[dev preview] Set Spannable data to setText, system crashed. [64920157]

Fixed

Bug

Dev-Preview-O

Platform

Status Update

No update yet.

Description

[Deleted User]

created issue #1

Aug 22, 2017 07:46AM

Reported Issue
Devices: Nexus5X
Android Version: O ( Developer preview 3 and 4 , not checked before 2 )

Android Emulator ( API level 26 )
　Android Emulator Settings
　　Nexus5 1080x1920 420 dpi
　　Android API 26 x86
　　RAM：1536MB
　　VMheap：64MB
　　Internal Storage：800MB

Problem: For example, The application store text data about 8000 characters in Spannable.
Next, set setSpan to Spannable and set to setText with Spannable and TextView.BufferType.SPANNABLE, system crashes.

Sample code.
--------------------------------------------------
@Override
protected void onCreate(Bundle savedInstanceState) {
　setContentView(R.layout.activity_main);
　Spannable text = new SpannableString(getString(R.string.test)); // R.string.test is about 8000 characters.

text.setSpan(new UnderlineSpan(), 8, 17, Spanned.SPAN_MARK_MARK); // Example setSpan test data.
text.setSpan(new StyleSpan(Typeface.BOLD), 22, 26, Spanned.SPAN_MARK_MARK); // Example setSpan test data.

　TextView textView = (TextView) findViewById(R.id.activity_main_text);
　textView.setText(text, TextView.BufferType.SPANNABLE);
}
Note: Sometimes crash just happens when launch the SpannableTest application.
This issue can not happen in Android N(API level 25).
--------------------------------------------------

- A screenrecord or screenshots showing the issue (if UI related).
-- I attached it as "Spannable-reset-Nexus5.avi" that can be played in windows media player.

Movie (Spannable-reset-Nexus5.avi) :
- open setting app in Nexus 5X
- launch the SpannableTest application
-- Recently key Long Press, switch to multi-window.
-- Returning from multi-window to full screen.

Comments

[Deleted User] <[Deleted User]> Aug 22, 2017 07:47AM

deleted

Restricted

0 B

dn...@google.com <dn...@google.com> Aug 22, 2017 09:17AM

Assigned to dn...@google.com.

dn...@google.com <dn...@google.com> #2Aug 22, 2017 10:45AM

Reassigned to Deleted User.

This issue does not reproduce with dev preview 4.

[Deleted User] <[Deleted User]> Aug 22, 2017 10:49AM

deleted

Restricted

0 B

[Deleted User] <[Deleted User]> #3Aug 22, 2017 12:13PM

Closing this issue as per

comment #2

from reporter.

