Crashes when Memory Profiler capturing

Kichang-Kim · December 5, 2022, 10:07am

Hi. I found that capturing in MemoryProfiler makes app crashes.

Here is part of crash log:

Native StackTrace:
Thread 0 (crashed)
0 libil2cpp.so 0x00000078eb2d5534 il2cpp::vm::Class::GetVirtualMethod(Il2CppClass*, MethodInfo const*)
1 libil2cpp.so 0x00000078eb32fc94 il2cpp::metadata::GenericMetadata::InflateRGCTXLocked(Il2CppImage const*, unsigned int, Il2CppGenericContext const*, il2cpp::os::FastAutoLock const&)
2 libil2cpp.so 0x00000078eb2d3eb4 il2cpp::vm::Class::InitLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)
3 libil2cpp.so 0x00000078eb2d2554 il2cpp::vm::Class::Init(Il2CppClass*)
4 libil2cpp.so 0x00000078eb2c2c34 il2cpp::vm::Type::GetNameChunkedRecurseInternal(Il2CppType const*, Il2CppTypeNameFormat, bool, void ()(void, void*), void*)
5 libunity.so 0x00000078efdf546c MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()
6 libunity.so 0x00000078efdf9df8 profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)
7 libunity.so 0x00000078efdf9d7c MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)
8 libunity.so 0x00000078efdf9f08 MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)
9 libunity.so 0x00000078efdf4294 MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))
10 libunity.so 0x00000078efdf4180 profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)
11 libunity.so 0x00000078efdf49ac profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)
12 libunity.so 0x00000078efdf3f40 profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)
13 libunity.so 0x00000078efcd103c GeneralConnection::Poll()
14 libunity.so 0x00000078efcd06e4 PlayerConnection::Poll()
15 libunity.so 0x00000078efcbd2a8 InitPlayerLoopCallbacks()
16 libunity.so 0x00000078efcb35b4 ExecutePlayerLoop(NativePlayerLoopSystem*)
17 libunity.so 0x00000078efcb35f4 ExecutePlayerLoop(NativePlayerLoopSystem*)
18 libunity.so 0x00000078efcb38ec PlayerLoop()
19 libunity.so 0x00000078eff0cdb4 UnityPlayerLoop()
20 libunity.so 0x00000078eff2e620 nativeRender(_JNIEnv*, _jobject*)
21 jit-cache (deleted) 0x000000009d405c4c <symbols missing for uuid: 0000000000000000000000000000000000000000>

Both Android and iOS have the issue. Empty project does not have this issue, so some part of my projects may make the problem. When I figure out precise condition, I’ll report it.

Unity 2022.2.0b16 + Memory Profiler 1.0

JoshPeterson · December 5, 2022, 12:48pm

This looks very similar to Unity Issue Tracker - Build crashes on il2cpp::vm::Class::GetVirtualMethod when Building and Running a project using IL2CPP Scripting Backend, but we have only seen that happen with script debugging enabled in Unity 2021.

We were pretty sure that it could not happen in Unity 2022.2, but maybe it can! We will have another look at this in Unity 2022.2 and later, but if you can narrow down how this happens, we would love a bug report.

Tommy-Angelo · December 20, 2022, 8:21am

Same thing happens with Unity 2022.2.1f1 + Memory Profiler 1.0. The native crash happens when trying to capture a snapshot on a Google Pixel 2 (in my case).

