Invalid read of size 1 in AudioStreamPlaybackOGGVorbis::_mix_internal

[qarmin]

Godot version:
3.2.alpha.custom_build. 24e1039
OS/device including version:
Ubuntu 19.04
Issue description:
Godot must be compiled with sanitizers support(scons p=x11 -j6 use_ubsan=yes use_lsan=yes use_asan=yes) or checked with Valgrind(this is much slower)
When importing ogg files, Godot read freed memory:

READ of size 1 at 0x627000d790f5 thread T9
    #0 0x445407c in get8 thirdparty/misc/stb_vorbis.c:1298
    #1 0x4457899 in get8_packet_raw thirdparty/misc/stb_vorbis.c:1529
    #2 0x4457c43 in get_bits thirdparty/misc/stb_vorbis.c:1560
    #3 0x44756d7 in vorbis_decode_initial thirdparty/misc/stb_vorbis.c:3122
    #4 0x447f33d in vorbis_decode_packet thirdparty/misc/stb_vorbis.c:3438
    #5 0x44a0541 in stb_vorbis_get_frame_float thirdparty/misc/stb_vorbis.c:4942
    #6 0x44a7bf0 in stb_vorbis_get_samples_float_interleaved thirdparty/misc/stb_vorbis.c:5355
    #7 0x32f03d0 in AudioStreamPlaybackOGGVorbis::_mix_internal(AudioFrame*, int) modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:48
    #8 0xd779e9d in AudioStreamPlaybackResampled::mix(AudioFrame*, float, int) servers/audio/audio_stream.cpp:84
    #9 0x74e2b18 in EditorAudioStreamPreviewPlugin::generate(Ref<Resource> const&, Vector2 const&) const editor/plugins/editor_preview_plugins.cpp:639
    #10 0x60eb1da in EditorResourcePreviewGenerator::generate_from_path(String const&, Vector2 const&) const editor/editor_resource_preview.cpp:69
    #11 0x60f2a27 in EditorResourcePreview::_generate_preview(Ref<ImageTexture>&, Ref<ImageTexture>&, EditorResourcePreview::QueueItem const&, String const&) editor/editor_resource_preview.cpp:167
    #12 0x60f8ff4 in EditorResourcePreview::_thread() editor/editor_resource_preview.cpp:270
    #13 0x60ef9a0 in EditorResourcePreview::_thread_func(void*) editor/editor_resource_preview.cpp:107
    #14 0x4ec42fd in ThreadPosix::thread_callback(void*) drivers/unix/thread_posix.cpp:74
    #15 0x7f4f6b4b2181 in start_thread /build/glibc-KRRWSm/glibc-2.29/nptl/pthread_create.c:486
    #16 0x7f4f6a721b1e in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x11db1e)

0x627000d790f5 is located 6133 bytes inside of 12092-byte region [0x627000d77900,0x627000d7a83c)
freed by thread T0 here:
    #0 0x7f4f6bf2604f in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.5+0x10c04f)
    #1 0xe94b899 in Memory::free_static(void*, bool) core/os/memory.cpp:181
    #2 0xc865e01 in AudioServer::audio_data_free(void*) servers/audio_server.cpp:1165
    #3 0x32f5cea in AudioStreamOGGVorbis::clear_data() modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:160
    #4 0x32f70ee in AudioStreamOGGVorbis::set_data(PoolVector<unsigned char> const&) modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:210
    #5 0x331d237 in MethodBind1<PoolVector<unsigned char> const&>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #6 0xe158110 in ClassDB::set_property(Object*, StringName const&, Variant const&, bool*) core/class_db.cpp:1031
    #7 0xe3a8400 in Object::set(StringName const&, Variant const&, bool*) core/object.cpp:422
    #8 0xe4c4c17 in Resource::reload_from_file() core/resource.cpp:145
    #9 0x5c2f5f3 in EditorNode::_resources_reimported(Vector<String> const&) editor/editor_node.cpp:583
    #10 0x58d76e8 in MethodBind1<Vector<String> const&>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #11 0xe3b8852 in Object::call(StringName const&, Variant const**, int, Variant::CallError&) core/object.cpp:921
    #12 0xe3c1f4a in Object::emit_signal(StringName const&, Variant const**, int) core/object.cpp:1218
    #13 0xe3c3e08 in Object::emit_signal(StringName const&, Variant const&, Variant const&, Variant const&, Variant const&, Variant const&) core/object.cpp:1274
    #14 0x5a0181f in EditorFileSystem::reimport_files(Vector<String> const&) editor/editor_file_system.cpp:2001
    #15 0x59be298 in EditorFileSystem::_update_scan_actions() editor/editor_file_system.cpp:590
    #16 0x59d7a74 in EditorFileSystem::_notification(int) editor/editor_file_system.cpp:1163
    #17 0x5a10479 in EditorFileSystem::_notificationv(int, bool) (/usr/bin/godots+0x5a10479)
    #18 0xe3b8dbd in Object::notification(int, bool) core/object.cpp:931
    #19 0x92e5617 in SceneTree::_notify_group_pause(StringName const&, int) scene/main/scene_tree.cpp:958
    #20 0x92d62c2 in SceneTree::idle(float) scene/main/scene_tree.cpp:516
    #21 0x156af00 in Main::iteration() main/main.cpp:1930
    #22 0x146a00c in OS_X11::run() platform/x11/os_x11.cpp:3184
    #23 0x13e6ba3 in main platform/x11/godot_x11.cpp:56
    #24 0x7f4f6a62ab6a in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x26b6a)

