[Synfig-devl] [ synfig-Bugs-1689329 ] studio crashes zooming in to canvas

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

Bugs item #1689329, was opened at 2007-03-27 18:05
Message generated for change (Comment added) made by dooglus
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=757416&aid=1689329&group_id=144022

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: dooglus (dooglus)
Assigned to: Nobody/Anonymous (nobody)
Summary: studio crashes zooming in to canvas

Initial Comment:
The attached .sif file crashes studio if I open it, maximise the canvas and zoom in 4 or 5 times.

If I don't resize the window before zooming, it doesn't crash.

valgrind shows me this, which may well be related:

==589== Thread 2:
==589== Invalid read of size 4
==589==    at 0x82B3EEA: synfig::Color::Color(synfig::Color const&) (color.h:258)
==589==    by 0x42E43F8: synfig::_BlendFunc::operator()(synfig::Color const&, synfig::Color const&, float const&) const (surface.h:118)
==589==    by 0x42E4490: etl::alpha_pen<etl::generic_pen<synfig::Color, synfig::Color>, float, synfig::_BlendFunc>::put_value(synfig::Color const&, float) const (_pen.h:356)
==589==    by 0x4304475: etl::alpha_pen<etl::generic_pen<synfig::Color, synfig::Color>, float, synfig::_BlendFunc>::put_value_alpha(float) const (_pen.h:358)
==589==    by 0x43044A3: etl::alpha_pen<etl::generic_pen<synfig::Color, synfig::Color>, float, synfig::_BlendFunc>::put_hline(int, float const&) (_pen.h:359)
==589==    by 0x60D2B10: void etl::surface<synfig::Color, synfig::Color, synfig::ColorPrep>::fill<synfig::Surface::alpha_pen>(synfig::Color, synfig::Surface::alpha_pen&, int, int) (_surface.h:239)
==589==    by 0x60CD5C7: Rectangle::accelerated_render(synfig::Context, synfig::Surface*, int, synfig::RendDesc const&, synfig::ProgressCallback*) const (rectangle.cpp:447)
==589==    by 0x439E8BA: synfig::Context::accelerated_render(synfig::Surface*, int, synfig::RendDesc const&, synfig::ProgressCallback*) const (context.cpp:248)
==589==    by 0x42DDFCC: synfig::Layer_PasteCanvas::accelerated_render(synfig::Context, synfig::Surface*, int, synfig::RendDesc const&, synfig::ProgressCallback*) const (layer_pastecanvas.cpp:367)
==589==    by 0x439E8BA: synfig::Context::accelerated_render(synfig::Surface*, int, synfig::RendDesc const&, synfig::ProgressCallback*) const (context.cpp:248)
==589==    by 0x42DD93B: synfig::Layer_PasteCanvas::accelerated_render(synfig::Context, synfig::Surface*, int, synfig::RendDesc const&, synfig::ProgressCallback*) const (layer_pastecanvas.cpp:313)
==589==    by 0x439E8BA: synfig::Context::accelerated_render(synfig::Surface*, int, synfig::RendDesc const&, synfig::ProgressCallback*) const (context.cpp:248)
==589==    by 0x430D292: synfig::Target_Tile::render_frame_(synfig::Context, synfig::ProgressCallback*) (target_tile.cpp:250)
==589==    by 0x430DD77: synfig::Target_Tile::render(synfig::ProgressCallback*) (target_tile.cpp:381)
==589==    by 0x831E65F: studio::AsyncRenderer::render_target() (asyncrenderer.cpp:460)
==589==    by 0x8320A74: sigc::bound_mem_functor0<void, studio::AsyncRenderer>::operator()() const (mem_fun.h:1787)
==589==    by 0x8320A8B: sigc::adaptor_functor<sigc::bound_mem_functor0<void, studio::AsyncRenderer> >::operator()() const (adaptor_trait.h:251)
==589==    by 0x8320AF1: sigc::internal::slot_call0<sigc::bound_mem_functor0<void, studio::AsyncRenderer>, void>::call_it(sigc::internal::slot_rep*) (slot.h:103)
==589==    by 0x4D1BAE7: (within /usr/lib/libglibmm-2.4.so.1.0.24)
==589==    by 0x50746BE: (within /usr/lib/libglib-2.0.so.0.1200.6)
==589==    by 0x45800BC: start_thread (in /lib/tls/libpthread-2.3.6.so)
==589==    by 0x529E9ED: clone (in /lib/tls/libc-2.3.6.so)
==589==  Address 0x7749FC8 is not stack'd, malloc'd or (recently) free'd

gdb also sometimes shows some weird colour values when it crashes:

