================================================================= ==12539==ERROR: AddressSanitizer: heap-use-after-free on address 0x6140006ec640 at pc 0x000000ca51e2 bp 0x7ffd1b882310 sp 0x7ffd1b882300 READ of size 8 at 0x6140006ec640 thread T0 #0 0xca51e1 in Ms::ScoreView::select(QMouseEvent*) /home/antonio/MuseScore/mscore/scoreview.cpp:3652 #1 0xd3c9f8 in Ms::SelectTransition::onTransition(QEvent*) (/usr/local/bin/mscore+0xd3c9f8) #2 0x7fd3689df8fd in QStateMachinePrivate::executeTransitionContent(QEvent*, QList const&) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2c88fd) #3 0x7fd3689e93c6 in QStateMachinePrivate::microstep(QEvent*, QList const&, CalculationCache*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2d23c6) #4 0x7fd3689e95db in QStateMachinePrivate::_q_process() (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2d25db) #5 0x7fd3689e9d9e in QStateMachinePrivate::handleFilteredEvent(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2d2d9e) #6 0x7fd3689e9eac in QStateMachine::eventFilter(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2d2eac) #7 0x7fd3689848f2 in QCoreApplicationPrivate::sendThroughObjectEventFilters(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x26d8f2) #8 0x7fd36f0cab74 in QApplicationPrivate::notify_helper(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x156b74) #9 0x7fd36f0cf81f in QApplication::notify(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x15b81f) #10 0x7fd368984b7f in QCoreApplication::notifyInternal2(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x26db7f) #11 0x7fd36f0ce49e in QApplicationPrivate::sendMouseEvent(QWidget*, QMouseEvent*, QWidget*, QWidget*, QWidget**, QPointer&, bool) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x15a49e) #12 0x7fd36f1294c5 (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x1b54c5) #13 0x7fd36f12baa2 (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x1b7aa2) #14 0x7fd36f0cab9b in QApplicationPrivate::notify_helper(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x156b9b) #15 0x7fd36f0ceeff in QApplication::notify(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x15aeff) #16 0x7fd368984b7f in QCoreApplication::notifyInternal2(QObject*, QEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x26db7f) #17 0x7fd36987eaba in QGuiApplicationPrivate::processMouseEvent(QWindowSystemInterfacePrivate::MouseEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Gui.so.5+0xf9aba) #18 0x7fd3698805c4 in QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Gui.so.5+0xfb5c4) #19 0x7fd369861b22 in QWindowSystemInterface::sendWindowSystemEvents(QFlags) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Gui.so.5+0xdcb22) #20 0x7fd357b9354f (/home/antonio/Qt/5.6/gcc_64/plugins/platforms/../../lib/libQt5XcbQpa.so.5+0x9d54f) #21 0x7fd364d9b196 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a196) #22 0x7fd364d9b3ef (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a3ef) #23 0x7fd364d9b49b in g_main_context_iteration (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a49b) #24 0x7fd3689d4176 in QEventDispatcherGlib::processEvents(QFlags) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2bd176) #25 0x7fd368982bc9 in QEventLoop::exec(QFlags) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x26bbc9) #26 0x7fd36898aa5c in QCoreApplication::exec() (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x273a5c) #27 0x148d0cf in main /home/antonio/MuseScore/mscore/musescore.cpp:5899 #28 0x7fd3670c982f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) #29 0xc09798 in _start (/usr/local/bin/mscore+0xc09798) 0x6140006ec640 is located 0 bytes inside of 392-byte region [0x6140006ec640,0x6140006ec7c8) freed by thread T0 here: #0 0x7fd371f52b2a in operator delete(void*) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x99b2a) #1 0x3331ba5 in Ms::InstrumentName::~InstrumentName() /home/antonio/MuseScore/libmscore/iname.h:28 #2 0x3954e24 in void qDeleteAll::const_iterator>(QList::const_iterator, QList::const_iterator) /home/antonio/Qt/5.6/gcc_64/include/QtCore/qalgorithms.h:317 #3 0x3950e17 in void qDeleteAll >(QList const&) /home/antonio/Qt/5.6/gcc_64/include/QtCore/qalgorithms.h:325 #4 0x392685a in Ms::SysStaff::~SysStaff() /home/antonio/MuseScore/libmscore/system.cpp:55 #5 0x3954fbe in void qDeleteAll::const_iterator>(QList::const_iterator, QList::const_iterator) /home/antonio/Qt/5.6/gcc_64/include/QtCore/qalgorithms.h:317 #6 0x3950fee in void qDeleteAll >(QList const&) /home/antonio/Qt/5.6/gcc_64/include/QtCore/qalgorithms.h:325 #7 0x3926f45 in Ms::System::~System() /home/antonio/MuseScore/libmscore/system.cpp:73 #8 0x3927c13 in Ms::System::~System() /home/antonio/MuseScore/libmscore/system.cpp:77 #9 0x3433821 in void qDeleteAll::const_iterator>(QList::const_iterator, QList::const_iterator) /home/antonio/Qt/5.6/gcc_64/include/QtCore/qalgorithms.h:317 #10 0x342a9fa in void qDeleteAll >(QList const&) /home/antonio/Qt/5.6/gcc_64/include/QtCore/qalgorithms.h:325 #11 0x3416778 in Ms::Score::doLayoutRange(int, int) /home/antonio/MuseScore/libmscore/layout.cpp:3478 #12 0x3bb445b in Ms::Score::update() /home/antonio/MuseScore/libmscore/cmd.cpp:221 #13 0xca4f3b in Ms::ScoreView::select(QMouseEvent*) /home/antonio/MuseScore/mscore/scoreview.cpp:3651 #14 0xd3c9f8 in Ms::SelectTransition::onTransition(QEvent*) (/usr/local/bin/mscore+0xd3c9f8) #15 0x7fd3689df8fd in QStateMachinePrivate::executeTransitionContent(QEvent*, QList const&) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2c88fd) #16 0x7ffd1b882a2f () previously allocated by thread T0 here: #0 0x7fd371f52532 in operator new(unsigned long) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x99532) #1 0x39385a1 in Ms::System::setInstrumentNames(bool) /home/antonio/MuseScore/libmscore/system.cpp:582 #2 0x33f3c16 in Ms::Score::collectSystem(Ms::LayoutContext&) /home/antonio/MuseScore/libmscore/layout.cpp:2723 #3 0x340c375 in Ms::LayoutContext::collectPage() /home/antonio/MuseScore/libmscore/layout.cpp:3258 #4 0x34189e6 in Ms::LayoutContext::layout() /home/antonio/MuseScore/libmscore/layout.cpp:3537 #5 0x3418601 in Ms::Score::doLayoutRange(int, int) /home/antonio/MuseScore/libmscore/layout.cpp:3524 #6 0x3412490 in Ms::Score::doLayout() /home/antonio/MuseScore/libmscore/layout.cpp:3377 #7 0x1474ce7 in Ms::MuseScore::switchLayoutMode(Ms::LayoutMode) /home/antonio/MuseScore/mscore/musescore.cpp:5174 #8 0x147396b in Ms::MuseScore::switchLayoutMode(int) /home/antonio/MuseScore/mscore/musescore.cpp:5159 #9 0x29eed3c in Ms::MuseScore::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /home/antonio/MuseScore/build.debug/mscore/moc_musescore.cpp:733 #10 0x7fd3689ad9ae in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Core.so.5+0x2969ae) #11 0x7fd36f1da6d0 in QComboBox::activated(int) (/home/antonio/Qt/5.6/gcc_64/lib/libQt5Widgets.so.5+0x2666d0) SUMMARY: AddressSanitizer: heap-use-after-free /home/antonio/MuseScore/mscore/scoreview.cpp:3652 Ms::ScoreView::select(QMouseEvent*) Shadow bytes around the buggy address: 0x0c28800d5870: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa 0x0c28800d5880: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c28800d5890: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c28800d58a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c28800d58b0: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa =>0x0c28800d58c0: fa fa fa fa fa fa fa fa[fd]fd fd fd fd fd fd fd 0x0c28800d58d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c28800d58e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c28800d58f0: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa 0x0c28800d5900: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c28800d5910: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe ==12539==ABORTING