previously allocated by thread T9 here:
    #0 0x7f4f6bf26448 in malloc (/lib/x86_64-linux-gnu/libasan.so.5+0x10c448)
    #1 0xe94a844 in Memory::alloc_static(unsigned long, bool) core/os/memory.cpp:85
    #2 0xc863745 in AudioServer::audio_data_alloc(unsigned int, unsigned char const*) servers/audio_server.cpp:1140
    #3 0x32f73a7 in AudioStreamOGGVorbis::set_data(PoolVector<unsigned char> const&) modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:212
    #4 0x331d237 in MethodBind1<PoolVector<unsigned char> const&>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #5 0xe158110 in ClassDB::set_property(Object*, StringName const&, Variant const&, bool*) core/class_db.cpp:1031
    #6 0xe3a8400 in Object::set(StringName const&, Variant const&, bool*) core/object.cpp:422
    #7 0xed743f3 in ResourceInteractiveLoaderBinary::poll() core/io/resource_format_binary.cpp:745
    #8 0xeddffba in ResourceFormatLoader::load(String const&, String const&, Error*) core/io/resource_loader.cpp:197
    #9 0xede5bda in ResourceLoader::_load(String const&, String const&, String const&, bool, Error*) core/io/resource_loader.cpp:270
    #10 0xedca720 in ResourceFormatImporter::load(String const&, String const&, Error*) core/io/resource_importer.cpp:133
    #11 0xede5bda in ResourceLoader::_load(String const&, String const&, String const&, bool, Error*) core/io/resource_loader.cpp:270
    #12 0xede8980 in ResourceLoader::load(String const&, String const&, bool, Error*) core/io/resource_loader.cpp:396
    #13 0x60eb044 in EditorResourcePreviewGenerator::generate_from_path(String const&, Vector2 const&) const editor/editor_resource_preview.cpp:66
    #14 0x60f2a27 in EditorResourcePreview::_generate_preview(Ref<ImageTexture>&, Ref<ImageTexture>&, EditorResourcePreview::QueueItem const&, String const&) editor/editor_resource_preview.cpp:167
    #15 0x60f8ff4 in EditorResourcePreview::_thread() editor/editor_resource_preview.cpp:270
    #16 0x60ef9a0 in EditorResourcePreview::_thread_func(void*) editor/editor_resource_preview.cpp:107
    #17 0x4ec42fd in ThreadPosix::thread_callback(void*) drivers/unix/thread_posix.cpp:74
    #18 0x7f4f6b4b2181 in start_thread /build/glibc-KRRWSm/glibc-2.29/nptl/pthread_create.c:486