(gdb) where
#0  0xb6d20947 in raise () from /lib/tls/libc.so.6
#1  0xb6d220c9 in abort () from /lib/tls/libc.so.6
#2  0xb6d1a05f in __assert_fail () from /lib/tls/libc.so.6
#3  0xb7d3d9bb in blendfunc_STRAIGHT (src=@0xb5e9dafc, bg=@0xb5e9db5c, amount=0.299951553) at color.cpp:268
#4  0xb7d3dac0 in blendfunc_ALPHA_OVER (a=@0xb5e9db6c, b=@0xb5e9db5c, amount=0.299951553) at color.cpp:502
#5  0xb7d3d7a9 in synfig::Color::blend (a=@0xb5e9db6c, b=@0xb5e9db5c, amount=0.299951553, type=synfig::Color::BLEND_ALPHA_OVER)
    at color.cpp:579
#6  0xb7c653df in synfig::_BlendFunc::operator() (this=0xb5e9de14, a=@0x8e37c48, b=@0xb5e9dbf4, t=@0xb5e9dbcc) at surface.h:118
#7  0xb7c65441 in etl::alpha_pen<etl::generic_pen<synfig::Color, synfig::Color>, float, synfig::_BlendFunc>::put_value (
    this=0xb5e9dde8, v=@0xb5e9dbf4, a=1) at /usr/local/include/ETL/_pen.h:356
#8  0xb7c85426 in etl::alpha_pen<etl::generic_pen<synfig::Color, synfig::Color>, float, synfig::_BlendFunc>::put_value_alpha (
    this=0xb5e9dde8, a=1) at /usr/local/include/ETL/_pen.h:358
#9  0xb7c85454 in etl::alpha_pen<etl::generic_pen<synfig::Color, synfig::Color>, float, synfig::_BlendFunc>::put_hline (
    this=0xb5e9dde8, l=26, a=@0xb5e9dc4c) at /usr/local/include/ETL/_pen.h:359
#10 0xb6884b11 in etl::surface<synfig::Color, synfig::Color, synfig::ColorPrep>::fill<synfig::Surface::alpha_pen> (this=0xb5e9e730, 
    v=@0xb5e9e18c, PEN=@0xb5e9dde8, w=28, h=1) at /usr/local/include/ETL/_surface.h:239
#11 0xb687f5c8 in Rectangle::accelerated_render (this=0x8c955a8, context=
        {<std::_Deque_iterator<etl::handle<synfig::Layer>,const etl::handle<synfig::Layer>&,const etl::handle<synfig::Layer>*>> = {_M_cur = 0x8e16800, _M_first = 0x8e16800, _M_last = 0x8e16a00, _M_node = 0x8d9dbfc}, <No data fields>}, surface=0xb5e9e730, quality=10, 
    renddesc=@0xb5e9e644, cb=0xb5e9e788) at rectangle.cpp:447
#12 0xb7d1f86b in synfig::Context::accelerated_render (this=0xb5e9e90c, surface=0xb5e9e730, quality=10, renddesc=@0xb5e9e644, 
    cb=0xb5e9e788) at context.cpp:248
#13 0xb7c5ef7d in synfig::Layer_PasteCanvas::accelerated_render (this=0x8e16c10, context=
        {<std::_Deque_iterator<etl::handle<synfig::Layer>,const etl::handle<synfig::Layer>&,const etl::handle<synfig::Layer>*>> = {_M_cur = 0x8e153f4, _M_first = 0x8e153d0, _M_last = 0x8e155d0, _M_node = 0x8e18dd4}, <No data fields>}, surface=0xb5e9f084, quality=10, 
    renddesc=@0xb5e9efd0, cb=0xb5e9ec80) at layer_pastecanvas.cpp:367
#14 0xb7d1f86b in synfig::Context::accelerated_render (this=0xb5e9ee54, surface=0xb5e9f084, quality=10, renddesc=@0xb5e9efd0, 
    cb=0xb5e9ec80) at context.cpp:248
#15 0xb7c5e8ec in synfig::Layer_PasteCanvas::accelerated_render (this=0x8e16458, context=
        {<std::_Deque_iterator<etl::handle<synfig::Layer>,const etl::handle<synfig::Layer>&,const etl::handle<synfig::Layer>*>> = {_M_cur = 0x8e153e8, _M_first = 0x8e153d0, _M_last = 0x8e155d0, _M_node = 0x8e18dd4}, <No data fields>}, surface=0xb5e9f084, quality=10, 
    renddesc=@0xb5e9efd0, cb=0xb5e9f05c) at layer_pastecanvas.cpp:313
#16 0xb7d1f86b in synfig::Context::accelerated_render (this=0xb5e9f1e4, surface=0xb5e9f084, quality=10, renddesc=@0xb5e9efd0, 
    cb=0xb5e9f05c) at context.cpp:248
#17 0xb7c8e243 in synfig::Target_Tile::render_frame_ (this=0xb6b5c008, context=
        {<std::_Deque_iterator<etl::handle<synfig::Layer>,const etl::handle<synfig::Layer>&,const etl::handle<synfig::Layer>*>> = {_M_cur = 0x8e16f7c, _M_first = 0x8e16d80, _M_last = 0x8e16f80, _M_node = 0x8e18dd0}, <No data fields>}, cb=0x0) at target_tile.cpp:250
