================================================================= ==3513==ERROR: AddressSanitizer: heap-use-after-free on address 0x613000f0c180 at pc 0x1947770 bp 0x7fffe5470db0 sp 0x7fffe5470da8 READ of size 8 at 0x613000f0c180 thread T0 #0 0x194776f in Ms::Score::setSelection(Ms::Selection const&) /home/antonio/MuseScore/libmscore/score.cpp:1858 #1 0x1ac15fc in Ms::SaveState::undo() /home/antonio/MuseScore/libmscore/undo.cpp:351 #2 0x1abf42f in Ms::UndoCommand::undo() /home/antonio/MuseScore/libmscore/undo.cpp:144 #3 0x1ac0d2d in Ms::UndoStack::undo() /home/antonio/MuseScore/libmscore/undo.cpp:318 #4 0xc5f46c in Ms::MuseScore::undo() /home/antonio/MuseScore/mscore/musescore.cpp:2919 #5 0xc6ab78 in Ms::MuseScore::cmd(QAction*, QString const&) /home/antonio/MuseScore/mscore/musescore.cpp:3969 #6 0xc68eaa in Ms::MuseScore::cmd(QAction*) /home/antonio/MuseScore/mscore/musescore.cpp:3822 #7 0x996727 in Ms::MuseScore::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_musescore.cpp:803 #8 0x7f135a48b870 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x300870) #9 0x9b5245 in Ms::ScoreTab::actionTriggered(QAction*) /home/antonio/MuseScore/build.debug/mscore/moc_scoretab.cpp:188 #10 0x9b4587 in Ms::ScoreTab::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_scoretab.cpp:93 #11 0x7f135a48b870 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x300870) #12 0x7f1357962e1e in QActionGroup::triggered(QAction*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13ee1e) #13 0x7f13579635f8 (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13f5f8) #14 0x7f135a48b870 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x300870) #15 0x7f135795f441 in QAction::triggered(bool) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13b441) #16 0x7f1357961276 in QAction::activate(QAction::ActionEvent) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13d276) #17 0x7f135796156e in QAction::event(QEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13d56e) #18 0x7f135796a723 in QApplicationPrivate::notify_helper(QObject*, QEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x146723) #19 0x7f135796dd45 in QApplication::notify(QObject*, QEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x149d45) #20 0x7f135a459fc3 in QCoreApplication::notifyInternal(QObject*, QEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x2cefc3) #21 0x7f1359b755d0 in QShortcutMap::dispatchEvent(QKeyEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Gui.so.5+0x10f5d0) #22 0x7f1359b7653d in QShortcutMap::tryShortcutEvent(QObject*, QKeyEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Gui.so.5+0x11053d) #23 0x7f135796ddba in QApplication::notify(QObject*, QEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Widgets.so.5+0x149dba) #24 0x7f135a459fc3 in QCoreApplication::notifyInternal(QObject*, QEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x2cefc3) #25 0x7f1359b47049 in QGuiApplicationPrivate::processKeyEvent(QWindowSystemInterfacePrivate::KeyEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Gui.so.5+0xe1049) #26 0x7f1359b4f5d4 in QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Gui.so.5+0xe95d4) #27 0x7f1359b345b7 in QWindowSystemInterface::sendWindowSystemEvents(QFlags) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Gui.so.5+0xce5b7) #28 0x7f1347793a6f (/home/antonio/Qt5.3.2/5.3/gcc_64/plugins/platforms/libqxcb.so+0xada6f) #29 0x7f13512e4e03 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x48e03) #30 0x7f13512e5047 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x49047) #31 0x7f13512e50eb in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x490eb) #32 0x7f135a4b4683 in QEventDispatcherGlib::processEvents(QFlags) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x329683) #33 0x7f135a4581da in QEventLoop::exec(QFlags) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x2cd1da) #34 