Thread T9 created by T0 here:
    #0 0x7f4f6be54311 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a311)
    #1 0x4ec47f3 in ThreadPosix::create_func_posix(void (*)(void*), void*, Thread::Settings const&) drivers/unix/thread_posix.cpp:90
    #2 0xe95ff67 in Thread::create(void (*)(void*), void*, Thread::Settings const&) core/os/thread.cpp:51
    #3 0x6103067 in EditorResourcePreview::start() editor/editor_resource_preview.cpp:454
    #4 0x5c2ff56 in EditorNode::_sources_changed(bool) editor/editor_node.cpp:599
    #5 0x1e7b871 in MethodBind1<bool>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #6 0xe3b8852 in Object::call(StringName const&, Variant const**, int, Variant::CallError&) core/object.cpp:921
    #7 0xe3c1f4a in Object::emit_signal(StringName const&, Variant const**, int) core/object.cpp:1218
    #8 0xe3c3e08 in Object::emit_signal(StringName const&, Variant const&, Variant const&, Variant const&, Variant const&, Variant const&) core/object.cpp:1274
    #9 0x59d823b in EditorFileSystem::_notification(int) editor/editor_file_system.cpp:1165
    #10 0x5a10479 in EditorFileSystem::_notificationv(int, bool) (/usr/bin/godots+0x5a10479)
    #11 0xe3b8dbd in Object::notification(int, bool) core/object.cpp:931
    #12 0x92e5617 in SceneTree::_notify_group_pause(StringName const&, int) scene/main/scene_tree.cpp:958
    #13 0x92d62c2 in SceneTree::idle(float) scene/main/scene_tree.cpp:516
    #14 0x156af00 in Main::iteration() main/main.cpp:1930
    #15 0x146a00c in OS_X11::run() platform/x11/os_x11.cpp:3184
    #16 0x13e6ba3 in main platform/x11/godot_x11.cpp:56
    #17 0x7f4f6a62ab6a in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x26b6a)

SUMMARY: AddressSanitizer: heap-use-after-free thirdparty/misc/stb_vorbis.c:1298 in get8
Shadow bytes around the buggy address:
  0x0c4e801a71c0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a71d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a71e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a71f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a7200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0c4e801a7210: fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd
  0x0c4e801a7220: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a7230: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a7240: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a7250: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c4e801a7260: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==9245==ABORTING

Steps to reproduce:

Minimal reproduction project:
qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.zip

[hbina]

I am unable to reproduce this error :/

[qarmin]

Still happens with 3.2.2

[qarmin]

Still happens with Godot 3.3.2,
There is a problem with thread synchronization

==41034==ERROR: AddressSanitizer: heap-use-after-free on address 0x629002dc4e2f at pc 0x000005e84600 bp 0x7fd13c12bab0 sp 0x7fd13c12baa0
READ of size 1 at 0x629002dc4e2f thread T11
    #0 0x5e845ff in get8 thirdparty/misc/stb_vorbis.c:1326
    #1 0x5e87f7c in get8_packet_raw thirdparty/misc/stb_vorbis.c:1557
    #2 0x5e883e3 in get_bits thirdparty/misc/stb_vorbis.c:1598
    #3 0x5ea48d5 in vorbis_decode_initial thirdparty/misc/stb_vorbis.c:3120
    #4 0x5eae649 in vorbis_decode_packet thirdparty/misc/stb_vorbis.c:3436
    #5 0x5ed1742 in stb_vorbis_get_frame_float thirdparty/misc/stb_vorbis.c:5013
    #6 0x5ed8e3f in stb_vorbis_get_samples_float_interleaved thirdparty/misc/stb_vorbis.c:5426
    #7 0x3995302 in AudioStreamPlaybackOGGVorbis::_mix_internal(AudioFrame*, int) modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:47
    #8 0x10bfe09a in AudioStreamPlaybackResampled::mix(AudioFrame*, float, int) servers/audio/audio_stream.cpp:81
    #9 0xa389fba in EditorAudioStreamPreviewPlugin::generate(Ref<Resource> const&, Vector2 const&) const editor/plugins/editor_preview_plugins.cpp:659
    #10 0x8f7265e in EditorResourcePreviewGenerator::generate_from_path(String const&, Vector2 const&) const editor/editor_resource_preview.cpp:67
    #11 0x8f79588 in EditorResourcePreview::_generate_preview(Ref<ImageTexture>&, Ref<ImageTexture>&, EditorResourcePreview::QueueItem const&, String const&) editor/editor_resource_preview.cpp:162
    #12 0x8f7ee4c in EditorResourcePreview::_thread() editor/editor_resource_preview.cpp:260
    #13 0x8f76f07 in EditorResourcePreview::_thread_func(void*) editor/editor_resource_preview.cpp:101
    #14 0x11e847f1 in Thread::callback(Thread*, Thread::Settings const&, void (*)(void*), void*) core/os/thread.cpp:75
    #15 0x11e88883 in void std::__invoke_impl<void, void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*>(std::__invoke_other, void (*&&)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*&&, Thread::Settings&&, void (*&&)(void*), void*&&) /usr/include/c++/10/bits/invoke.h:60
    #16 0x11e88151 in std::__invoke_result<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*>::type std::__invoke<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*>(void (*&&)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*&&, Thread::Settings&&, void (*&&)(void*), void*&&) /usr/include/c++/10/bits/invoke.h:95
    #17 0x11e87cb9 in void std::thread::_Invoker<std::tuple<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*> >::_M_invoke<0ul, 1ul, 2ul, 3ul, 4ul>(std::_Index_tuple<0ul, 1ul, 2ul, 3ul, 4ul>) /usr/include/c++/10/thread:264
    #18 0x11e87950 in std::thread::_Invoker<std::tuple<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*> >::operator()() /usr/include/c++/10/thread:271
    #19 0x11e87908 in std::thread::_State_impl<std::thread::_Invoker<std::tuple<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*> > >::_M_run() /usr/include/c++/10/thread:215
    #20 0x12f072e3 in execute_native_thread_routine (/usr/bin/godots+0x12f072e3)
    #21 0x7fd17605844f in start_thread nptl/pthread_create.c:473
    #22 0x7fd1754b1d52 in clone (/lib/x86_64-linux-gnu/libc.so.6+0x117d52)

