Skip to content

[Mobile] null pointer dereference #22538

Description

@FaithyQi

Describe the issue

I got a npt when I use this, the stack trace is as follow:

10-22 14:29:33.367 1000 23794 23794 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x658
10-22 14:29:33.367 1000 23794 23794 F DEBUG : Cause: null pointer dereference
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x0 0000000000000000 x1 0000007a66ccfc90 x2 0000000000000000 x3 0000000000000010
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x4 0000000000000000 x5 000000000000006e x6 0000007b46c78c40 x7 0000000000000001
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x8 0000007930a571e0 x9 f64309fd9f80b5c5 x10 0000007930a57698 x11 0000000046db8a80
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x12 0000ffff00000eff x13 00000000ab458101 x14 d3d0d3d3e1c8d3d6 x15 0000007936d88000
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x16 0000007937d4d480 x17 0000007cafaf0c78 x18 0000007928ae2000 x19 0000007930a57698
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x20 0000007930a571e0 x21 0000007930a579d0 x22 0000007a46db8a50 x23 0000000000000000
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x24 0000007b46c78520 x25 0000007930a5a000 x26 0000007930a57260 x27 0000000000000006
10-22 14:29:33.367 1000 23794 23794 F DEBUG : x28 0000000000000000 x29 0000007930a570b0
10-22 14:29:33.367 1000 23794 23794 F DEBUG : lr 0000007937166488 sp 0000007930a57060 pc 0000007937932c10 pst 0000000060001000
10-22 14:29:33.367 1000 23794 23794 F DEBUG : backtrace:
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #00 pc 0000000000ca7c10 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/base.apk!libonnxruntime.so (BuildId: 736ba7e1d77a64a11c6843cc8b68344cfb24407c)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #1 pc 00000000004db484 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/base.apk!libonnxruntime.so (BuildId: 736ba7e1d77a64a11c6843cc8b68344cfb24407c)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #2 pc 00000000004dda38 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/base.apk!libonnxruntime.so (BuildId: 736ba7e1d77a64a11c6843cc8b68344cfb24407c)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #3 pc 00000000004a7d04 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/base.apk!libonnxruntime.so (BuildId: 736ba7e1d77a64a11c6843cc8b68344cfb24407c)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #4 pc 000000000000edd8 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/base.apk (Java_ai_onnxruntime_OrtSession_run+564) (BuildId: 589fe9d6055bbdcb403b41300daa045c35778c77)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #5 pc 0000000000222244 /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+148) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #6 pc 000000000212ce00 /memfd:jit-cache (deleted) (ai.onnxruntime.OrtSession.run+5344)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #7 pc 0000000000212520 /apex/com.android.art/lib64/libart.so (nterp_helper+4016) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #8 pc 0000000000446720 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (ai.onnxruntime.OrtSession.run+10)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #9 pc 00000000002124c4 /apex/com.android.art/lib64/libart.so (nterp_helper+3924) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #10 pc 00000000004466de /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (ai.onnxruntime.OrtSession.run+4)
10-22 14:29:33.367 1000 23794 23794 F DEBUG : #11 pc 00000000002124c4 /apex/com.android.art/lib64/libart.so (nterp_helper+3924) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.376 1000 23794 23794 F DEBUG : #12 pc 0000000000c52982 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.audio.vad.silero.VadSilero.predict+18)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #13 pc 00000000002124c4 /apex/com.android.art/lib64/libart.so (nterp_helper+3924) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #14 pc 0000000000c5290e /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.audio.vad.silero.VadSilero.isSpeech+22)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #15 pc 00000000002124c4 /apex/com.android.art/lib64/libart.so (nterp_helper+3924) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #16 pc 0000000000c54916 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.audioablity.audio.processor.VadSileroCheckManager.process+110)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #17 pc 00000000002132e4 /apex/com.android.art/lib64/libart.so (nterp_helper+7540) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #18 pc 0000000000c4e44c /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.ai.speechbase.AIAbilityVoiceBaseManager.processData+36)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #19 pc 00000000002124c4 /apex/com.android.art/lib64/libart.so (nterp_helper+3924) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #20 pc 0000000000c3caa0 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.ai.dictation.iat.AIIATManager.onAudioDataReceived+186)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #21 pc 000000000213e520 /memfd:jit-cache (deleted) (com.iflytek.aistudyclient.lib.audioablity.audio.source.PcmRecordAudioSource.onRecordData+816)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #22 pc 000000000217f920 /memfd:jit-cache (deleted) (com.iflytek.aistudyclient.lib.audioablity.audio.recorder.PcmRecorder.readRecordData+1136)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #23 pc 0000000000218964 /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+548) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #24 pc 0000000000284208 /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+188) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #25 pc 00000000003e351c /apex/com.android.art/lib64/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+400) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #26 pc 00000000003de390 /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+804) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #27 pc 0000000000755f9c /apex/com.android.art/lib64/libart.so (MterpInvokeDirect+1036) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #28 