Page MenuHome

CRASH: Control clicking on UV Map will cause Blender to Crash
Closed, ResolvedPublic

Description

System Information
Operating system: Windows-10-10.0.18362-SP0 64 Bits
Graphics card: GeForce GTX 1080/PCIe/SSE2 NVIDIA Corporation 4.5.0 NVIDIA 442.19

Blender Version
Broken: version: 2.91.0 Alpha, branch: master, commit date: 2020-07-23 22:35, hash: rB698af2e774b5
Worked: version: 2.83.0 does not crash

Short description of error
When UV EDITING, and entering sub object editing mode (VERT,EDGE, FACE) and then CONTROL clicking on the UV map on the left will crash blender.

Exact steps for others to reproduce the error

  1. Open Blender
  2. Click on UV EDITING
  3. Click on Cube, if not already selected and hit TAB if you're not in sub-object edit mode already
  4. CTRL + LMB click on the UVMAP window and Blender will crash.

Thank you!

Revisions and Commits

Event Timeline

Robert Guetzkow (rjg) added a project: Restricted Project.Jul 25 2020, 12:28 PM
Robert Guetzkow (rjg) changed the task status from Needs Triage to Confirmed.Jul 25 2020, 12:30 PM
Robert Guetzkow (rjg) triaged this task as High priority.

l_src is NULL and being dereferenced when using BM_ELEM_CD_GET_VOID_P(l_src, cd_loop_uv_offset); in uv_shortest_path_pick_invoke. I think a simple check for NULL and skipping the operation when no active vertex loop exists should solve the problem.

@Campbell Barton (campbellbarton) The commit that introduced the code was rBea5fe7abc183c1e53d327f97280f589499fe60bb. I'm not entirely sure which module tag is the right one for tickets related to the UV editor.

uv_shortest_path_pick_invoke(bContext * C, wmOperator * op, const wmEvent * event) Line 588	C
wm_operator_invoke(bContext * C, wmOperatorType * ot, wmEvent * event, PointerRNA * properties, ReportList * reports, const bool poll_only, bool use_last_properties) Line 1284	C
wm_handler_operator_call(bContext * C, ListBase * handlers, wmEventHandler * handler_base, wmEvent * event, PointerRNA * properties, const unsigned char * kmi_idname) Line 2116	C
wm_handlers_do_keymap_with_keymap_handler(bContext * C, wmEvent * event, ListBase * handlers, wmEventHandler_Keymap * handler, wmKeyMap * keymap, const bool do_debug_handler) Line 2426	C
wm_handlers_do_intern(bContext * C, wmEvent * event, ListBase * handlers) Line 2727	C
wm_handlers_do(bContext * C, wmEvent * event, ListBase * handlers) Line 2939	C
wm_event_do_handlers(bContext * C) Line 3357	C
WM_main(bContext * C) Line 478	C
main(int argc, const unsigned char * * UNUSED_argv_c) Line 535	C