UndoStack::endMacro 0 MuseScore::cmd --undo index 0 ================================================================= ==4345==ERROR: AddressSanitizer: heap-use-after-free on address 0x612000249f58 at pc 0xa0d449 bp 0x7fffe2d6ea70 sp 0x7fffe2d6ea68 READ of size 8 at 0x612000249f58 thread T0 #0 0xa0d448 in Ms::Element::parent() const /home/antonio/MuseScore/libmscore/element.h:326 #1 0x1779f31 in Ms::Element::pageX() const /home/antonio/MuseScore/libmscore/element.cpp:618 #2 0x16b695c in Ms::Beam::pagePos() const /home/antonio/MuseScore/libmscore/beam.cpp:126 #3 0x16cc7cc in Ms::Beam::layout2(QList, Ms::SpannerSegmentType, int) /home/antonio/MuseScore/libmscore/beam.cpp:1418 #4 0x16bb581 in Ms::Beam::layout() /home/antonio/MuseScore/libmscore/beam.cpp:454 #5 0x17ff347 in Ms::Score::doLayout() /home/antonio/MuseScore/libmscore/layout.cpp:1380 #6 0x1a6dbf5 in Ms::Score::endUndoRedo() /home/antonio/MuseScore/libmscore/cmd.cpp:204 #7 0xc6e782 in Ms::MuseScore::undo() /home/antonio/MuseScore/mscore/musescore.cpp:3068 #8 0xc79c92 in Ms::MuseScore::cmd(QAction*, QString const&) /home/antonio/MuseScore/mscore/musescore.cpp:4128 #9 0xc77fb4 in Ms::MuseScore::cmd(QAction*) /home/antonio/MuseScore/mscore/musescore.cpp:3975 #10 0x97687b in Ms::MuseScore::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_musescore.cpp:806 #11 0x7fd7f322a7b0 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x3007b0) #12 0x7fd7f070500e in QActionGroup::triggered(QAction*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13f00e) #13 0x7fd7f07057e8 (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13f7e8) #14 0x7fd7f322a7b0 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x3007b0) #15 0x7fd7f0701631 in QAction::triggered(bool) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13b631) #16 0x7fd7f0703466 in QAction::activate(QAction::ActionEvent) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13d466) #17 0x7fd7f070375e in QAction::event(QEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x13d75e) #18 0x7fd7f070ca93 in QApplicationPrivate::notify_helper(QObject*, QEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x146a93) #19 0x7fd7f07100b5 in QApplication::notify(QObject*, QEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x14a0b5) #20 0x7fd7f31f8f03 in QCoreApplication::notifyInternal(QObject*, QEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x2cef03) #21 0x7fd7f29159c0 in QShortcutMap::dispatchEvent(QKeyEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Gui.so.5+0x10e9c0) #22 0x7fd7f291692d in QShortcutMap::tryShortcutEvent(QObject*, QKeyEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Gui.so.5+0x10f92d) #23 0x7fd7f071012a in QApplication::notify(QObject*, QEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Widgets.so.5+0x14a12a) #24 0x7fd7f31f8f03 in QCoreApplication::notifyInternal(QObject*, QEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x2cef03) #25 0x7fd7f28e7c39 in QGuiApplicationPrivate::processKeyEvent(QWindowSystemInterfacePrivate::KeyEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Gui.so.5+0xe0c39) #26 0x7fd7f28eff54 in QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Gui.so.5+0xe8f54) #27 0x7fd7f28d5207 in QWindowSystemInterface::sendWindowSystemEvents(QFlags) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Gui.so.5+0xce207) #28 0x7fd7e057145f (/home/antonio/Qt5.3.1/5.3/gcc_64/plugins/platforms/libqxcb.so+0xad45f) #29 0x7fd7ea087e03 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x48e03) #30 0x7fd7ea088047 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x49047) #31 0x7fd7ea0880eb in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x490eb) #32 0x7fd7f3253573 in QEventDispatcherGlib::processEvents(QFlags) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x329573) #33 