==168545==ERROR: AddressSanitizer: heap-use-after-free on address 0x62500127f110 at pc 0x00000fb6a044 bp 0x7ffce5920450 sp 0x7ffce5920440 WRITE of size 8 at 0x62500127f110 thread T0 #0 0xfb6a043 in remlink /home/jacques/blender-git/blender/intern/guardedalloc/intern/mallocn_guarded_impl.c:1073 #1 0xfb6a2bd in rem_memblock /home/jacques/blender-git/blender/intern/guardedalloc/intern/mallocn_guarded_impl.c:1084 #2 0xfb6992d in MEM_guarded_freeN /home/jacques/blender-git/blender/intern/guardedalloc/intern/mallocn_guarded_impl.c:1003 #3 0xdec93e7 in GPU_batch_discard /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_batch.c:160 #4 0xdeedbec in GPU_pbvh_bmesh_buffers_update_free /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_buffers.c:878 #5 0x2af43df in pbvh_update_draw_buffers /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh.c:1355 #6 0x2b04c9a in BKE_pbvh_draw_cb /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh.c:2698 #7 0x4546663 in drw_sculpt_generate_calls /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager_data.c:1017 #8 0x4546d61 in DRW_shgroup_call_sculpt_with_materials /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager_data.c:1060 #9 0x4652a1a in workbench_cache_sculpt_populate /home/jacques/blender-git/blender/source/blender/draw/engines/workbench/workbench_engine.c:129 #10 0x46550c8 in workbench_cache_populate /home/jacques/blender-git/blender/source/blender/draw/engines/workbench/workbench_engine.c:348 #11 0x45284ef in drw_engines_cache_populate /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1003 #12 0x452d03d in DRW_draw_render_loop_ex /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1475 #13 0x452c11f in DRW_draw_view /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1392 #14 0x7526cd3 in view3d_draw_view /home/jacques/blender-git/blender/source/blender/editors/space_view3d/view3d_draw.c:1602 #15 0x7526e54 in view3d_main_region_draw /home/jacques/blender-git/blender/source/blender/editors/space_view3d/view3d_draw.c:1626 #16 0x56610bb in ED_region_do_draw /home/jacques/blender-git/blender/source/blender/editors/screen/area.c:538 #17 0x3947aa4 in wm_draw_window_offscreen /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:688 #18 0x3948b01 in wm_draw_window /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:809 #19 0x3949fa8 in wm_draw_update /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:1015 #20 0x393b293 in WM_main /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm.c:456 #21 0x2512e6f in main /home/jacques/blender-git/blender/source/creator/creator.c:524 #22 0x7ffbb5b51001 in __libc_start_main (/usr/lib/libc.so.6+0x27001) #23 0x25121bd in _start (/home/jacques/blender-git/build_linux/bin/blender+0x25121bd) 0x62500127f110 is located 16 bytes inside of 8812-byte region [0x62500127f100,0x62500128136c) freed by thread T0 here: #0 0x7ffbb61310e9 in __interceptor_free /build/gcc/src/gcc/libsanitizer/asan/asan_malloc_linux.cpp:123 #1 0xfb6abb9 in rem_memblock /home/jacques/blender-git/blender/intern/guardedalloc/intern/mallocn_guarded_impl.c:1117 #2 0xfb6992d in MEM_guarded_freeN /home/jacques/blender-git/blender/intern/guardedalloc/intern/mallocn_guarded_impl.c:1003 #3 0xdf99588 in VertBuffer_upload_data /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_vertex_buffer.c:269 #4 0xdf998fd in GPU_vertbuf_use /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_vertex_buffer.c:283 #5 0xdef0c92 in GPU_pbvh_buffers_update_flush /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_buffers.c:1098 #6 0x2b05081 in BKE_pbvh_draw_cb /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh.c:2719 #7 0x4546663 in drw_sculpt_generate_calls /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager_data.c:1017 #8 0x4546d61 in DRW_shgroup_call_sculpt_with_materials /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager_data.c:1060 #9 0x4652a1a in workbench_cache_sculpt_populate /home/jacques/blender-git/blender/source/blender/draw/engines/workbench/workbench_engine.c:129 #10 0x46550c8 in workbench_cache_populate /home/jacques/blender-git/blender/source/blender/draw/engines/workbench/workbench_engine.c:348 #11 0x45284ef in drw_engines_cache_populate /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1003 #12 0x452d03d in DRW_draw_render_loop_ex /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1475 #13 0x452c11f in DRW_draw_view /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1392 #14 0x7526cd3 in view3d_draw_view /home/jacques/blender-git/blender/source/blender/editors/space_view3d/view3d_draw.c:1602 #15 0x7526e54 in view3d_main_region_draw /home/jacques/blender-git/blender/source/blender/editors/space_view3d/view3d_draw.c:1626 #16 0x56610bb in ED_region_do_draw /home/jacques/blender-git/blender/source/blender/editors/screen/area.c:538 #17 0x3947aa4 in wm_draw_window_offscreen /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:688 #18 0x3948b01 in wm_draw_window /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:809 #19 0x3949fa8 in wm_draw_update /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:1015 #20 0x393b293 in WM_main /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm.c:456 #21 0x2512e6f in main /home/jacques/blender-git/blender/source/creator/creator.c:524 #22 0x7ffbb5b51001 in __libc_start_main (/usr/lib/libc.so.6+0x27001) previously allocated by thread T215 here: #0 0x7ffbb6131459 in __interceptor_malloc /build/gcc/src/gcc/libsanitizer/asan/asan_malloc_linux.cpp:145 #1 0xfb6733a in MEM_guarded_mallocN /home/jacques/blender-git/blender/intern/guardedalloc/intern/mallocn_guarded_impl.c:514 #2 0xdf9714e in GPU_vertbuf_data_alloc /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_vertex_buffer.c:135 #3 0xdedf145 in gpu_pbvh_vert_buf_data_set /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_buffers.c:154 #4 0xdeee21d in GPU_pbvh_bmesh_buffers_update /home/jacques/blender-git/blender/source/blender/gpu/intern/gpu_buffers.c:925 #5 0x2af3d66 in pbvh_update_draw_buffer_cb /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh.c:1326 #6 0x2b39d24 in operator() /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh_parallel.cc:167 #7 0x2b3b089 in __invoke_impl > /usr/include/c++/10.1.0/bits/invoke.h:60 #8 0x2b3afa1 in __invoke > /usr/include/c++/10.1.0/bits/invoke.h:95 #9 0x2b3aec4 in _M_invoke<0> /usr/include/c++/10.1.0/thread:264 #10 0x2b3ae37 in operator() /usr/include/c++/10.1.0/thread:271 #11 0x2b3adff in _M_run /usr/include/c++/10.1.0/thread:215 #12 0xfdce633 in execute_native_thread_routine (/home/jacques/blender-git/build_linux/bin/blender+0xfdce633) Thread T215 created by T0 here: #0 0x7ffbb60d71c7 in __interceptor_pthread_create /build/gcc/src/gcc/libsanitizer/asan/asan_interceptors.cpp:214 #1 0xfdce909 in std::thread::_M_start_thread(std::unique_ptr >, void (*)()) (/home/jacques/blender-git/build_linux/bin/blender+0xfdce909) #2 0x2b3a0bf in BKE_pbvh_parallel_range2 /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh_parallel.cc:167 #3 0x2af4558 in pbvh_update_draw_buffers /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh.c:1370 #4 0x2b04c9a in BKE_pbvh_draw_cb /home/jacques/blender-git/blender/source/blender/blenkernel/intern/pbvh.c:2698 #5 0x4546663 in drw_sculpt_generate_calls /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager_data.c:1017 #6 0x4546d61 in DRW_shgroup_call_sculpt_with_materials /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager_data.c:1060 #7 0x4652a1a in workbench_cache_sculpt_populate /home/jacques/blender-git/blender/source/blender/draw/engines/workbench/workbench_engine.c:129 #8 0x46550c8 in workbench_cache_populate /home/jacques/blender-git/blender/source/blender/draw/engines/workbench/workbench_engine.c:348 #9 0x45284ef in drw_engines_cache_populate /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1003 #10 0x452d03d in DRW_draw_render_loop_ex /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1475 #11 0x452c11f in DRW_draw_view /home/jacques/blender-git/blender/source/blender/draw/intern/draw_manager.c:1392 #12 0x7526cd3 in view3d_draw_view /home/jacques/blender-git/blender/source/blender/editors/space_view3d/view3d_draw.c:1602 #13 0x7526e54 in view3d_main_region_draw /home/jacques/blender-git/blender/source/blender/editors/space_view3d/view3d_draw.c:1626 #14 0x56610bb in ED_region_do_draw /home/jacques/blender-git/blender/source/blender/editors/screen/area.c:538 #15 0x3947aa4 in wm_draw_window_offscreen /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:688 #16 0x3948b01 in wm_draw_window /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:809 #17 0x3949fa8 in wm_draw_update /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm_draw.c:1015 #18 0x393b293 in WM_main /home/jacques/blender-git/blender/source/blender/windowmanager/intern/wm.c:456 #19 0x2512e6f in main /home/jacques/blender-git/blender/source/creator/creator.c:524 #20 0x7ffbb5b51001 in __libc_start_main (/usr/lib/libc.so.6+0x27001) SUMMARY: AddressSanitizer: heap-use-after-free /home/jacques/blender-git/blender/intern/guardedalloc/intern/mallocn_guarded_impl.c:1073 in remlink Shadow bytes around the buggy address: 0x0c4a80247dd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a80247de0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a80247df0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a80247e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a80247e10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c4a80247e20: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a80247e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a80247e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a80247e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a80247e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a80247e70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Shadow gap: cc ==168545==ABORTING The terminal process terminated with exit code: 1