Page MenuHomePhabricator

[SPIKE] Investigate _prepareToLoadData crash
Closed, DeclinedPublicSpike

Description

It seems iOS 13 or 13.1 introduced a new top crash. Might be beyond our control but worth investigating if we can rerpro. Logs are in the Xcode organizer but here's an example:

Incident Identifier: D8AF1B19-0220-4A50-A7F0-576EDCFA237F
CrashReporter Key:   eb2a014be1a9b4c5afdd7004397580f3a39c920f
Hardware Model:      iPhone9,1
Process:             Wikipedia [12639]
Path:                /private/var/containers/Bundle/Application/F8117CA1-77A1-4C07-A735-8B6C47607451/Wikipedia.app/Wikipedia
Identifier:          org.wikimedia.wikipedia
Version:             1673 (6.4.0)
AppStoreTools:       11A1002b
AppVariant:          1:iPhone9,1:12.2
Code Type:           ARM-64 (Native)
Role:                Foreground
Parent Process:      launchd [1]
Coalition:           org.wikimedia.wikipedia [3626]


Date/Time:           2019-10-30 14:03:15.0231 +0900
Launch Time:         2019-10-30 14:03:12.7870 +0900
OS Version:          iPhone OS 13.1.3 (17A878)
Release Type:        User
Baseband Version:    7.00.01
Report Version:      104

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Subtype: KERN_INVALID_ADDRESS at 0x0000026892448ec9
VM Region Info: 0x26892448ec9 is not in any region.  Bytes after previous region: 2636879531722  
      REGION TYPE                      START - END             [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
      MALLOC_NANO            0000000280000000-00000002a0000000 [512.0M] rw-/rwx SM=PRV  
--->  
      UNUSED SPACE AT END

Termination Signal: Segmentation fault: 11
Termination Reason: Namespace SIGNAL, Code 0xb
Terminating Process: exc handler [12639]
Triggered by Thread:  0

Thread 0 name:
Thread 0 Crashed:
0   libobjc.A.dylib               	0x00000001b6ced1a0 objc_msgSend + 32
1   UIKitCore                     	0x00000001ba881370 -[UICollectionViewData _prepareToLoadData] + 260 (UICollectionViewData.mm:339)
2   UIKitCore                     	0x00000001ba881be4 -[UICollectionViewData validateLayoutInRect:] + 104 (UICollectionViewData.mm:400)
3   UIKitCore                     	0x00000001ba853290 -[UICollectionView layoutSubviews] + 220 (UICollectionView.m:3921)
4   UIKitCore                     	0x00000001bb461270 -[UIView(CALayerDelegate) layoutSublayersOfLayer:] + 2140 (UIView.m:16956)
5   QuartzCore                    	0x00000001bd94d5f8 -[CALayer layoutSublayers] + 284 (CALayer.mm:9582)
6   QuartzCore                    	0x00000001bd951e28 CA::Layer::layout_if_needed(CA::Transaction*) + 480 (CALayer.mm:9459)
7   QuartzCore                    	0x00000001bd95d894 CA::Layer::layout_and_display_if_needed(CA::Transaction*) + 136 (CALayer.mm:2434)
8   QuartzCore                    	0x00000001bd8a69f0 CA::Context::commit_transaction(CA::Transaction*, double) + 304 (CAContextInternal.mm:1991)
9   QuartzCore                    	0x00000001bd8d0890 CA::Transaction::commit() + 676 (CATransactionInternal.mm:438)
10  QuartzCore                    	0x00000001bd8d1284 CA::Transaction::observer_callback(__CFRunLoopObserver*, unsigned long, void*) + 92 (CATransactionInternal.mm:883)
11  CoreFoundation                	0x00000001b6f45c48 __CFRUNLOOP_IS_CALLING_OUT_TO_AN_OBSERVER_CALLBACK_FUNCTION__ + 32 (CFRunLoop.c:1758)
12  CoreFoundation                	0x00000001b6f40b34 __CFRunLoopDoObservers + 416 (CFRunLoop.c:1868)
13  CoreFoundation                	0x00000001b6f41100 __CFRunLoopRun + 1308 (CFRunLoop.c:2910)
14  CoreFoundation                	0x00000001b6f408bc CFRunLoopRunSpecific + 464 (CFRunLoop.c:3192)
15  GraphicsServices              	0x00000001c0dac328 GSEventRunModal + 104 (GSEvent.c:2246)
16  UIKitCore                     	0x00000001bafd66d4 UIApplicationMain + 1936 (UIApplication.m:4753)
17  Wikipedia                     	0x0000000104a743a0 main + 132 (main.m:47)
18  libdyld.dylib                 	0x00000001b6dcb460 start + 4

Thread 1:
0   libsystem_pthread.dylib       	0x00000001b6ce8ad8 start_wqthread + 0

Thread 2:
0   libsystem_pthread.dylib       	0x00000001b6ce8ad8 start_wqthread + 0

Thread 3:
0   libsystem_pthread.dylib       	0x00000001b6ce8ad8 start_wqthread + 0

Thread 4 name:
Thread 4:
0   libsystem_kernel.dylib        	0x00000001b6d9f5f4 mach_msg_trap + 8
1   libsystem_kernel.dylib        	0x00000001b6d9ea60 mach_msg + 72 (mach_msg.c:103)
2   CoreFoundation                	0x00000001b6f46068 __CFRunLoopServiceMachPort + 216 (CFRunLoop.c:2575)
3   CoreFoundation                	0x00000001b6f41188 __CFRunLoopRun + 1444 (CFRunLoop.c:2931)
4   CoreFoundation                	0x00000001b6f408bc CFRunLoopRunSpecific + 464 (CFRunLoop.c:3192)
5   Foundation                    	0x00000001b7280994 -[NSRunLoop(NSRunLoop) runMode:beforeDate:] + 228 (NSRunLoop.m:374)
6   Foundation                    	0x00000001b7280874 -[NSRunLoop(NSRunLoop) runUntilDate:] + 88 (NSRunLoop.m:421)
7   UIKitCore                     	0x00000001bb06e49c -[UIEventFetcher threadMain] + 152 (UIEventFetcher.m:637)
8   Foundation                    	0x00000001b73b10b0 __NSThread__start__ + 848 (NSThread.m:724)
9   libsystem_pthread.dylib       	0x00000001b6ce51ec _pthread_start + 124 (pthread.c:895)
10  libsystem_pthread.dylib       	0x00000001b6ce8aec thread_start + 8

Thread 5:
0   libsystem_pthread.dylib       	0x00000001b6ce8ad8 start_wqthread + 0

Thread 6:
0   libsystem_pthread.dylib       	0x00000001b6ce8ad8 start_wqthread + 0

Thread 7:
0   libsystem_pthread.dylib       	0x00000001b6ce8ad8 start_wqthread + 0

Thread 0 crashed with ARM Thread State (64-bit):
    x0: 0x000000028305ea00   x1: 0x00000001ee6d7800   x2: 0x00000001c438dd38   x3: 0x0000000104dc2c20
    x4: 0x000000016b3dfda8   x5: 0x0000000000000030   x6: 0x0000000000000000   x7: 0x0000000000000000
    x8: 0x00000001ee6d7000   x9: 0x0000000000000000  x10: 0x0000026892400ec9  x11: 0xcb09026892400ec9
   x12: 0x0000026892448ec9  x13: 0x0000acb1c66aea00  x14: 0x00000000faee6000  x15: 0x00000000000001cc
   x16: 0x00000001c66aea00  x17: 0x00000001ba891e3c  x18: 0x0000000000000000  x19: 0x000000028305ea00
   x20: 0x000000028305ea00  x21: 0x00000001ee6d272f  x22: 0x0000000000000790  x23: 0x0000000000000000
   x24: 0x0000000000000990  x25: 0x0000000000000020  x26: 0x0000000000000094  x27: 0x0000000000000060
   x28: 0x00000001ee6d2a09   fp: 0x000000016b3dff40   lr: 0x00000001ba881370
    sp: 0x000000016b3dff00   pc: 0x00000001b6ced1a0 cpsr: 0x20000000
   esr: 0x92000004 (Data Abort) byte read Translation fault

Event Timeline

Restricted Application changed the subtype of this task from "Task" to "Spike". · View Herald TranscriptNov 12 2019, 7:32 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
LGoto triaged this task as Medium priority.Nov 18 2019, 7:40 PM
LGoto moved this task from Needs Triage to Bug Backlog on the Wikipedia-iOS-App-Backlog board.

So far no repro steps. Will circle back later if no-one beats me to it.

Mhurd removed Mhurd as the assignee of this task.Nov 26 2019, 7:21 PM
Mhurd subscribed.
Mhurd removed Mhurd as the assignee of this task.Dec 3 2019, 7:21 PM
JMinor lowered the priority of this task from Medium to Low.Mar 24 2020, 9:07 PM

Another crash log from the 6.6.0 1733 Testflight Beta.

LGoto subscribed.

This task was closed as part of the iOS team backlog grooming.