Long native stack trace

CRASH *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
CRASH Version ‘2022.2.1f1 (4fead5835099)’, Build type ‘Development’, Scripting Backend ‘il2cpp’, CPU ‘arm64-v8a’
CRASH Build fingerprint: ‘google/walleye/walleye:11/RP1A.201005.004.A1/6934943:user/release-keys’
CRASH Revision: ‘MP1’
CRASH ABI: ‘arm64’
CRASH Timestamp: 2022-12-20 10:12:58.387450600+0200
CRASH pid: 17427, tid: 17548, name: UnityMain >>> com.default.company.application <<<
CRASH uid: 11739
CRASH signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
CRASH Cause: null pointer dereference
CRASH x0 0000000000000000 x1 00000072863eda30 x2 0000000000000000 x3 0000000000000000
CRASH x4 0000007318d9f228 x5 00000072876a3998 x6 000000728022deb0 x7 000000728022e1b0
CRASH x8 0000000000000008 x9 00000072d8dbad00 x10 00000072d872a000 x11 00000072f985f178
CRASH x12 0000000000000018 x13 0000000000000002 x14 0000000000000000 x15 00000072831374b0
CRASH x16 00000072f84c98a0 x17 000000762e09c0c0 x18 00000072859692a8 x19 00000072876a3908
CRASH x20 0000007282f78f68 x21 00000072f8344330 x22 00000072876a35b0 x23 00000072876a3908
CRASH x24 000000728049fdb0 x25 0000000000000006 x26 00000072f1e34619 x27 00000072876a35d0
CRASH x28 0000007180242030 x29 0000007318da1000
CRASH lr 00000072f7fbc3e0 sp 0000007318d9f130 pc 00000072f7fbc3f8 pst 0000000000000000
CRASH backtrace:
CRASH #00 pc 0000000007aab3f8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #01 pc 0000000007a7cfc8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #02 pc 0000000007aa9e0c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #03 pc 0000000007aa84ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #04 pc 0000000007a5eeb0 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #05 pc 00000000007059b4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()+1300) (BuildId: c21bf8479a61f97e)
CRASH #06 pc 000000000070a340 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)+116) (BuildId: c21bf8479a61f97e)
CRASH #07 pc 000000000070a2c4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)+1088) (BuildId: c21bf8479a61f97e)
CRASH #08 pc 000000000070a450 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)+56) (BuildId: c21bf8479a61f97e)
CRASH #09 pc 00000000007047dc /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))+184) (BuildId: c21bf8479a61f97e)
CRASH #10 pc 00000000007046c8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)+240) (BuildId: c21bf8479a61f97e)
CRASH #11 pc 0000000000704ef4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)+196) (BuildId: c21bf8479a61f97e)
CRASH #12 pc 0000000000704488 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)+108) (BuildId: c21bf8479a61f97e)
CRASH #13 pc 00000000005e6f38 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (GeneralConnection::Poll()+860) (BuildId: c21bf8479a61f97e)
CRASH #14 pc 00000000005e6558 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerConnection::Poll()+76) (BuildId: c21bf8479a61f97e)
CRASH #15 pc 00000000005d3218 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (BuildId: c21bf8479a61f97e)
CRASH #16 pc 00000000005ca16c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+92) (BuildId: c21bf8479a61f97e)
CRASH #17 pc 00000000005ca1ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+156) (BuildId: c21bf8479a61f97e)
CRASH #18 pc 00000000005ca4a4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerLoop()+324) (BuildId: c21bf8479a61f97e)
CRASH #19 pc 0000000000814374 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (UnityPlayerLoop()+812) (BuildId: c21bf8479a61f97e)
CRASH #20 pc 0000000000833778 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (nativeRender(_JNIEnv*, _jobject*)+84) (BuildId: c21bf8479a61f97e)
CRASH #21 pc 000000000013ced4 /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+148) (BuildId: d0f321775158ed00df284edfabf672b6)
CRASH #22 pc 000000000203f0d8 /memfd:jit-cache (deleted)
CRASH Tombstone written to: /storage/emulated/0/Android/data/com.default.company.application/files/tombstone_00
0001/01/01 00:00:00.000 -1 -1 Info --------- beginning of crash
AndroidRuntime FATAL EXCEPTION: UnityMain
AndroidRuntime Process: com.default.company.application, PID: 17427
AndroidRuntime java.lang.Error: *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
AndroidRuntime Version ‘2022.2.1f1 (4fead5835099)’, Build type ‘Development’, Scripting Backend ‘il2cpp’, CPU ‘arm64-v8a’
AndroidRuntime Build fingerprint: ‘google/walleye/walleye:11/RP1A.201005.004.A1/6934943:user/release-keys’
AndroidRuntime Revision: ‘MP1’
AndroidRuntime ABI: ‘arm64’
AndroidRuntime Timestamp: 2022-12-20 10:12:58.387450600+0200
AndroidRuntime pid: 17427, tid: 17548, name: UnityMain >>> com.default.company.application <<<
AndroidRuntime uid: 11739
AndroidRuntime signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
AndroidRuntime Cause: null pointer dereference
AndroidRuntime x0 0000000000000000 x1 00000072863eda30 x2 0000000000000000 x3 0000000000000000
AndroidRuntime x4 0000007318d9f228 x5 00000072876a3998 x6 000000728022deb0 x7 000000728022e1b0
AndroidRuntime x8 0000000000000008 x9 00000072d8dbad00 x10 00000072d872a000 x11 00000072f985f178
AndroidRuntime x12 0000000000000018 x13 0000000000000002 x14 0000000000000000 x15 00000072831374b0
AndroidRuntime x16 00000072f84c98a0 x17 000000762e09c0c0 x18 00000072859692a8 x19 00000072876a3908
AndroidRuntime x20 0000007282f78f68 x21 00000072f8344330 x22 00000072876a35b0 x23 00000072876a3908
AndroidRuntime x24 000000728049fdb0 x25 0000000000000006 x26 00000072f1e34619 x27 00000072876a35d0
AndroidRuntime x28 0000007180242030 x29 0000007318da1000
AndroidRuntime lr 00000072f7fbc3e0 sp 0000007318d9f130 pc 00000072f7fbc3f8 pst 0000000000000000
AndroidRuntime
AndroidRuntime backtrace:
AndroidRuntime #00 pc 0000000007aab3f8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #01 pc 0000000007a7cfc8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #02 pc 0000000007aa9e0c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #03 pc 0000000007aa84ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #04 pc 0000000007a5eeb0 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #05 pc 00000000007059b4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()+1300) (BuildId: c21bf8479a61f97e)
AndroidRuntime #06 pc 000000000070a340 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)+116) (BuildId: c21bf8479a61f97e)
AndroidRuntime #07 pc 000000000070a2c4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)+1088) (BuildId: c21bf8479a61f97e)
AndroidRuntime #08 pc 000000000070a450 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)+56) (BuildId: c21bf8479a61f97e)
AndroidRuntime #09 pc 00000000007047dc /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))+184) (BuildId: c21bf8479a61f97e)
AndroidRuntime #10 pc 00000000007046c8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)+240) (BuildId: c21bf8479a61f97e)
AndroidRuntime #11 pc 0000000000704ef4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)+196) (BuildId: c21bf8479a61f97e)
AndroidRuntime #12 pc 0000000000704488 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)+108) (BuildId: c21bf8479a61f97e)
AndroidRuntime #13 pc 00000000005e6f38 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (GeneralConnection::Poll()+860) (BuildId: c21bf8479a61f97e)
AndroidRuntime #14 pc 00000000005e6558 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerConnection::Poll()+76) (BuildId: c21bf8479a61f97e)
AndroidRuntime #15 pc 00000000005d3218 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (BuildId: c21bf8479a61f97e)
AndroidRuntime #16 pc 00000000005ca16c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+92) (BuildId: c21bf8479a61f97e)
AndroidRuntime #17 pc 00000000005ca1ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+156) (BuildId: c21bf8479a61f97e)
AndroidRuntime #18 pc 00000000005ca4a4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerLoop()+324) (BuildId: c21bf8479a61f97e)
AndroidRuntime #19 pc 0000000000814374 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (UnityPlayerLoop()+812) (BuildId: c21bf8479a61f97e)
AndroidRuntime #20 pc 0000000000833778 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (nativeRender(_JNIEnv*, _jobject*)+84) (BuildId: c21bf8479a61f97e)
AndroidRuntime #21 pc 000000000013ced4 /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+148) (BuildId: d0f321775158ed00df284edfabf672b6)
AndroidRuntime #22 pc 000000000203f0d8 /memfd:jit-cache (deleted)
AndroidRuntime
AndroidRuntime at libil2cpp.0x7aab3f8(Native Method)
AndroidRuntime at libil2cpp.0x7a7cfc8(Native Method)
AndroidRuntime at libil2cpp.0x7aa9e0c(Native Method)
AndroidRuntime at libil2cpp.0x7aa84ac(Native Method)
AndroidRuntime at libil2cpp.0x7a5eeb0(Native Method)
AndroidRuntime at libunity.MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()(AfterScriptingTypesHaveBeenReported:1300)
AndroidRuntime at libunity.profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)(Capture:116)
AndroidRuntime at libunity.MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)(Process:1088)
AndroidRuntime at libunity.MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)(RunSerialization:56)
AndroidRuntime at libunity.MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))(CaptureSnapshot:184)
AndroidRuntime at libunity.profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)(StreamMemorySnapshotToEditor:240)
AndroidRuntime at libunity.profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)(StartOperation:196)
AndroidRuntime at libunity.profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)(OnEditorMemorySnapshotRequestMessage:108)
AndroidRuntime at libunity.GeneralConnection::Poll()(Poll:860)
AndroidRuntime at libunity.PlayerConnection::Poll()(Poll:76)
AndroidRuntime at libunity.0x5d3218(Native Method)
AndroidRuntime at libunity.ExecutePlayerLoop(NativePlayerLoopSystem*)(ExecutePlayerLoop:92)
AndroidRuntime at libunity.ExecutePlayerLoop(NativePlayerLoopSystem*)(ExecutePlayerLoop:156)
AndroidRuntime at libunity.PlayerLoop()(PlayerLoop:324)
AndroidRuntime at libunity.UnityPlayerLoop()(UnityPlayerLoop:812)
AndroidRuntime at libunity.nativeRender(_JNIEnv*, _jobject*)(nativeRender:84)
AndroidRuntime at libart.art_quick_generic_jni_trampoline(art_quick_generic_jni_trampoline:148)
AndroidRuntime at memfd:jit-cache (deleted).0x203f0d8(Native Method)

JoshPeterson · December 20, 2022, 12:38pm

Tommy-Angelo:

Same thing happens with Unity 2022.2.1f1 + Memory Profiler 1.0. The native crash happens when trying to capture a snapshot on a Google Pixel 2 (in my case).

Long native stack trace

CRASH *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
CRASH Version ‘2022.2.1f1 (4fead5835099)’, Build type ‘Development’, Scripting Backend ‘il2cpp’, CPU ‘arm64-v8a’
CRASH Build fingerprint: ‘google/walleye/walleye:11/RP1A.201005.004.A1/6934943:user/release-keys’
CRASH Revision: ‘MP1’
CRASH ABI: ‘arm64’
CRASH Timestamp: 2022-12-20 10:12:58.387450600+0200
CRASH pid: 17427, tid: 17548, name: UnityMain >>> com.default.company.application <<<
CRASH uid: 11739
CRASH signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
CRASH Cause: null pointer dereference
CRASH x0 0000000000000000 x1 00000072863eda30 x2 0000000000000000 x3 0000000000000000
CRASH x4 0000007318d9f228 x5 00000072876a3998 x6 000000728022deb0 x7 000000728022e1b0
CRASH x8 0000000000000008 x9 00000072d8dbad00 x10 00000072d872a000 x11 00000072f985f178
CRASH x12 0000000000000018 x13 0000000000000002 x14 0000000000000000 x15 00000072831374b0
CRASH x16 00000072f84c98a0 x17 000000762e09c0c0 x18 00000072859692a8 x19 00000072876a3908
CRASH x20 0000007282f78f68 x21 00000072f8344330 x22 00000072876a35b0 x23 00000072876a3908
CRASH x24 000000728049fdb0 x25 0000000000000006 x26 00000072f1e34619 x27 00000072876a35d0
CRASH x28 0000007180242030 x29 0000007318da1000
CRASH lr 00000072f7fbc3e0 sp 0000007318d9f130 pc 00000072f7fbc3f8 pst 0000000000000000
CRASH backtrace:
CRASH #00 pc 0000000007aab3f8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #01 pc 0000000007a7cfc8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #02 pc 0000000007aa9e0c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #03 pc 0000000007aa84ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #04 pc 0000000007a5eeb0 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
CRASH #05 pc 00000000007059b4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()+1300) (BuildId: c21bf8479a61f97e)
CRASH #06 pc 000000000070a340 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)+116) (BuildId: c21bf8479a61f97e)
CRASH #07 pc 000000000070a2c4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::process(dynamic_array<unsigned char, 0ul>&)+1088) (BuildId: c21bf8479a61f97e)
CRASH #08 pc 000000000070a450 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)+56) (BuildId: c21bf8479a61f97e)
CRASH #09 pc 00000000007047dc /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))+184) (BuildId: c21bf8479a61f97e)
CRASH #10 pc 00000000007046c8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)+240) (BuildId: c21bf8479a61f97e)
CRASH #11 pc 0000000000704ef4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)+196) (BuildId: c21bf8479a61f97e)
CRASH #12 pc 0000000000704488 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)+108) (BuildId: c21bf8479a61f97e)
CRASH #13 pc 00000000005e6f38 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (GeneralConnection::poll()+860) (BuildId: c21bf8479a61f97e)
CRASH #14 pc 00000000005e6558 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerConnection::poll()+76) (BuildId: c21bf8479a61f97e)
CRASH #15 pc 00000000005d3218 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (BuildId: c21bf8479a61f97e)
CRASH #16 pc 00000000005ca16c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+92) (BuildId: c21bf8479a61f97e)
CRASH #17 pc 00000000005ca1ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+156) (BuildId: c21bf8479a61f97e)
CRASH #18 pc 00000000005ca4a4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerLoop()+324) (BuildId: c21bf8479a61f97e)
CRASH #19 pc 0000000000814374 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (UnityPlayerLoop()+812) (BuildId: c21bf8479a61f97e)
CRASH #20 pc 0000000000833778 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (nativeRender(_JNIEnv*, _jobject*)+84) (BuildId: c21bf8479a61f97e)
CRASH #21 pc 000000000013ced4 /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+148) (BuildId: d0f321775158ed00df284edfabf672b6)
CRASH #22 pc 000000000203f0d8 /memfd:jit-cache (deleted)
CRASH Tombstone written to: /storage/emulated/0/Android/data/com.default.company.application/files/tombstone_00
0001/01/01 00:00:00.000 -1 -1 Info --------- beginning of crash
AndroidRuntime FATAL EXCEPTION: UnityMain
AndroidRuntime Process: com.default.company.application, PID: 17427
AndroidRuntime java.lang.Error: *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
AndroidRuntime Version ‘2022.2.1f1 (4fead5835099)’, Build type ‘Development’, Scripting Backend ‘il2cpp’, CPU ‘arm64-v8a’
AndroidRuntime Build fingerprint: ‘google/walleye/walleye:11/RP1A.201005.004.A1/6934943:user/release-keys’
AndroidRuntime Revision: ‘MP1’
AndroidRuntime ABI: ‘arm64’
AndroidRuntime Timestamp: 2022-12-20 10:12:58.387450600+0200
AndroidRuntime pid: 17427, tid: 17548, name: UnityMain >>> com.default.company.application <<<
AndroidRuntime uid: 11739
AndroidRuntime signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
AndroidRuntime Cause: null pointer dereference
AndroidRuntime x0 0000000000000000 x1 00000072863eda30 x2 0000000000000000 x3 0000000000000000
AndroidRuntime x4 0000007318d9f228 x5 00000072876a3998 x6 000000728022deb0 x7 000000728022e1b0
AndroidRuntime x8 0000000000000008 x9 00000072d8dbad00 x10 00000072d872a000 x11 00000072f985f178
