Crash when dragging random XML files over the arrange view

[cfillion]

The first issue is that REAPER shows a modal dialog once the drag hovers the arrange view. Even if REAPER's window just happens to be on the way and was not the intended target of the drag and drop.



Then REAPER often crashes any time from immediately to a minute after closing the one (or more) modal popups. The reports are different each time. The following ones were made from v7.0rc5 on macOS 10.14.

v5.99 shows the undesired popups but I could not make it crash.

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x00007fe600000450
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [3415]

VM Regions Near 0x7fe600000450:
    MALLOC_MEDIUM          00007fe5ff800000-00007fe600000000 [ 8192K] rw-/rwx SM=PRV  
--> 
    MALLOC_MEDIUM          00007fe608000000-00007fe609800000 [ 24.0M] rw-/rwx SM=PRV  

Thread 0 Crashed:: reaper  Dispatch queue: com.apple.main-thread
0   reaper_midi.dylib             	0x00000001130994e4 WDL_PtrList<wdl_xml_element>::Empty(bool, void (*)(void*)) + 132
1   reaper_midi.dylib             	0x00000001130994fc WDL_PtrList<wdl_xml_element>::Empty(bool, void (*)(void*)) + 156
2   reaper_midi.dylib             	0x00000001130994fc WDL_PtrList<wdl_xml_element>::Empty(bool, void (*)(void*)) + 156
3   reaper_midi.dylib             	0x00000001130994fc WDL_PtrList<wdl_xml_element>::Empty(bool, void (*)(void*)) + 156
4   reaper_midi.dylib             	0x000000011322da49 wdl_xml_element::~wdl_xml_element() + 41
5   reaper_midi.dylib             	0x0000000113224689 MIDIFile_Context::ImportMusicXML(char const*, int) + 297
6   reaper_midi.dylib             	0x00000001130749d1 MIDIFile_Context::Open(char const*, int) + 1249
7   reaper_midi.dylib             	0x0000000113073fff CreateFromFile(char const*, int) + 543
8   com.cockos.reaper             	0x000000010c8050cd PCM_Source_CreateFromFile(char const*) + 317
9   com.cockos.reaper             	0x000000010c6b4851 TrackList_onDragEnter(void*, POINT) + 849
10  com.cockos.reaper             	0x000000010cb1dd94 -[REAPERSwell_hwnd draggingEntered:] + 196
11  com.apple.AppKit              	0x00007fff4cad1c1d -[NSDragDestination _draggingEntered] + 54
12  com.apple.AppKit              	0x00007fff4c8538d3 NSCoreDragTrackingProc + 996
13  com.apple.HIServices          	0x00007fff4d6ba06c DoTrackingMessage + 409
14  com.apple.HIServices          	0x00007fff4d6bfca3 CoreDragMessageHandler + 494
15  com.apple.CoreFoundation      	0x00007fff4efb69a6 __CFMessagePortPerform + 602
16  com.apple.CoreFoundation      	0x00007fff4eef3883 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41
17  com.apple.CoreFoundation      	0x00007fff4eef37e1 __CFRunLoopDoSource1 + 527
18  com.apple.CoreFoundation      	0x00007fff4eedb70c __CFRunLoopRun + 2524
19  com.apple.CoreFoundation      	0x00007fff4eedaade CFRunLoopRunSpecific + 455
20  com.apple.HIToolbox           	0x00007fff4e1391ab RunCurrentEventLoopInMode + 292
21  com.apple.HIToolbox           	0x00007fff4e138ee5 ReceiveNextEventCommon + 603
22  com.apple.HIToolbox           	0x00007fff4e138c76 _BlockUntilNextEventMatchingListInModeWithFilter + 64
23  com.apple.AppKit              	0x00007fff4c4d0e89 _DPSNextEvent + 1135
24  com.apple.AppKit              	0x00007fff4c4cfb77 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 1361
25  com.apple.AppKit              	0x00007fff4c4c9c94 -[NSApplication run] + 699
26  com.apple.AppKit              	0x00007fff4c4b91c0 NSApplicationMain + 777
27  com.cockos.reaper             	0x000000010c4c22f4 start + 52

Other reports appear to show memory corruption has happened.

