SEGV_MAPERR When Composing A Message
Bug report form
Describe your environment
Please specify the following:
- Ring version: 20200309-01
- Device model: Motorola Z3 Play
- Android version: 9
- What build you are using: Play Store
Steps to reproduce
- Can you reproduce the bug: at will
- Steps:
- Add a contact (which was screwy to begin with, and mentioned in IRC)
- Type a message and try to send it.
- Actual result: SIGSEGV SEGV_MAPERR
- Expected result: The message to be sent without crashing.
Additional information
03-10 18:01:41.531 10013 10040 W libdring: AccountManager::sendTrustRequest
03-10 18:01:41.531 10013 10040 W libdring: [Contacts] addContact: 184bac78f22232fb4ff29a4bd13cf337483bbf96
03-10 18:01:41.537 10013 10040 D libdring: Building device sync from 9e1cc2378edc5365504e389158d0f76f92050d27
03-10 18:01:41.538 10013 10040 F libc : Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x318 in tid 10040 (DRing), pid 10013 (cx.ring)
03-10 18:01:41.786 10977 10977 I crash_dump64: obtaining output fd from tombstoned, type: kDebuggerdTombstone
03-10 18:01:41.790 1398 1398 I /system/bin/tombstoned: received crash request for pid 10040
03-10 18:01:41.791 10977 10977 I crash_dump64: performing dump of process 10013 (target tid = 10040)
03-10 18:01:41.798 10013 10013 W View : requestLayout() improperly called by androidx.recyclerview.widget.RecyclerView{590820a VFED..... ......ID 0,240-2160,1080 #7f0a0184 app:id/hist_list} during layout: running second layout pass
03-10 18:01:41.798 10013 10013 W View : requestLayout() improperly called by android.widget.RelativeLayout{3e29a7b V.E...... ......ID 0,0-2160,1080 #7f0a00f1 app:id/conversationLayout} during layout: running second layout pass
03-10 18:01:41.800 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:41.806 10013 10013 I chatty : uid=10163(cx.ring) identical 4 lines
03-10 18:01:41.806 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:41.808 10977 10977 W crash_dump64: type=1400 audit(0.0:11687): avc: denied { search } for uid=10163 name="/" dev="tmpfs" ino=18872 scontext=u:r:crash_dump:s0:c163,c256,c512,c768 tcontext=u:object_r:tmpfs:s0 tclass=dir permissive=0
03-10 18:01:41.812 10977 10977 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
03-10 18:01:41.812 10977 10977 F DEBUG : Build fingerprint: 'motorola/beckham/beckham:9/PPWS29.183-29-1-6/814a8:user/release-keys'
03-10 18:01:41.812 10977 10977 F DEBUG : Revision: 'pvt'
03-10 18:01:41.812 10977 10977 F DEBUG : ABI: 'arm64'
03-10 18:01:41.813 10977 10977 F DEBUG : pid: 10013, tid: 10040, name: DRing >>> cx.ring <<<
03-10 18:01:41.813 10977 10977 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x318
03-10 18:01:41.813 10977 10977 F DEBUG : Cause: null pointer dereference
03-10 18:01:41.813 10977 10977 F DEBUG : x0 0000000000000000 x1 0000007d2686fe80 x2 0000007d2686fe50 x3 0000007d2686fe20
03-10 18:01:41.813 10977 10977 F DEBUG : x4 0000007d2686fdc0 x5 0000007d2686fda8 x6 3a4449550a0d352e x7 6632316238636439
03-10 18:01:41.813 10977 10977 F DEBUG : x8 0000000000000318 x9 0000000000000000 x10 0000007d35445700 x11 0000000000000000
03-10 18:01:41.813 10977 10977 F DEBUG : x12 0000007d35445708 x13 49550a0d352e3031 x14 0000000000000028 x15 0000000000000018
03-10 18:01:41.813 10977 10977 F DEBUG : x16 0000007d26193ae8 x17 0000007d252ec770 x18 0000000000000001 x19 0000000000000000
03-10 18:01:41.813 10977 10977 F DEBUG : x20 0000007d2686fee8 x21 0000007d2686ff00 x22 0000007d2686ff30 x23 0000007d268702b0
03-10 18:01:41.813 10977 10977 F DEBUG : x24 0000007d38894600 x25 0000007d38949d18 x26 0000007d38949d28 x27 0000007d268700a0
03-10 18:01:41.813 10977 10977 F DEBUG : x28 0000000000000002 x29 0000007d2686fd90
03-10 18:01:41.813 10977 10977 F DEBUG : sp 0000007d2686fb90 lr 0000007d252809ec pc 0000007d252ec790
03-10 18:01:41.812 10977 10977 W crash_dump64: type=1400 audit(0.0:11688): avc: denied { search } for uid=10163 name="/" dev="tmpfs" ino=18872 scontext=u:r:crash_dump:s0:c163,c256,c512,c768 tcontext=u:object_r:tmpfs:s0 tclass=dir permissive=0
03-10 18:01:41.813 10977 10977 I unwind : Malformed section header found, ignoring...
