Crash when moving vertex #68778

New Issue

Hanz · 2019-08-17T19:45:06+02:00

Hanz commented

2019-08-17 19:45:06 +02:00

System Information
Operating system: Windows 7 Ultimate
Graphics card: Asus Geforce GTX 660Ti 2GB

Blender Version
Broken: 2.80 sub 75 date 2019-07-29 14:47 hash f6cb5f5449

Error : EXCEPTION_ACCESS_VIOLATION
Address : 0x00000001400F4104
Module : C:\Program Files\Blender Foundation\Blender\blender.exe

Exact steps for others to reproduce the error

Enter edit mode
Select one vertex (not every vertex generates error, only some.) The selected vertex in the attached screenshot usually generates error.
Press . in the numpad to center selection
Press g

park_4044_autosave.blend

**System Information** Operating system: Windows 7 Ultimate Graphics card: Asus Geforce GTX 660Ti 2GB **Blender Version** Broken: 2.80 sub 75 date 2019-07-29 14:47 hash f6cb5f54494e Error : EXCEPTION_ACCESS_VIOLATION Address : 0x00000001400F4104 Module : C:\Program Files\Blender Foundation\Blender\blender.exe **Exact steps for others to reproduce the error** 1. Enter edit mode 2. Select one vertex (not every vertex generates error, only some.) The selected vertex in the attached screenshot usually generates error. 3. Press . in the numpad to center selection 4. Press g ![Screenshot_94.png](https://archive.blender.org/developer/F7669330/Screenshot_94.png) [park_4044_autosave.blend](https://archive.blender.org/developer/F7669319/park_4044_autosave.blend)

Hanz commented

2019-08-17 19:45:06 +02:00

Added subscriber: @hanz1986

Valentin commented

2019-08-19 19:11:54 +02:00

Added subscriber: @Poulpator

Valentin commented

2019-08-19 19:11:54 +02:00

Can confirm on linux

Backtrace


Thread 1 "blender" received signal SIGSEGV, Segmentation fault.
0x0000555556299f40 in isect_ray_seg_v3 ()
(gdb) bt
- 0  0x0000555556299f40 in isect_ray_seg_v3 ()
- 1  0x0000555556990f21 in test_projected_edge_dist ()
- 2  0x000055555699108b in cb_snap_edge ()
- 3  0x0000555556284b8b in bvhtree_nearest_projected_dfs_recursive ()
- 4  0x0000555556284d38 in bvhtree_nearest_projected_dfs_recursive ()
- 5  0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive ()
- 6  0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive ()
- 7  0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive ()
- 8  0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive ()
- 9  0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive ()
- 10 0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive ()
- 11 0x000055555628741b in BLI_bvhtree_find_nearest_projected ()
- 12 0x00005555569930dd in snapEditMesh.isra.11 ()
- 13 0x000055555699370a in sanp_obj_cb ()
- 14 0x0000555556990a8c in iter_snap_objects ()
- 15 0x0000555556994dcc in transform_snap_context_project_view3d_mixed_impl ()
- 16 0x0000555556995e6c in ED_transform_snap_object_project_view3d_ex ()
- 17 0x0000555556995e96 in ED_transform_snap_object_project_view3d ()
- 18 0x000055555698f8a4 in snapObjectsTransform ()
- 19 0x00005555569901f3 in CalcSnapGeometry ()
- 20 0x000055555698e8b9 in applySnapping ()
- 21 0x0000555556960795 in applyTranslation ()
#22 0x0000555556963e91 in transformApply ()

Can confirm on linux Backtrace ``` Thread 1 "blender" received signal SIGSEGV, Segmentation fault. 0x0000555556299f40 in isect_ray_seg_v3 () (gdb) bt - 0 0x0000555556299f40 in isect_ray_seg_v3 () - 1 0x0000555556990f21 in test_projected_edge_dist () - 2 0x000055555699108b in cb_snap_edge () - 3 0x0000555556284b8b in bvhtree_nearest_projected_dfs_recursive () - 4 0x0000555556284d38 in bvhtree_nearest_projected_dfs_recursive () - 5 0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive () - 6 0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive () - 7 0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive () - 8 0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive () - 9 0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive () - 10 0x0000555556284d20 in bvhtree_nearest_projected_dfs_recursive () - 11 0x000055555628741b in BLI_bvhtree_find_nearest_projected () - 12 0x00005555569930dd in snapEditMesh.isra.11 () - 13 0x000055555699370a in sanp_obj_cb () - 14 0x0000555556990a8c in iter_snap_objects () - 15 0x0000555556994dcc in transform_snap_context_project_view3d_mixed_impl () - 16 0x0000555556995e6c in ED_transform_snap_object_project_view3d_ex () - 17 0x0000555556995e96 in ED_transform_snap_object_project_view3d () - 18 0x000055555698f8a4 in snapObjectsTransform () - 19 0x00005555569901f3 in CalcSnapGeometry () - 20 0x000055555698e8b9 in applySnapping () - 21 0x0000555556960795 in applyTranslation () #22 0x0000555556963e91 in transformApply () ```