0x629002dc4e2f is located 7215 bytes inside of 18791-byte region [0x629002dc3200,0x629002dc7b67)
freed by thread T0 here:
    #0 0x7fd17633f8f7 in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:127
    #1 0x11e6de4a in Memory::free_static(void*, bool) core/os/memory.cpp:168
    #2 0xfc0a056 in AudioServer::audio_data_free(void*) servers/audio_server.cpp:1115
    #3 0x399ae55 in AudioStreamOGGVorbis::clear_data() modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:154
    #4 0x399c26a in AudioStreamOGGVorbis::set_data(PoolVector<unsigned char> const&) modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:203
    #5 0x389599e in MethodBind1<PoolVector<unsigned char> const&>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #6 0x116ae214 in ClassDB::set_property(Object*, StringName const&, Variant const&, bool*) core/class_db.cpp:989
    #7 0x11912d5e in Object::set(StringName const&, Variant const&, bool*) core/object.cpp:422
    #8 0x11a3acbd in Resource::reload_from_file() core/resource.cpp:141
    #9 0x8a7069f in EditorNode::_resources_reimported(Vector<String> const&) editor/editor_node.cpp:805
    #10 0x8700759 in MethodBind1<Vector<String> const&>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #11 0x11922575 in Object::call(StringName const&, Variant const**, int, Variant::CallError&) core/object.cpp:918
    #12 0x1192c3d6 in Object::emit_signal(StringName const&, Variant const**, int) core/object.cpp:1226
    #13 0x1192e40c in Object::emit_signal(StringName const&, Variant const&, Variant const&, Variant const&, Variant const&, Variant const&) core/object.cpp:1281
    #14 0x882e1e6 in EditorFileSystem::reimport_files(Vector<String> const&) editor/editor_file_system.cpp:1957
    #15 0x87ea8ca in EditorFileSystem::_update_scan_actions() editor/editor_file_system.cpp:569
    #16 0x8802fdb in EditorFileSystem::_notification(int) editor/editor_file_system.cpp:1121
    #17 0x883d54d in EditorFileSystem::_notificationv(int, bool) (/usr/bin/godots+0x883d54d)
    #18 0x11922a0f in Object::notification(int, bool) core/object.cpp:927
    #19 0xc426963 in SceneTree::_notify_group_pause(StringName const&, int) scene/main/scene_tree.cpp:969
    #20 0xc416ef1 in SceneTree::idle(float) scene/main/scene_tree.cpp:524
    #21 0x192fe15 in Main::iteration() main/main.cpp:2098
    #22 0x1813a44 in OS_X11::run() platform/x11/os_x11.cpp:3638
    #23 0x177ed6b in main platform/x11/godot_x11.cpp:55
    #24 0x7fd1753c2564 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28564)

