(Case 1054584) [Regression] Instantiate as used in UFPS causes Windows standalone player to crash

I noticed this regression with a project I have been working on and have been able to 100% reproduce with a simple default UFPS demo scene.

The regression began with 2018.2.0b8 and I have reproduced it in 2018.2.0b8, 2018.2.0b9, and 2018.2.0b10. 2018.2.0b7 works fine.

Reproduce steps:
1) Import the latest UFPS (tested with 1.7.3) to an empty project
2) Add the Skycity scene to the player scenes.
3) Build a standalone player for windows and run.
4) Once the game has started shoot at the ground or a wall to cause a bullet-hole decal to be instantiated on that surface
5) Player crashes.


========== OUTPUTTING STACK TRACE ==================

ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFF8D65299A)
0x00007FFF8D65299A (UnityPlayer) (function-name not available)
ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFF8D652E3C)
0x00007FFF8D652E3C (UnityPlayer) (function-name not available)
ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFF8D6525DC)
0x00007FFF8D6525DC (UnityPlayer) (function-name not available)
ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFF8D652058)
0x00007FFF8D652058 (UnityPlayer) (function-name not available)
ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFF8D65375C)
0x00007FFF8D65375C (UnityPlayer) (function-name not available)
ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFF8D653705)
0x00007FFF8D653705 (UnityPlayer) (function-name not available)
ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFF8DA7B88A)
0x00007FFF8DA7B88A (UnityPlayer) (function-name not available)
0x0000017B0827C578 (Mono JIT Code) (wrapper managed-to-native) UnityEngine.Object:Internal_InstantiateSingle_Injected (UnityEngine.Object,UnityEngine.Vector3&,UnityEngine.Quaternion&)
0x0000017B0827C4C9 (Mono JIT Code) UnityEngine.Object:Internal_InstantiateSingle (UnityEngine.Object,UnityEngine.Vector3,UnityEngine.Quaternion)
0x0000017B0827C2D5 (Mono JIT Code) UnityEngine.Object:Instantiate (UnityEngine.Object,UnityEngine.Vector3,UnityEngine.Quaternion)
0x0000017B082BDF8A (Mono JIT Code) UnityEngine.Object:Instantiate<object> (object,UnityEngine.Vector3,UnityEngine.Quaternion)
0x0000017B082BDE0F (Mono JIT Code) vp_PoolManager:AddToPool (UnityEngine.GameObject,UnityEngine.Vector3,UnityEngine.Quaternion,int)
0x0000017B082BD51A (Mono JIT Code) vp_PoolManager:SpawnInternal (UnityEngine.GameObject,UnityEngine.Vector3,UnityEngine.Quaternion)
0x0000017B082BD0B6 (Mono JIT Code) vp_PoolManager:Spawn (UnityEngine.GameObject,UnityEngine.Vector3,UnityEngine.Quaternion)
0x0000017B0827B20B (Mono JIT Code) vp_Utility:Instantiate (UnityEngine.Object,UnityEngine.Vector3,UnityEngine.Quaternion)
0x0000017B08323DA5 (Mono JIT Code) vp_Effect:SpawnObjects (UnityEngine.RaycastHit)
0x0000017B08323B80 (Mono JIT Code) vp_Effect:Spawn (UnityEngine.RaycastHit,UnityEngine.AudioSource)
0x0000017B08332CC0 (Mono JIT Code) vp_SurfaceEffect:SpawnWithDecal (UnityEngine.RaycastHit,UnityEngine.AudioSource)
0x0000017B08323073 (Mono JIT Code) vp_SurfaceManager:SpawnEffect (UnityEngine.RaycastHit,vp_ImpactEvent,vp_SurfaceType,UnityEngine.AudioSource,bool)
0x0000017B08330A0F (Mono JIT Code) vp_SurfaceManager:SpawnEffect (UnityEngine.RaycastHit,vp_ImpactEvent,UnityEngine.AudioSource,bool)
0x0000017B0833091A (Mono JIT Code) vp_FXBullet:TrySpawnFX ()
0x0000017B083307BC (Mono JIT Code) vp_BulletoHit ()
0x0000017B08330752 (Mono JIT Code) vp_Bullet:TryHit ()
0x0000017B083302B1 (Mono JIT Code) vp_Bullet/<TryHitOnEndOfFrame>c__Iterator0:MoveNext ()
0x0000017B082C9A0D (Mono JIT Code) UnityEngine.SetupCoroutine:InvokeMoveNext (System.Collections.IEnumerator,intptr)
0x0000017B082C9B31 (Mono JIT Code) (wrapper runtime-invoke) <Module>:runtime_invoke_void_object_intptr (object,intptr,intptr,intptr)
0x00007FFF9809671B (mono) mono_set_defaults
0x00007FFF97FE8A71 (mono) mono_runtime_invoke

 

Just re-tested with 2018.2.0b11 and this is still a problem. I am working on making an even more minimal reproduction