================================================================= ==83644==ERROR: AddressSanitizer: heap-use-after-free on address 0x6110001307c8 at pc 0x0001146ad643 bp 0x70000ea1c050 sp 0x70000ea1b818 WRITE of size 68 at 0x6110001307c8 thread T6 #0 0x1146ad642 in __asan_memcpy+0x262 (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x46642) #1 0x1060d4eda in QSGTransformNode::setMatrix(QMatrix4x4 const&) qsgnode.cpp:1199 #2 0x106381ee2 in QQuickTransformAnimatorJob::Helper::commit() qquickanimatorjob.cpp:420 #3 0x106382099 in QQuickTransformAnimatorJob::commit() qquickanimatorjob.cpp:428 #4 0x10635d645 in QQuickAnimatorController::advance() qquickanimatorcontroller.cpp:106 #5 0x105eb333f in QQuickWindowPrivate::renderSceneGraph(QSize const&, QSize const&) qquickwindow.cpp:641 #6 0x1069cc498 in QSGRenderThread::syncAndRender() qsgthreadedrenderloop.cpp:785 #7 0x1069cfd42 in QSGRenderThread::run() qsgthreadedrenderloop.cpp:986 #8 0x111ecbe56 in QThreadPrivate::start(void*) qthread_unix.cpp:330 #9 0x7fff204e58fb in _pthread_start+0xdf (libsystem_pthread.dylib:x86_64+0x68fb) #10 0x7fff204e1442 in thread_start+0xe (libsystem_pthread.dylib:x86_64+0x2442) 0x6110001307c8 is located 72 bytes inside of 208-byte region [0x611000130780,0x611000130850) freed by thread T6 here: #0 0x1146bc0bd in wrap__ZdlPv+0x7d (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x550bd) #1 0x1060d4dc7 in QSGTransformNode::~QSGTransformNode() qsgnode.cpp:1180 #2 0x105ec35a2 in QQuickWindowPrivate::cleanupNodes() qquickwindow.cpp:1768 #3 0x105eb1cf4 in QQuickWindowPrivate::updateDirtyNodes() qquickwindow.cpp:1822 #4 0x105eb1157 in QQuickWindowPrivate::syncSceneGraph() qquickwindow.cpp:568 #5 0x1069c98de in QSGRenderThread::sync(bool) qsgthreadedrenderloop.cpp:601 #6 0x1069cbe6c in QSGRenderThread::syncAndRender() qsgthreadedrenderloop.cpp:738 #7 0x1069cfd42 in QSGRenderThread::run() qsgthreadedrenderloop.cpp:986 #8 0x111ecbe56 in QThreadPrivate::start(void*) qthread_unix.cpp:330 #9 0x7fff204e58fb in _pthread_start+0xdf (libsystem_pthread.dylib:x86_64+0x68fb) #10 0x7fff204e1442 in thread_start+0xe (libsystem_pthread.dylib:x86_64+0x2442) previously allocated by thread T6 here: #0 0x1146bbc9d in wrap__Znwm+0x7d (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x54c9d) #1 0x105a57285 in QQuickItemPrivate::createTransformNode() qquickitem.cpp:3905 #2 0x105b5df69 in QQuickItemPrivate::itemNode() qquickitem_p.h:1013 #3 0x106381198 in QQuickTransformAnimatorJob::Helper::sync() qquickanimatorjob.cpp:390 #4 0x106380908 in QQuickTransformAnimatorJob::preSync() qquickanimatorjob.cpp:355 #5 0x10635ea4a in qquickanimator_sync_before_start(QAbstractAnimationJob*) qquickanimatorcontroller.cpp:115 #6 0x10635eb41 in qquickanimator_sync_before_start(QAbstractAnimationJob*) qquickanimatorcontroller.cpp:118 #7 0x10635e221 in QQuickAnimatorController::beforeNodeSync() qquickanimatorcontroller.cpp:142 #8 0x105eb0e31 in QQuickWindowPrivate::syncSceneGraph() qquickwindow.cpp:552 #9 0x1069c98de in QSGRenderThread::sync(bool) qsgthreadedrenderloop.cpp:601 #10 0x1069cbe6c in QSGRenderThread::syncAndRender() qsgthreadedrenderloop.cpp:738 #11 0x1069cfd42 in QSGRenderThread::run() qsgthreadedrenderloop.cpp:986 #12 0x111ecbe56 in QThreadPrivate::start(void*) qthread_unix.cpp:330 #13 0x7fff204e58fb in _pthread_start+0xdf (libsystem_pthread.dylib:x86_64+0x68fb) #14 0x7fff204e1442 in thread_start+0xe (libsystem_pthread.dylib:x86_64+0x2442) Thread T6 created by T0 here: #0 0x1146a95ea in wrap_pthread_create+0x5a (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x425ea) #1 0x111ece999 in QThread::start(QThread::Priority) qthread_unix.cpp:715 #2 0x1069d6b96 in QSGThreadedRenderLoop::handleExposure(QQuickWindow*) qsgthreadedrenderloop.cpp:1318 #3 0x1069d4f2a in QSGThreadedRenderLoop::exposureChanged(QQuickWindow*) qsgthreadedrenderloop.cpp:1246 #4 0x105eacadf in QQuickWindow::exposeEvent(QExposeEvent*) qquickwindow.cpp:211 #5 0x109022aeb in QWindow::event(QEvent*) qwindow.cpp:2465 #6 0x105ebed63 in QQuickWindow::event(QEvent*) qquickwindow.cpp:1536 #7 0x11156d8da in QCoreApplicationPrivate::notify_helper(QObject*, QEvent*) qcoreapplication.cpp:1224 #8 0x11156ca9a in doNotify(QObject*, QEvent*) qcoreapplication.cpp:1153 #9 0x11156cc66 in QCoreApplication::notify(QObject*, QEvent*) qcoreapplication.cpp:1139 #10 0x108e272a9 in QGuiApplication::notify(QObject*, QEvent*) qguiapplication.cpp:1942 #11 0x11156c7b9 in QCoreApplication::notifyInternal2(QObject*, QEvent*) qcoreapplication.cpp:1063 #12 0x11156f101 in QCoreApplication::sendSpontaneousEvent(QObject*, QEvent*) qcoreapplication.cpp:1483 #13 0x108e370fa in QGuiApplicationPrivate::processExposeEvent(QWindowSystemInterfacePrivate::ExposeEvent*) qguiapplication.cpp:3168 #14 0x108e28f4e in QGuiApplicationPrivate::processWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*) qguiapplication.cpp:2079 #15 0x1090407d4 in bool QWindowSystemInterfacePrivate::handleWindowSystemEvent(QWindowSystemInterfacePrivate::WindowSystemEvent*) qwindowsysteminterface.cpp:107 #16 0x10905b35b in bool QWindowSystemInterface::handleExposeEvent(QWindow*, QRegion const&) qwindowsysteminterface.cpp:351 #17 0x122797f69 in QCocoaWindow::handleExposeEvent(QRegion const&) qcocoawindow.mm:1395 #18 0x1227c89d4 in -[QNSView(Drawing) displayLayer:] qnsview_drawing.mm:243 #19 0x7fff26d6ceac in -[CALayer display]+0xb6 (QuartzCore:x86_64+0x21eac) #20 0x7fff26d6c6f2 in CA::Layer::display_if_needed(CA::Transaction*)+0x35e (QuartzCore:x86_64+0x216f2) #21 0x7fff26eb7bed in CA::Context::commit_transaction(CA::Transaction*, double, double*)+0x299 (QuartzCore:x86_64+0x16cbed) #22 0x7fff26d4db6e in CA::Transaction::commit()+0x2c8 (QuartzCore:x86_64+0x2b6e) #23 0x7fff22f6886b in __62+[CATransaction(NSCATransaction) NS_setFlushesWithDisplayLink]_block_invoke+0x11c (AppKit:x86_64+0x1c386b) #24 0x7fff236be331 in ___NSRunLoopObserverCreateWithHandler_block_invoke+0x28 (AppKit:x86_64+0x919331) #25 0x7fff205ddd00 in __CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__+0x16 (CoreFoundation:x86_64h+0x80d00) #26 0x7fff205ddb94 in __CFRunLoopDoObservers+0x21e (CoreFoundation:x86_64h+0x80b94) #27 0x7fff205dd027 in __CFRunLoopRun+0x348 (CoreFoundation:x86_64h+0x80027) #28 0x7fff205dc61b in CFRunLoopRunSpecific+0x232 (CoreFoundation:x86_64h+0x7f61b) #29 0x7fff28822a82 in RunCurrentEventLoopInMode+0x123 (HIToolbox:x86_64+0x30a82) #30 0x7fff288226b5 in ReceiveNextEventCommon+0x11b (HIToolbox:x86_64+0x306b5) #31 0x7fff28822582 in _BlockUntilNextEventMatchingListInModeWithFilter+0x45 (HIToolbox:x86_64+0x30582) #32 0x7fff22de4171 in _DPSNextEvent+0x35f (AppKit:x86_64+0x3f171) #33 0x7fff22de2944 in -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:]+0x553 (AppKit:x86_64+0x3d944) #34 0x7fff22dd4c68 in -[NSApplication run]+0x249 (AppKit:x86_64+0x2fc68) #35 0x122720515 in QCocoaEventDispatcher::processEvents(QFlags) qcocoaeventdispatcher.mm:430 #36 0x1115b80e9 in QEventLoop::processEvents(QFlags) qeventloop.cpp:139 #37 0x1115b8789 in QEventLoop::exec(QFlags) qeventloop.cpp:232 #38 0x11156e6e3 in QCoreApplication::exec() qcoreapplication.cpp:1378 #39 0x108e26bc5 in QGuiApplication::exec() qguiapplication.cpp:1874 #40 0x10586f63e in main main.cpp:25 #41 0x7fff20500f3c in start+0x0 (libdyld.dylib:x86_64+0x15f3c) SUMMARY: AddressSanitizer: heap-use-after-free (libclang_rt.asan_osx_dynamic.dylib:x86_64h+0x46642) in __asan_memcpy+0x262 Shadow bytes around the buggy address: 0x1c22000260a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1c22000260b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1c22000260c0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x1c22000260d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1c22000260e0: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa =>0x1c22000260f0: fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd fd 0x1c2200026100: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa 0x1c2200026110: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x1c2200026120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1c2200026130: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1c2200026140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Shadow gap: cc ==83644==ABORTING 15:40:53: The program has unexpectedly finished. 15:40:53: The process was ended forcefully.