SEGV_MAPERR crash by RealmFinalizing

[fanwgwg]

How frequently does the bug occur?

Once

Description

I haven't found a way to reproduce this, but this seems like only happened after I upgraded from 10.16.1 to 10.17.0.

Stacktrace & log output

*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Build fingerprint: 'samsung/gts9wifixx/gts9wifi:13/TP1A.220624.014/X710XXU1AWHA:user/release-keys'
Revision: '6'
ABI: 'arm64'
Processor: '3'
Timestamp: 2023-10-23 18:27:14.849304615+0800
Process uptime: 44s
Cmdline: com.yygg.note.app.dev
pid: 25116, tid: 25269, name: RealmFinalizing  >>> com.yygg.note.app.dev <<<
uid: 10536
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
pac_enabled_keys: 000000000000000f (PR_PAC_APIAKEY, PR_PAC_APIBKEY, PR_PAC_APDAKEY, PR_PAC_APDBKEY)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x4d7a634c6368635e
    x0  4d7a634c636862f6  x1  000000706ebaee10  x2  0000006fd7590c8c  x3  b400006ff8e9bd40
    x4  0000000000000000  x5  000000001ed905a9  x6  b4000070557de800  x7  0000000000000001
    x8  92e7a6171d52fdc8  x9  92e7a6171d52fdc8  x10 0000000000000000  x11 0000000000000004
    x12 0000006fa99aa5a0  x13 0000006fa99aa490  x14 000000706ebaee11  x15 00000000ebad6a89
    x16 0000006fd7568858  x17 0000006fa99ab970  x18 0000006fa9762000  x19 b400006ff8e9bd40
    x20 4d7a634c636862f6  x21 634c7653634c684d  x22 000000706ebaee10  x23 000000706ebaee10
    x24 0000006fa99abac0  x25 b400007126841c00  x26 0000000000004071  x27 000000706ebaee30
    x28 0000006fa99ab980  x29 0000006fa99ab950
    lr  0000006fd75e8da8  sp  0000006fa99ab910  pc  0000006fd75d211c  pst 0000000080001000

backtrace:
      #00 pc 000000000054511c  /data/app/~~cuGCwB2JcmQGjwyPkQhMJA==/com.yygg.note.app.dev-7j5M0xaRN4jonDfXtjWfFA==/base.apk!librealm-jni.so (BuildId: 34c2baa0e05e15474c7de859b65b28cb4506f3da)
      #01 pc 000000000055bda4  /data/app/~~cuGCwB2JcmQGjwyPkQhMJA==/com.yygg.note.app.dev-7j5M0xaRN4jonDfXtjWfFA==/base.apk!librealm-jni.so (BuildId: 34c2baa0e05e15474c7de859b65b28cb4506f3da)
      #02 pc 0000000000503ca0  /data/app/~~cuGCwB2JcmQGjwyPkQhMJA==/com.yygg.note.app.dev-7j5M0xaRN4jonDfXtjWfFA==/base.apk!librealm-jni.so (BuildId: 34c2baa0e05e15474c7de859b65b28cb4506f3da)
      #03 pc 000000000034dc30  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #04 pc 0000000000337480  /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #05 pc 0000000000519914  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+2364) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #06 pc 00000000004a31ac  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+1840) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #07 pc 00000000003503d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #08 pc 000000000026ca14  [anon:dalvik-classes9.dex extracted in memory from /data/app/~~cuGCwB2JcmQGjwyPkQhMJA==/com.yygg.note.app.dev-7j5M0xaRN4jonDfXtjWfFA==/base.apk!classes9.dex] (io.realm.internal.NativeObjectReference.cleanup+0)
      #09 pc 000000000036c700  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.3816585244953842104)+232) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #10 pc 000000000051a45c  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+5252) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #11 pc 00000000004a2e3c  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+960) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #12 pc 00000000003503d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #13 pc 000000000026c034  [anon:dalvik-classes9.dex extracted in memory from /data/app/~~cuGCwB2JcmQGjwyPkQhMJA==/com.yygg.note.app.dev-7j5M0xaRN4jonDfXtjWfFA==/base.apk!classes9.dex] (io.realm.internal.FinalizerRunnable.run+0)
      #14 pc 000000000036c700  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.3816585244953842104)+232) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #15 pc 000000000051a45c  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+5252) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #16 pc 00000000004a3ce8  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+4716) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #17 pc 00000000003503d8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #18 pc 000000000010ee0c  /apex/com.android.art/javalib/core-oj.jar (java.lang.Thread.run+0)
      #19 pc 000000000036c700  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.3816585244953842104)+232) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #20 pc 000000000036bff8  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+964) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #21 pc 000000000034dd68  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #22 pc 00000000003371a4  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #23 pc 000000000023ea64  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+144) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #24 pc 000000000054436c  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1600) (BuildId: a5fcf27f4a71b07dff05c648ad58e3cd)
      #25 pc 00000000000f5298  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: 55a7515345951d438fd16e74b171760b)
      #26 pc 000000000008ebdc  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68) (BuildId: 55a7515345951d438fd16e74b171760b)

I saw this happened twice, once yesterday and once today. There has been no code change in how we use realm, nor realm db schemas in the last one month.

Can you reproduce the bug?

No

Reproduction Steps

No response

Version

10.17.0

What Atlas App Services are you using?

Local Database only

Are you using encryption?

No

Platform OS and version(s)

Android 13

Build environment

Android Studio Giraffe | 2022.3.1 Patch 2
Gradle 8.1.2

[clementetb]

Thanks for the report, do you have a full stack trace for this crash?

[fanwgwg]

@clementetb Just updated!