pc 0000000000203914 /apex/com.android.art/lib64/libart.so (mterp_op_invoke_direct+20) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #29 pc 0000000000c5617e /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.audioablity.audio.recorder.PcmRecorder.lambda$startReadThread$0+8)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #30 pc 00000000003d61c0 /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool)+304) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #31 pc 00000000003dd900 /apex/com.android.art/lib64/libart.so (art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+204) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #32 pc 00000000003de36c /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+768) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #33 pc 0000000000755f9c /apex/com.android.art/lib64/libart.so (MterpInvokeDirect+1036) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #34 pc 0000000000203914 /apex/com.android.art/lib64/libart.so (mterp_op_invoke_direct+20) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #35 pc 0000000000c5616a /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.audioablity.audio.recorder.PcmRecorder.a+0)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #36 pc 00000000003d61c0 /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool)+304) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #37 pc 00000000003dd900 /apex/com.android.art/lib64/libart.so (art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+204) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #38 pc 00000000003de36c /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+768) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #39 pc 000000000074cbb0 /apex/com.android.art/lib64/libart.so (MterpInvokeVirtual+1168) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #40 pc 0000000000203814 /apex/com.android.art/lib64/libart.so (mterp_op_invoke_virtual+20) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #41 pc 0000000000c54e66 /data/app/~~tHEEIdoLD2HaHqt5Wdlt_w==/com.iflytek.cbg.aistudy.picturereading-H6lpXftCaky323rSjggNVA==/oat/arm64/base.vdex (com.iflytek.aistudyclient.lib.audioablity.audio.recorder.a.run+4)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #42 pc 00000000003d61c0 /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool)+304) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #43 pc 00000000003dd900 /apex/com.android.art/lib64/libart.so (art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+204) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #44 pc 00000000003de36c /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+768) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #45 pc 0000000000752edc /apex/com.android.art/lib64/libart.so (MterpInvokeInterface+1568) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #46 pc 0000000000203a14 /apex/com.android.art/lib64/libart.so (mterp_op_invoke_interface+20) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #47 pc 000000000020d3ae /apex/com.android.art/javalib/core-oj.jar (java.util.concurrent.ThreadPoolExecutor.runWorker+158)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #48 pc 000000000074d2fc /apex/com.android.art/lib64/libart.so (MterpInvokeVirtual+3036) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #49 pc 0000000000203814 /apex/com.android.art/lib64/libart.so (mterp_op_invoke_virtual+20) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #50 pc 000000000020c164 /apex/com.android.art/javalib/core-oj.jar (java.util.concurrent.ThreadPoolExecutor$Worker.run+4)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #51 pc 000000000075350c /apex/com.android.art/lib64/libart.so (MterpInvokeInterface+3152) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #52 pc 0000000000203a14 /apex/com.android.art/lib64/libart.so (mterp_op_invoke_interface+20) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #53 pc 00000000000eda70 /apex/com.android.art/javalib/core-oj.jar (java.lang.Thread.run+8)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #54 pc 00000000003d61c0 /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool)+304) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #55 pc 000000000073b5d0 /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+776) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #56 pc 0000000000222378 /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #57 pc 0000000000218964 /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+548) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #58 pc 0000000000284208 /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+188) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #59 pc 000000000061fab0 /apex/com.android.art/lib64/libart.so (art::JValue art::InvokeVirtualOrInterfaceWithJValuesart::ArtMethod*(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, art::ArtMethod*, jvalue const*)+460) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #60 pc 000000000066e674 /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1184) (BuildId: 4925dbfec35f1037f8ee5dab9b73e87d)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #61 pc 00000000000b1810 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264) (BuildId: cd7952cb40d1a2deca6420c2da7910be)
10-22 14:29:33.377 1000 23794 23794 F DEBUG : #62 pc 00000000000512f0 /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: cd7952cb40d1a2deca6420c2da7910be)
10-22 14:29:33.413 1058 384 384 E tombstoned: Tombstone written to: tombstone_09

To reproduce

test in monkey process

Urgency

No response

Platform

Android

OS Version

9,12

ONNX Runtime Installation

Released Package

Compiler Version (if 'Built from Source')

No response

Package Name (if 'Released Package')

None

ONNX Runtime Version or Commit ID

onnxruntime-android:1.19.0

ONNX Runtime API

Java/Kotlin

Architecture

ARM64

Execution Provider

Default CPU

Execution Provider Library Version

No response

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    api:Javaissues related to the Java APIplatform:mobileissues related to ONNX Runtime mobile; typically submitted using templatestaleissues that have not been addressed in a while; categorized by a bot

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions