n_free can crash the server

[jleben]

[Issue migrated from SourceForge | ID: 1834737 | Submitted by 'sciss']
[http://sourceforge.net/support/tracker.php?aid=1834737]

an immediate n_free, g_freeAll or g_deepFree crashes scsynth if the node was paused. tested with latest SVN build (6650) on macbook pro intel, mac os x 10.4.10. to reproduce:

s.boot;

// now either of these:

(
s.sendBundle( nil,
[ "/g_new", 1007, 0, 0 ],
[ "/s_new", "default", 1011, 1, 1007 ],
[ "/n_run", 1011, 0 ]// REQUIRED TO PRODUCE THE CRASH
);
s.sendMsg( "/g_deepFree", 1007 );// BOOOM!
)

(
s.sendBundle( nil,
[ "/g_new", 1007, 0, 0 ],
[ "/s_new", "default", 1011, 1, 1007 ],
[ "/n_run", 1011, 0 ]// REQUIRED TO PRODUCE THE CRASH
);
s.sendMsg( "/g_freeAll", 1007 );// BOOM!
)

(
s.sendBundle( nil,
[ "/g_new", 1007, 0, 0 ],
[ "/s_new", "default", 1011, 1, 1007 ],
[ "/n_run", 1011, 0 ]// REQUIRED TO PRODUCE THE CRASH
);
s.sendMsg( "/n_free", 1011 );
)

[jleben]

[Comment migrated from SourceForge | Submitted by 'jamshark70']

Not reproducible on my machine, but I can't find evidence in svn of a code fix. Keeping open for now.

[jleben]

[Comment migrated from SourceForge | Submitted by 'nobody']

Hi James. It still crashes here with latest SVN... Here's the crash log (it's OffsetOut's DTOR):

===== Sonntag, 6. Januar 2008 21:14 Uhr Europe/Berlin =====

---

Host Name: Ezra
Date/Time: 2008-01-06 21:14:39.808 +0100
OS Version: 10.4.11 (Build 8S2167)
Report Version: 4

Command: scsynth
Path: ./scsynth
Parent: sh [12653]

Version: ??? (???)

PID: 12654
Thread: 6

Exception: EXC_BAD_ACCESS (0x0001)
Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000000

Thread 0:
0 libSystem.B.dylib 0x900248c7 semaphore_wait_signal_trap + 7
1 scsynth 0x000066c6 SC_Semaphore::Acquire() + 36
2 scsynth 0x0001bd2a World_WaitForQuit + 26
3 scsynth 0x0001d914 main + 2574
4 scsynth 0x00001c6e _start + 216
5 scsynth 0x00001b95 start + 41

