Search Issue Tracker

By Design

Votes

0

Found in

2022.3.14f1

2023.2.1f1

2023.3.0a16

Issue ID

UUM-59412

Regression

No

Crash on RtlFreeHeap when marshaling data

--

-

Reproduction steps:
1. Open the attached project "CrashRepro"
2. Enter the Play Mode

Expected result: The Play mode continues
Actual result: Editor crashes

Reproducible with: 2022.3.14f1, 2023.2.1f1, 2023.3.0a16
Couldn’t test with: 2021.3.32f1 - “error CS0234: The type or namespace name 'Properties' does not exist in the namespace 'Unity'“

Reproducible on: Windows 10
Not reproducible on: No other environment tested

First few lines of stack trace:

{noformat}0x00007ffcd08f47b1 (ntdll) RtlFreeHeap
0x00007ffc8894dc50 (mono-2.0-bdwgc) _free_base (at minkernel/crts/ucrt/src/appcrt/heap/free_base.cpp:105)
0x000002140a2e36bb ((<unknown>))
0x000002153b00b5b3 (Mono JIT Code) (wrapper other) UTP.FromServerMessages.ServerHelloMsg:StructureToPtr (object,intptr,bool)
0x000002153b00b70c (Mono JIT Code) (wrapper runtime-invoke) <Module>:runtime_invoke_void_object_intptr_byte (object,intptr,intptr,intptr)
0x00007ffc88694b6e (mono-2.0-bdwgc) mono_jit_runtime_invoke (at C:/build/output/Unity-Technologies/mono/mono/mini/mini-runtime.c:3445){noformat}

  1. Resolution Note:

    Passing true for the fDeleteOld parameter on System.Runtime.InteropServices.Marshal.StructureToPtr with a pointer that was not previously marshalled is not supported and will cause a crash.

Add comment

Log in to post comment

All about bugs

View bugs we have successfully reproduced, and vote for the bugs you want to see fixed most urgently.