AndroidRuntime x12 0000000000000018 x13 0000000000000002 x14 0000000000000000 x15 00000072831374b0
AndroidRuntime x16 00000072f84c98a0 x17 000000762e09c0c0 x18 00000072859692a8 x19 00000072876a3908
AndroidRuntime x20 0000007282f78f68 x21 00000072f8344330 x22 00000072876a35b0 x23 00000072876a3908
AndroidRuntime x24 000000728049fdb0 x25 0000000000000006 x26 00000072f1e34619 x27 00000072876a35d0
AndroidRuntime x28 0000007180242030 x29 0000007318da1000
AndroidRuntime lr 00000072f7fbc3e0 sp 0000007318d9f130 pc 00000072f7fbc3f8 pst 0000000000000000
AndroidRuntime
AndroidRuntime backtrace:
AndroidRuntime #00 pc 0000000007aab3f8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #01 pc 0000000007a7cfc8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #02 pc 0000000007aa9e0c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #03 pc 0000000007aa84ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #04 pc 0000000007a5eeb0 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
AndroidRuntime #05 pc 00000000007059b4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()+1300) (BuildId: c21bf8479a61f97e)
AndroidRuntime #06 pc 000000000070a340 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)+116) (BuildId: c21bf8479a61f97e)
AndroidRuntime #07 pc 000000000070a2c4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::process(dynamic_array<unsigned char, 0ul>&)+1088) (BuildId: c21bf8479a61f97e)
AndroidRuntime #08 pc 000000000070a450 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)+56) (BuildId: c21bf8479a61f97e)
AndroidRuntime #09 pc 00000000007047dc /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))+184) (BuildId: c21bf8479a61f97e)
AndroidRuntime #10 pc 00000000007046c8 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)+240) (BuildId: c21bf8479a61f97e)
AndroidRuntime #11 pc 0000000000704ef4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)+196) (BuildId: c21bf8479a61f97e)
AndroidRuntime #12 pc 0000000000704488 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)+108) (BuildId: c21bf8479a61f97e)
AndroidRuntime #13 pc 00000000005e6f38 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (GeneralConnection::poll()+860) (BuildId: c21bf8479a61f97e)
AndroidRuntime #14 pc 00000000005e6558 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerConnection::poll()+76) (BuildId: c21bf8479a61f97e)
AndroidRuntime #15 pc 00000000005d3218 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (BuildId: c21bf8479a61f97e)
AndroidRuntime #16 pc 00000000005ca16c /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+92) (BuildId: c21bf8479a61f97e)
AndroidRuntime #17 pc 00000000005ca1ac /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+156) (BuildId: c21bf8479a61f97e)
AndroidRuntime #18 pc 00000000005ca4a4 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (PlayerLoop()+324) (BuildId: c21bf8479a61f97e)
AndroidRuntime #19 pc 0000000000814374 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (UnityPlayerLoop()+812) (BuildId: c21bf8479a61f97e)
AndroidRuntime #20 pc 0000000000833778 /data/app/~~vcFyGZi7mdx1zD8gk3VdPA==/com.default.company.application-cna7-5kmpqzCFj7BQ_AqvA==/lib/arm64/libunity.so (nativeRender(_JNIEnv*, _jobject*)+84) (BuildId: c21bf8479a61f97e)
AndroidRuntime #21 pc 000000000013ced4 /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+148) (BuildId: d0f321775158ed00df284edfabf672b6)
AndroidRuntime #22 pc 000000000203f0d8 /memfd:jit-cache (deleted)
AndroidRuntime
AndroidRuntime at libil2cpp.0x7aab3f8(Native Method)
AndroidRuntime at libil2cpp.0x7a7cfc8(Native Method)
AndroidRuntime at libil2cpp.0x7aa9e0c(Native Method)
AndroidRuntime at libil2cpp.0x7aa84ac(Native Method)
AndroidRuntime at libil2cpp.0x7a5eeb0(Native Method)
AndroidRuntime at libunity.MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()(AfterScriptingTypesHaveBeenReported:1300)
AndroidRuntime at libunity.profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)(Capture:116)
AndroidRuntime at libunity.MemorySnapshotProcess::process(dynamic_array<unsigned char, 0ul>&)(Process:1088)
AndroidRuntime at libunity.MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)(RunSerialization:56)
AndroidRuntime at libunity.MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))(CaptureSnapshot:184)
AndroidRuntime at libunity.profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)(StreamMemorySnapshotToEditor:240)
AndroidRuntime at libunity.profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)(StartOperation:196)
AndroidRuntime at libunity.profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)(OnEditorMemorySnapshotRequestMessage:108)
AndroidRuntime at libunity.GeneralConnection::poll()(Poll:860)
AndroidRuntime at libunity.PlayerConnection::poll()(Poll:76)
AndroidRuntime at libunity.0x5d3218(Native Method)
AndroidRuntime at libunity.ExecutePlayerLoop(NativePlayerLoopSystem*)(ExecutePlayerLoop:92)
AndroidRuntime at libunity.ExecutePlayerLoop(NativePlayerLoopSystem*)(ExecutePlayerLoop:156)
AndroidRuntime at libunity.PlayerLoop()(PlayerLoop:324)
AndroidRuntime at libunity.UnityPlayerLoop()(UnityPlayerLoop:812)
AndroidRuntime at libunity.nativeRender(_JNIEnv*, _jobject*)(nativeRender:84)
AndroidRuntime at libart.art_quick_generic_jni_trampoline(art_quick_generic_jni_trampoline:148)
AndroidRuntime at memfd:jit-cache (deleted).0x203f0d8(Native Method)