Thread 1:
0 libSystem.B.dylib 0x900248c7 semaphore_wait_signal_trap + 7
1 DiskIOUGens.scx 0x00682e20 SC_SyncCondition::WaitEach() + 36 (SC_SyncCondition.cpp:45)
2 DiskIOUGens.scx 0x00683954 disk_io_thread_func(void*) + 34 (DiskIO_UGens.cpp:108)
3 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 2:
0 libSystem.B.dylib 0x90037b57 mach_wait_until + 7
1 libSystem.B.dylib 0x9003a222 usleep + 82
2 MacUGens.scx 0x01342ef5 gstate_update_func(void*) + 193 (MacUGens.cpp:87)
3 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 3:
0 libSystem.B.dylib 0x90037b57 mach_wait_until + 7
1 libSystem.B.dylib 0x900377d9 sleep + 121
2 scsynth 0x00009504 resyncThreadFunc(void*) + 18
3 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 4:
0 libSystem.B.dylib 0x900248c7 semaphore_wait_signal_trap + 7
1 scsynth 0x00019f30 SC_SyncCondition::WaitNext() + 42
2 scsynth 0x0000a465 SC_AudioDriver::RunThread() + 59
3 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 5:
0 libSystem.B.dylib 0x90009cd7 mach_msg_trap + 7
1 com.apple.CoreFoundation 0x9082d23b CFRunLoopRunSpecific + 2014
2 com.apple.CoreFoundation 0x9082ca56 CFRunLoopRunInMode + 61
3 com.apple.audio.CoreAudio 0x91469356 HALRunLoop::OwnThread(void_) + 158
4 com.apple.audio.CoreAudio 0x91469171 CAPThread::Entry(CAPThread_) + 93
5 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 6 Crashed:
0 IOUGens.scx 0x01159cc7 OffsetOut_Dtor + 135 (IOUGens.cpp:1039)
1 scsynth 0x0000c8d3 Graph_Dtor(Graph_) + 61
2 scsynth 0x0000e8d4 Group_DeepFreeGraphs(Group_) + 52
3 scsynth 0x00014937 meth_g_deepFree(World_, int, char_, ReplyAddress_) + 69
4 scsynth 0x0000f614 SC_LibCmd::Perform(World_, int, char_, ReplyAddress_) + 42
5 scsynth 0x0000a3d1 PerformOSCMessage(World_, int, char_, ReplyAddress_) + 267
6 scsynth 0x0000a5c4 Perform_ToEngine_Msg(FifoMsg_) + 76
7 scsynth 0x0006cc3f MsgFifo<FifoMsg, (int)1024>::Perform() + 45
8 scsynth 0x0000bf3b SC_CoreAudioDriver::Run(AudioBufferList const_, AudioBufferList_, long long) + 127
9 scsynth 0x0000c697 appIOProc(unsigned long, AudioTimeStamp const_, AudioBufferList const_, AudioTimeStamp const_, AudioBufferList_, AudioTimeStamp const_, void_) + 353
10 com.apple.audio.CoreAudio 0x91477872 HP_IOProc::Call(AudioTimeStamp const&, AudioTimeStamp const&, AudioBufferList const_, AudioTimeStamp const&, AudioBufferList_) + 240
11 com.apple.audio.CoreAudio 0x91476d9a IOA_Device::CallIOProcs(AudioTimeStamp const&, AudioTimeStamp const&, AudioTimeStamp const&) + 274
12 com.apple.audio.CoreAudio 0x91476b21 HP_IOThread::PerformIO(AudioTimeStamp const&) + 1299
13 com.apple.audio.CoreAudio 0x91474f49 HP_IOThread::WorkLoop() + 953
14 com.apple.audio.CoreAudio 0x91474b8b HP_IOThread::ThreadEntry(HP_IOThread_) + 17
15 com.apple.audio.CoreAudio 0x91469171 CAPThread::Entry(CAPThread_) + 93
16 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 7:
0 libSystem.B.dylib 0x9001dfdc recvfrom + 12
1 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 8:
0 libSystem.B.dylib 0x90009cd7 mach_msg_trap + 7
1 com.apple.CoreFoundation 0x9082d23b CFRunLoopRunSpecific + 2014
2 com.apple.CoreFoundation 0x9082ca56 CFRunLoopRunInMode + 61
3 com.apple.CFNetwork 0x9103f5f9 _ServiceBlockUntilComplete + 107
4 com.apple.CFNetwork 0x91021fa6 CFNetServiceRegisterWithOptions + 1070
5 scsynth 0x00006e4e PublishPortToRendezvous(SCRendezvousProtocol, short) + 138
6 scsynth 0x00007a68 SC_UdpInPort::PublishToRendezvous() + 34
7 scsynth 0x00007675 rendezvous_thread_func(void*) + 17
8 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 9:
0 libSystem.B.dylib 0x9001a1cc select + 12
1 libSystem.B.dylib 0x90024227 _pthread_body + 84

Thread 6 crashed with X86 Thread State (32-bit):
eax: 0x00000430 ebx: 0x01159c4e ecx: 0x00000000 edx: 0x124fdae0
edi: 0x124fd15c esi: 0x00000013 ebp: 0xb0305878 esp: 0xb0305820
ss: 0x0000001f efl: 0x00010246 eip: 0x01159cc7 cs: 0x00000017
ds: 0x0000001f es: 0x0000001f fs: 0x00000000 gs: 0x00000037

