0008025: Increasing "room size" in ZynReverb beyond certain value crashes Ardour - MantisBT

ID	Project	Category	View Status	Date Submitted	Last Update

0008025	ardour	bugs	public	2020-04-19 14:37	2020-04-20 16:14

Reporter	ranguli	Assigned To
Priority	normal	Severity	minor	Reproducibility	always
Status	new	Resolution	open
Platform	Linux	OS	Debian	OS Version	10 (Stretch)
Product Version	5.12

Summary	0008025: Increasing "room size" in ZynReverb beyond certain value crashes Ardour
Description	Increasing the "room size" parameter in the ZynReverb plugin beyond a certain value causes Ardour to crash.
Steps To Reproduce	1. Create a new Ardour project 2. Add a new track (reproducible with Audio or MIDI tracks) 3. Add the ZynReverb plugin (reproducible with LV2 or VST) 4. Increase the room size. At (approx) 0.690, Ardour crashes. Upon reopening the project, the added track is not recovered (at least without user intervention to do so). It is possible that it isn't the fault of Ardour (rather solely ZynReverb), but I suppose ideally a rogue plugin would not lead to a full crash. This is my first bug report (and first submission of a backtrace) so let me know if I haven't provided the necessary information correctly.
Tags	crash, lv2, plugin, VST

