/home/antonio/MuseScore/mscore/musescore.cpp:main: global share: /home/antonio/MuseScore/mscore/musescore.cpp:Ms::setMscoreLocale: configured localeName /home/antonio/MuseScore/mscore/musescore.cpp:Ms::setMscoreLocale: real localeName /home/antonio/MuseScore/mscore/musescore.cpp:Ms::loadTranslation: load translator /home/antonio/MuseScore/mscore/musescore.cpp:Ms::loadTranslation: load translator /home/antonio/MuseScore/mscore/musescore.cpp:Ms::loadTranslation: load translator failed /home/antonio/MuseScore/mscore/musescore.cpp:Ms::setMscoreLocale: load translator from /home/antonio/MuseScore/mscore/musescore.cpp:Ms::setMscoreLocale: load translator failed /home/antonio/MuseScore/mscore/shortcut.cpp:Ms::Shortcut::load: read shortcuts from <:/data/shortcuts.xml> /home/antonio/MuseScore/mscore/musescore.cpp:main: DPI 360.000000 /home/antonio/MuseScore/mscore/musescore.cpp:main: Information for screen: "VGA-1" /home/antonio/MuseScore/mscore/musescore.cpp:main: Available geometry: 0 0 1360 x 638 /home/antonio/MuseScore/mscore/musescore.cpp:main: Available size: 1360 x 638 /home/antonio/MuseScore/mscore/musescore.cpp:main: Available virtual geometry: 0 0 1360 x 638 /home/antonio/MuseScore/mscore/musescore.cpp:main: Available virtual size: 1360 x 638 /home/antonio/MuseScore/mscore/musescore.cpp:main: Depth: 24 bits /home/antonio/MuseScore/mscore/musescore.cpp:main: Geometry: 0 0 1360 x 663 /home/antonio/MuseScore/mscore/musescore.cpp:main: Logical DPI: 96 /home/antonio/MuseScore/mscore/musescore.cpp:main: Logical DPI X: 96 /home/antonio/MuseScore/mscore/musescore.cpp:main: Logical DPI Y: 96 /home/antonio/MuseScore/mscore/musescore.cpp:main: Physical DPI: 96.2263 /home/antonio/MuseScore/mscore/musescore.cpp:main: Physical DPI X: 96.2228 /home/antonio/MuseScore/mscore/musescore.cpp:main: Physical DPI Y: 96.2297 /home/antonio/MuseScore/mscore/musescore.cpp:main: Physical size: 359 x 175 mm /home/antonio/MuseScore/mscore/musescore.cpp:main: Refresh rate: 59 Hz /home/antonio/MuseScore/mscore/musescore.cpp:main: Size: 1360 x 663 /home/antonio/MuseScore/mscore/musescore.cpp:main: Virtual geometry: 0 0 1360 x 663 /home/antonio/MuseScore/mscore/musescore.cpp:main: Virtual size: 1360 x 663 /home/antonio/MuseScore/mscore/musescore.cpp:main: LibraryPath: /home/antonio/MuseScore/mscore/musescore.cpp:main: LibraryPath: /home/antonio/MuseScore/mscore/miconengine.cpp:32:84: runtime error: left shift of 268566528 by 4 places cannot be represented in type 'int' /home/antonio/MuseScore/libmscore/rendermidi.cpp:1658:79: runtime error: downcast of address 0x6120003b44c0 which does not point to an object of type 'Chord' 0x6120003b44c0: note: object is of type 'Ms::Rest' 6d 01 00 75 b0 50 01 07 00 00 00 00 00 41 1e 00 80 62 00 00 00 00 00 00 00 00 00 00 00 7a 21 00 ^~~~~~~~~~~~~~~~~~~~~~~ vptr for 'Ms::Rest' /home/antonio/MuseScore/libmscore/rendermidi.cpp:1659:54: runtime error: member call on address 0x6120003b44c0 which does not point to an object of type 'Chord' 0x6120003b44c0: note: object is of type 'Ms::Rest' 6d 01 00 75 b0 50 01 07 00 00 00 00 00 41 1e 00 80 62 00 00 00 00 00 00 00 00 00 00 00 7a 21 00 ^~~~~~~~~~~~~~~~~~~~~~~ vptr for 'Ms::Rest' /home/antonio/MuseScore/libmscore/layout.cpp:Ms::Score::doLayoutRange: 0x6280001e4100 0-61440 /home/antonio/MuseScore/libmscore/system.cpp:158:39: runtime error: variable length array bound evaluates to non-positive value 0 /home/antonio/MuseScore/libmscore/layout.cpp:Ms::Score::doLayoutRange: 0x6280001e4100 0--1 /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: MuseScore::changeState: STATE_NORMAL /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: disable synth control /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: MuseScore::changeState: STATE_NORMAL /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: disable synth control /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: MuseScore::changeState: STATE_NORMAL /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: disable synth control /home/antonio/MuseScore/mscore/scoreview.cpp:Ms::ScoreView::enterState: 0x6170000cc580 enterState <> /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: MuseScore::changeState: STATE_NORMAL /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: disable synth control /home/antonio/MuseScore/mscore/scoreview.cpp:Ms::ScoreView::enterState: 0x6170000cc580 enterState /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: MuseScore::changeState: STATE_NORMAL /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: disable synth control /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: MuseScore::changeState: STATE_NORMAL /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::changeState: disable synth control /home/antonio/MuseScore/mscore/musescore.cpp:Ms::MuseScore::cmd: MuseScore::cmd ================================================================= ==31243==ERROR: AddressSanitizer: heap-use-after-free on address 0x6060007b1360 at pc 0x000000fbd2c1 bp 0x7fb8f03d2580 sp 0x7fb8f03d2570 READ of size 4 at 0x6060007b1360 thread T4 #0 0xfbd2c0 in std::less::operator()(int const&, int const&) const /usr/include/c++/5/bits/stl_function.h:387 #1 0x177d0c6 in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_lower_bound(std::_Rb_tree_node >*, std::_Rb_tree_node >*, int const&) /usr/include/c++/5/bits/stl_tree.h:1628 #2 0x177a8a7 in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::lower_bound(int const&) (/usr/local/bin/mscore+0x177a8a7) #3 0x1778ba2 in std::multimap, std::allocator > >::lower_bound(int const&) /usr/include/c++/5/bits/stl_multimap.h:821 #4 0x175d969 in Ms::Seq::setPos(int) /home/antonio/MuseScore/mscore/seq.cpp:1047 #5 0x1747a89 in Ms::Seq::processMessages() /home/antonio/MuseScore/mscore/seq.cpp:568 #6 0x174f047 in Ms::Seq::process(unsigned int, float*) /home/antonio/MuseScore/mscore/seq.cpp:730 #7 0x284dbb8 in Ms::PulseAudio::paCallback(pa_stream*, unsigned long, void*) /home/antonio/MuseScore/mscore/pulseaudio.cpp:64 #8 0x7fb91f41cfcd (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0x2bfcd) #9 0x7fb915001441 in pa_pdispatch_run (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3a441) #10 0x7fb91f3fffcd (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0xefcd) #11 0x7fb915003d5e (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3cd5e) #12 0x7fb9150063da (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3f3da) #13 0x7fb915006788 (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3f788) #14 0x7fb915007019 (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x40019) #15 0x7fb91f4150b6 in pa_mainloop_dispatch (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0x240b6) #16 0x7fb91f4154bb in pa_mainloop_iterate (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0x244bb) #17 0x284fd7e in Ms::PulseAudio::paLoop(void*) /home/antonio/MuseScore/mscore/pulseaudio.cpp:177 #18 0x7fb91f8786b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9) #19 0x7fb916aac82c in clone (/lib/x86_64-linux-gnu/libc.so.6+0x10682c) 0x6060007b1360 is located 32 bytes inside of 56-byte region [0x6060007b1340,0x6060007b1378) freed by thread T0 here: #0 0x7fb92184fb2a in operator delete(void*) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x99b2a) #1 0x177fea3 in __gnu_cxx::new_allocator > >::deallocate(std::_Rb_tree_node >*, unsigned long) /usr/include/c++/5/ext/new_allocator.h:110 #2 0x177f426 in std::allocator_traits > > >::deallocate(std::allocator > >&, std::_Rb_tree_node >*, unsigned long) /usr/include/c++/5/bits/alloc_traits.h:517 #3 0x177e2e6 in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_put_node(std::_Rb_tree_node >*) /usr/include/c++/5/bits/stl_tree.h:495 #4 0x177c069 in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_drop_node(std::_Rb_tree_node >*) /usr/include/c++/5/bits/stl_tree.h:562 #5 0x177941e in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_erase(std::_Rb_tree_node >*) /usr/include/c++/5/bits/stl_tree.h:1614 #6 0x17793d6 in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_erase(std::_Rb_tree_node >*) /usr/include/c++/5/bits/stl_tree.h:1612 #7 0x1779fe6 in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::clear() /usr/include/c++/5/bits/stl_tree.h:1075 #8 0x1778028 in std::multimap, std::allocator > >::clear() (/usr/local/bin/mscore+0x1778028) #9 0x175bc2b in Ms::Seq::collectEvents() /home/antonio/MuseScore/mscore/seq.cpp:989 #10 0x175de60 in Ms::Seq::seekCommon(int) /home/antonio/MuseScore/mscore/seq.cpp:1064 #11 0x175f309 in Ms::Seq::seek(int) /home/antonio/MuseScore/mscore/seq.cpp:1091 #12 0x297f623 in Ms::Seq::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_seq.cpp:165 #13 0x7fb9182aa9ae in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2969ae) #14 0x29628e2 in Ms::PlayPanel::posChange(int) /home/antonio/MuseScore/build.debug/mscore/moc_playpanel.cpp:206 #15 0x157ddef in