Repeatable crash with mesh.bevel operator #69966

Closed
opened 3 years ago by testure · 14 comments

System Information
Operating system: Windows-10-10.0.18362 64 Bits
Graphics card: GeForce GTX 1050 Ti with Max-Q Design/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 431.70

Blender Version
Broken: version: 2.80 (sub 75), branch: master, commit date: 2019-07-29 14:47, hash: f6cb5f5449
Worked: (optional)

Short description of error
This is an odd one, and took me over a week of hammering on it to come up with a 100% repro. At first it seemed totally random, as I had artists in my studio reporting random crashes after beveling and watched it happen a few times with no clear common denominator, but the crash always happens at the exact same address:

Error : EXCEPTION_ACCESS_VIOLATION
Address : 0x00007FF799F33F35
Module : c:_workdir\blender-2.80\blender.exe
The terminal process terminated with exit code: 11

Exact steps for others to reproduce the error
These are the exact steps you will need to repro (I've demonstrated it in the attached video as well).

  • Open the attached .blend
  • Select an edge
  • Run the mesh.bevel operator
  • Check the "Loop Slide" option in the operator panel (i'm not sure if the option you choose matters, but it does matter that you change one of the settings in the operator panel)
  • Undo without committing the operation
  • DESELECT and then RE-SELECT the same edge (this is important, if you fail to do this the crash will not happen).
  • Run the mesh.bevel operator again
  • Check or Uncheck the "Loop Slide" option (whatever the opposite state it's in)
  • Undo without committing the operation
  • Crash at Address : 0x00007FF799F33F35

bevelcrash.mp4
bevelcrash.blend

**System Information** Operating system: Windows-10-10.0.18362 64 Bits Graphics card: GeForce GTX 1050 Ti with Max-Q Design/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 431.70 **Blender Version** Broken: version: 2.80 (sub 75), branch: master, commit date: 2019-07-29 14:47, hash: `f6cb5f5449` Worked: (optional) **Short description of error** This is an odd one, and took me over a week of hammering on it to come up with a 100% repro. At first it seemed totally random, as I had artists in my studio reporting random crashes after beveling and watched it happen a few times with no clear common denominator, but the crash always happens at the exact same address: >Error : EXCEPTION_ACCESS_VIOLATION >Address : 0x00007FF799F33F35 >Module : c:\_workdir\blender-2.80\blender.exe >The terminal process terminated with exit code: 11 **Exact steps for others to reproduce the error** These are the exact steps you will need to repro (I've demonstrated it in the attached video as well). - Open the attached .blend - Select an edge - Run the mesh.bevel operator - Check the "Loop Slide" option in the operator panel (i'm not sure if the option you choose matters, but it does matter that you change one of the settings in the operator panel) - Undo without committing the operation - DESELECT and then RE-SELECT the same edge (this is important, if you fail to do this the crash will not happen). - Run the mesh.bevel operator again - Check or Uncheck the "Loop Slide" option (whatever the opposite state it's in) - Undo without committing the operation - Crash at Address : 0x00007FF799F33F35 [bevelcrash.mp4](https://archive.blender.org/developer/F7752271/bevelcrash.mp4) [bevelcrash.blend](https://archive.blender.org/developer/F7752273/bevelcrash.blend)
Poster

Added subscriber: @testure

Added subscriber: @testure
tomjk commented 3 years ago

Added subscriber: @tomjk

Added subscriber: @tomjk
tomjk commented 3 years ago

Cannot reproduce here.

Operating system: Linux-4.15.0-55-generic-x86_64-with-debian-stretch-sid 64 Bits
Blender: 2.80 and latest master

Please check if the problem has been fixed for you since 2.80:

  • Download the latest build from http://builder.blender.org.
  • Go to File → Defaults → Load Factory Settings and then load your file to see if you still can reproduce this issue.
Cannot reproduce here. Operating system: Linux-4.15.0-55-generic-x86_64-with-debian-stretch-sid 64 Bits Blender: 2.80 and latest master Please check if the problem has been fixed for you since 2.80: * Download the latest build from http://builder.blender.org. * Go to File → Defaults → Load Factory Settings and then load your file to see if you still can reproduce this issue.
Poster

Well, I'll post an update whenever either the 2.81 download finishes (it's been going for about 2 hours now, previous attempts have timed out) or the build I just started finishes.

