CSGPolygon3D mode Path crashes when setting path_interval

[Giganzo]

Tested versions

Godot v4.4.dev6

System information

Fedora Linux 40 (KDE Plasma) on Wayland - X11 display driver, Multi-window

Issue description

CSGPolygon3D mode Path crashes when setting path_interval in the inspector with a path that has in or out set on a point.
The value in path_interval for crash seems to depend on the path shape.

handle_crash: Program crashed with signal 11
Engine version: Godot Engine v4.4.dev6.official (1f47e4c4e3a09a422e96880a7918d986dd575a63)
Dumping the backtrace. Please include this when reporting the bug to the project developer.
Fatal glibc error: malloc.c:4192 (_int_malloc): assertion failed: chunk_main_arena (fwd)

Steps to reproduce

Add a path3d and add 2 points and set in or out for a point.
Add a CSGPolygon3D and set mode to Path and assign the Path3d
Change path_interval value

Minimal reproduction project (MRP)

csgpath.zip

[fire]

Will see if the trigonometry fix pr can be modified to fix this. #100020

[fire]

I cannot reproduce but am on #100020 Will retry with dev6.

[fire]

dev6 1f47e4c

Crashes

custom fork on top of 4.4 V-Sekai@75727b0

Change path_interval value doesn't crash.

Screen.Recording.2024-12-05.at.2.53.45.pm.mov

Next steps

Need to bisect git.

[fire]

This doesn't happen on godot engine master gh-100020 only on 1f47e4c (dev6) commit.

% 2024-12-05 15:13:34.420 godot.macos.editor.universal[26548:1805135] +[IMKClient subclass]: chose IMKClient_Modern
2024-12-05 15:13:35.940 godot.macos.editor.universal[26548:1805135] +[IMKInputSession subclass]: chose IMKInputSession_Modern

================================================================
handle_crash: Program crashed with signal 11
Engine version: Godot Engine v4.4.dev.gh-100020 (58c119260602a3ca5a3a5ef1671e34eb65282003)
Dumping the backtrace. Please include this when reporting the bug to the project developer.
[1] 1   libsystem_platform.dylib            0x0000000191140184 _sigtramp + 56
[2] CameraServer* CameraServer::_create_builtin<CameraMacOS>()
[3] CameraServer* CameraServer::_create_builtin<CameraMacOS>()
[4] CameraServer* CameraServer::_create_builtin<CameraMacOS>()
[5] CameraServer* CameraServer::_create_builtin<CameraMacOS>()
[6] CameraServer* CameraServer::_create_builtin<CameraMacOS>()
[7] CameraServer* CameraServer::_create_builtin<CameraMacOS>()
[8] PlaceholderExtensionInstance::placeholder_class_recreate_instance(void*, void*)
[9] PlaceholderExtensionInstance::placeholder_class_recreate_instance(void*, void*)
[10] Node::atr_n(String const&, StringName const&, int, StringName const&) const
[11] RendererCompositorRD::_create_current()
[12] 12  godot.macos.editor.universal        0x0000000103244104 godot.macos.editor.universal + 3834116
[13] RendererCompositorRD::_create_current()
[14] 14  dyld                                0x0000000190d88274 start + 2840
-- END OF BACKTRACE --
================================================================

[fire]

Closing due to comment #100095 (comment)