Exception Type:        EXC_CRASH (SIGABRT)
Exception Codes:       0x0000000000000000, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Application Specific Information:
abort() called
REAPER(3479,0x10e0c35c0) malloc: *** error for object 0x6000000003e8: pointer being freed was not allocated
 

Thread 0 Crashed:: reaper  Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	0x00007fff7afcf2c2 __pthread_kill + 10
1   libsystem_pthread.dylib       	0x00007fff7b08abf1 pthread_kill + 284
2   libsystem_c.dylib             	0x00007fff7af396a6 abort + 127
3   libsystem_malloc.dylib        	0x00007fff7b048077 malloc_vreport + 545
4   libsystem_malloc.dylib        	0x00007fff7b047e38 malloc_report + 151
5   com.cockos.reaper             	0x000000010a22f621 audioStreamer_CoreAudio::~audioStreamer_CoreAudio() + 385
6   com.cockos.reaper             	0x000000010a23281d Quit_Audio() + 109
7   com.cockos.reaper             	0x000000010a027efd DoAppActivate(bool) + 1293
8   com.cockos.reaper             	0x000000010a010298 -[Controller applicationWillResignActive:] + 24
9   com.apple.CoreFoundation      	0x00007fff4ef3e8a2 __CFNOTIFICATIONCENTER_IS_CALLING_OUT_TO_AN_OBSERVER__ + 12
10  com.apple.CoreFoundation      	0x00007fff4ef3e81c ___CFXRegistrationPost_block_invoke + 63
11  com.apple.CoreFoundation      	0x00007fff4ef3e786 _CFXRegistrationPost + 404
12  com.apple.CoreFoundation      	0x00007fff4ef46c34 ___CFXNotificationPost_block_invoke + 87
13  com.apple.CoreFoundation      	0x00007fff4eeaf424 -[_CFXNotificationRegistrar find:object:observer:enumerator:] + 1642
14  com.apple.CoreFoundation      	0x00007fff4eeae7d7 _CFXNotificationPost + 732
15  com.apple.Foundation          	0x00007fff5113a33b -[NSNotificationCenter postNotificationName:object:userInfo:] + 66
16  com.apple.AppKit              	0x00007fff4c707da1 -[NSApplication _handleDeactivateEvent:] + 116
17  com.apple.AppKit              	0x00007fff4c4dbeaa -[NSApplication(NSEvent) sendEvent:] + 2718
18  com.cockos.reaper             	0x000000010a3fc372 -[REAPERapp sendEvent:] + 3842
19  com.apple.AppKit              	0x00007fff4c4c9ccc -[NSApplication run] + 755
20  com.apple.AppKit              	0x00007fff4c4b91c0 NSApplicationMain + 777
21  com.cockos.reaper             	0x0000000109fb9734 start + 52

Exception Type:        EXC_BAD_ACCESS (SIGSEGV)
Exception Codes:       KERN_INVALID_ADDRESS at 0x0000000100000400
Exception Note:        EXC_CORPSE_NOTIFY

Termination Signal:    Segmentation fault: 11
Termination Reason:    Namespace SIGNAL, Code 0xb
Terminating Process:   exc handler [3510]

VM Regions Near 0x100000400:
--> 
    __TEXT                 0000000109d4e000-000000010aaf7000 [ 13.7M] r-x/rwx SM=COW  /Volumes/VOLUME/*/REAPER.app/Contents/MacOS/REAPER

Application Specific Information:
objc_msgSend() selector name: _updateConstraintsForSubtreeIfNeededCollectingViewsWithInvalidBaselines:


