sigsegv com.android.org.kxml2.io.KXmlParser.fillBuffer [323206883]

Assigned

Bug

[AOSP] assigned

Status Update

No update yet.

Description

[Deleted User]

created issue #1

Jan 31, 2024 10:50PM

board nxp imx8qm mek
Android 12.1 automotive
kernel 5.15.52
art version: commit f192ca3ca279cadc41aecd225c6b4d555bce6360 \

Native crash during auto tests.

pid: 12359, tid: 12478, name: Computation  >>> com.siriusxm.aaos.coreapp <<<
uid: 1010092
tagged_addr_ctrl: 0000000000000001
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x6259
    x0  0000000000000be6  x1  0000000000000be5  x2  0000000000000000  x3  0000000000000100
    x4  0000000000000000  x5  0000000000000001  x6  000000000000006e  x7  0000000000000000
    x8  0000eefba87ae120  x9  0000000000000000  x10 0000000000000008  x11 0000eefba87ae100
    x12 0000000000080100  x13 0000000000000000  x14 0000000000000000  x15 000000000000000f
    x16 0000eefbc0601500  x17 0000eefddb35fcb8  x18 0000eefb1ad08000  x19 b400eefd36cd44d0
    x20 0000eefdfa42da18  x21 0000eefba87ae100  x22 0000000000006259  x23 00000000ffffffe4
    x24 0000eefbc0600100  x25 0000eefba87ae120  x26 0000000000002414  x27 0000000000000080
    x28 0000eefba87b6000  x29 0000eefba87ae0b0
    lr  0000eefbc06081b8  sp  0000eefba87ae070  pc  0000eefbc06082f0  pst 0000000020000000

backtrace:
      #00 pc 00000000002082f0  /apex/com.android.art/lib64/libart.so (MterpHelpers+144) (BuildId: a58418848f7810dec1091c887082176d)
      #01 pc 0000000000020a18  /apex/com.android.art/javalib/core-libart.jar (com.android.org.kxml2.io.KXmlParser.fillBuffer+120)
      #02 pc 0000000000761448  /apex/com.android.art/lib64/libart.so (MterpInvokeDirect+2208) (BuildId: a58418848f7810dec1091c887082176d)
      #03 pc 0000000000203914  /apex/com.android.art/lib64/libart.so (mterp_op_invoke_direct+20) (BuildId: a58418848f7810dec1091c887082176d)
      #04 pc 0000000000021082  /apex/com.android.art/javalib/core-libart.jar (com.android.org.kxml2.io.KXmlParser.peekType+14)
      #05 pc 0000000000761448  /apex/com.android.art/lib64/libart.so (MterpInvokeDirect+2208) (BuildId: a58418848f7810dec1091c887082176d)
      #06 pc 0000000000203914  /apex/com.android.art/lib64/libart.so (mterp_op_invoke_direct+20) (BuildId: a58418848f7810dec1091c887082176d)
      #07 pc 0000000000020dce  /apex/com.android.art/javalib/core-libart.jar (com.android.org.kxml2.io.KXmlParser.next+86)
      #08 pc 0000000000761448  /apex/com.android.art/lib64/libart.so (MterpInvokeDirect+2208) (BuildId: a58418848f7810dec1091c887082176d)
      #09 pc 0000000000203914  /apex/com.android.art/lib64/libart.so (mterp_op_invoke_direct+20) (BuildId: a58418848f7810dec1091c887082176d)
      #10 pc 0000000000020d5e  /apex/com.android.art/javalib/core-libart.jar (com.android.org.kxml2.io.KXmlParser.next+2)

deleted

Restricted

0 B

deleted

Restricted

0 B

Comments

[Deleted User] <[Deleted User]> #2Jan 31, 2024 10:52PM

I see same issue and have been debugging it.

NOTE: It DOES NOT happen if not using support package, but use android level 14/15 library. I believe Honeycomb works well too.

My current workaround is to provide my own DialogFragment.show() method, like below:

public int show(FragmentTransaction transaction, String tag) {
return show(transaction, tag, false);
}

public int show(FragmentTransaction transaction, String tag, boolean allowStateLoss) {
transaction.add(this, tag);
mRemoved = false;
mBackStackId = allowStateLoss ? transaction.commitAllowingStateLoss() : transaction.commit();
return mBackStackId;
}

deleted

Restricted

0 B

deleted

Restricted

0 B

ra...@google.com <ra...@google.com> #3Feb 1, 2024 09:47AM

Assigned to ra...@google.com.

[Comment deleted]

Issue 323206883

Description

Issue summary

Comments

[Deleted User] <[Deleted User]> #2Jan 31, 2024 10:52PM

ra...@google.com <ra...@google.com> #3Feb 1, 2024 09:47AM

Add comment

Issue metadata