crash when canceling incoming file transfer
Observed on Android:
172 15458-15458/cx.ring I/AccountService: cancelDataTransfer() id=-8467903417826486931
173 15458-15660/cx.ring I/libdring: Channel down for incoming transfer with id(677444582472270729)
174 15458-15660/cx.ring D/libdring: [FTP] file closed, rx 6684468 on 1084020092
175 15458-15553/cx.ring D/DaemonService: dataTransferEvent: transferId=-8467903417826486931, eventCode=7
175 15458-15553/cx.ring D/AccountService: Data Transfer TRANSFER_UNJOINABLE_PEER 7
--------- beginning of crash
175 15458-15546/cx.ring A/libc: FORTIFY: fwrite: null FILE*
175 15458-15553/cx.ring D/AccountService: Data Transfer 7 6684468/1084020092
177 15458-15546/cx.ring A/libc: Fatal signal 6 (SIGABRT), code -1 (SI_QUEUE) in tid 15546 (DRing), pid 15458 (cx.ring)
177 15458-15458/cx.ring D/DataTransferService: OnDestroy(), Service has been destroyed
181 15458-15553/cx.ring D/NotificationServiceImpl: handleDataTransferNotification, a data transfer event is in progress
182 15458-15553/cx.ring W/NotificationServiceImpl: showFileTransferNotification 616241383 TRANSFER_UNJOINABLE_PEER
242 15458-15791/cx.ring D/libdring: [ice:0x73afebb000] ioqueue error 120004: Interrupted system call
242 15922-15922/? I/crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstone
242 15458-15812/cx.ring D/libdring: [ice:0x73c4128800] ioqueue error 120004: Interrupted system call
252 15458-15557/cx.ring E/libdring: pjsip_endpt_handle_events failed with error Interrupted system call
262 1024-1024/? I//system/bin/tombstoned: received crash request for pid 15546
265 15922-15922/? I/crash_dump64: performing dump of process 15458 (target tid = 15546)
273 15922-15922/? A/DEBUG: *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
273 15922-15922/? A/DEBUG: Build fingerprint: 'google/coral/coral:10/QQ3A.200805.001/6578210:user/release-keys'
273 15922-15922/? A/DEBUG: Revision: 'MP1.0'
273 15922-15922/? A/DEBUG: ABI: 'arm64'
273 15922-15922/? A/DEBUG: Timestamp: 2020-08-27 13:55:13-0400
273 15922-15922/? A/DEBUG: pid: 15458, tid: 15546, name: DRing >>> cx.ring <<<
273 15922-15922/? A/DEBUG: uid: 10284
273 15922-15922/? A/DEBUG: signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
273 15922-15922/? A/DEBUG: Abort message: 'FORTIFY: fwrite: null FILE*'
273 15922-15922/? A/DEBUG: x0 0000000000000000 x1 0000000000003cba x2 0000000000000006 x3 00000074022e8ee0
273 15922-15922/? A/DEBUG: x4 0000008000808080 x5 0000008000808080 x6 0000008000808080 x7 0000000000000020
273 15922-15922/? A/DEBUG: x8 00000000000000f0 x9 5a1a961060fa0972 x10 0000000000000001 x11 0000000000000000
273 15922-15922/? A/DEBUG: x12 fffffff0fffffbdf x13 00000d3344b6f2df x14 000a3f5eb012a9fb x15 0000000006b36728
273 15922-15922/? A/DEBUG: x16 00000074f24088c0 x17 00000074f23e60c0 x18 00000074014ba000 x19 0000000000003c62
273 15922-15922/? A/DEBUG: x20 0000000000003cba x21 00000000ffffffff x22 00000074022e9750 x23 00000074022eb020
273 15922-15922/? A/DEBUG: x24 0000000000000008 x25 00000074022eb020 x26 000000745e5c54b0 x27 0000000000000002
273 15922-15922/? A/DEBUG: x28 00000074022e94e0 x29 00000074022e8f80
273 15922-15922/? A/DEBUG: sp 00000074022e8ec0 lr 00000074f239af48 pc 00000074f239af74
300 15922-15922/? A/DEBUG: backtrace:
300 15922-15922/? A/DEBUG: #00 pc 0000000000081f74 /apex/com.android.runtime/lib64/bionic/libc.so (abort+160) (BuildId: 8de865099c99977483c8947f9b7937e9)
300 15922-15922/? A/DEBUG: #01 pc 00000000000a746c /apex/com.android.runtime/lib64/bionic/libc.so (__fortify_fatal(char const*, ...)+116) (BuildId: 8de865099c99977483c8947f9b7937e9)
300 15922-15922/? A/DEBUG: #02 pc 00000000000dd054 /apex/com.android.runtime/lib64/bionic/libc.so (fwrite+296) (BuildId: 8de865099c99977483c8947f9b7937e9)
300 15922-15922/? A/DEBUG: #03 pc 00000000004cca7c /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (std::__ndk1::basic_filebuf<char, std::__ndk1::char_traits<char>>::sync()+288)
300 15922-15922/? A/DEBUG: #04 pc 00000000004cc1f8 /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (std::__ndk1::basic_filebuf<char, std::__ndk1::char_traits<char>>::close()+100)
300 15922-15922/? A/DEBUG: #05 pc 00000000006d10fc /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (std::__ndk1::basic_ofstream<char, std::__ndk1::char_traits<char>>::close()+40)
300 15922-15922/? A/DEBUG: #06 pc 000000000076ac30 /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (jami::IncomingFileTransfer::close()+188)
300 15922-15922/? A/DEBUG: #07 pc 000000000076afbc /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (jami::DataTransferFacade::Impl::cancel(jami::DataTransfer&)+36)
300 15922-15922/? A/DEBUG: #08 pc 000000000076bfac /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (jami::DataTransferFacade::cancel(unsigned long const&)+140)
300 15922-15922/? A/DEBUG: #09 pc 0000000000396cb8 /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (DRing::cancelDataTransfer(unsigned long const&)+48)
300 15922-15922/? A/DEBUG: #10 pc 000000000035e714 /data/app/cx.ring-rfyP99rfYUYhO-o4pCexhw==/lib/arm64/libring.so (Java_cx_ring_daemon_RingserviceJNI_cancelDataTransfer+20)
368 850-2933/? I/WifiHAL: event received NL80211_CMD_VENDOR, vendor_id = 0x1374, subcmd = 0xa