Thread 0 Crashed:: reaper  Dispatch queue: com.apple.main-thread
0   libobjc.A.dylib               	0x00007fff796b669d objc_msgSend + 29
1   com.apple.AppKit              	0x00007fff4c5ba1e5 -[NSView _updateConstraintsForSubtreeIfNeededCollectingViewsWithInvalidBaselines:] + 382
2   com.apple.AppKit              	0x00007fff4c5ba1e5 -[NSView _updateConstraintsForSubtreeIfNeededCollectingViewsWithInvalidBaselines:] + 382
3   com.apple.AppKit              	0x00007fff4c5ba1e5 -[NSView _updateConstraintsForSubtreeIfNeededCollectingViewsWithInvalidBaselines:] + 382
4   com.apple.AppKit              	0x00007fff4c5b9f6f __45-[NSView updateConstraintsForSubtreeIfNeeded]_block_invoke + 48
5   com.apple.AppKit              	0x00007fff4c5b9924 -[NSView updateConstraintsForSubtreeIfNeeded] + 197
6   com.apple.AppKit              	0x00007fff4c5b9737 __62-[NSWindow(NSConstraintBasedLayout) updateConstraintsIfNeeded]_block_invoke + 154
7   com.apple.AppKit              	0x00007fff4c5b9643 -[NSWindow(NSConstraintBasedLayout) updateConstraintsIfNeeded] + 232
8   com.apple.AppKit              	0x00007fff4c5d2c4a __NSWindowGetDisplayCycleObserverForUpdateConstraints_block_invoke + 458
9   com.apple.AppKit              	0x00007fff4c5d2a40 NSDisplayCycleObserverInvoke + 162
10  com.apple.AppKit              	0x00007fff4c5d25c0 NSDisplayCycleFlush + 1030
11  com.apple.QuartzCore          	0x00007fff5996e315 CA::Transaction::run_commit_handlers(CATransactionPhase) + 49
12  com.apple.QuartzCore          	0x00007fff5996daee CA::Transaction::commit() + 212
13  com.apple.AppKit              	0x00007fff4c5d1f59 __65+[CATransaction(NSCATransaction) NS_setFlushesWithDisplayRefresh]_block_invoke + 274
14  com.apple.CoreFoundation      	0x00007fff4ef38c34 __CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__ + 23
15  com.apple.CoreFoundation      	0x00007fff4ef38b69 __CFRunLoopDoObservers + 451
16  com.apple.CoreFoundation      	0x00007fff4eedb1a0 __CFRunLoopRun + 1136
17  com.apple.CoreFoundation      	0x00007fff4eedaade CFRunLoopRunSpecific + 455
18  com.apple.Foundation          	0x00007fff51144bbf -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 280
19  com.apple.Foundation          	0x00007fff512150da -[NSRunLoop(NSRunLoop) runUntilDate:] + 114
20  com.apple.AppKit              	0x00007fff4c853d5b NSCoreDragTrackingProc + 2156
21  com.apple.HIServices          	0x00007fff4d6ba06c DoTrackingMessage + 409
22  com.apple.HIServices          	0x00007fff4d6bfca3 CoreDragMessageHandler + 494
23  com.apple.CoreFoundation      	0x00007fff4efb69a6 __CFMessagePortPerform + 602
24  com.apple.CoreFoundation      	0x00007fff4eef3883 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41
25  com.apple.CoreFoundation      	0x00007fff4eef37e1 __CFRunLoopDoSource1 + 527
26  com.apple.CoreFoundation      	0x00007fff4eedb70c __CFRunLoopRun + 2524
27  com.apple.CoreFoundation      	0x00007fff4eedaade CFRunLoopRunSpecific + 455
28  com.apple.HIToolbox           	0x00007fff4e1391ab RunCurrentEventLoopInMode + 292
29  com.apple.HIToolbox           	0x00007fff4e138ee5 ReceiveNextEventCommon + 603
30  com.apple.HIToolbox           	0x00007fff4e138c76 _BlockUntilNextEventMatchingListInModeWithFilter + 64
31  com.apple.AppKit              	0x00007fff4c4d0e89 _DPSNextEvent + 1135
32  com.apple.AppKit              	0x00007fff4c4cfb77 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 1361
33  com.apple.AppKit              	0x00007fff4c4c9c94 -[NSApplication run] + 699
34  com.apple.AppKit              	0x00007fff4c4b91c0 NSApplicationMain + 777
35  com.cockos.reaper             	0x0000000109d4f734 start + 52

Exception Type:        EXC_CRASH (SIGABRT)
Exception Codes:       0x0000000000000000, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Application Specific Information:
abort() called
REAPER(3538,0x1142b55c0) malloc: Incorrect checksum for freed object 0x7fe992a63c00: probably modified after being freed.
Corrupt value: 0x3e8
 