previously allocated by thread T11 here:
    #0 0x7fd17633fc47 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
    #1 0x11e6ce0b in Memory::alloc_static(unsigned long, bool) core/os/memory.cpp:75
    #2 0xfc08b69 in AudioServer::audio_data_alloc(unsigned int, unsigned char const*) servers/audio_server.cpp:1091
    #3 0x399c526 in AudioStreamOGGVorbis::set_data(PoolVector<unsigned char> const&) modules/stb_vorbis/audio_stream_ogg_vorbis.cpp:205
    #4 0x389599e in MethodBind1<PoolVector<unsigned char> const&>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #5 0x116ae214 in ClassDB::set_property(Object*, StringName const&, Variant const&, bool*) core/class_db.cpp:989
    #6 0x11912d5e in Object::set(StringName const&, Variant const&, bool*) core/object.cpp:422
    #7 0x1233318a in ResourceInteractiveLoaderBinary::poll() core/io/resource_format_binary.cpp:699
    #8 0x123a1519 in ResourceFormatLoader::load(String const&, String const&, Error*) core/io/resource_loader.cpp:193
    #9 0x123a728f in ResourceLoader::_load(String const&, String const&, String const&, bool, Error*) core/io/resource_loader.cpp:262
    #10 0x1238b91e in ResourceFormatImporter::load(String const&, String const&, Error*) core/io/resource_importer.cpp:130
    #11 0x123a728f in ResourceLoader::_load(String const&, String const&, String const&, bool, Error*) core/io/resource_loader.cpp:262
    #12 0x123a943a in ResourceLoader::load(String const&, String const&, bool, Error*) core/io/resource_loader.cpp:376
    #13 0x8f724cd in EditorResourcePreviewGenerator::generate_from_path(String const&, Vector2 const&) const editor/editor_resource_preview.cpp:63
    #14 0x8f79588 in EditorResourcePreview::_generate_preview(Ref<ImageTexture>&, Ref<ImageTexture>&, EditorResourcePreview::QueueItem const&, String const&) editor/editor_resource_preview.cpp:162
    #15 0x8f7ee4c in EditorResourcePreview::_thread() editor/editor_resource_preview.cpp:260
    #16 0x8f76f07 in EditorResourcePreview::_thread_func(void*) editor/editor_resource_preview.cpp:101
    #17 0x11e847f1 in Thread::callback(Thread*, Thread::Settings const&, void (*)(void*), void*) core/os/thread.cpp:75
    #18 0x11e88883 in void std::__invoke_impl<void, void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*>(std::__invoke_other, void (*&&)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*&&, Thread::Settings&&, void (*&&)(void*), void*&&) /usr/include/c++/10/bits/invoke.h:60
    #19 0x11e88151 in std::__invoke_result<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*>::type std::__invoke<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*>(void (*&&)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*&&, Thread::Settings&&, void (*&&)(void*), void*&&) /usr/include/c++/10/bits/invoke.h:95
    #20 0x11e87cb9 in void std::thread::_Invoker<std::tuple<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*> >::_M_invoke<0ul, 1ul, 2ul, 3ul, 4ul>(std::_Index_tuple<0ul, 1ul, 2ul, 3ul, 4ul>) /usr/include/c++/10/thread:264
    #21 0x11e87950 in std::thread::_Invoker<std::tuple<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*> >::operator()() /usr/include/c++/10/thread:271
    #22 0x11e87908 in std::thread::_State_impl<std::thread::_Invoker<std::tuple<void (*)(Thread*, Thread::Settings const&, void (*)(void*), void*), Thread*, Thread::Settings, void (*)(void*), void*> > >::_M_run() /usr/include/c++/10/thread:215
    #23 0x12f072e3 in execute_native_thread_routine (/usr/bin/godots+0x12f072e3)