dn...@google.com <dn...@google.com> #4Aug 23, 2017 09:47AM

We are getting below native crash,

08-23 15:08:42.631 10108 16708 16721 F libc : Fatal signal 6 (SIGABRT), code -6 in tid 16721 (HeapTaskDaemon)
08-23 15:08:42.707 10108 16790 16790 I chatty : uid=10108(u0_a108) crash_dump64 expire 2 lines
08-23 15:08:42.711 1058 621 621 I /system/bin/tombstoned: received crash request for pid 16708
08-23 15:08:42.714 10108 16790 16790 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
08-23 15:08:42.715 10108 16790 16790 F DEBUG : Build fingerprint: 'google/bullhead/bullhead:8.0.0/OPP4.170623.014/4187591:userdebug/dev-keys'
08-23 15:08:42.715 10108 16790 16790 F DEBUG : Revision: 'rev_1.0'
08-23 15:08:42.715 10108 16790 16790 F DEBUG : ABI: 'arm64'
08-23 15:08:42.715 10108 16790 16790 F DEBUG : pid: 16708, tid: 16721, name: HeapTaskDaemon >>> com.test.spannabletest <<<
08-23 15:08:42.715 10108 16790 16790 F DEBUG : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
08-23 15:08:42.720 10108 16790 16790 F DEBUG : Abort message: 'utils.cc:123] 12c00000-52c00000 rw-p 00000000 00:04 11999 /dev/ashmem/dalvik-main space (region space) (deleted)'
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x0 0000000000000000 x1 0000000000004151 x2 0000000000000006 x3 0000000000000008
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x4 0000000000000000 x5 0000000000000000 x6 0000000000000000 x7 0080808080808080
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x8 0000000000000083 x9 47d223c2f3ba7301 x10 0000000000000000 x11 0000000000000001
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x12 0000007dc567f648 x13 0000000000000008 x14 ffffffffffffffff x15 00255696feff4a06
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x16 0000007dde7972f8 x17 0000007dde7391d4 x18 0000000000000000 x19 0000000000004144
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x20 0000000000004151 x21 0000007dd2a3ac00 x22 000000000000006e x23 ffffffffffffffff
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x24 0000000000000146 x25 0000000000000051 x26 0000007dd2a71180 x27 0000000000000145
08-23 15:08:42.720 10108 16790 16790 F DEBUG : x28 000000000000000a x29 0000007dc567fb80 x30 0000007dde6ec780
08-23 15:08:42.720 10108 16790 16790 F DEBUG : sp 0000007dc567fb40 pc 0000007dde7391dc pstate 0000000060000000
08-23 15:08:42.803 10108 16790 16790 F DEBUG :
08-23 15:08:42.803 10108 16790 16790 F DEBUG : backtrace:
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #00 pc 000000000006a1dc /system/lib64/libc.so (tgkill+8)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #01 pc 000000000001d77c /system/lib64/libc.so (abort+88)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #02 pc 000000000043d974 /system/lib64/libart.so (_ZN3art7Runtime5AbortEPKc+528)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #03 pc 000000000043e0c0 /system/lib64/libart.so (_ZN3art7Runtime7AborterEPKc+24)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #04 pc 000000000052919c /system/lib64/libart.so (_ZN7android4base10LogMessageD1Ev+912)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #05 pc 00000000002445b8 /system/lib64/libart.so (_ZNK3art2gc12Verification17LogHeapCorruptionENS_6ObjPtrINS_6mirror6ObjectEEENS_12MemberOffsetEPS4_b+1300)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #06 pc 00000000001df67c /system/lib64/libart.so (_ZN3art2gc9collector17ConcurrentCopying13MarkNonMovingEPNS_6mirror6ObjectES5_NS_12MemberOffsetE+488)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #07 pc 00000000001e1620 /system/lib64/libart.so (_ZN3art6mirror6Object15VisitReferencesILb1ELNS_17VerifyObjectFlagsE0ELNS_17ReadBarrierOptionE1ENS_2gc9collector17ConcurrentCopying16RefFieldsVisitorES8_EEvRKT2_RKT3_+388)
08-23 15:08:42.803 10108 16790 16790 F DEBUG : #08 pc 00000000001db2a4 /system/lib64/libart.so (_ZN3art2gc9collector17ConcurrentCopying19ProcessMarkStackRefEPNS_6mirror6ObjectE+164)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #09 pc 00000000001db088 /system/lib64/libart.so (_ZN3art2gc9collector17ConcurrentCopying28ProcessThreadLocalMarkStacksEbPNS_7ClosureE+284)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #10 pc 00000000001dab8c /system/lib64/libart.so (_ZN3art2gc9collector17ConcurrentCopying20ProcessMarkStackOnceEv+528)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #11 pc 00000000001da964 /system/lib64/libart.so (_ZN3art2gc9collector17ConcurrentCopying16ProcessMarkStackEv+28)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #12 pc 00000000001d4a44 /system/lib64/libart.so (_ZN3art2gc9collector17ConcurrentCopying12MarkingPhaseEv+700)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #13 pc 00000000001d3d3c /system/lib64/libart.so (_ZN3art2gc9collector17ConcurrentCopying9RunPhasesEv+764)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #14 pc 00000000001e7ff8 /system/lib64/libart.so (_ZN3art2gc9collector16GarbageCollector3RunENS0_7GcCauseEb+356)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #15 pc 000000000020c7d8 /system/lib64/libart.so (_ZN3art2gc4Heap22CollectGarbageInternalENS0_9collector6GcTypeENS0_7GcCauseEb+3684)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #16 pc 000000000021a8d4 /system/lib64/libart.so (_ZN3art2gc4Heap12ConcurrentGCEPNS_6ThreadENS0_7GcCauseEb+128)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #17 pc 0000000000222c34 /system/lib64/libart.so (_ZN3art2gc4Heap16ConcurrentGCTask3RunEPNS_6ThreadE+40)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #18 pc 0000000000243aa8 /system/lib64/libart.so (_ZN3art2gc13TaskProcessor11RunAllTasksEPNS_6ThreadE+64)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #19 pc 00000000002e296c /system/framework/arm64/boot-core-libart.oat (offset 0xd6000) (dalvik.system.VMRuntime.clampGrowthLimit [DEDUPED]+124)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #20 pc 000000000050e784 /system/lib64/libart.so (art_quick_invoke_stub+580)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #21 pc 00000000000d80d4 /system/lib64/libart.so (_ZN3art9ArtMethod6InvokeEPNS_6ThreadEPjjPNS_6JValueEPKc+208)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #22 pc 0000000000284920 /system/lib64/libart.so (_ZN3art11interpreter34ArtInterpreterToCompiledCodeBridgeEPNS_6ThreadEPNS_9ArtMethodEPKNS_7DexFile8CodeItemEPNS_11ShadowFrameEPNS_6JValueE+352)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #23 pc 000000000027f054 /system/lib64/libart.so (_ZN3art11interpreter6DoCallILb0ELb0EEEbPNS_9ArtMethodEPNS_6ThreadERNS_11ShadowFrameEPKNS_11InstructionEtPNS_6JValueE+684)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #24 pc 00000000004f5f10 /system/lib64/libart.so (MterpInvokeVirtual+612)
08-23 15:08:42.804 10108 16790 16790 F DEBUG : #25 pc 0000000000500114 /system/lib64/libart.so (ExecuteMterpImpl+14228)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #26 pc 000000000025fc28 /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadEPKNS_7DexFile8CodeItemERNS_11ShadowFrameENS_6JValueEb+444)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #27 pc 0000000000266498 /system/lib64/libart.so (_ZN3art11interpreter33ArtInterpreterToInterpreterBridgeEPNS_6ThreadEPKNS_7DexFile8CodeItemEPNS_11ShadowFrameEPNS_6JValueE+212)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #28 pc 000000000027f034 /system/lib64/libart.so (_ZN3art11interpreter6DoCallILb0ELb0EEEbPNS_9ArtMethodEPNS_6ThreadERNS_11ShadowFrameEPKNS_11InstructionEtPNS_6JValueE+652)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #29 pc 00000000004f5f10 /system/lib64/libart.so (MterpInvokeVirtual+612)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #30 pc 0000000000500114 /system/lib64/libart.so (ExecuteMterpImpl+14228)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #31 pc 000000000025fc28 /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadEPKNS_7DexFile8CodeItemERNS_11ShadowFrameENS_6JValueEb+444)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #32 pc 0000000000266498 /system/lib64/libart.so (_ZN3art11interpreter33ArtInterpreterToInterpreterBridgeEPNS_6ThreadEPKNS_7DexFile8CodeItemEPNS_11ShadowFrameEPNS_6JValueE+212)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #33 pc 000000000027f034 /system/lib64/libart.so (_ZN3art11interpreter6DoCallILb0ELb0EEEbPNS_9ArtMethodEPNS_6ThreadERNS_11ShadowFrameEPKNS_11InstructionEtPNS_6JValueE+652)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #34 pc 00000000004f6f6c /system/lib64/libart.so (MterpInvokeInterface+1732)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #35 pc 0000000000500314 /system/lib64/libart.so (ExecuteMterpImpl+14740)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #36 pc 000000000025fc28 /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadEPKNS_7DexFile8CodeItemERNS_11ShadowFrameENS_6JValueEb+444)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #37 pc 00000000004e9d08 /system/lib64/libart.so (artQuickToInterpreterBridge+1500)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #38 pc 0000000000517c1c /system/lib64/libart.so (art_quick_to_interpreter_bridge+92)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #39 pc 000000000050e784 /system/lib64/libart.so (art_quick_invoke_stub+580)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #40 pc 00000000000d80d4 /system/lib64/libart.so (_ZN3art9ArtMethod6InvokeEPNS_6ThreadEPjjPNS_6JValueEPKc+208)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #41 pc 0000000000436994 /system/lib64/libart.so (_ZN3artL18InvokeWithArgArrayERKNS_33ScopedObjectAccessAlreadyRunnableEPNS_9ArtMethodEPNS_8ArgArrayEPNS_6JValueEPKc+104)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #42 pc 0000000000437b3c /system/lib64/libart.so (_ZN3art35InvokeVirtualOrInterfaceWithJValuesERKNS_33ScopedObjectAccessAlreadyRunnableEP8_jobjectP10_jmethodIDP6jvalue+432)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #43 pc 000000000045e11c /system/lib64/libart.so (_ZN3art6Thread14CreateCallbackEPv+1140)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #44 pc 0000000000066a4c /system/lib64/libc.so (_ZL15__pthread_startPv+36)
08-23 15:08:42.805 10108 16790 16790 F DEBUG : #45 pc 000000000001eb94 /system/lib64/libc.so (__start_thread+68)
08-23 15:08:44.172 1058 621 621 E /system/bin/tombstoned: Tombstone written to: /data/tombstones//tombstone_00
08-23 15:08:44.179 1000 777 16795 W ActivityManager: Force finishing activity com.test.spannabletest/.MainActivity

Can you please confirm , is this the crash which you are facing?

Also please share source code details for further investigation of this issue.

rp...@google.com <rp...@google.com> #5Aug 24, 2017 10:05AM

Status: Duplicate of

37187694

This is

b/37187694

, fixed in O-DR and O-MR1 only.

[Deleted User] <[Deleted User]> #6Aug 28, 2017 04:50AM

> Can you please confirm , is this the crash which you are facing?
Yes. It seems with our occurred situation.

> Also please share source code details for further investigation of this issue.

Sorry, we missed the source code now ... (The person in charge retired)

[Deleted User] <[Deleted User]> #7Aug 28, 2017 04:51AM

> This is

b/37187694

, fixed in O-DR and O-MR1 only.

I can not see its issue.
So could you please notify us when it is fixed ?

[Deleted User] <[Deleted User]> #8Aug 28, 2017 05:36AM

> O-DR and O-MR1

And, could you please tell us how we get above android version ?

dn...@google.com <dn...@google.com> #9Aug 28, 2017 06:59AM

Marked as fixed, reassigned to dn...@google.com.

Our engineering team has fixed this issue. It will be available in a future Android release, so please keep an eye on the release notes.