Thread 0 Crashed:: reaper  Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	0x00007fff7afcf2c2 __pthread_kill + 10
1   libsystem_pthread.dylib       	0x00007fff7b08abf1 pthread_kill + 284
2   libsystem_c.dylib             	0x00007fff7af396a6 abort + 127
3   libsystem_malloc.dylib        	0x00007fff7b048077 malloc_vreport + 545
4   libsystem_malloc.dylib        	0x00007fff7b060e0d malloc_zone_error + 183
5   libsystem_malloc.dylib        	0x00007fff7b0445c8 small_free_list_remove_ptr_no_clear + 1177
6   libsystem_malloc.dylib        	0x00007fff7b0432a8 small_malloc_from_free_list + 357
7   libsystem_malloc.dylib        	0x00007fff7b042afc small_malloc_should_clear + 284
8   libsystem_malloc.dylib        	0x00007fff7b040245 szone_malloc_should_clear + 120
9   libsystem_malloc.dylib        	0x00007fff7b03ec99 malloc_zone_malloc + 103
10  libsystem_malloc.dylib        	0x00007fff7b03ec15 malloc + 24
11  com.apple.CoreGraphics        	0x00007fff4f337bd3 aal_create + 135
12  com.apple.CoreGraphics        	0x00007fff4f33780d ripr_Acquire + 122
13  com.apple.CoreGraphics        	0x00007fff4f337708 RIPRenderPath + 73
14  com.apple.CoreGraphics        	0x00007fff4f2fed03 ripc_GetClipState + 4035
15  com.apple.CoreGraphics        	0x00007fff4f2fd966 ripc_GetRenderingState + 150
16  com.apple.CoreGraphics        	0x00007fff4f2fd791 ripc_DrawRects + 80
17  com.apple.CoreGraphics        	0x00007fff4f2fd6b2 CGContextFillRects + 96
18  com.apple.CoreGraphics        	0x00007fff4f2fd64b CGContextFillRect + 105
19  com.apple.CoreGraphics        	0x00007fff4f2fd20f CGContextClearRect + 48
20  com.apple.HIToolbox           	0x00007fff4e169867 HIMenuBarView::DrawOnce(CGRect, CGRect, bool, bool, CGContext*) + 133
21  com.apple.HIToolbox           	0x00007fff4e1696f9 HIMenuBarView::DrawSelf(short, __HIShape const*, CGContext*) + 571
22  com.apple.HIToolbox           	0x00007fff4e169160 HIMenuBarView::DrawWithoutCustomization(short, __HIShape const*, CGContext*) + 82
23  com.apple.HIToolbox           	0x00007fff4e1690f8 HIMenuBarView::DrawingDelegateHandler(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 258
24  com.apple.HIToolbox           	0x00007fff4e13722e DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1422
25  com.apple.HIToolbox           	0x00007fff4e1365df SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 371
26  com.apple.HIToolbox           	0x00007fff4e136465 SendEventToEventTargetWithOptions + 45
27  com.apple.HIToolbox           	0x00007fff4e168c81 HIView::SendDraw(short, OpaqueGrafPtr*, __HIShape const*, CGContext*) + 325
28  com.apple.HIToolbox           	0x00007fff4e1686fd HIView::RecursiveDrawComposited(__HIShape const*, __HIShape const*, unsigned int, HIView*, CGContext*, unsigned char, double) + 583
29  com.apple.HIToolbox           	0x00007fff4e16893b HIView::RecursiveDrawComposited(__HIShape const*, __HIShape const*, unsigned int, HIView*, CGContext*, unsigned char, double) + 1157
30  com.apple.HIToolbox           	0x00007fff4e168151 HIView::DrawComposited(short, OpaqueGrafPtr*, __HIShape const*, unsigned int, HIView*, CGContext*) + 865
31  com.apple.HIToolbox           	0x00007fff4e167dde HIView::Render(unsigned int, CGContext*) + 54
32  com.apple.HIToolbox           	0x00007fff4e175e27 FlushWindowObject(WindowData*, void**, unsigned char) + 757
33  com.apple.HIToolbox           	0x00007fff4e175915 FlushAllBuffers(__CFRunLoopObserver*, unsigned long, void*) + 306
34  com.apple.CoreFoundation      	0x00007fff4ef38c34 __CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__ + 23
35  com.apple.CoreFoundation      	0x00007fff4ef38b69 __CFRunLoopDoObservers + 451
36  com.apple.CoreFoundation      	0x00007fff4eedaa84 CFRunLoopRunSpecific + 365
37  com.apple.HIToolbox           	0x00007fff4e1391ab RunCurrentEventLoopInMode + 292
38  com.apple.HIToolbox           	0x00007fff4e138ded ReceiveNextEventCommon + 355
39  com.apple.HIToolbox           	0x00007fff4e138c76 _BlockUntilNextEventMatchingListInModeWithFilter + 64
40  com.apple.AppKit              	0x00007fff4c4d0e89 _DPSNextEvent + 1135
41  com.apple.AppKit              	0x00007fff4c4cfb77 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 1361
42  com.apple.AppKit              	0x00007fff4c4c9c94 -[NSApplication run] + 699
43  com.apple.AppKit              	0x00007fff4c4b91c0 NSApplicationMain + 777
44  com.cockos.reaper             	0x000000010bdd2734 start + 52

[Justin]

thanks, looking into this!