Martin Capitanio commented

2019-08-20 03:56:40 +02:00

Added subscriber: @capnm

Martin Capitanio commented

2019-08-20 03:56:40 +02:00

Linux, 74d05eb71a

A few steps backwards:
source/blender/editors/transform/transform_snap_object.c:1113

static void cb_snap_edge(void *userdata,
                         int index,
                         const struct DistProjectedAABBPrecalc *precalc,
                         const float (*clip_plane)[4],
                         const int clip_plane_len,
                         BVHTreeNearest *nearest)
{
  struct Nearest2dUserData *data = userdata;

  int vindex[2];
  data->get_edge_verts_index(index, vindex, data->userdata);

vindex → [-1,-1]


  const float *v_pair[2];
  data->get_vert_co(vindex[0], &v_pair[0], data->userdata);
  data->get_vert_co(vindex[1], &v_pair[1], data->userdata);

&v_pair- [x] → null pointer
&v_pair- [x] → null pointer


  if (test_projected_edge_dist(precalc,
                               clip_plane,
                               clip_plane_len,
                               data->is_persp,
                               v_pair[0],
                               v_pair[1],
                               &nearest->dist_sq,
                               nearest->co)) {
    sub_v3_v3v3(nearest->no, v_pair[0], v_pair[1]);
    nearest->index = index;
  }
}

Linux, 74d05eb71a A few steps backwards: source/blender/editors/transform/transform_snap_object.c:1113 ``` static void cb_snap_edge(void *userdata, int index, const struct DistProjectedAABBPrecalc *precalc, const float (*clip_plane)[4], const int clip_plane_len, BVHTreeNearest *nearest) { struct Nearest2dUserData *data = userdata; int vindex[2]; data->get_edge_verts_index(index, vindex, data->userdata); ``` vindex → [-1,-1] ``` const float *v_pair[2]; data->get_vert_co(vindex[0], &v_pair[0], data->userdata); data->get_vert_co(vindex[1], &v_pair[1], data->userdata); ``` &v_pair- [x] → null pointer &v_pair- [x] → null pointer ``` if (test_projected_edge_dist(precalc, clip_plane, clip_plane_len, data->is_persp, v_pair[0], v_pair[1], &nearest->dist_sq, nearest->co)) { sub_v3_v3v3(nearest->no, v_pair[0], v_pair[1]); nearest->index = index; } } ```

Sybren A. Stüvel commented

2020-01-27 15:57:06 +01:00

Added subscriber: @dr.sybren

Sybren A. Stüvel commented

2020-01-27 15:57:06 +01:00

Changed status from 'Confirmed' to: 'Needs User Info'

Sybren A. Stüvel commented

2020-01-27 15:57:06 +01:00

I can't reproduce the crash, but I do see this logged when running a debug build:

/home/sybren/workspace/blender-git/blender/source/blender/blenlib/intern/BLI_kdopbvh.c:1822:31: runtime error: division by zero

That code is the bvhtree_ray_cast_data_precalc() function, particularly this line (the 2nd):

    data->ray_dot_axis[i] = dot_v3v3(data->ray.direction, bvhtree_kdop_axes[i]);
    data->idot_axis[i] = 1.0f / data->ray_dot_axis[i];

Of course the dot product of two vectors can be zero, so this should be checked for.
But, as I said, it doesn't crash for me, so I could be looking at something different.

@hanz1986 could you do a re-check with the latest daily build (https://builder.blender.org/) to see if this issue still happens for you?

I can't reproduce the crash, but I do see this logged when running a debug build: ``` /home/sybren/workspace/blender-git/blender/source/blender/blenlib/intern/BLI_kdopbvh.c:1822:31: runtime error: division by zero ``` That code is the `bvhtree_ray_cast_data_precalc()` function, particularly this line (the 2nd): ``` data->ray_dot_axis[i] = dot_v3v3(data->ray.direction, bvhtree_kdop_axes[i]); data->idot_axis[i] = 1.0f / data->ray_dot_axis[i]; ``` Of course the dot product of two vectors can be zero, so this should be checked for. But, as I said, it doesn't crash for me, so I could be looking at something different. @hanz1986 could you do a re-check with the latest daily build (https://builder.blender.org/) to see if this issue still happens for you?

Hanz commented

2020-01-30 08:50:28 +01:00

It is fine and no longer crashed with the recent build Blender 2.82 Beta (30 Jan 2020).