Crash in native ImposterRenderTexture destructor

Steps to reproduce:

1. Open the attached project
2. Go to Window>General>Test Runner
3. Select the Play Mode test tab
4. Run the test "_02_Missing_Components("Assets/Scenes/SampleScene.unity")"

Expected result: the test passes (with any status) and there is no crash

Actual result: the editor crashes

 

Note: It can sometimes pass without crashing. In that case, please run the test again – it should crash without taking too many attempts.

 

Reproducible with: 2023.1.0a10, 2022.2.0b7, 2022.2.0a1, 2022.1.0a12, 2021.2.0b9, 2020.1.15f1, 2020.1.0a3, 2020.1.0a1

 

Stack:

#0  0x000001090bc97c in MemoryProfilerStats::UnregisterObject(Object*)
#1  0x000001090bc3a4 in profiler_unregister_object(Object*)
#2  0x00000108c9cd55 in delete_object_internal_step1(Object*)
#3  0x00000108c9c1e7 in DestroySingleObject(Object*)
#4  0x0000010903b5b1 in DestroyObjectHighLevel(Object*, bool)
#5  0x00000109ca21cf in ImposterRenderTexture::~ImposterRenderTexture()
#6  0x00000109ca223e in ImposterRenderTexture::~ImposterRenderTexture()
#7  0x00000109cafdab in TreeRenderer::~TreeRenderer()
#8  0x00000109cc60cf in Terrain::Flush()
#9  0x00000108ca9783 in GameObject::ActivateAwakeRecursivelyInternal(DeactivateOperation, AwakeFromLoadQueue&)
#10 0x00000108ca920b in GameObject::ActivateAwakeRecursively(DeactivateOperation)
#11 0x00000108caa56a in GameObject::Deactivate(DeactivateOperation)
#12 0x0000010903e5fe in DestroyObjectHighLevel_Internal(Object*, bool)
#13 0x0000010903b5b1 in DestroyObjectHighLevel(Object*, bool)
#14 0x0000010904e768 in DestroyWorldObjects(dynamic_array<int, 0ul> const&)
#15 0x0000010a466a45 in EditorSceneManager::RestoreSceneBackups(dynamic_array<EditorSceneBackup, 0ul>&, EditorSceneManager::PlayModeChange)
#16 0x0000010a0cded4 in PlayerLoopController::ExitPlayMode()
#17 0x0000010a0c4612 in PlayerLoopController::SetIsPlaying(bool)
#18 0x0000010a0c26dc in Application::TickTimer()
#19 0x0000010b51a469 in -[EditorApplication TickTimer]
#20 0x007ff81aae8f51 in __NSFireTimer
#21 0x007ff819c5df59 in {}CFRUNLOOP_IS_CALLING_OUT_TO_A_TIMER_CALLBACK_FUNCTION{}
#22 0x007ff819c5da48 in __CFRunLoopDoTimer
#23 0x007ff819c5d5b8 in __CFRunLoopDoTimers
#24 0x007ff819c43cf6 in __CFRunLoopRun
#25 0x007ff819c42e5c in CFRunLoopRunSpecific
#26 0x007ff8228ea5e6 in RunCurrentEventLoopInMode
#27 0x007ff8228ea34a in ReceiveNextEventCommon
#28 0x007ff8228ea0e5 in _BlockUntilNextEventMatchingListInModeWithFilter
#29 0x007ff81c6821fd in _DPSNextEvent
#30 0x007ff81c6808ba in -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:]
#31 0x007ff81c672f69 in -[NSApplication run]
#32 0x007ff81c646ee7 in NSApplicationMain
#33 0x0000010b535aac in EditorMain(int, char const**)
#34 0x0000010b535dc9 in main
#35 0x000001100e751e in (Unknown)