Search Issue Tracker
By Design
By Design in 2023.3.X
Votes
0
Found in
2022.3.14f1
2023.2.1f1
2023.3.0a16
Issue ID
UUM-59412
Regression
No
Crash on RtlFreeHeap when marshaling data
Reproduction steps:
1. Open the attached project "CrashRepro"
2. Enter the Play Mode
Expected result: The Play mode continues
Actual result: Editor crashes
Reproducible with: 2022.3.14f1, 2023.2.1f1, 2023.3.0a16
Couldn’t test with: 2021.3.32f1 - “error CS0234: The type or namespace name 'Properties' does not exist in the namespace 'Unity'“
Reproducible on: Windows 10
Not reproducible on: No other environment tested
First few lines of stack trace:
{noformat}0x00007ffcd08f47b1 (ntdll) RtlFreeHeap
0x00007ffc8894dc50 (mono-2.0-bdwgc) _free_base (at minkernel/crts/ucrt/src/appcrt/heap/free_base.cpp:105)
0x000002140a2e36bb ((<unknown>))
0x000002153b00b5b3 (Mono JIT Code) (wrapper other) UTP.FromServerMessages.ServerHelloMsg:StructureToPtr (object,intptr,bool)
0x000002153b00b70c (Mono JIT Code) (wrapper runtime-invoke) <Module>:runtime_invoke_void_object_intptr_byte (object,intptr,intptr,intptr)
0x00007ffc88694b6e (mono-2.0-bdwgc) mono_jit_runtime_invoke (at C:/build/output/Unity-Technologies/mono/mono/mini/mini-runtime.c:3445){noformat}
Add comment
All about bugs
View bugs we have successfully reproduced, and vote for the bugs you want to see fixed most urgently.
Latest issues
- Out-of-bounds memory access with multiple CanvasRenderers under a Canvas when using Mesh API
- Inspector tries to access file after it was deleted when the file was locked in Inspector window
- Changing Transform values in Search window Inspector loses focus while dragging and stopping mouse without releasing dragging action
- Saving changes on the dirty VFX Graph during the Play mode throws "The referenced script (Unknown) on this Behaviour is missing!" warnings
- VFX Graph Debug Info overlaps the "Initialize" block debug info by default
Resolution Note:
Passing true for the fDeleteOld parameter on System.Runtime.InteropServices.Marshal.StructureToPtr with a pointer that was not previously marshalled is not supported and will cause a crash.
Resolution Note (2023.3.X):
Passing true for the fDeleteOld parameter on System.Runtime.InteropServices.Marshal.StructureToPtr with a pointer that was not previously marshalled is not supported and will cause a crash.