In the meantime, here's a video of it happening with default settings in 2.80 final:
bevelcrash_defaultsettings.mp4

Well, I'll post an update whenever either the 2.81 download finishes (it's been going for about 2 hours now, previous attempts have timed out) or the build I just started finishes. In the meantime, here's a video of it happening with default settings in 2.80 final: [bevelcrash_defaultsettings.mp4](https://archive.blender.org/developer/F7753768/bevelcrash_defaultsettings.mp4)
Poster

Good news, does not appear to be happening on the build I just made- so it may have been fixed by something else. I'll hammer on it for a bit longer and see if I can get it to break

Good news, does not appear to be happening on the build I just made- so it may have been fixed by something else. I'll hammer on it for a bit longer and see if I can get it to break
Poster

Scratch that- not happening in edge mode, but I was able to repro it in face mode. Since I went through the trouble of building Blender I went ahead and made a debug build to get a callstack, this is the output:

blender.exe!issue_debug_notification(const wchar_t * const message) Line 28
at minkernel\crts\ucrt\src\appcrt\internal\report_runtime_error.cpp(28)
blender.exe!__acrt_report_runtime_error(const wchar_t * message) Line 154
at minkernel\crts\ucrt\src\appcrt\internal\report_runtime_error.cpp(154)
blender.exe!abort() Line 61
at minkernel\crts\ucrt\src\appcrt\startup\abort.cpp(61)
blender.exe!CustomData_get_layer_index(const CustomData * data, int type) Line 2065
at c:\blender-git\blender\source\blender\blenkernel\intern\customdata.c(2065)
blender.exe!CustomData_has_layer(const CustomData * data, int type) Line 2509
at c:\blender-git\blender\source\blender\blenkernel\intern\customdata.c(2509)
blender.exe!bpy_bmesh_dealloc(BPy_BMesh * self) Line 3452
at c:\blender-git\blender\source\blender\python\bmesh\bmesh_py_types.c(3452)
[External Code]
blender.exe!BPY_DECREF_RNA_INVALIDATE(void * pyob_ptr) Line 583
at c:\blender-git\blender\source\blender\python\intern\bpy_interface.c(583)
blender.exe!WM_operator_free(wmOperator * op) Line 78
at c:\blender-git\blender\source\blender\windowmanager\intern\wm.c(78)
blender.exe!WM_operator_stack_clear(wmWindowManager * wm) Line 184
at c:\blender-git\blender\source\blender\windowmanager\intern\wm.c(184)
blender.exe!ed_undo_exec(bContext * C, wmOperator * op) Line 389
at c:\blender-git\blender\source\blender\editors\undo\ed_undo.c(389)
blender.exe!wm_operator_invoke(bContext * C, wmOperatorType * ot, wmEvent * event, PointerRNA * properties, ReportList * reports, const bool poll_only, bool use_last_properties) Line 1451
at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(1451)
blender.exe!wm_handler_operator_call(bContext * C, ListBase * handlers, wmEventHandler * handler_base, wmEvent * event, PointerRNA * properties) Line 2279
at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2279)
blender.exe!wm_handlers_do_keymap_with_keymap_handler(bContext * C, wmEvent * event, ListBase * handlers, wmEventHandler_Keymap * handler, wmKeyMap * keymap, const bool do_debug_handler) Line 2581
at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2581)
blender.exe!wm_handlers_do_intern(bContext * C, wmEvent * event, ListBase * handlers) Line 2718
at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2718)
blender.exe!wm_handlers_do(bContext * C, wmEvent * event, ListBase * handlers) Line 2977
at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2977)
blender.exe!wm_event_do_handlers(bContext * C) Line 3464
at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(3464)
blender.exe!WM_main(bContext * C) Line 420
at c:\blender-git\blender\source\blender\windowmanager\intern\wm.c(420)
blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Line 493
at c:\blender-git\blender\source\creator\creator.c(493)
[External Code]