Can you try to symbolicate this stack trace to get more details about which functions are on the stack when the problem happens? There are some details about who to symbolicate things on Android here: https://support.unity.com/hc/en-us/articles/115000292166-Symbolicate-Android-crash

Tommy-Angelo · December 20, 2022, 3:06pm

Sure.

What I also noticed is that I cannot reproduce this native crash when I only tick “Development Build”, however when I ticked three more other options, such as “Deep Profiling Support”, “Script Debugging” and “Wait For Managed Debugger”, I got the crash.

If there’s something else I can help with, please let me know.

*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Version '2022.2.1f1 (4fead5835099)', Build type 'Development', Scripting Backend 'il2cpp', CPU 'arm64-v8a'
Build fingerprint: 'google/walleye/walleye:11/RP1A.201005.004.A1/6934943:user/release-keys'
Revision: 'MP1'
ABI: 'arm64'
Timestamp: 2022-12-20 16:53:35.576222409+0200
pid: 12798, tid: 12899, name: UnityMain  >>> com.default.application <<<
uid: 11743
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr --------
Cause: null pointer dereference
    x0  0000000000000000  x1  00000072863ed580  x2  0000000000000000  x3  0000000000000000
    x4  0000007303c7a268  x5  000000728768f0a0  x6  000000728022deb0  x7  000000728022e1b0
    x8  0000000000000008  x9  00000072d75c2d00  x10 00000072d6f32000  x11 00000072fba63178
    x12 0000000000000018  x13 0000000000000002  x14 0000000000000000  x15 00000072831374b0
    x16 00000072fa6cd8a0  x17 000000762e09c0c0  x18 00000072859691b8  x19 000000728768f010
    x20 0000007282f78f68  x21 00000072fa548330  x22 000000728768ecb8  x23 000000728768f010
    x24 000000728049fdb0  x25 0000000000000006  x26 00000072f4038619  x27 000000728768ecd8
    x28 0000007180242030  x29 0000007303c7c000
    lr  00000072fa1c03e0  sp  0000007303c7a170  pc  00000072fa1c03f8  pst 0000000000000000
backtrace:
      #00 pc 0000000007aab3f8 (il2cpp::vm::Class::GetVirtualMethod(Il2CppClass*, MethodInfo const*) at /Applications/Unity/Hub/Editor/2022.2.1f1/Unity.app/Contents/il2cpp/libil2cpp/vm/Class.cpp:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
      #01 pc 0000000007a7cfc8 (il2cpp::metadata::GenericMetadata::InflateRGCTXLocked(Il2CppImage const*, unsigned int, Il2CppGenericContext const*, il2cpp::os::FastAutoLock const&) at /Applications/Unity/Hub/Editor/2022.2.1f1/Unity.app/Contents/il2cpp/libil2cpp/metadata/GenericMetadata.cpp:290)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
      #02 pc 0000000007aa9e0c (il2cpp::vm::Class::InitLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&) at /Applications/Unity/Hub/Editor/2022.2.1f1/Unity.app/Contents/il2cpp/libil2cpp/vm/Class.cpp:1595)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
      #03 pc 0000000007aa84ac (il2cpp::vm::Class::Init(Il2CppClass*) at /Applications/Unity/Hub/Editor/2022.2.1f1/Unity.app/Contents/il2cpp/libil2cpp/vm/Class.cpp:1631)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
      #04 pc 0000000007a5eeb0 (il2cpp::vm::Type::GetNameChunkedRecurseInternal(Il2CppType const*, Il2CppTypeNameFormat, bool, void (*)(void*, void*), void*) at /Applications/Unity/Hub/Editor/2022.2.1f1/Unity.app/Contents/il2cpp/libil2cpp/vm/Type.cpp:905)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libil2cpp.so (BuildId: abc4ec56f9ece26c)
      #05 pc 00000000007059b4 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()+1300) (BuildId: c21bf8479a61f97e)
      #06 pc 000000000070a340 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)+116) (BuildId: c21bf8479a61f97e)
      #07 pc 000000000070a2c4 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)+1088) (BuildId: c21bf8479a61f97e)
      #08 pc 000000000070a450 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)+56) (BuildId: c21bf8479a61f97e)
      #09 pc 00000000007047dc (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (MemorySnapshotOperation::CaptureSnapshot(void (*)(unsigned char*, unsigned long, void*))+184) (BuildId: c21bf8479a61f97e)
      #10 pc 00000000007046c8 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)+240) (BuildId: c21bf8479a61f97e)
      #11 pc 0000000000704ef4 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref<char>, bool)+196) (BuildId: c21bf8479a61f97e)
      #12 pc 0000000000704488 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)+108) (BuildId: c21bf8479a61f97e)
      #13 pc 00000000005e6f38 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (GeneralConnection::Poll()+860) (BuildId: c21bf8479a61f97e)
      #14 pc 00000000005e6558 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (PlayerConnection::Poll()+76) (BuildId: c21bf8479a61f97e)
      #15 pc 00000000005d3218 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (BuildId: c21bf8479a61f97e)
      #16 pc 00000000005ca16c (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+92) (BuildId: c21bf8479a61f97e)
      #17 pc 00000000005ca1ac (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+156) (BuildId: c21bf8479a61f97e)
      #18 pc 00000000005ca4a4 (?? at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (PlayerLoop()+324) (BuildId: c21bf8479a61f97e)
      #19 pc 0000000000814374 (Mesh_CUSTOM_GetIndicesImpl(ScriptingBackendNativeObjectPtrOpaque*, int, unsigned char) at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (UnityPlayerLoop()+812) (BuildId: c21bf8479a61f97e)
      #20 pc 0000000000833778 (Resources_CUSTOM_InstanceIDsToValidArray_Internal(void*, int, void*, int) at ??:0)  /data/app/~~JI80C7oUq0U-AsU4cOMzow==/com.default.application-NR5X371w1_cnIu19kjGOaw==/lib/arm64/libunity.so (nativeRender(_JNIEnv*, _jobject*)+84) (BuildId: c21bf8479a61f97e)
      #21 pc 000000000204191c  /memfd:jit-cache (deleted)