Thread T11 created by T0 here:
    #0 0x7fd1762e36d5 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:216
    #1 0x12f075a8 in std::thread::_M_start_thread(std::unique_ptr<std::thread::_State, std::default_delete<std::thread::_State> >, void (*)()) (/usr/bin/godots+0x12f075a8)
    #2 0x11e84ce0 in Thread::start(void (*)(void*), void*, Thread::Settings const&) core/os/thread.cpp:91
    #3 0x8f8637c in EditorResourcePreview::start() editor/editor_resource_preview.cpp:433
    #4 0x8a7114a in EditorNode::_sources_changed(bool) editor/editor_node.cpp:822
    #5 0x230e60e in MethodBind1<bool>::call(Object*, Variant const**, int, Variant::CallError&) core/method_bind.gen.inc:775
    #6 0x11922575 in Object::call(StringName const&, Variant const**, int, Variant::CallError&) core/object.cpp:918
    #7 0x1192c3d6 in Object::emit_signal(StringName const&, Variant const**, int) core/object.cpp:1226
    #8 0x1192e40c in Object::emit_signal(StringName const&, Variant const&, Variant const&, Variant const&, Variant const&, Variant const&) core/object.cpp:1281
    #9 0x88037a3 in EditorFileSystem::_notification(int) editor/editor_file_system.cpp:1123
    #10 0x883d54d in EditorFileSystem::_notificationv(int, bool) (/usr/bin/godots+0x883d54d)
    #11 0x11922a0f in Object::notification(int, bool) core/object.cpp:927
    #12 0xc426963 in SceneTree::_notify_group_pause(StringName const&, int) scene/main/scene_tree.cpp:969
    #13 0xc416ef1 in SceneTree::idle(float) scene/main/scene_tree.cpp:524
    #14 0x192fe15 in Main::iteration() main/main.cpp:2098
    #15 0x1813a44 in OS_X11::run() platform/x11/os_x11.cpp:3638
    #16 0x177ed6b in main platform/x11/godot_x11.cpp:55
    #17 0x7fd1753c2564 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x28564)

SUMMARY: AddressSanitizer: heap-use-after-free thirdparty/misc/stb_vorbis.c:1326 in get8

[ellenhp]

Ignore previous message about having a fix. I commented on the wrong issue.

[jitspoe]

I'm getting this in 3.4 (plus extra from whenever I synced the 3.x branch). Happened when importing this ogg file, though I don't think it's specific to any particular ogg file:
FistOfTheForgotten_runic2.zip

>	[Inline Frame] godot.windows.opt.tools.32.exe!get8(stb_vorbis *) Line 1326	C
 	[Inline Frame] godot.windows.opt.tools.32.exe!get8_packet_raw(stb_vorbis *) Line 1557	C
 	godot.windows.opt.tools.32.exe!get_bits(stb_vorbis * f, int n) Line 1598	C
 	godot.windows.opt.tools.32.exe!vorbis_decode_initial(stb_vorbis * f, int * p_left_start, int * p_left_end, int * p_right_start, int * p_right_end, int * mode) Line 3120	C
 	[Inline Frame] godot.windows.opt.tools.32.exe!vorbis_decode_packet(stb_vorbis *) Line 3436	C
 	[Inline Frame] godot.windows.opt.tools.32.exe!stb_vorbis_get_frame_float(stb_vorbis *) Line 5013	C
 	godot.windows.opt.tools.32.exe!stb_vorbis_get_samples_float_interleaved(stb_vorbis * f, int channels, float * buffer, int num_floats) Line 5426	C
 	godot.windows.opt.tools.32.exe!AudioStreamPlaybackOGGVorbis::_mix_internal(AudioFrame * p_buffer, int p_frames) Line 48	C++
 	godot.windows.opt.tools.32.exe!AudioStreamPlaybackResampled::mix(AudioFrame * p_buffer, float p_rate_scale, int p_frames) Line 82	C++
 	godot.windows.opt.tools.32.exe!EditorAudioStreamPreviewPlugin::generate(const Ref<Resource> & p_from, const Vector2 & p_size) Line 660	C++
 	godot.windows.opt.tools.32.exe!EditorResourcePreviewGenerator::generate_from_path(const String & p_path, const Vector2 & p_size) Line 67	C++
 	godot.windows.opt.tools.32.exe!EditorResourcePreview::_generate_preview(Ref<ImageTexture> & r_texture, Ref<ImageTexture> & r_small_texture, const EditorResourcePreview::QueueItem & p_item, const String & cache_base) Line 162	C++
 	[Inline Frame] godot.windows.opt.tools.32.exe!Ref<Texture>::{ctor}(const Ref<ImageTexture> &) Line 201	C++
 	godot.windows.opt.tools.32.exe!EditorResourcePreview::_thread() Line 327	C++
 	godot.windows.opt.tools.32.exe!Thread::callback(Thread * p_self, const Thread::Settings & p_settings, void(*)(void *) p_callback, void * p_userdata) Line 77	C++
 	[External Code]	
 	godot.windows.opt.tools.32.exe!thread_start<unsigned int (__stdcall*)(void *),1>(void * const parameter) Line 97	C++
 	[External Code]	
 	kernel32.dll![Frames below may be incorrect and/or missing, no symbols loaded for kernel32.dll]	Unknown

