ARCore 5.1.5 null pointer dereference (aka Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0)

I’m updating an AR project from Unity 2019 to Unity 2022. I can Build and Run to a local device. The iOS version works. The Android version launches ok, succeeds at signing on with an OAuth, allows interaction with UI, but crashes as soon as the AR camera opens. I get the same crash on Android 13 and 14, which seems to be a null pointer dereference, aka Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0. Here are my crash reports from Android Logcat. Help, anyone?

Android 14

Error CRASH *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Error CRASH Version '2022.3.50f1 (c3db7f8bf9b1)', Build type 'Release', Scripting Backend 'il2cpp', CPU 'arm64-v8a'
Error CRASH Build fingerprint: 'samsung/dm1quew/dm1q:14/UP1A.231005.007/S911U1UES4CXG8:user/release-keys'
Error CRASH Revision: '13'
Error CRASH ABI: 'arm64'
Error CRASH Timestamp: 2024-10-14 12:32:26.833211436-0700
Error CRASH pid: 26539, tid: 26563, name: UnityMain  >>> com.app.myapp <<<
Error CRASH uid: 10338
Error CRASH signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
Error CRASH Cause: null pointer dereference
Error CRASH     x0  0000000000000000  x1  0000000000000000  x2  0000000000000058  x3  0000000000000003
Error CRASH     x4  b400007500d20918  x5  696e000000000000  x6  0000000080006e69  x7  550074657365725f
Error CRASH     x8  000000752ec792a0  x9  de52ed8c717a8fcd  x10 000000753a8d1900  x11 0000000000000001
Error CRASH     x12 000000000000018c  x13 1682081ac54d01ef  x14 00000000000000ad  x15 000000767492f0a0
Error CRASH     x16 00000073e06a2070  x17 000000752ec71e30  x18 0000007462d64860  x19 00000073e06a32e0
Error CRASH     x20 00000075298d4000  x21 00000075298d7000  x22 0000007461c51240  x23 0000000000000002
Error CRASH     x24 0000007590712000  x25 b400007592a1ae00  x26 000000752d09f934  x27 00000073a4aa3910
Error CRASH     x28 0000000000000d45  x29 0000007590710de0
Error CRASH     lr  00000073e0669404  sp  0000007590710ca0  pc  0000000000000000  pst 0000000020001400
Error CRASH Tombstone written to: /storage/emulated/0/Android/data/com.app.myapp/files/tombstone_00
Error CRASH Forwarding signal 11
Info  --------- beginning of crash
Fatal libc Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 26563 (UnityMain), pid 26539 (com.app.myapp)

Android 13

Error CRASH *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Error CRASH Version '2022.3.50f1 (c3db7f8bf9b1)', Build type 'Release', Scripting Backend 'il2cpp', CPU 'arm64-v8a'
Error CRASH Build fingerprint: 'google/flame/flame:13/TP1A.221005.002.B2/9382335:user/release-keys'
Error CRASH Revision: 'MP1.0'
Error CRASH ABI: 'arm64'
Error CRASH Timestamp: 2024-10-14 14:09:46.512755989-0700
Error CRASH pid: 12339, tid: 12368, name: UnityMain  >>> com.app.myapp <<<
Error CRASH uid: 10092
Error CRASH signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
Error CRASH Cause: null pointer dereference
Error CRASH     x0  0000000000000000  x1  0000000000000000  x2  0000000000000058  x3  00000075173fcb78
Error CRASH     x4  b40000758065b648  x5  0000000000000000  x6  0000000080000000  x7  686d53ff73647264
Error CRASH     x8  00000075167942a0  x9  6cd98794e72d2d0b  x10 0000000000000040  x11 000000000000000f
Error CRASH     x12 0000000000006ddc  x13 9438a959296910e9  x14 00000077cd801ba6  x15 000000000000000a
Error CRASH     x16 0000007383b1c070  x17 000000751678ce30  x18 0000007452142ed0  x19 0000007383b1d2e0
Error CRASH     x20 000000749bc15000  x21 000000749bc18000  x22 0000007451c49240  x23 0000000000000002
Error CRASH     x24 00000075173fe000  x25 b4000075a06e7cf0  x26 00000074a00a4934  x27 00000073a2a38d00
Error CRASH     x28 00000000000005bb  x29 00000075173fcdd0
Error CRASH     lr  0000007383ae3404  sp  00000075173fcc90  pc  0000000000000000  pst 0000000020000000
Error CRASH Tombstone written to: /storage/emulated/0/Android/data/com.app.myapp/files/tombstone_00
Error CRASH Forwarding signal 11
Info  --------- beginning of crash
Fatal libc Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 12368 (UnityMain), pid 12339 (com.app.myapp)

Here’s a fuller version that includes a backtrace that seems to implicate libUnityARCore.so.