Scratch that- not happening in edge mode, but I was able to repro it in face mode. Since I went through the trouble of building Blender I went ahead and made a debug build to get a callstack, this is the output: > blender.exe!issue_debug_notification(const wchar_t * const message) Line 28 > at minkernel\crts\ucrt\src\appcrt\internal\report_runtime_error.cpp(28) > blender.exe!__acrt_report_runtime_error(const wchar_t * message) Line 154 > at minkernel\crts\ucrt\src\appcrt\internal\report_runtime_error.cpp(154) > blender.exe!abort() Line 61 > at minkernel\crts\ucrt\src\appcrt\startup\abort.cpp(61) > blender.exe!CustomData_get_layer_index(const CustomData * data, int type) Line 2065 > at c:\blender-git\blender\source\blender\blenkernel\intern\customdata.c(2065) > blender.exe!CustomData_has_layer(const CustomData * data, int type) Line 2509 > at c:\blender-git\blender\source\blender\blenkernel\intern\customdata.c(2509) > blender.exe!bpy_bmesh_dealloc(BPy_BMesh * self) Line 3452 > at c:\blender-git\blender\source\blender\python\bmesh\bmesh_py_types.c(3452) > [External Code] > blender.exe!BPY_DECREF_RNA_INVALIDATE(void * pyob_ptr) Line 583 > at c:\blender-git\blender\source\blender\python\intern\bpy_interface.c(583) > blender.exe!WM_operator_free(wmOperator * op) Line 78 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm.c(78) > blender.exe!WM_operator_stack_clear(wmWindowManager * wm) Line 184 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm.c(184) > blender.exe!ed_undo_exec(bContext * C, wmOperator * op) Line 389 > at c:\blender-git\blender\source\blender\editors\undo\ed_undo.c(389) > blender.exe!wm_operator_invoke(bContext * C, wmOperatorType * ot, wmEvent * event, PointerRNA * properties, ReportList * reports, const bool poll_only, bool use_last_properties) Line 1451 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(1451) > blender.exe!wm_handler_operator_call(bContext * C, ListBase * handlers, wmEventHandler * handler_base, wmEvent * event, PointerRNA * properties) Line 2279 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2279) > blender.exe!wm_handlers_do_keymap_with_keymap_handler(bContext * C, wmEvent * event, ListBase * handlers, wmEventHandler_Keymap * handler, wmKeyMap * keymap, const bool do_debug_handler) Line 2581 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2581) > blender.exe!wm_handlers_do_intern(bContext * C, wmEvent * event, ListBase * handlers) Line 2718 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2718) > blender.exe!wm_handlers_do(bContext * C, wmEvent * event, ListBase * handlers) Line 2977 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(2977) > blender.exe!wm_event_do_handlers(bContext * C) Line 3464 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm_event_system.c(3464) > blender.exe!WM_main(bContext * C) Line 420 > at c:\blender-git\blender\source\blender\windowmanager\intern\wm.c(420) > blender.exe!main(int argc, const unsigned char * * UNUSED_argv_c) Line 493 > at c:\blender-git\blender\source\creator\creator.c(493) > [External Code] >
Poster

Here's a video of it happening in face mode with the latest from git.
bevelcrash_281_defaultsettings.mp4

Here's a video of it happening in face mode with the latest from git. [bevelcrash_281_defaultsettings.mp4](https://archive.blender.org/developer/F7753883/bevelcrash_281_defaultsettings.mp4)
Collaborator

Added subscriber: @JacquesLucke

Added subscriber: @JacquesLucke
Collaborator

I cannot reproduce it either.

Please clarify what you mean by "committing the operation" and "undo without committing the operation".

Furthermore, please prepare a new file in which you can reproduce the crash with as few steps as possible.

I cannot reproduce it either. Please clarify what you mean by "committing the operation" and "undo without committing the operation". Furthermore, please prepare a new file in which you can reproduce the crash with as few steps as possible.
Poster

Please clarify what you mean by "committing the operation" and "undo without committing the operation".

committing the operation- when the operator is no longer running modal and has returned. in other words- while the operator panel with all of the operator properties is still visible.

Furthermore, please prepare a new file in which you can reproduce the crash with as few steps as possible

I'll try, but as you can see in the video above it's happening on the default cube with factory defaults restored. Not sure how much simpler I can make it than that :)

> Please clarify what you mean by "committing the operation" and "undo without committing the operation". committing the operation- when the operator is no longer running modal and has returned. in other words- while the operator panel with all of the operator properties is still visible. > Furthermore, please prepare a new file in which you can reproduce the crash with as few steps as possible I'll try, but as you can see in the video above it's happening on the default cube with factory defaults restored. Not sure how much simpler I can make it than that :)
mont29 commented 3 years ago
Owner

Added subscriber: @mont29

Added subscriber: @mont29
mont29 commented 3 years ago
Owner

Cannot reproduce either here on linux with current master. Your crashlog is weird too, since it seems to go through py API of bmesh when freeing operator, that does not make much sense as bevel is a C op… What is the operator in the WM_operator_free() call in that stack when the crash happen?