Exception thrown: read access violation.
f->stream was 0x549B460.

static uint8 get8(vorb *z)
{
   if (USE_MEMORY(z)) {
      if (z->stream >= z->stream_end) { z->eof = TRUE; return 0; }
      return *z->stream++;
   }

   #ifndef STB_VORBIS_NO_STDIO
   {
   int c = fgetc(z->f);
   if (c == EOF) { z->eof = TRUE; return 0; }
   return c;
   }
   #endif
}

Usually fine after an editor restart.

In my case, I'm exporting from Reaper to an existing .ogg file, if that makes a difference. When I switch back to godot, there's like a 50/50 shot of it crashing.

Simply changing the ogg file from an external tool then switching back to godot might cause the crash. I'm on Windows 10.

[jitspoe]

Not 100% sure why it's getting an access violation. I can dereference the address in the debugger.

  | Name | Value | Type
-- | -- | -- | --
◢ | f->stream | 0x0549b460 "" | unsigned char *
  |   | 0 '\0' | unsigned char

Here's some more info, in case that helps:

  | Name | Value | Type
-- | -- | -- | --
◢ | f | 0x38231690 {sample_rate=48000 channels=2 setup_memory_required=191528 ...} | stb_vorbis *
  | sample_rate | 48000 | unsigned int
  | channels | 2 | int
  | setup_memory_required | 191528 | unsigned int
  | temp_memory_required | 4096 | unsigned int
  | setup_temp_memory_required | 7209 | unsigned int
  | ▶ vendor | 0x38203060 "REAPER" | char *
  | comment_list_length | 1 | int
  | ▶ comment_list | 0x38203068 {0x38203070 "ENCODER=REAPER"} | char * *
  | ▶ f | 0x00000000 <NULL> | _iobuf *
  | f_start | 0 | unsigned int
  | close_on_free | 0 | int
  | ▶ stream | 0x0549b460 "" | unsigned char *
  | ▶ stream_start | 0x0548c030 "" | unsigned char *
  | ▶ stream_end | 0x055cc72d <Error reading characters of string.> | unsigned char *
  | stream_len | 1312509 | unsigned int
  | push_mode | 0 '\0' | unsigned char
  | first_audio_page_offset | 4368 | unsigned int
  | ▶ p_first | {page_start=4368 page_end=8783 last_decoded_sample=80448 } | ProbedPage
  | ▶ p_last | {page_start=1311472 page_end=1312509 last_decoded_sample=4032000 } | ProbedPage
  | ▶ alloc | {alloc_buffer=0x38203060 "REAPER" alloc_buffer_length_in_bytes=262144 } | stb_vorbis_alloc
  | setup_offset | 191528 | int
  | temp_offset | 262144 | int
  | eof | 0 | int
  | error | VORBIS__no_error (0) | STBVorbisError
  | ▶ blocksize | 0x38231704 {256, 2048} | int[2]
  | blocksize_0 | 256 | int
  | blocksize_1 | 2048 | int
  | codebook_count | 42 | int
  | ▶ codebooks | 0x38203080 {dimensions=1 entries=8 codeword_lengths=0x38218860 "\x1\x3\x4\a\x2\x5\x6\a" ...} | Codebook *
  | floor_count | 2 | int
  | ▶ floor_types | 0x38231720 {1, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, ...} | unsigned short[64]