Error CRASH *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Error CRASH Version '2022.3.50f1 (c3db7f8bf9b1)', Build type 'Release', Scripting Backend 'il2cpp', CPU 'arm64-v8a'
Error CRASH Build fingerprint: 'google/flame/flame:13/TP1A.221005.002.B2/9382335:user/release-keys'
Error CRASH Revision: 'MP1.0'
Error CRASH ABI: 'arm64'
Error CRASH Timestamp: 2024-10-14 16:59:22.272499318-0700
Error CRASH pid: 6950, tid: 6973, name: UnityMain  >>> com.app.myapp <<<
Error CRASH uid: 10095
Error CRASH signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
Error CRASH Cause: null pointer dereference
Error CRASH     x0  0000000000000000  x1  0000000000000000  x2  0000000000000058  x3  000000751728fb78
Error CRASH     x4  b4000075806543a8  x5  0000000000000000  x6  0000000080000000  x7  686d53ff73647264
Error CRASH     x8  00000073d00572a0  x9  6cd98794e72d2d0b  x10 0000000000000040  x11 0000000000000015
Error CRASH     x12 0000000000004e94  x13 f57cd171cca9939b  x14 00000077cd801ba6  x15 000000000000000a
Error CRASH     x16 000000737bddd070  x17 00000073d004fe30  x18 0000007452fae540  x19 000000737bdde2e0
Error CRASH     x20 000000748da83000  x21 000000748da85000  x22 0000007451c2e3c0  x23 0000000000000002
Error CRASH     x24 0000007517291000  x25 b4000075a06ca970  x26 00000074a109bb64  x27 00000073a4a46540
Error CRASH     x28 00000000000003fc  x29 000000751728fdd0
Error CRASH     lr  000000737bda4404  sp  000000751728fc90  pc  0000000000000000  pst 0000000020000000
Debug ConnectivityService NetReassign [no changes] [c 1] [a 0] [i 1]
Error CRASH Tombstone written to: /storage/emulated/0/Android/data/com.app.myapp/files/tombstone_00
Error CRASH Forwarding signal 11
Info  --------- beginning of crash
Fatal libc Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 6973 (UnityMain), pid 6950 (com.app.myapp)
Info crash_dump64 obtaining output fd from tombstoned, type: kDebuggerdTombstoneProto
Info tombstoned received crash request for pid 6973
Info crash_dump64 performing dump of process 6950 (target tid = 6973)
Fatal DEBUG *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Fatal DEBUG Build fingerprint: 'google/flame/flame:13/TP1A.221005.002.B2/9382335:user/release-keys'
Fatal DEBUG Revision: 'MP1.0'
Fatal DEBUG ABI: 'arm64'
Fatal DEBUG Timestamp: 2024-10-14 16:59:22.643952011-0700
Fatal DEBUG Process uptime: 24s
Fatal DEBUG Cmdline: com.app.myapp
Fatal DEBUG pid: 6950, tid: 6973, name: UnityMain  >>> com.app.myapp <<<
Fatal DEBUG uid: 10095
Fatal DEBUG signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000000
Fatal DEBUG Cause: null pointer dereference
Fatal DEBUG     x0  0000000000000000  x1  0000000000000000  x2  0000000000000058  x3  000000751728fb78
Fatal DEBUG     x4  b4000075806543a8  x5  0000000000000000  x6  0000000080000000  x7  686d53ff73647264
Fatal DEBUG     x8  00000073d00572a0  x9  6cd98794e72d2d0b  x10 0000000000000040  x11 0000000000000015
Fatal DEBUG     x12 0000000000004e94  x13 f57cd171cca9939b  x14 00000077cd801ba6  x15 000000000000000a
Fatal DEBUG     x16 000000737bddd070  x17 00000073d004fe30  x18 0000007452fae540  x19 000000737bdde2e0
Fatal DEBUG     x20 000000748da83000  x21 000000748da85000  x22 0000007451c2e3c0  x23 0000000000000002
Fatal DEBUG     x24 0000007517291000  x25 b4000075a06ca970  x26 00000074a109bb64  x27 00000073a4a46540
Fatal DEBUG     x28 00000000000003fc  x29 000000751728fdd0
Fatal DEBUG     lr  000000737bda4404  sp  000000751728fc90  pc  0000000000000000  pst 0000000020000000
Fatal DEBUG backtrace:
Fatal DEBUG       #00 pc 0000000000000000  <unknown>
Fatal DEBUG       #01 pc 000000000003b400  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libUnityARCore.so (UnityARCore_session_reset+32) (BuildId: 3ee8725f9818ae5228cb515914a0a50af3b64002)