Binary Images Description:
0x1000 - 0x74fff scsynth /Applications/SuperCollider_f/scsynth
0x1f3000 - 0x1f4fff BlackrainUGensUB.scx /Applications/SuperCollider_f/plugins/BlackrainUGensUB.scx
0x305000 - 0x30cfff BEQSuiteUGensUB.scx /Applications/SuperCollider_f/plugins/BEQSuiteUGensUB.scx
0x31f000 - 0x325fff bhobChaos.scx /Applications/SuperCollider_f/plugins/bhobChaos.scx
0x33a000 - 0x33dfff bhobFFT.scx /Applications/SuperCollider_f/plugins/bhobFFT.scx
0x354000 - 0x362fff bhobFilt.scx /Applications/SuperCollider_f/plugins/bhobFilt.scx
0x38a000 - 0x38efff bhobGrain.scx /Applications/SuperCollider_f/plugins/bhobGrain.scx
0x39f000 - 0x3a3fff bhobNoise.scx /Applications/SuperCollider_f/plugins/bhobNoise.scx
0x3b3000 - 0x3bdfff ChaosUGens.scx /Applications/SuperCollider_f/plugins/ChaosUGens.scx
0x3d2000 - 0x3d9fff DemandUGens.scx /Applications/SuperCollider_f/plugins/DemandUGens.scx
0x505000 - 0x53ffff BinaryOpUGens.scx /Applications/SuperCollider_f/plugins/BinaryOpUGens.scx
0x606000 - 0x62efff DelayUGens.scx /Applications/SuperCollider_f/plugins/DelayUGens.scx
0x681000 - 0x6d0fff DiskIOUGens.scx /Applications/SuperCollider_f/plugins/DiskIOUGens.scx
0x7a9000 - 0x7adfff DynNoiseUGens.scx /Applications/SuperCollider_f/plugins/DynNoiseUGens.scx
0x1008000 - 0x101afff FFT2_UGens.scx /Applications/SuperCollider_f/plugins/FFT2_UGens.scx
0x1051000 - 0x1064fff FFT_UGens.scx /Applications/SuperCollider_f/plugins/FFT_UGens.scx
0x10e0000 - 0x10f3fff FilterUGens.scx /Applications/SuperCollider_f/plugins/FilterUGens.scx
0x1125000 - 0x1127fff GendynUGens.scx /Applications/SuperCollider_f/plugins/GendynUGens.scx
0x1131000 - 0x113bfff GrainUGens.scx /Applications/SuperCollider_f/plugins/GrainUGens.scx
0x1152000 - 0x115afff IOUGens.scx /Applications/SuperCollider_f/plugins/IOUGens.scx
0x1189000 - 0x1190fff JoshAmbiUGensUB.scx /Applications/SuperCollider_f/plugins/JoshAmbiUGensUB.scx
0x11a4000 - 0x11d4fff JoshGrainUGensUB.scx /Applications/SuperCollider_f/plugins/JoshGrainUGensUB.scx
0x1252000 - 0x1261fff JoshPVUGensUB.scx /Applications/SuperCollider_f/plugins/JoshPVUGensUB.scx
0x1284000 - 0x1291fff JoshUGensUB.scx /Applications/SuperCollider_f/plugins/JoshUGensUB.scx
0x12bc000 - 0x12cefff LFUGens.scx /Applications/SuperCollider_f/plugins/LFUGens.scx
0x12f5000 - 0x12f7fff LoopBuf.scx /Applications/SuperCollider_f/plugins/LoopBuf.scx
0x1300000 - 0x130bfff MachineListening.scx /Applications/SuperCollider_f/plugins/MachineListening.scx
0x1342000 - 0x1343fff MacUGens.scx /Applications/SuperCollider_f/plugins/MacUGens.scx
0x134d000 - 0x134efff MCLD_CQ_UgensUB.scx /Applications/SuperCollider_f/plugins/MCLD_CQ_UgensUB.scx
0x1357000 - 0x1358fff MCLDBufferUgensUB.scx /Applications/SuperCollider_f/plugins/MCLDBufferUgensUB.scx
0x1360000 - 0x1362fff MCLDChaosUgensUB.scx /Applications/SuperCollider_f/plugins/MCLDChaosUgensUB.scx
0x1374000 - 0x137ffff MCLDFFTTriggerUgensUB.scx /Applications/SuperCollider_f/plugins/MCLDFFTTriggerUgensUB.scx
0x13b2000 - 0x13b6fff MCLDFFTUgensUB.scx /Applications/SuperCollider_f/plugins/MCLDFFTUgensUB.scx
0x13ce000 - 0x13cffff MCLDTriggeredStatsUGensUB.scx /Applications/SuperCollider_f/plugins/MCLDTriggeredStatsUGensUB.scx
0x13d7000 - 0x13dbfff MulAddUGens.scx /Applications/SuperCollider_f/plugins/MulAddUGens.scx
0x13ef000 - 0x13f5fff NoiseUGens.scx /Applications/SuperCollider_f/plugins/NoiseUGens.scx
0x1409000 - 0x141bfff OSCUGens.scx /Applications/SuperCollider_f/plugins/OSCUGens.scx
0x144e000 - 0x1456fff PanUGens.scx /Applications/SuperCollider_f/plugins/PanUGens.scx
0x1472000 - 0x1473fff PhysicalModellingUGens.scx /Applications/SuperCollider_f/plugins/PhysicalModellingUGens.scx
0x147c000 - 0x1482fff ReverbUGens.scx /Applications/SuperCollider_f/plugins/ReverbUGens.scx
0x1491000 - 0x1496fff ReverbUGensUB.scx /Applications/SuperCollider_f/plugins/ReverbUGensUB.scx
0x14a7000 - 0x14a8fff TestUGens.scx /Applications/SuperCollider_f/plugins/TestUGens.scx
0x14af000 - 0x14bcfff TriggerUGens.scx /Applications/SuperCollider_f/plugins/TriggerUGens.scx
0x14e1000 - 0x14ebfff UnaryOpUGens.scx /Applications/SuperCollider_f/plugins/UnaryOpUGens.scx
0x151a000 - 0x151cfff UnpackFFTUGens.scx /Applications/SuperCollider_f/plugins/UnpackFFTUGens.scx
0x15b1000 - 0x15bffff com.grame.JackRouter JackRouter 0.8.3 (0.8.3)/Library/Audio/Plug-Ins/HAL/JackRouter.plugin/Contents/MacOS/JackRouter