JoshPeterson · December 20, 2022, 3:11pm

Thanks for the details. This looks very much like an existing bug report: Unity Issue Tracker - Build crashes on il2cpp::vm::Class::GetVirtualMethod when Building and Running a project using IL2CPP Scripting Backend

We thought that bug was only present in Unity 2021.3, but it looks like you are hitting it in Unity 2022.2 as well.

I’m going to re-open that bug report and see if we can get the same fix to Unity 2022.2 and later.

RodGreen · January 12, 2023, 10:32pm

Kichang-Kim · February 8, 2023, 6:46am

@JoshPeterson Hi. Unity Issue Tracker - IL2CPP build crashes when capturing memory snapshot says it is fixed in Unity 2022.2.5f1, but it still crashes when capturing IL2CPP build.

Thread 0 (crashed)
0 libil2cpp.so 0x0000006fbbd060ac il2cpp::vm::Class::GetVirtualMethod(Il2CppClass*, MethodInfo const*)
1 libil2cpp.so 0x0000006fbbc9486c il2cpp::metadata::GenericMetadata::InflateRGCTXLocked(Il2CppImage const*, unsigned int, Il2CppGenericContext const*, il2cpp::os::FastAutoLock const&)
2 libil2cpp.so 0x0000006fbbd04a28 il2cpp::vm::Class::InitLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)
3 libil2cpp.so 0x0000006fbbd03170 il2cpp::vm::Class::Init(Il2CppClass*)
4 libil2cpp.so 0x0000006fbbcaf9f8 il2cpp::vm::Type::GetNameChunkedRecurseInternal(Il2CppType const*, Il2CppTypeNameFormat, bool, void ()(void, void*), void*)
5 libunity.so 0x0000006fe1960c8c MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()
6 libunity.so 0x0000006fe1965618 profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)
7 libunity.so 0x0000006fe196559c MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)
8 libunity.so 0x0000006fe1965728 MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)
9 libunity.so 0x0000006fe195fab4 MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))
10 libunity.so 0x0000006fe195f9a0 profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)
11 libunity.so 0x0000006fe19601cc profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)
12 libunity.so 0x0000006fe195f760 profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)
13 libunity.so 0x0000006fe183b724 GeneralConnection::Poll()
14 libunity.so 0x0000006fe183ad34 PlayerConnection::Poll()
15 libunity.so 0x0000006fe1827a44 InitPlayerLoopCallbacks()
16 libunity.so 0x0000006fe181dd50 ExecutePlayerLoop(NativePlayerLoopSystem*)
17 libunity.so 0x0000006fe181dd90 ExecutePlayerLoop(NativePlayerLoopSystem*)
18 libunity.so 0x0000006fe181e088 PlayerLoop()
19 libunity.so 0x0000006fe1a79298 UnityPlayerLoop()
20 libunity.so 0x0000006fe1a9ab4c nativeRender(_JNIEnv*, _jobject*)
21 libart.so 0x0000007045d45350
22 jit-cache (deleted) 0x000000009c8712f8 <symbols missing for uuid: 0000000000000000000000000000000000000000>

JoshPeterson · February 8, 2023, 1:38pm

It looks like I was incorrect about this being the same as the bug I linked to, sorry! This looks like a different case of a similar bug. The other bug we have is https://issuetracker.unity3d.com/issues/build-crashes-on-il2cpp-vm-class-getvirtualmethod-when-building-and-running-a-project-using-il2cpp-scripting-backend

This one was originally only corrected in Unity 2021.3, because we thought that it could not happen in later versions. But it turns out that this case you presented with the memory profiler is a new usage that does trigger that problem. We’ve now made the fix in our 2022.2 and later release branches. You should be able to follow that new issue tracker link I’ve posted to get the fix for this when it is released.