Cannot reproduce either here on linux with current master. Your crashlog is weird too, since it seems to go through py API of bmesh when freeing operator, that does not make much sense as bevel is a C op… What is the operator in the `WM_operator_free()` call in that stack when the crash happen?
mont29 commented 3 years ago
Owner

Changed status from 'Open' to: 'Archived'

Changed status from 'Open' to: 'Archived'
mont29 closed this issue 3 years ago
mont29 self-assigned this 3 years ago
mont29 commented 3 years ago
Owner

More than a week without reply or activity. Due to the policy of the tracker archiving for until required info/data are provided.

More than a week without reply or activity. Due to the policy of the tracker archiving for until required info/data are provided.
Sign in to join this conversation.
No Label
Interest/Alembic
Interest/Animation & Rigging
Interest/Asset Browser
Interest/Asset Browser Project Overview
Interest/Audio
Interest/Automated Testing
Interest/Blender Asset Bundle
Interest/Collada
Interest/Compositing
Interest/Core
Interest/Cycles
Interest/Dependency Graph
Interest/Development Management
Interest/Eevee & Viewport
Interest/Freestyle
Interest/Geometry Nodes
Interest/Grease Pencil
Interest/ID Management
Interest/Images & Movies
Interest/Import/Export
Interest/Line Art
Interest/Masking
Interest/Modeling
Interest/Modifiers
Interest/Motion Tracking
Interest/Nodes & Physics
Interest/Overrides
Interest/Performance
Interest/Performance
Interest/Physics
Interest/Pipeline, Assets & I/O
Interest/Platforms, Builds, Tests & Devices
Interest/Python API
Interest/Render & Cycles
Interest/Render Pipeline
Interest/Sculpt, Paint & Texture
Interest/Text Editor
Interest/Translations
Interest/Triaging
Interest/Undo
Interest/USD
Interest/User Interface
Interest/UV Editing
Interest/VFX & Video
Interest/Video Sequencer
Interest/Virtual Reality
legacy module/Animation & Rigging
legacy module/Core
legacy module/Development Management
legacy module/Eevee & Viewport
legacy module/Grease Pencil
legacy module/Modeling
legacy module/Nodes & Physics
legacy module/Pipeline, Assets & IO
legacy module/Platforms, Builds, Tests & Devices
legacy module/Python API
legacy module/Rendering & Cycles
legacy module/Sculpt, Paint & Texture
legacy module/Triaging
legacy module/User Interface
legacy module/VFX & Video
legacy project/1.0.0-beta.2
legacy project/Asset Browser (Archived)
legacy project/BF Blender: 2.8
legacy project/BF Blender: After Release
legacy project/BF Blender: Next
legacy project/BF Blender: Regressions
legacy project/BF Blender: Unconfirmed
legacy project/Blender 2.70
legacy project/Code Quest
legacy project/Datablocks and Libraries
legacy project/Eevee
legacy project/Game Animation
legacy project/Game Audio
legacy project/Game Data Conversion
legacy project/Game Engine
legacy project/Game Logic
legacy project/Game Physics
legacy project/Game Python
legacy project/Game Rendering
legacy project/Game UI
legacy project/GPU / Viewport
legacy project/GSoC
legacy project/Infrastructure: Websites
legacy project/LibOverrides - Usability and UX
legacy project/Milestone 1: Basic, Local Asset Browser
legacy project/Nodes
legacy project/OpenGL Error
legacy project/Papercut
legacy project/Pose Library Basics
legacy project/Retrospective
legacy project/Tracker Curfew
legacy project/Wintab High Frequency
Meta/Good First Issue
Meta/Papercut
migration/requires-manual-verification
Module › Animation & Rigging
Module › Core
Module › Development Management
Module › Eevee & Viewport
Module › Grease Pencil
Module › Modeling
Module › Nodes & Physics
Module › Pipeline, Assets & IO
Module › Platforms, Builds, Tests & Devices
Module › Python API
Module › Render & Cycles
Module › Sculpt, Paint & Texture
Module › Triaging
Module › User Interface
Module › VFX & Video
Platform/FreeBSD
Platform/Linux
Platform/macOS
Platform/Windows
Priority › High
Priority › Low
Priority › Normal
Priority › Unbreak Now!
Status › Archived
Status › Confirmed
Status › Duplicate
Status › Needs Information from Developers
Status › Needs Information from User
Status › Needs Triage
Status › Resolved
Type › Bug
Type › Design
Type › Known Issue
Type › Patch
Type › Report
Type › To Do
No Milestone
No project
No Assignees
4 Participants
Notifications
Due Date

No due date set.

Dependencies

No dependencies set.

Reference: blender/blender#69966
Loading…
There is no content yet.