Search Issue Tracker

Active

Planned for 2020.3.X

Fixed in 2021.2.X

Votes

1

Found in

2020.3

2020.3.0f1

2021.1

2021.2

Issue ID

1322485

Regression

No

Crash on tlsf_free when entering Play Mode and the index is out of range in texture data

Texture

-

How to reproduce:
1. Open the user's attached project from "2D test.zip"
2. Enter Play Mode

Reproducible with: 2020.3.3f1, 2021.1.2f1, 2021.2.0a12
Could not test with: 2018.4.33f1, 2019.4.23f1 (No feature)

First lines of stack traces:
0x00007ff70b6b02f4 (Unity) tlsf_free
0x00007ff707fe7f37 (Unity) DynamicHeapAllocator::Deallocate
0x00007ff707fe3734 (Unity) DualThreadAllocator<DynamicHeapAllocator>::TryDeallocate
0x00007ff707fc5df2 (Unity) MemoryManager::Deallocate
0x00007ff707fd7d1a (Unity) free_alloc_internal
0x00007ff7075c6901 (Unity) dynamic_array<void * __ptr64 [38],0>::~dynamic_array<void * __ptr64 [38],0>

0x00007ff62710a491 (Unity) tlsf_memalign
0x00007ff6250f66f6 (Unity) DynamicHeapAllocator::Allocate
0x00007ff6250f2f54 (Unity) DualThreadAllocator<DynamicHeapAllocator>::Allocate
0x00007ff6250e9ddb (Unity) MemoryManager::Allocate
0x00007ff6250f117c (Unity) malloc_internal
0x00007ff625594f6d (Unity) dynamic_array_detail::dynamic_array_data::resize_buffer

Note:
1. Error "Index is out of range" is added, but still crashes
2. If it doesn't crash, exit Play Mode

  1. Response avatar

    Resolution Note (fix version 2021.1):

    Fixed in 2022.1.0a2

  2. Response avatar

    Resolution Note (fix version 2021.2):

    Fixed in 2021.2.0b11

Add comment

Log in to post comment

All about bugs

View bugs we have successfully reproduced, and vote for the bugs you want to see fixed most urgently.