Fatal DEBUG       #02 pc 000000000451ca34  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #03 pc 000000000451c9b8  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #04 pc 0000000004543cb4  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #05 pc 00000000020f9038  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #06 pc 00000000020f9d40  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #07 pc 0000000002108184  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #08 pc 0000000002108ae8  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #09 pc 00000000045c556c  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #10 pc 0000000001fa8074  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #11 pc 0000000001fa7fc0  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libil2cpp.so (BuildId: 68c3de7ad0fa5fc0da848bfa6bde92fdf37daa75)
Fatal DEBUG       #12 pc 000000000067e3bc  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #13 pc 000000000068e0c4  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #14 pc 0000000000699e94  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #15 pc 0000000000699a8c  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #16 pc 00000000004bcad0  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #17 pc 00000000005815cc  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #18 pc 000000000058160c  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #19 pc 00000000005818a0  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #20 pc 0000000000712624  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #21 pc 0000000000729ae8  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/lib/arm64/libunity.so (BuildId: 09c9e61d7c92654a)
Fatal DEBUG       #22 pc 0000000000351230  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 5b1e3dce5abfbdc410d71d256d308227)
Fatal DEBUG       #23 pc 00000000005b8eb0  /apex/com.android.art/lib64/libart.so (nterp_helper+4016) (BuildId: 5b1e3dce5abfbdc410d71d256d308227)
Fatal DEBUG       #24 pc 0000000000395178  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/oat/arm64/base.vdex (com.unity3d.player.UnityPlayer.-$$Nest$mnativeRender+0)
Fatal DEBUG       #25 pc 00000000005b7f34  /apex/com.android.art/lib64/libart.so (nterp_helper+52) (BuildId: 5b1e3dce5abfbdc410d71d256d308227)
Fatal DEBUG       #26 pc 00000000003905b4  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/oat/arm64/base.vdex (com.unity3d.player.B0.handleMessage+244)
Fatal DEBUG       #27 pc 000000000099266c  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.os.Handler.dispatchMessage+140)
Fatal DEBUG       #28 pc 0000000000996058  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.os.Looper.loopOnce+1000)
Fatal DEBUG       #29 pc 0000000000995bc8  /data/misc/apexdata/com.android.art/dalvik-cache/arm64/boot.oat (android.os.Looper.loop+1112)
Fatal DEBUG       #30 pc 00000000005b7f98  /apex/com.android.art/lib64/libart.so (nterp_helper+152) (BuildId: 5b1e3dce5abfbdc410d71d256d308227)
Fatal DEBUG       #31 pc 000000000039087c  /data/app/~~ydwTXGfJRAPtlbcfbtayLQ==/com.app.myapp-b89QCNeW3a5o53fvB8jjxA==/oat/arm64/base.vdex (com.unity3d.player.C0.run+48)
Fatal DEBUG       #32 pc 000000000033a7a4  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 5b1e3dce5abfbdc410d71d256d308227)
Fatal DEBUG       #33 pc 000000000023a01c  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+144) (BuildId: 5b1e3dce5abfbdc410d71d256d308227)
Fatal DEBUG       #34 pc 0000000000539054  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1600) (BuildId: 5b1e3dce5abfbdc410d71d256d308227)
Fatal DEBUG       #35 pc 00000000000b62b8  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: 058e3ec96fa600fb840a6a6956c6b64e)
Fatal DEBUG       #36 pc 0000000000052fb8  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 058e3ec96fa600fb840a6a6956c6b64e)
Error tombstoned Tombstone written to: tombstone_05
Warn ActivityTaskManager   Force finishing activity com.app.myapp/com.unity3d.player.UnityPlayerActivity

This turned out to be an issue that has been documented in other posts. App was calling ARSessionOrigin.Reset() before instantiating session. It didn’t cause problems in older versions of the app.

2 Likes

u made my day. thanks u so much !!!

Thank you so much for this!