Kichang-Kim · February 9, 2023, 2:09am

Thanks for correct issue tracker link! I’ll follow it.

francismoy · March 7, 2023, 11:26am

Hi!

I’m using Unity 2023.1.19f1 and I’m experiencing the crash on an Android build when trying to capture a memory snapshot (Script Debugging is toggled off). Was this supposedly fixed also for Android builds?

This is the crash output:

12:20:54.571 E *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
12:20:54.571 E Version ‘2021.3.19f1 (c9714fde33b6)’, Build type ‘Development’, Scripting Backend ‘il2cpp’, CPU ‘arm64-v8a’
12:20:54.571 E Build fingerprint: ‘Xiaomi/dipper/dipper:9/PKQ1.180729.001/V11.0.6.0.PEAMIXM:user/release-keys’
12:20:54.571 E Revision: ‘0’
12:20:54.571 E ABI: ‘arm64’
12:20:54.571 E Timestamp: 2023-03-07 12:20:54+0100
12:20:54.571 E pid: 15189, tid: 15245, name: UnityMain >>> com.vivastudios.doggie.dog.world.decorating.puzzle.match3 <<<
12:20:54.571 E uid: 10454
12:20:54.571 E signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
12:20:54.571 E x0 0000000000000000 x1 0000000000003b8d x2 0000000000000006 x3 0000000000000008
12:20:54.571 E x4 000000000000000a x5 000000000000000a x6 000000000000000a x7 000000000000000a
12:20:54.571 E x8 0000000000000083 x9 8a23e0935bdaa32d x10 0000000000000000 x11 fffffffc7ffffbdf
12:20:54.571 E x12 0000000000000001 x13 0000000000000099 x14 0000000000000000 x15 0000007e55f69738
12:20:54.571 E x16 0000007f000b22c8 x17 0000007effff0544 x18 0000000000000001 x19 0000000000003b55
12:20:54.571 E x20 0000000000003b8d x21 0000007e55f69b50 x22 0000007c9003c340 x23 0000007c900c1030
12:20:54.571 E x24 0000007e55f6b588 x25 0000007e5d60ea80 x26 0000007e55f6b588 x27 0000007e5d61b000
12:20:54.571 E x28 0000007e5d60ea60 x29 0000007e55f69780
12:20:54.571 E sp 0000007e55f69740 lr 0000007efffe4f0c pc 0000007efffe4f34
12:20:54.571 E
backtrace:
12:20:54.571 E #00 pc 0000000000021f34 /system/lib64/libc.so (abort+116) (BuildId: 532c9c5dca2ba4a1a49fef799c18260d)
12:20:54.571 E #01 pc 00000000012ab77c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::os::CpuInfo::Create()) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #02 pc 00000000010b2610 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::Class::GetValueSize(Il2CppClass*, unsigned int*)+116) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #03 pc 000000000116ad10 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::metadata::FieldLayout::GetTypeSizeAndAlignment(Il2CppType const*)+568) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #04 pc 000000000116af88 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::metadata::FieldLayout::LayoutFields(Il2CppClass const*, bool ()(FieldInfo), unsigned long, unsigned long, unsigned long, unsigned char, il2cpp::metadata::FieldLayout::FieldLayoutData&)+268) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #05 pc 00000000010b47b0 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::LayoutFieldsLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)+692) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #06 pc 00000000010b43ac /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::SetupFieldsLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)+264) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #07 pc 00000000010b18f8 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::Class::SetupFields(Il2CppClass*)+88) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #08 pc 00000000010b17e8 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::Class::GetFields(Il2CppClass*, void**)+80) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.571 E #09 pc 0000000001282514 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp_class_get_fields+28) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.572 E #10 pc 000000000041460c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::CrawlReportedTypes(core::hash_map<ScriptingClassPtr, unsigned int, core::hash, std::__ndk1::equal_to >&)+120) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #11 pc 000000000041490c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()+84) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #12 pc 0000000000418624 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)+116) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #13 pc 00000000004185a8 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)+896) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #14 pc 00000000004186a4 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)+56) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #15 pc 0000000000413b6c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))+184) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #16 pc 0000000000413a58 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)+224) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #17 pc 000000000041430c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)+196) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #18 pc 000000000041382c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)+108) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #19 pc 00000000003026e4 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (GeneralConnection::Poll()+864) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #20 pc 0000000000301c3c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (PlayerConnection::Poll()+76) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #21 pc 00000000002f46dc /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #22 pc 00000000002f6240 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+92) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #23 pc 00000000002f6280 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+156) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #24 pc 00000000002f6520 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (PlayerLoop()+312) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #25 pc 000000000050a75c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (UnityPlayerLoop()+824) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #26 pc 000000000053d894 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (nativeRender(_JNIEnv*, _jobject*)+72) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.572 E #27 pc 000000000007c69c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/oat/arm64/base.odex
12:20:54.847 E Tombstone written to: /storage/emulated/0/Android/data/com.vivastudios.doggie.dog.world.decorating.puzzle.match3/files/tombstone_01
12:20:54.848 E FATAL EXCEPTION: UnityMain
Process: com.vivastudios.doggie.dog.world.decorating.puzzle.match3, PID: 15189
java.lang.Error: *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Version ‘2021.3.19f1 (c9714fde33b6)’, Build type ‘Development’, Scripting Backend ‘il2cpp’, CPU ‘arm64-v8a’
Build fingerprint: ‘Xiaomi/dipper/dipper:9/PKQ1.180729.001/V11.0.6.0.PEAMIXM:user/release-keys’
Revision: ‘0’
ABI: ‘arm64’
Timestamp: 2023-03-07 12:20:54+0100
pid: 15189, tid: 15245, name: UnityMain >>> com.vivastudios.doggie.dog.world.decorating.puzzle.match3 <<<
uid: 10454
signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
x0 0000000000000000 x1 0000000000003b8d x2 0000000000000006 x3 0000000000000008
x4 000000000000000a x5 000000000000000a x6 000000000000000a x7 000000000000000a
x8 0000000000000083 x9 8a23e0935bdaa32d x10 0000000000000000 x11 fffffffc7ffffbdf
x12 0000000000000001 x13 0000000000000099 x14 0000000000000000 x15 0000007e55f69738
x16 0000007f000b22c8 x17 0000007effff0544 x18 0000000000000001 x19 0000000000003b55
x20 0000000000003b8d x21 0000007e55f69b50 x22 0000007c9003c340 x23 0000007c900c1030
x24 0000007e55f6b588 x25 0000007e5d60ea80 x26 0000007e55f6b588 x27 0000007e5d61b000
x28 0000007e5d60ea60 x29 0000007e55f69780
sp 0000007e55f69740 lr 0000007efffe4f0c pc 0000007efffe4f34