ranguli 2020-04-19 14:37 reporter	backtrace.txt (8,830 bytes) GNU gdb (Debian 8.2.1-2+b3) 8.2.1 Copyright (C) 2018 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word". (gdb) core-file core [New LWP 31977] [New LWP 31962] [New LWP 31980] [New LWP 31982] [New LWP 31984] [New LWP 31866] [New LWP 31879] [New LWP 31878] [New LWP 31978] [New LWP 31881] [New LWP 31981] [New LWP 31960] [New LWP 31883] [New LWP 31983] [New LWP 31880] [New LWP 31991] [New LWP 31976] [New LWP 31979] [New LWP 31987] [New LWP 31992] [New LWP 31888] [New LWP 31882] [New LWP 31961] [New LWP 31986] [New LWP 31985] Core was generated by `/opt/ardour/bin/ardour-5.12.0 -a'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f9a3c5c8788 in ?? () [Current thread is 1 (LWP 31977)] (gdb) thread apply all bt Thread 25 (LWP 31985): #0 0x00007f9a6562100c in ?? () #1 0x000000000357f910 in ?? () #2 0x0000000000000000 in ?? () Thread 24 (LWP 31986): #0 0x00007f9a6562100c in ?? () #1 0x00007f9a0c0b7b80 in ?? () #2 0x0000000000000002 in ?? () #3 0x00007f9a3dffac30 in ?? () #4 0x0000000000000000 in ?? () Thread 23 (LWP 31961): #0 0x00007f9a65624544 in ?? () #1 0x0000000000000000 in ?? () Thread 22 (LWP 31882): #0 0x00007f9a62c78f59 in ?? () #1 0x00007f9a6951400c in ?? () #2 0x0000000002c7e4a8 in ?? () #3 0x0000000002c7de50 in ?? () #4 0x00007ffe20daedee in ?? () --Type <RET> for more, q to quit, c to continue without paging--c #5 0x00007f9a6b93a186 in ?? () #6 0x0000000000000000 in ?? () Thread 21 (LWP 31888): #0 0x00007f9a62c73819 in ?? () #1 0x0000000002f26d00 in ?? () #2 0x0000000000000001 in ?? () #3 0x0000000002f26d00 in ?? () #4 0x0000000000000002 in ?? () #5 0x0000000002f26fb0 in ?? () #6 0x00007f9a694c26b4 in ?? () #7 0x0000000000000000 in ?? () Thread 20 (LWP 31992): #0 0x00007f9a62c4b720 in ?? () #1 0x000000000dde97b0 in ?? () #2 0x00007f9a3d343833 in ?? () #3 0x00000000000206d9 in ?? () #4 0x000000000cd455f0 in ?? () #5 0x00007f9a3d56f3d8 in ?? () #6 0x00007f9a62c76874 in ?? () #7 0x0000000000000000 in ?? () Thread 19 (LWP 31987): #0 0x00007f9a65624bf0 in ?? () #1 0x000000000001d810 in ?? () #2 0x00000000bc0f7a00 in ?? () #3 0x0000000000000001 in ?? () #4 0x00007f9a3cff8d00 in ?? () #5 0x00007f9a3cff8d10 in ?? () #6 0x00007f9a694f3a58 in ?? () #7 0x0000000000000000 in ?? () Thread 18 (LWP 31979): #0 0x00007f9a65623896 in ?? () #1 0x0000000000000100 in ?? () #2 0x00007f9a6bd20c73 in ?? () #3 0x00000000044b82c8 in ?? () #4 0x0000000500000000 in ?? () #5 0x00007f9a3e5f7c70 in ?? () #6 0x00007f9a65623988 in ?? () #7 0x00007f9a65623850 in ?? () #8 0x00000000044b82c8 in ?? () #9 0x0000000009918ec8 in ?? () #10 0x0000000000000000 in ?? () Thread 17 (LWP 31976): #0 0x00007f9a65623896 in ?? () #1 0x0000000000000100 in ?? () #2 0x00000000044b82c8 in ?? () #3 0x00000000044b82c8 in ?? () #4 0x0000000500000000 in ?? () #5 0x00007f9a3e77ac60 in ?? () #6 0x00007f9a65623988 in ?? () #7 0x00007f9a65623850 in ?? () #8 0x00000000044b82c8 in ?? () #9 0x0000000100000006 in ?? () #10 0x0000000000000000 in ?? () Thread 16 (LWP 31991): #0 0x00007f9a62c4b720 in ?? () #1 0x00000000039de810 in ?? () #2 0x00007f9a3d3438a0 in ?? () #3 0x00000000000206d9 in ?? () #4 0x000000000a9e4740 in ?? () #5 0x00007f9a3d56f3d8 in ?? () #6 0x00007f9a62c76874 in ?? () #7 0x0000000000000000 in ?? () Thread 15 (LWP 31880): #0 0x00007f9a62c78f59 in ?? () #1 0x00007f9a6951400c in ?? () #2 0x00007f9a5dc56d10 in ?? () #3 0x00007f9a6c2dd3a0 in ?? () #4 0x00007f9a6c2dd3b8 in ?? () #5 0x00007f9a6be489cb in ?? () #6 0x0000000000000000 in ?? () Thread 14 (LWP 31983): #0 0x00007f9a62c73819 in ?? () #1 0x0000000000001020 in ?? () #2 0x00007f9a3e3f2c30 in ?? () #3 0x00007f9a3e3f2c40 in ?? () #4 0x00000000ffffffff in ?? () #5 0x000000000992ba30 in ?? () #6 0x00007f9a6a486712 in ?? () #7 0x000000190000000b in ?? () #8 0x0000000000000000 in ?? () Thread 13 (LWP 31883): #0 0x00007f9a62c78f59 in ?? () #1 0x00007f9a6951400c in ?? () #2 0x0000000002c7e810 in ?? () #3 0x0000000002c7de50 in ?? () #4 0x00007f9a56735cf8 in ?? () #5 0x00007f9a6b9391e4 in ?? () #6 