  | ▶ floor_config | 0x38225d28 {floor0={order=6 '\x6' rate=257 bark_map_size=770 ...} floor1={partitions=6 '\x6' partition_class_list=...} } | Floor *
  | residue_count | 2 | int
  | ▶ residue_types | 0x382317a8 {2, 2, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, ...} | unsigned short[64]
  | ▶ residue_config | 0x382269a0 {begin=0 end=224 part_size=16 ...} | Residue *
  | mapping_count | 2 | int
  | ▶ mapping | 0x38227470 {coupling_steps=1 chan=0x382274c0 {magnitude=0 '\0' angle=1 '\x1' mux=0 '\0' } submaps=1 '\x1' ...} | Mapping *
  | mode_count | 2 | int
  | ▶ mode_config | 0x38231838 {kLiteral (0), 16842752, kLiteral (0), kLiteral (0), kLiteral (0), kLiteral (0), kLiteral (0), ...} | Mode[96]
  | total_samples | 4032000 | unsigned int
  | ▶ channel_buffers | 0x382319bc {0x382274d0 {-0.00204547471}, 0x3822a510 {-0.00744641153}, 0x00000000 {???}, 0x00000000 {...}, ...} | float *[16]
  | ▶ outputs | 0x382319fc {0x382274d0 {-0.00204547471}, 0x3822a510 {-0.00744641153}, 0x00000000 {???}, 0x00000000 {...}, ...} | float *[16]
  | ▶ previous_window | 0x38231a3c {0x382294d0 {0.0187191330}, 0x3822c510 {0.0284214057}, 0x00000000 {???}, 0x00000000 {???}, ...} | float *[16]
  | previous_length | 1024 | int
  | ▶ finalY | 0x38231a80 {0x3822a4d0 {63}, 0x3822d510 {69}, 0x00000000 {???}, 0x00000000 {???}, 0x00000000 {???}, ...} | short *[16]
  | current_loc | 266816 | unsigned int
  | current_loc_valid | 1 | int
  | ▶ A | 0x38231ac8 {0x3822d550 {1.00000000}, 0x3822dc90 {1.00000000}} | float *[2]
  | ▶ B | 0x38231ad0 {0x3822d750 {0.499990582}, 0x3822ec90 {0.499999851}} | float *[2]
  | ▶ C | 0x38231ad8 {0x3822d950 {0.999698818}, 0x3822fc90 {0.999995291}} | float *[2]
  | ▶ window | 0x38231ae0 {0x3822da50 {5.91390417e-05}, 0x38230490 {9.24058952e-07}} | float *[2]
  | ▶ bit_reverse | 0x38231ae8 {0x3822dc50 L"", 0x38231490 L""} | wchar_t *[2]
  | serial | 0 | unsigned int
  | last_page | 15 | int
  | segment_count | 26 | int
  | ▶ segments | 0x38231afc "ÿDÿDÿAÿDÿ?ÿ<ÿ6ÿ5ÿ8ÿ?ÿ@ÿJÿ;ÿ1ÿ3\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1\x1téÿ\x5ÿ\fÿ\x12ÿ\aÿ\x1aÿ" | unsigned char[255]
  | page_flag | 0 '\0' | unsigned char
  | bytes_in_seg | 254 'þ' | unsigned char
  | first_decode | 0 '\0' | unsigned char
  | next_seg | 13 | int
  | last_seg | 0 | int
  | last_seg_which | 11 | int
  | acc | 0 | unsigned int
  | valid_bits | 0 | int
  | packet_bytes | 1 | int
  | end_seg_with_known_loc | 25 | int
  | known_loc_for_packet | 273984 | unsigned int
  | discard_samples_deferred | 0 | int
  | samples_output | 266816 | unsigned int
  | page_crc_tests | -1 | int
  | ▶ scan | 0x38231c2c {{goal_crc=0 bytes_left=0 crc_so_far=0 ...}, {goal_crc=0 bytes_left=0 crc_so_far=0 ...}, ...} | CRCscan[4]
  | channel_buffer_start | 0 | int
  | channel_buffer_end | 0 | int