03-10 18:01:41.825 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:41.830 10977 10977 F DEBUG :
03-10 18:01:41.830 10977 10977 F DEBUG : backtrace:
03-10 18:01:41.830 10977 10977 F DEBUG : #00 pc 00000000005a5790 /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/lib/arm64/libring.so
03-10 18:01:41.830 10977 10977 F DEBUG : #01 pc 00000000005399e8 /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/lib/arm64/libring.so
03-10 18:01:41.830 10977 10977 F DEBUG : #02 pc 0000000000535874 /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/lib/arm64/libring.so
03-10 18:01:41.830 10977 10977 F DEBUG : #03 pc 000000000053143c /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/lib/arm64/libring.so
03-10 18:01:41.830 10977 10977 F DEBUG : #04 pc 00000000005311f4 /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/lib/arm64/libring.so
03-10 18:01:41.830 10977 10977 F DEBUG : #05 pc 00000000003721d0 /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/lib/arm64/libring.so
03-10 18:01:41.830 10977 10977 F DEBUG : #06 pc 000000000034fbf0 /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/lib/arm64/libring.so
03-10 18:01:41.830 10977 10977 F DEBUG : #07 pc 0000000000007cdc /mnt/expand/ed16a68c-e2e0-4bae-a384-c1fbadf3e9ef/app/cx.ring-xdw16p1-g2GMNRk1D43i6w==/oat/arm64/base.odex (offset 0x21000)
03-10 18:01:41.845 10013 10013 I chatty : uid=10163(cx.ring) identical 4 lines
03-10 18:01:41.845 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:41.852 10977 10977 W crash_dump64: type=1400 audit(0.0:11689): avc: denied { search } for uid=10163 name="/" dev="tmpfs" ino=18872 scontext=u:r:crash_dump:s0:c163,c256,c512,c768 tcontext=u:object_r:tmpfs:s0 tclass=dir permissive=0
03-10 18:01:41.862 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:41.977 10013 10013 I chatty : uid=10163(cx.ring) identical 14 lines
03-10 18:01:41.977 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:41.980 2032 2157 I system_server: Explicit concurrent copying GC freed 22375(1292KB) AllocSpace objects, 5(228KB) LOS objects, 42% free, 21MB/37MB, paused 226us total 246.566ms
03-10 18:01:41.993 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:42.110 10013 10013 I chatty : uid=10163(cx.ring) identical 14 lines
03-10 18:01:42.110 10013 10013 W RecyclerView: RecyclerView does not support scrolling to an absolute position. Use scrollToPosition instead
03-10 18:01:42.761 1398 1398 E /system/bin/tombstoned: Tombstone written to: /data/tombstones/tombstone_02
03-10 18:01:42.775 2032 10981 W ActivityManager: Force finishing activity cx.ring/.client.ConversationActivity
03-10 18:01:42.800 2032 2472 W InputDispatcher: channel '7734068 cx.ring/cx.ring.client.ConversationActivity (server)' ~ Consumer closed input channel or an error occurred. events=0x9
03-10 18:01:42.800 2032 2472 E InputDispatcher: channel '7734068 cx.ring/cx.ring.client.ConversationActivity (server)' ~ Channel is unrecoverably broken and will be disposed!
03-10 18:01:42.800 2032 2472 W InputDispatcher: channel '3410a52 cx.ring/cx.ring.client.HomeActivity (server)' ~ Consumer closed input channel or an error occurred. events=0x9
03-10 18:01:42.800 2032 2472 E InputDispatcher: channel '3410a52 cx.ring/cx.ring.client.HomeActivity (server)' ~ Channel is unrecoverably broken and will be disposed!
03-10 18:01:42.802 2032 3503 I WindowManager: WIN DEATH: Window{7734068 u0 cx.ring/cx.ring.client.ConversationActivity}
03-10 18:01:42.803 2032 3503 W InputDispatcher: Attempted to unregister already unregistered input channel '7734068 cx.ring/cx.ring.client.ConversationActivity (server)'
03-10 18:01:42.805 2032 2147 W libprocessgroup: kill(-10013, 9) failed: No such process
03-10 18:01:42.808 2032 3503 V WindowManager: Focus changed from Window{7734068 u0 cx.ring/cx.ring.client.ConversationActivity EXITING} to null
03-10 18:01:42.813 2032 3387 I WindowManager: WIN DEATH: Window{3410a52 u0 cx.ring/cx.ring.client.HomeActivity}
03-10 18:01:42.813 2032 3387 W InputDispatcher: Attempted to unregister already unregistered input channel '3410a52 cx.ring/cx.ring.client.HomeActivity (server)'
03-10 18:01:42.813 2032 3057 I ActivityManager: Process cx.ring (pid 10013) has died: vis TOP
03-10 18:01:42.814 2032 3057 W ActivityManager: Scheduling restart of crashed service cx.ring/.service.DRingService in 1000ms