0x0000000000000000 in ?? () Thread 12 (LWP 31960): #0 0x00007f9a6562100c in ?? () #1 0x0000000000000000 in ?? () Thread 11 (LWP 31981): #0 0x00007f9a65623896 in ?? () #1 0x0000000000000100 in ?? () #2 0x00000000044b82c8 in ?? () #3 0x00000000044b82c8 in ?? () #4 0x0000000500000000 in ?? () #5 0x00007f9a3e4f5c70 in ?? () #6 0x00007f9a65623988 in ?? () #7 0x00007f9a65623850 in ?? () #8 0x00000000044b82c8 in ?? () #9 0x0000000100000006 in ?? () #10 0x0000000000000000 in ?? () Thread 10 (LWP 31881): #0 0x00007f9a62c78f59 in ?? () #1 0x00007f9a6951400c in ?? () #2 0x00007f9a6c2db050 in ?? () #3 0x00007f9a6c2db070 in ?? () #4 0x00007f9a6c2db080 in ?? () #5 0x00007f9a6b8e861b in ?? () #6 0x00007f9a5d455d00 in ?? () #7 0x0000000000000000 in ?? () Thread 9 (LWP 31978): #0 0x00007f9a65623896 in ?? () #1 0x0000000000000100 in ?? () #2 0x00000000044b82c8 in ?? () #3 0x00000000044b82c8 in ?? () #4 0x0000000500000000 in ?? () #5 0x00007f9a3e678c70 in ?? () #6 0x00007f9a65623988 in ?? () #7 0x00007f9a65623850 in ?? () #8 0x00000000044b82c8 in ?? () #9 0x0000000100000006 in ?? () #10 0x0000000000000000 in ?? () Thread 8 (LWP 31878): #0 0x00007f9a65624bf0 in ?? () #1 0x0000000000000001 in ?? () #2 0x00007ffe20daef6e in ?? () #3 0x00007ffe20daef6f in ?? () #4 0x00007f9a5ec58ba0 in ?? () #5 0x00007f9a5ec58bb0 in ?? () #6 0x00007f9a694f3a58 in ?? () #7 0x0000000000000000 in ?? () Thread 7 (LWP 31879): #0 0x00007f9a62c78f59 in ?? () #1 0x00007f9a6951400c in ?? () #2 0x00007f9a5e457d10 in ?? () #3 0x00007f9a6c2dd3a0 in ?? () #4 0x00007f9a6c2dd3b8 in ?? () #5 0x00007f9a6be489cb in ?? () #6 0xffffffffffffff90 in ?? () #7 0x0000000000000011 in ?? () #8 0x00007f9a58000b40 in ?? () #9 0x0000000000000011 in ?? () #10 0x0000000000000011 in ?? () #11 0x00007f9a58000b20 in ?? () #12 0x00007f9a697c0080 in ?? () #13 0x0000000002bec650 in ?? () #14 0x0000000000000000 in ?? () Thread 6 (LWP 31866): #0 0x00007f9a3c5ca690 in ?? () #1 0x0000000013d8f530 in ?? () #2 0x00007ffe3f800000 in ?? () #3 0x00000000052b3fa0 in ?? () #4 0x00007f9a694c0ade in ?? () #5 0x00000000041b7a10 in ?? () #6 0x000000000000085f in ?? () #7 0x0000000000000000 in ?? () Thread 5 (LWP 31984): #0 0x00007f9a62c73819 in ?? () #1 0x0000000009911650 in ?? () #2 0x000000000991179c in ?? () #3 0x0000000009911650 in ?? () #4 0x0000000000000005 in ?? () #5 0x00007f99e40ea4f0 in ?? () #6 0x00007f9a694c26b4 in ?? () #7 0x000000000991179c in ?? () #8 0x0000000136ffcd30 in ?? () #9 0x00007ffe20dab05f in ?? () #10 0xffffffff7fffffff in ?? () #11 0x00000000040d14e0 in ?? () #12 0x0000000009911790 in ?? () #13 0x000000000991179c in ?? () #14 0x00007f9a36ffcd30 in ?? () #15 0x00007ffe20dab05f in ?? () #16 0x00007f9a36ffd700 in ?? () #17 0x000000000357f6c0 in ?? () #18 0x00007f9a694c2a32 in ?? () #19 0x00000000040d14e0 in ?? () #20 0x00007f9a36ffcd30 in ?? () #21 0x00007f9a36ffcd20 in ?? () #22 0x00007f9a36ffcd20 in ?? () #23 0x00000000040d14e0 in ?? () #24 0x00007f9a6a477204 in ?? () #25 0x0000000009911650 in ?? () #26 0x0000000000000000 in ?? () Thread 4 (LWP 31982): #0 0x00007f9a65623896 in ?? () #1 0x0000000000000100 in ?? () #2 0x00000000044b82c8 in ?? () #3 0x00000000044b82c8 in ?? () #4 0x0000000500000000 in ?? () #5 0x00007f9a3e474c70 in ?? () #6 0x00007f9a65623988 in ?? () #7 0x00007f9a65623850 in ?? () #8 0x00000000044b82c8 in ?? () #9 0x0000000100000006 in ?? () #10 0x0000000000000000 in ?? () Thread 3 (LWP 31980): #0 0x00007f9a65623896 in ?? () #1 0x0000000000000100 in ?? () #2 0x00007f9a6bd20c73 in ?? () #3 0x00000000044b82c8 in ?? () #4 0x0000000500000000 in ?? () #5 0x00007f9a3e576c70 in ?? () #6 0x00007f9a65623988 in ?? () #7 0x00007f9a65623850 in ?? () #8 0x00000000044b82c8 in ?? () #9 0x0000000009918ec8 in ?? () #10 0x0000000000000000 in ?? () Thread 2 (LWP 31962): #0 0x00007f9a65623896 in ?? () #1 0x0000000002c9bc60 in ?? () #2 0x0000000000000001 in ?? () #3 0x00000000044b8308 in ?? () #4 0x0000000000000000 in ?? () Thread 1 (LWP 31977): #0 0x00007f9a3c5c8788 in ?? () #1 0x0000000000000000 in ?? () backtrace.txt (8,830 bytes)

