IssueTracker

Using GameActivity 4.0, I'm able to get a crash at GameActivity.cpp:1122 when quickly leaving and resuming my game (sometimes gracefully quitting it). Back and forth, many, many times. Then boom!

Configuration

Pixel 9 Pro, Android 15, NDK 27.2.12479018

Crash

signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0x0000007795b2d7d0
Cause: trying to execute non-executable memory.
    x0  0000000100015422  x1  b400007835b50348  x2  b400007795b2d7d0  x3  0000000000003210
    x4  0000007ff7cc0098  x5  00000076cef9b3c0  x6  0000000014977148  x7  0000000000000030
    x8  0000000100015422  x9  24c9837e8950436c  x10 000000000000000b  x11 b4000078e5b54290
    x12 000000003fffffff  x13 00000079ca46f02c  x14 0000007ff7cbfd50  x15 b400007905b2dab0
    x16 000000766e349690  x17 000000766e31a900  x18 00000079cabf0000  x19 b400007905b45b10
    x20 b400007835b32d90  x21 00000079ca46f02d  x22 000000766e799bf0  x23 000000000000027c
    x24 b400007905b45d7c  x25 000000766e79a000  x26 000000766e79a000  x27 000000766e79a000
    x28 000000766e79a000  x29 0000007ff7cc04d0
    lr  000000766e3162b0  sp  0000007ff7cc04d0  pc  0000007795b2d7d0  pst 0000000060001400

39 total frames
backtrace:
      #00 pc 00000000000037d0  [anon:scudo:primary]
      #01 pc 0000000000f042ac  mygame.so
      #02 pc 000000000030b3c0  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (art_jni_trampoline+112)
      #03 pc 0000000000781680  /apex/com.android.art/lib64/libart.so (nterp_helper+5648) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #04 pc 000000000005585e  mygame~/oat/arm64/base.vdex (com.google.androidgamesdk.GameActivity.e+18)
      #05 pc 00000000007824bc  /apex/com.android.art/lib64/libart.so (nterp_helper+9292) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #06 pc 00000000000449a4  mygame~/oat/arm64/base.vdex (androidx.core.view.B.onApplyWindowInsets+72)
      #07 pc 0000000000a9ea58  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.View.dispatchApplyWindowInsets+104)
      #08 pc 0000000000adbe8c  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewGroup.dispatchApplyWindowInsets+188)
      #09 pc 0000000000adbe8c  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewGroup.dispatchApplyWindowInsets+188)
      #10 pc 0000000000adbe8c  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewGroup.dispatchApplyWindowInsets+188)
      #11 pc 0000000000adbe8c  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewGroup.dispatchApplyWindowInsets+188)
      #12 pc 0000000000adbe8c  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewGroup.dispatchApplyWindowInsets+188)
      #13 pc 0000000000adbe8c  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewGroup.dispatchApplyWindowInsets+188)
      #14 pc 0000000000b25fb4  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewRootImpl.dispatchApplyInsets+228)
      #15 pc 0000000000b1f640  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewRootImpl.performTraversals+5984)
      #16 pc 0000000000b273c0  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewRootImpl.doTraversal+192)
      #17 pc 0000000000b0f5e4  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.ViewRootImpl$TraversalRunnable.run+52)
      #18 pc 0000000000a7de70  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.Choreographer.doCallbacks+1376)
      #19 pc 0000000000a7eaa0  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.Choreographer.doFrame+2336)
      #20 pc 0000000000a7c298  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.view.Choreographer$FrameDisplayEventReceiver.run+72)
      #21 pc 0000000000921174  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.os.Handler.dispatchMessage+68)
      #22 pc 000000000094b1b4  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.os.Looper.loopOnce+980)
      #23 pc 000000000094ad38  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.os.Looper.loop+632)
      #24 pc 000000000064f598  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.app.ActivityThread.main+2040)
      #25 pc 0000000000368a40  /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #26 pc 00000000003644d4  /apex/com.android.art/lib64/libart.so (_jobject* art::InvokeMethod<(art::PointerSize)8>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned long)+732) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #27 pc 00000000006c9298  /apex/com.android.art/lib64/libart.so (art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*) (.__uniq.165753521025965369065708152063621506277)+32) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #28 pc 0000000000311284  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (art_jni_trampoline+116)
      #29 pc 0000000000c2f604  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run+116)
      #30 pc 0000000000c37cd4  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (com.android.internal.os.ZygoteInit.main+3188)
      #31 pc 0000000000368a40  /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #32 pc 0000000000353f4c  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+204) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #33 pc 0000000000351f00  /apex/com.android.art/lib64/libart.so (art::JValue art::InvokeWithVarArgs<_jmethodID*>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+512) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #34 pc 000000000073da58  /apex/com.android.art/lib64/libart.so (art::JNI<true>::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+104) (BuildId: 629e0ffca501d809c29dbbeef2f512d3)
      #35 pc 00000000000d9638  /system/lib64/libandroid_runtime.so (_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+104) (BuildId: b0893a6825cde6461399fdbd80011e2f)
      #36 pc 00000000000ef85c  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::start(char const*, android::Vector<android::String8> const&, bool)+844) (BuildId: b0893a6825cde6461399fdbd80011e2f)
      #37 pc 000000000000459c  /system/bin/app_process64 (main+1212) (BuildId: 18817e69fa9f3dd793c579c83f790ddf)
      #38 pc 0000000000057854  /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+116) (BuildId: d607b2dd86e0ffc603529ce13afab7fa)

Running the crash dump in ndk-stack, it points at prefab-src/modules/game-activity/src/game-activity/GameActivity.cpp:1122:3. Maybe the insetsCallback_ function pointer is wrong?