0x1614000 - 0x161cfff com.grame.Jack Jack (0.101.3)/Library/Frameworks/Jack.framework/Versions/A/Jack
0x175c000 - 0x1761fff com.apple.audio.AppleHDAHALPlugIn 1.3.7 (1.3.7a23)/System/Library/Extensions/AppleHDA.kext/Contents/PlugIns/AppleHDAHALPlugIn.bundle/Contents/MacOS/AppleHDAHALPlugIn
0x12008000 - 0x12043fff STKUGensUB.scx /Applications/SuperCollider_f/plugins/STKUGensUB.scx
0x8fe00000 - 0x8fe4afff dyld 46.16/usr/lib/dyld
0x90000000 - 0x90171fff libSystem.B.dylib /usr/lib/libSystem.B.dylib
0x901c1000 - 0x901c3fff libmathCommon.A.dylib /usr/lib/system/libmathCommon.A.dylib
0x901c5000 - 0x90202fff com.apple.CoreText 1.1.3 (???)/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreText.framework/Versions/A/CoreText
0x90229000 - 0x902fffff ATS /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ATS.framework/Versions/A/ATS
0x9031f000 - 0x90774fff com.apple.CoreGraphics 1.258.77 (???)/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
0x9080b000 - 0x908d3fff com.apple.CoreFoundation 6.4.9 (368.31)/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
0x90911000 - 0x90911fff com.apple.CoreServices 10.4 (???)/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices
0x90913000 - 0x90a07fff libicucore.A.dylib /usr/lib/libicucore.A.dylib
0x90a57000 - 0x90ad6fff libobjc.A.dylib /usr/lib/libobjc.A.dylib
0x90aff000 - 0x90b63fff libstdc++.6.dylib /usr/lib/libstdc++.6.dylib
0x90bd2000 - 0x90bd9fff libgcc_s.1.dylib /usr/lib/libgcc_s.1.dylib
0x90bde000 - 0x90c51fff com.apple.framework.IOKit 1.4.8 (???)/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit
0x90c66000 - 0x90c78fff libauto.dylib /usr/lib/libauto.dylib
0x90c7e000 - 0x90f24fff com.apple.CoreServices.CarbonCore 682.28/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore
0x90f67000 - 0x90fcffff com.apple.CoreServices.OSServices 4.1/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices
0x91008000 - 0x91047fff com.apple.CFNetwork 129.22/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork
0x9105a000 - 0x9106afff com.apple.WebServices 1.1.3 (1.1.0)/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/WebServicesCore.framework/Versions/A/WebServicesCore
0x91075000 - 0x910f4fff com.apple.SearchKit 1.0.7/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit
0x9112e000 - 0x9114cfff com.apple.Metadata 10.4.4 (121.36)/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata
0x91158000 - 0x91166fff libz.1.dylib /usr/lib/libz.1.dylib
0x91169000 - 0x91308fff com.apple.security 4.5.2 (29774)/System/Library/Frameworks/Security.framework/Versions/A/Security
0x91406000 - 0x9140efff com.apple.DiskArbitration 2.1.2/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration
0x91415000 - 0x9141cfff libbsm.dylib /usr/lib/libbsm.dylib
0x91420000 - 0x91446fff com.apple.SystemConfiguration 1.8.6/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration
0x91458000 - 0x914cefff com.apple.audio.CoreAudio 3.0.5/System/Library/Frameworks/CoreAudio.framework/Versions/A/CoreAudio
0x9151f000 - 0x9151ffff com.apple.ApplicationServices 10.4 (???)/System/Library/Frameworks/ApplicationServices.framework/Versions/A/ApplicationServices
0x91521000 - 0x9154cfff com.apple.AE 314 (313)/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE
0x9155f000 - 0x91633fff com.apple.ColorSync 4.4.10/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ColorSync.framework/Versions/A/ColorSync
0x9166e000 - 0x916e1fff com.apple.print.framework.PrintCore 4.6 (177.13)/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Versions/A/PrintCore
0x9170f000 - 0x917b8fff com.apple.QD 3.10.25 (???)/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/QD.framework/Versions/A/QD
0x917de000 - 0x91829fff com.apple.HIServices 1.5.2 (???)/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/HIServices.framework/Versions/A/HIServices
0x91848000 - 0x9185efff com.apple.LangAnalysis 1.6.3/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LangAnalysis.framework/Versions/A/LangAnalysis
0x9186a000 - 0x91884fff com.apple.FindByContent 1.5/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/FindByContent.framework/Versions/A/FindByContent
0x9188e000 - 0x918cbfff com.apple.LaunchServices 182/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices
0x918df000 - 0x918ebfff com.apple.speech.synthesis.framework 3.5/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/SpeechSynthesis.framework/Versions/A/SpeechSynthesis
0x918f2000 - 0x91932fff com.apple.ImageIO.framework 1.5.6/System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/ImageIO
0x91945000 - 0x919f7fff libcrypto.0.9.7.dylib /usr/lib/libcrypto.0.9.7.dylib
0x91a3d000 - 0x91a53fff libcups.2.dylib /usr/lib/libcups.2.dylib
0x91a58000 - 0x91a76fff libJPEG.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJPEG.dylib
0x91a7b000 - 0x91adafff libJP2.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libJP2.dylib
0x91aec000 - 0x91af0fff libGIF.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libGIF.dylib
0x91af2000 - 0x91b7afff libRaw.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRaw.dylib
0x91b7e000 - 0x91bbbfff libTIFF.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libTIFF.dylib
0x91bc1000 - 0x91bdbfff libPng.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libPng.dylib
0x91be0000 - 0x91be2fff libRadiance.dylib /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/ImageIO.framework/Versions/A/Resources/libRadiance.dylib
0x91be4000 - 0x91cc2fff libxml2.2.dylib /usr/lib/libxml2.2.dylib
0x91cdf000 - 0x91cdffff com.apple.Accelerate 1.3.1 (Accelerate 1.3.1)/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate
0x91ce1000 - 0x91d6ffff com.apple.vImage 2.5/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vImage.framework/Versions/A/vImage
0x91d76000 - 0x91d76fff com.apple.Accelerate.vecLib 3.3.1 (vecLib 3.3.1)/System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/vecLib
0x91d78000 - 0x91dd1fff libvMisc.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvMisc.dylib
0x91dda000 - 0x91dfefff libvDSP.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libvDSP.dylib
0x91e06000 - 0x9220ffff libBLAS.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libBLAS.dylib
0x92249000 - 0x925fdfff libLAPACK.dylib /System/Library/Frameworks/Accelerate.framework/Versions/A/Frameworks/vecLib.framework/Versions/A/libLAPACK.dylib
0x9262a000 - 0x92717fff libiconv.2.dylib /usr/lib/libiconv.2.dylib
0x92719000 - 0x92797fff com.apple.DesktopServices 1.3.7/System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/DesktopServicesPriv
0x927d8000 - 0x92a08fff com.apple.Foundation 6.4.9 (567.36)/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
0x92bb0000 - 0x92bb0fff com.apple.Carbon 10.4 (???)/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon
0x92bb2000 - 0x92bc2fff com.apple.ImageCapture 3.0.4/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/ImageCapture.framework/Versions/A/ImageCapture
0x92bd1000 - 0x92bd9fff com.apple.speech.recognition.framework 3.6/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SpeechRecognition.framework/Versions/A/SpeechRecognition
0x92bdf000 - 0x92be4fff com.apple.securityhi 2.0.1 (24742)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/SecurityHI.framework/Versions/A/SecurityHI
0x92bea000 - 0x92c7bfff com.apple.ink.framework 101.2.1 (71)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Ink.framework/Versions/A/Ink
0x92c8f000 - 0x92c92fff com.apple.help 1.0.3 (32.1)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Help.framework/Versions/A/Help
0x92c95000 - 0x92cb3fff com.apple.openscripting 1.2.5 (???)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/OpenScripting.framework/Versions/A/OpenScripting
0x92cc5000 - 0x92ccbfff com.apple.print.framework.Print 5.1 (192.3)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/Print.framework/Versions/A/Print
0x92cd1000 - 0x92d34fff com.apple.htmlrendering 66.1 (1.1.3)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HTMLRendering.framework/Versions/A/HTMLRendering
0x92d58000 - 0x92d99fff com.apple.NavigationServices 3.4.4 (3.4.3)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/NavigationServices.framework/Versions/A/NavigationServices
0x92dc0000 - 0x92dcdfff com.apple.audio.SoundManager 3.9.1/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CarbonSound.framework/Versions/A/CarbonSound
0x92dd4000 - 0x92dd9fff com.apple.CommonPanels 1.2.3 (73)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/CommonPanels.framework/Versions/A/CommonPanels
0x92dde000 - 0x930d3fff com.apple.HIToolbox 1.4.10 (???)/System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
0x96eb8000 - 0x96eb8fff com.apple.vecLib 3.3.1 (vecLib 3.3.1)/System/Library/Frameworks/vecLib.framework/Versions/A/vecLib