0x7fd7f31f711a in QEventLoop::exec(QFlags) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x2cd11a) #34 0x7fd7f31fbfe4 in QCoreApplication::exec() (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x2d1fe4) #35 0xc832c0 in main /home/antonio/MuseScore/mscore/musescore.cpp:5059 #36 0x7fd7eba50ec4 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21ec4) #37 0x96de38 (/usr/local/bin/mscore+0x96de38) 0x612000249f58 is located 24 bytes inside of 280-byte region [0x612000249f40,0x61200024a058) freed by thread T0 here: #0 0x7fd7f3e13877 in operator delete(void*) (/usr/lib/x86_64-linux-gnu/libasan.so.1+0x55877) #1 0x188c6ff in Ms::Page::~Page() /home/antonio/MuseScore/libmscore/page.cpp:138 #2 0x18206a6 in void qDeleteAll::const_iterator>(QList::const_iterator, QList::const_iterator) /home/antonio/Qt5.3.1/5.3/gcc_64/include/QtCore/qalgorithms.h:323 #3 0x181e8be in void qDeleteAll >(QList const&) /home/antonio/Qt5.3.1/5.3/gcc_64/include/QtCore/qalgorithms.h:331 #4 0x17febb1 in Ms::Score::doLayout() /home/antonio/MuseScore/libmscore/layout.cpp:1335 #5 0x1a6d1b3 in Ms::Score::endCmd() /home/antonio/MuseScore/libmscore/cmd.cpp:121 #6 0xc78071 in Ms::MuseScore::cmd(QAction*) /home/antonio/MuseScore/mscore/musescore.cpp:3977 #7 0x97687b in Ms::MuseScore::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_musescore.cpp:806 #8 0x7fd7f322a7b0 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x3007b0) previously allocated by thread T0 here: #0 0x7fd7f3e133ff in operator new(unsigned long) (/usr/lib/x86_64-linux-gnu/libasan.so.1+0x553ff) #1 0x1a8c848 in Ms::Score::read(Ms::XmlReader&) /home/antonio/MuseScore/libmscore/scorefile.cpp:1065 #2 0x1a8a80c in Ms::Score::read1(Ms::XmlReader&, bool) /home/antonio/MuseScore/libmscore/scorefile.cpp:843 #3 0x1a89119 in Ms::Score::loadCompressedMsc(QString, bool) /home/antonio/MuseScore/libmscore/scorefile.cpp:703 #4 0x1a89682 in Ms::Score::loadMsc(QString, bool) /home/antonio/MuseScore/libmscore/scorefile.cpp:744 #5 0x10da2a6 in Ms::readScore(Ms::Score*, QString, bool) /home/antonio/MuseScore/mscore/file.cpp:1905 #6 0x10c3eec in Ms::MuseScore::readScore(QString const&) /home/antonio/MuseScore/mscore/file.cpp:318 #7 0x10c3d31 in Ms::MuseScore::openScore(QString const&) /home/antonio/MuseScore/mscore/file.cpp:297 #8 0x10c3a2a in Ms::MuseScore::loadFiles() /home/antonio/MuseScore/mscore/file.cpp:286 #9 0xc7936f in Ms::MuseScore::cmd(QAction*, QString const&) /home/antonio/MuseScore/mscore/musescore.cpp:4071 #10 0xc77fb4 in Ms::MuseScore::cmd(QAction*) /home/antonio/MuseScore/mscore/musescore.cpp:3975 #11 0x97687b in Ms::MuseScore::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_musescore.cpp:806 #12 0x7fd7f322a7b0 in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.3.1/5.3/gcc_64/lib/libQt5Core.so.5+0x3007b0) SUMMARY: AddressSanitizer: heap-use-after-free /home/antonio/MuseScore/libmscore/element.h:326 Ms::Element::parent() const Shadow bytes around the buggy address: 0x0c2480041390: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c24800413a0: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa 0x0c24800413b0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c24800413c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c24800413d0: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa =>0x0c24800413e0: fa fa fa fa fa fa fa fa fd fd fd[fd]fd fd fd fd 0x0c24800413f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2480041400: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa 0x0c2480041410: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c2480041420: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c2480041430: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal: fe ==4345==ABORTING