0x7f135a45d0a4 in QCoreApplication::exec() (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x2d20a4) #35 0xc73a1b in main /home/antonio/MuseScore/mscore/musescore.cpp:4956 #36 0x7f1352cadec4 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21ec4) #37 0x98de48 (/usr/local/bin/mscore+0x98de48) 0x613000f0c180 is located 0 bytes inside of 344-byte region [0x613000f0c180,0x613000f0c2d8) freed by thread T0 here: #0 0x7f135b074517 in operator delete(void*) (/usr/lib/x86_64-linux-gnu/libasan.so.1+0x55517) #1 0x18df0e1 in Ms::Note::~Note() /home/antonio/MuseScore/libmscore/note.cpp:233 #2 0x17833bb in void qDeleteAll::const_iterator>(QList::const_iterator, QList::const_iterator) /home/antonio/Qt5.3.2/5.3/gcc_64/include/QtCore/qalgorithms.h:323 #3 0x17822aa in void qDeleteAll >(QList const&) /home/antonio/Qt5.3.2/5.3/gcc_64/include/QtCore/qalgorithms.h:331 #4 0x175c762 in Ms::Chord::~Chord() /home/antonio/MuseScore/libmscore/chord.cpp:319 #5 0x175c7d9 in Ms::Chord::~Chord() /home/antonio/MuseScore/libmscore/chord.cpp:320 #6 0x1acc73a in Ms::AddElement::cleanup(bool) /home/antonio/MuseScore/libmscore/undo.cpp:1453 #7 0x1abf2e4 in Ms::UndoCommand::cleanup(bool) /home/antonio/MuseScore/libmscore/undo.cpp:130 #8 0x1ac00ee in Ms::UndoStack::endMacro(bool) /home/antonio/MuseScore/libmscore/undo.cpp:234 #9 0x1af2a36 in Ms::Score::endCmd() /home/antonio/MuseScore/libmscore/cmd.cpp:139 #10 0xc68f5f in Ms::MuseScore::cmd(QAction*) /home/antonio/MuseScore/mscore/musescore.cpp:3824 #11 0x996727 in Ms::MuseScore::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_musescore.cpp:803 #12 0x7f135a48b870 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x300870) previously allocated by thread T0 here: #0 0x7f135b07409f in operator new(unsigned long) (/usr/lib/x86_64-linux-gnu/libasan.so.1+0x5509f) #1 0x1af5eec in Ms::Score::setNoteRest(Ms::Segment*, int, Ms::NoteVal, Ms::Fraction, Ms::MScore::Direction) /home/antonio/MuseScore/libmscore/cmd.cpp:500 #2 0x17ccd70 in Ms::Score::putNote(Ms::Position const&, bool) /home/antonio/MuseScore/libmscore/edit.cpp:1056 #3 0x17ca09c in Ms::Score::addPitch(int, bool) /home/antonio/MuseScore/libmscore/edit.cpp:722 #4 0x17c9cd0 in Ms::Score::cmdAddPitch(int, bool) /home/antonio/MuseScore/libmscore/edit.cpp:689 #5 0xa1f50e in Ms::ScoreView::cmdAddPitch(int, bool) /home/antonio/MuseScore/mscore/scoreview.cpp:4930 #6 0xa00b58 in Ms::ScoreView::cmd(QAction const*) /home/antonio/MuseScore/mscore/scoreview.cpp:2544 #7 0xc6cefb in Ms::MuseScore::cmd(QAction*, QString const&) /home/antonio/MuseScore/mscore/musescore.cpp:4175 #8 0xc68eaa in Ms::MuseScore::cmd(QAction*) /home/antonio/MuseScore/mscore/musescore.cpp:3822 #9 0x996727 in Ms::MuseScore::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_musescore.cpp:803 #10 0x7f135a48b870 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.2/5.3/gcc_64/lib/libQt5Core.so.5+0x300870) SUMMARY: AddressSanitizer: heap-use-after-free /home/antonio/MuseScore/libmscore/score.cpp:1858 Ms::Score::setSelection(Ms::Selection const&) Shadow bytes around the buggy address: 0x0c26801d97e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa 0x0c26801d97f0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c26801d9800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c26801d9810: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c26801d9820: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa =>0x0c26801d9830:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c26801d9840: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c26801d9850: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa 0x0c26801d9860: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c26801d9870: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c26801d9880: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal: fe ==3513==ABORTING