454c1d3b in void std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)>::operator()<Depsgraph*, void>(Depsgraph*&&) /usr/include/c++/8/functional:484 - 19 0x55ba454bc913 in std::_Function_handler<void (Depsgraph*), std::_Bind<void (*(std::_Placeholder<1>, Scene*, Object*))(Depsgraph*, Scene*, Object*)> >::_M_invoke(std::_Any_data const&, Depsgraph*&&) /usr/include/c++/8/bits/std_function.h:297 - 20 0x55ba454f2ddb in std::function<void (Depsgraph*)>::operator()(Depsgraph*) const /usr/include/c++/8/bits/std_function.h:687 - 21 0x55ba454f14a6 in deg_task_run_func /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval.cc:94 - 22 0x55ba45464cce in handle_local_queue /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:419 - 23 0x55ba45464cce in task_scheduler_thread_run /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:448 #24 0x7fd1edc54f29 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x7f29) Thread T19 created by T0 here: - 0 0x7fd1ef686ef0 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x49ef0) - 1 0x55ba454652b1 in BLI_task_scheduler_create /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:504 - 2 0x55ba4546c5e9 in BLI_task_scheduler_get /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/threads.c:176 - 3 0x55ba4546b00b in BLI_task_parallel_range /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:1099 - 4 0x55ba454f944d in flush_prepare /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:122 - 5 0x55ba454f944d in DEG::deg_graph_flush_updates(Main*, DEG::Depsgraph*) /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:359 - 6 0x55ba454a7d68 in DEG_graph_flush_update /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/depsgraph_tag.cc:635 - 7 0x55ba44b50d70 in BKE_scene_graph_update_tagged /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/scene.c:1425 - 8 0x55ba422d4b6d in wm_event_do_depsgraph /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:336 - 9 0x55ba422f4916 in wm_file_read_post /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:493 - 10 0x55ba422f62e7 in wm_homefile_read /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:897 - 11 0x55ba423075e7 in WM_init /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_init_exit.c:253 - 12 0x55ba422c1464 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:438 - 13 0x7fd1e6293b16 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x22b16) Thread T15 created by T0 here: - 0 0x7fd1ef686ef0 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x49ef0) - 1 0x55ba454652b1 in BLI_task_scheduler_create /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:504 - 2 0x55ba4546c5e9 in BLI_task_scheduler_get /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/threads.c:176 - 3 0x55ba4546b00b in BLI_task_parallel_range /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:1099 - 4 0x55ba454f944d in flush_prepare /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:122 - 5 0x55ba454f944d in DEG::deg_graph_flush_updates(Main*, DEG::Depsgraph*) /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:359 - 6 0x55ba454a7d68 in DEG_graph_flush_update /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/depsgraph_tag.cc:635 - 7 0x55ba44b50d70 in BKE_scene_graph_update_tagged /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/scene.c:1425 - 8 0x55ba422d4b6d in wm_event_do_depsgraph /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:336 - 9 0x55ba422f4916 in wm_file_read_post /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:493 - 10 0x55ba422f62e7 in wm_homefile_read /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:897 - 11 0x55ba423075e7 in WM_init /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_init_exit.c:253 - 12 0x55ba422c1464 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:438 - 13 0x7fd1e6293b16 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x22b16) Thread T16 created by T0 here: - 0 0x7fd1ef686ef0 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.5+0x49ef0) - 1 0x55ba454652b1 in BLI_task_scheduler_create /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:504 - 2 0x55ba4546c5e9 in BLI_task_scheduler_get /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/threads.c:176 - 3 0x55ba4546b00b in BLI_task_parallel_range /home/i74700deb64/blender/__work__/src/source/blender/blenlib/intern/task.c:1099 - 4 0x55ba454f944d in flush_prepare /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:122 - 5 0x55ba454f944d in DEG::deg_graph_flush_updates(Main*, DEG::Depsgraph*) /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/eval/deg_eval_flush.cc:359 - 6 0x55ba454a7d68 in DEG_graph_flush_update /home/i74700deb64/blender/__work__/src/source/blender/depsgraph/intern/depsgraph_tag.cc:635 - 7 0x55ba44b50d70 in BKE_scene_graph_update_tagged /home/i74700deb64/blender/__work__/src/source/blender/blenkernel/intern/scene.c:1425 - 8 0x55ba422d4b6d in wm_event_do_depsgraph /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_event_system.c:336 - 9 0x55ba422f4916 in wm_file_read_post /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:493 - 10 0x55ba422f62e7 in wm_homefile_read /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_files.c:897 - 11 0x55ba423075e7 in WM_init /home/i74700deb64/blender/__work__/src/source/blender/windowmanager/intern/wm_init_exit.c:253 - 12 0x55ba422c1464 in main /home/i74700deb64/blender/__work__/src/source/creator/creator.c:438 - 13 0x7fd1e6293b16 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x22b16) SUMMARY: AddressSanitizer: heap-use-after-free /home/i74700deb64/blender/__work__/src/intern/guardedalloc/intern/mallocn_lockfree_impl.c:120 in MEM_lockfree_allocN_len Shadow bytes around the buggy address: 0x0c307fffbbc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c307fffbbd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c307fffbbe0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c307fffbbf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa 0x0c307fffbc00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c307fffbc10:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c307fffbc20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c307fffbc30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c307fffbc40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c307fffbc50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c307fffbc60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==4917==ABORTING ```

Sergey Sharybin commented

2019-01-23 12:43:55 +01:00

Changed status from 'Open' to: 'Resolved'

Sergey Sharybin closed this issue

2019-01-23 12:43:55 +01:00

Sergey Sharybin commented

2019-01-23 12:43:55 +01:00

Can no longer reproduce the issue. There were a lot of fixes in related areas, so most likely the issue has been fixed.

if it's not, please submit a new report, with an updated information.

Can no longer reproduce the issue. There were a lot of fixes in related areas, so most likely the issue has been fixed. if it's not, please submit a new report, with an updated information.

Sign in to join this conversation.

No Label

Download

What's New

Blender Studio

Manual

Developers Blog

Documentation

Benchmark

Blender Conference

Development Fund

One-time Donations

Viewport crashes #56140