Ms::PlayPanel::setPos(int) /home/antonio/MuseScore/mscore/playpanel.cpp:256 #16 0x2961787 in Ms::PlayPanel::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_playpanel.cpp:121 #17 0x7fb9182aa9ae in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2969ae) #18 0x7fb91eac44f0 in QAbstractSlider::sliderMoved(int) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x2534f0) previously allocated by thread T0 here: #0 0x7fb92184f532 in operator new(unsigned long) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x99532) #1 0x1780932 in __gnu_cxx::new_allocator > >::allocate(unsigned long, void const*) /usr/include/c++/5/ext/new_allocator.h:104 #2 0x178049d in std::allocator_traits > > >::allocate(std::allocator > >&, unsigned long) /usr/include/c++/5/bits/alloc_traits.h:491 #3 0x177ff0b in std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_get_node() /usr/include/c++/5/bits/stl_tree.h:491 #4 0x177f57b in std::_Rb_tree_node >* std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_create_node >(std::pair&&) /usr/include/c++/5/bits/stl_tree.h:545 #5 0x177e544 in std::_Rb_tree_node >* std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_Alloc_node::operator() >(std::pair&&) const /usr/include/c++/5/bits/stl_tree.h:459 #6 0x177caa2 in std::_Rb_tree_iterator > std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_insert_, std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_Alloc_node>(std::_Rb_tree_node_base*, std::_Rb_tree_node_base*, std::pair&&, std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_Alloc_node&) /usr/include/c++/5/bits/stl_tree.h:1509 #7 0x1779eeb in std::_Rb_tree_iterator > std::_Rb_tree, std::_Select1st >, std::less, std::allocator > >::_M_insert_equal >(std::pair&&) /usr/include/c++/5/bits/stl_tree.h:1893 #8 0x1777fe3 in std::_Rb_tree_iterator > std::multimap, std::allocator > >::insert, void>(std::pair&&) /usr/include/c++/5/bits/stl_multimap.h:529 #9 0x3574897 in Ms::Score::renderMetronome(Ms::EventMap*, Ms::Measure*, int) /home/antonio/MuseScore/libmscore/rendermidi.cpp:1692 #10 0x3575b36 in Ms::Score::renderMidi(Ms::EventMap*) /home/antonio/MuseScore/libmscore/rendermidi.cpp:1727 #11 0x175bea0 in Ms::Seq::collectEvents() /home/antonio/MuseScore/mscore/seq.cpp:992 #12 0x175de60 in Ms::Seq::seekCommon(int) /home/antonio/MuseScore/mscore/seq.cpp:1064 #13 0x175f309 in Ms::Seq::seek(int) /home/antonio/MuseScore/mscore/seq.cpp:1091 #14 0x297f623 in Ms::Seq::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_seq.cpp:165 #15 0x7fb9182aa9ae in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2969ae) #16 0x29628e2 in Ms::PlayPanel::posChange(int) /home/antonio/MuseScore/build.debug/mscore/moc_playpanel.cpp:206 #17 0x157ddef in Ms::PlayPanel::setPos(int) /home/antonio/MuseScore/mscore/playpanel.cpp:256 #18 0x2961787 in Ms::PlayPanel::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_playpanel.cpp:121 #19 0x7fb9182aa9ae in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2969ae) #20 0x7fb91eac44f0 in QAbstractSlider::sliderMoved(int) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x2534f0) Thread T4 created by T0 here: #0 0x7fb9217ec253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253) #1 0x284ff2f in Ms::PulseAudio::start(bool) /home/antonio/MuseScore/mscore/pulseaudio.cpp:190 #2 0x17388ee in Ms::Seq::init(bool) /home/antonio/MuseScore/mscore/seq.cpp:229 #3 0x1444e7b in main /home/antonio/MuseScore/mscore/musescore.cpp:5774 #4 0x7fb9169c682f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) SUMMARY: AddressSanitizer: heap-use-after-free /usr/include/c++/5/bits/stl_function.h:387 std::less::operator()(int const&, int const&) const Shadow bytes around the buggy address: 0x0c0c800ee210: fa fa fa fa fd fd fd fd fd fd fd fa fa fa fa fa 0x0c0c800ee220: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd 0x0c0c800ee230: fd fd fd fa fa fa fa fa fd fd fd fd fd fd fd fa 0x0c0c800ee240: fa fa fa fa fd fd fd fd fd fd fd fa fa fa fa fa 0x0c0c800ee250: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd =>0x0c0c800ee260: fd fd fd fa fa fa fa fa fd fd fd fd[fd]fd fd fa 0x0c0c800ee270: fa fa fa fa fd fd fd fd fd fd fd fa fa fa fa fa 0x0c0c800ee280: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd 0x0c0c800ee290: fd fd fd fa fa fa fa fa fd fd fd fd fd fd fd fa 0x0c0c800ee2a0: fa fa fa fa fd fd fd fd fd fd fd fa fa fa fa fa 0x0c0c800ee2b0: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe ==31243==ABORTING