paul 2020-04-19 21:02 administrator ~0023816	A rogue plugin has always been able to crash Ardour and will always be able to do so. We load plugins into the same process as Ardour itself, and they can do anything at all (including crash the entire program) I am extremely certain that this is a bug in zynreverb and not an Ardour bug.

x42 2020-04-20 16:12 administrator ~0023826	@ranguli please report this to zyn's tracker: https://sourceforge.net/p/zynaddsubfx/bugs/ A quick IRC conversation on the subject, indicates this to be zyn related: 17:52 < rgareus> fundamental: "Increasing "room size" in ZynReverb beyond certain value crashes Ardour" (https://tracker.ardour.org/view.php?id=8025) 17:53 < rgareus> fundamental: I noticed that I don't have zyn-reverb installed. before I try to reproduce it, have you seen this issue before? 17:59 < fundamental> rgareus: I have not seen the issue before, but it looks like a straight forward "there's conditions where the realtime allocator runs out of memory" issue 18:00 < fundamental> rgareus: With the full zyn system things generally end up getting more memory as needed from the non-realtime side, but that logic doesn't exist in the plugin varient 18:01 < fundamental> rgareus: so either A) the reverb effect has to handle the out-of-memory case elegantly or B) some basic math has to be done to show the maximum memory set of parameters and preallocate correctly 18:02 < fundamental> rgareus: If there's a bug open on our tracker I can point someone in the right direction to solve it themselves, but I've got a pretty big backlog at the moment in regards to zyn

x42 2020-04-20 16:14 administrator ~0023827	PS. or alternatively use https://github.com/zynaddsubfx/zyn-fusion-issues/issues (either works)

Date Modified	Username	Field	Change
2020-04-19 14:37	ranguli	New Issue
2020-04-19 14:37	ranguli	Tag Attached: crash
2020-04-19 14:37	ranguli	Tag Attached: lv2
2020-04-19 14:37	ranguli	Tag Attached: plugin
2020-04-19 14:37	ranguli	Tag Attached: VST
2020-04-19 14:37	ranguli	File Added: backtrace.txt
2020-04-19 21:02	paul	Note Added: 0023816
2020-04-20 16:12	x42	Note Added: 0023826
2020-04-20 16:14	x42	Note Added: 0023827