[jleben]

[Comment migrated from SourceForge | Submitted by 'danstowell']

Just to confirm, still happens for me too. Svn rev 7023, PPC Mac 10.4.11 - and yes, the crash occurs in OffsetOut_Dtor for me too. e.g.

Thread 8 Crashed:
0 IOUGens.scx 0x0126bd1c OffsetOut_Dtor + 96 (IOUGens.cpp:1039)
1 scsynth 0x0000f3b4 Graph_Dtor(Graph_) + 96
2 scsynth 0x00015728 meth_n_free(World_, int, char_, ReplyAddress_) + 64
3 scsynth 0x00012cf8 SC_LibCmd::Perform(World_, int, char_, ReplyAddress_) + 60
4 scsynth 0x0000e5a0 Perform_ToEngine_Msg(FifoMsg_) + 76
5 scsynth 0x0006a62c MsgFifo<FifoMsg, (int)1024>::Perform() + 72
6 scsynth 0x0000e8fc SC_CoreAudioDriver::Run(AudioBufferList const_, AudioBufferList_, long long) + 112
7 scsynth 0x0000eff0 appIOProc(unsigned long, AudioTimeStamp const_, AudioBufferList const_, AudioTimeStamp const_, AudioBufferList_, AudioTimeStamp const_, void_) + 428

8 ...lagutin.audio_hijack.server 0x01334358 AudioDeviceIOCallback + 88
9 com.apple.audio.CoreAudio 0x91469c0c IOA_Device::CallIOProcs(AudioTimeStamp const&, AudioTimeStamp const&, AudioTimeStamp const&) + 376
10 com.apple.audio.CoreAudio 0x91469920 HP_IOThread::PerformIO(AudioTimeStamp const&) + 532
11 com.apple.audio.CoreAudio 0x91467930 HP_IOThread::WorkLoop() + 1156
12 com.apple.audio.CoreAudio 0x91467498 HP_IOThread::ThreadEntry(HP_IOThread_) + 16
13 com.apple.audio.CoreAudio 0x914582c4 CAPThread::Entry(CAPThread_) + 96
14 libSystem.B.dylib 0x9002bd08 _pthread_body + 96

From some quick poking, it looks like this happens because the Dtor is called without the Ctor or next EVER having been called (which is news to me). Will investigate a bit more.