#18 0xb7c8ed28 in synfig::Target_Tile::render (this=0xb6b5c008, cb=0x0) at target_tile.cpp:381
#19 0x0831e660 in studio::AsyncRenderer::render_target (this=0x8c960b0) at asyncrenderer.cpp:460
#20 0x08320a75 in sigc::bound_mem_functor0<void, studio::AsyncRenderer>::operator() (this=0x8e10ecc)
    at /usr/include/sigc++-2.0/sigc++/functors/mem_fun.h:1787
#21 0x08320a8c in sigc::adaptor_functor<sigc::bound_mem_functor0<void, studio::AsyncRenderer> >::operator() (this=0x8e10ec8)
    at /usr/include/sigc++-2.0/sigc++/adaptors/adaptor_trait.h:251
#22 0x08320af2 in sigc::internal::slot_call0<sigc::bound_mem_functor0<void, studio::AsyncRenderer>, void>::call_it (rep=0x8e10eb0)
    at /usr/include/sigc++-2.0/sigc++/functors/slot.h:103
#23 0xb72e5ae8 in ?? () from /usr/lib/libglibmm-2.4.so.1
#24 0xb6f896bf in ?? () from /usr/lib/libglib-2.0.so.0
#25 0x089f6a00 in ?? ()
#26 0x08c9bdc8 in ?? ()
#27 0xb5e9f468 in ?? ()
#28 0xb7a73ae6 in __nptl_deallocate_tsd () from /lib/tls/libpthread.so.0
#29 0xb7a740bd in start_thread () from /lib/tls/libpthread.so.0
#30 0xb6dc39ee in clone () from /lib/tls/libc.so.6
(gdb) p src
No symbol "src" in current context.
(gdb) up
#1  0xb6d220c9 in abort () from /lib/tls/libc.so.6
(gdb) 
#2  0xb6d1a05f in __assert_fail () from /lib/tls/libc.so.6
(gdb) 
#3  0xb7d3d9bb in blendfunc_STRAIGHT (src=@0xb5e9dafc, bg=@0xb5e9db5c, amount=0.299951553) at color.cpp:268
268		assert(out.is_valid());
(gdb) p src
$1 = (synfig::Color &) @0xb5e9dafc: {a_ = 0, r_ = -5.30277541e-20, g_ = 9.63986447e+25, b_ = 1.22342433e+36, static hex_ = {
    static npos = 4294967295, 
    _M_dataplus = {<std::allocator<char>> = {<__gnu_cxx::new_allocator<char>> = {<No data fields>}, <No data fields>}, 
      _M_p = 0x8da8154 "000000"}}}
(gdb) p bg
$2 = (synfig::Color &) @0xb5e9db5c: {a_ = 3.04313708e+35, r_ = -5.30277541e-20, g_ = 9.63986447e+25, b_ = 1.22342433e+36, 
  static hex_ = {static npos = 4294967295, 
    _M_dataplus = {<std::allocator<char>> = {<__gnu_cxx::new_allocator<char>> = {<No data fields>}, <No data fields>}, 
      _M_p = 0x8da8154 "000000"}}}
(gdb) p amount
$3 = 0.299951553
(gdb) p out
$4 = (synfig::Color &) @0xb5e9dbbc: {a_ = 2.13034348e+35, r_ = -5.30277541e-20, g_ = -nan(0x400000), b_ = -nan(0x400000), 
  static hex_ = {static npos = 4294967295, 
    _M_dataplus = {<std::allocator<char>> = {<__gnu_cxx::new_allocator<char>> = {<No data fields>}, <No data fields>}, 
      _M_p = 0x8da8154 "000000"}}}
(gdb) p src.get_a()
$5 = (const ColorReal &) @0xb5e9dafc: 0
(gdb) p src.get_r()
$6 = (const ColorReal &) @0xb5e9db00: -5.30277541e-20

----------------------------------------------------------------------

>Comment By: dooglus (dooglus)
Date: 2007-03-27 21:34

Message:
Logged In: YES 
user_id=1546005
Originator: YES

I didn't have any success trying to debug this, so I tried cutting the
example .sif down to a smaller example that still crashes.

Here it is:

<?xml version="1.0"?>
<canvas>
<layer type="rectangle">
<param name="blend_method"><integer value="19"/></param>
<param name="point1"><vector><x>-1</x><y>-2</y></vector></param>
<param name="point2"><vector><x>2</x><y>1</y></vector></param>
<param name="invert"><bool value="true"/></param>
</layer>
</canvas>

color.h says:
		//! Deprecated
		BLEND_ALPHA_OVER=19,//!< multiply alphas and then straight blends that
using the amount

it seems that this crash is dependent on using the deprecated 'alpha over'
blend method.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=757416&aid=1689329&group_id=144022