backtrace:
#00 pc 0000000000021f34 /system/lib64/libc.so (abort+116) (BuildId: 532c9c5dca2ba4a1a49fef799c18260d)
#01 pc 00000000012ab77c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::os::CpuInfo::Create()) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#02 pc 00000000010b2610 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::Class::GetValueSize(Il2CppClass*, unsigned int*)+116) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#03 pc 000000000116ad10 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::metadata::FieldLayout::GetTypeSizeAndAlignment(Il2CppType const*)+568) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#04 pc 000000000116af88 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::metadata::FieldLayout::LayoutFields(Il2CppClass const*, bool ()(FieldInfo), unsigned long, unsigned long, unsigned long, unsigned char, il2cpp::metadata::FieldLayout::FieldLayoutData&)+268) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#05 pc 00000000010b47b0 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::LayoutFieldsLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)+692) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#06 pc 00000000010b43ac /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::SetupFieldsLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)+264) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#07 pc 00000000010b18f8 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::Class::SetupFields(Il2CppClass*)+88) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#08 pc 00000000010b17e8 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp::vm::Class::GetFields(Il2CppClass*, void**)+80) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
#09 pc 0000000001282514 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libil2cpp.so (il2cpp_class_get_fields+28) (BuildId: 586822940040e3a2fcdbd949d7277855e60737c7)
12:20:54.848 E #10 pc 000000000041460c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::CrawlReportedTypes(core::hash_map<ScriptingClassPtr, unsigned int, core::hash, std::__ndk1::equal_to >&)+120) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#11 pc 000000000041490c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()+84) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#12 pc 0000000000418624 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)+116) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#13 pc 00000000004185a8 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)+896) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#14 pc 00000000004186a4 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)+56) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#15 pc 0000000000413b6c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))+184) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#16 pc 0000000000413a58 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)+224) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#17 pc 000000000041430c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)+196) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#18 pc 000000000041382c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)+108) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#19 pc 00000000003026e4 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (GeneralConnection::Poll()+864) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#20 pc 0000000000301c3c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (PlayerConnection::Poll()+76) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#21 pc 00000000002f46dc /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#22 pc 00000000002f6240 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+92) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#23 pc 00000000002f6280 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (ExecutePlayerLoop(NativePlayerLoopSystem*)+156) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
12:20:54.849 E #24 pc 00000000002f6520 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (PlayerLoop()+312) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#25 pc 000000000050a75c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (UnityPlayerLoop()+824) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#26 pc 000000000053d894 /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/lib/arm64/libunity.so (nativeRender(_JNIEnv*, _jobject*)+72) (BuildId: cbe174e8ee6c063e83d2007c441b839d05b8563b)
#27 pc 000000000007c69c /data/app/com.vivastudios.doggie.dog.world.decorating.puzzle.match3-zdap9yTQSGFA-vkSwafwYA==/oat/arm64/base.odex

at libc.abort(abort:116)
at libil2cpp.il2cpp::os::CpuInfo::Create()(Create:0)
at libil2cpp.il2cpp::vm::Class::GetValueSize(Il2CppClass*, unsigned int*)(GetValueSize:116)
at libil2cpp.il2cpp::metadata::FieldLayout::GetTypeSizeAndAlignment(Il2CppType const*)(GetTypeSizeAndAlignment:568)
at libil2cpp.il2cpp::metadata::FieldLayout::LayoutFields(Il2CppClass const*, bool ()(FieldInfo), unsigned long, unsigned long, unsigned long, unsigned char, il2cpp::metadata::FieldLayout::FieldLayoutData&)(LayoutFields:268)
at libil2cpp.il2cpp::vm::LayoutFieldsLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)(LayoutFieldsLocked:692)
at libil2cpp.il2cpp::vm::SetupFieldsLocked(Il2CppClass*, il2cpp::os::FastAutoLock const&)(SetupFieldsLocked:264)
at libil2cpp.il2cpp::vm::Class::SetupFields(Il2CppClass*)(SetupFields:88)
at libil2cpp.il2cpp::vm::Class::GetFields(Il2CppClass*, void**)(GetFields:80)
at libil2cpp.il2cpp_class_get_fields(il2cpp_class_get_fields:28)
at libunity.MemorySnapshotProcess::CrawlReportedTypes(core::hash_map<ScriptingClassPtr, unsigned int, core::hash, std::__ndk1::equal_to >&)(CrawlReportedTypes:120)
at libunity.MemorySnapshotProcess::AfterScriptingTypesHaveBeenReported()(AfterScriptingTypesHaveBeenReported:84)
at libunity.profiling::memory::ScriptingMemorySnapshot::Capture(profiling::memory::ScriptingMemorySnapshot::SnapshotDescriptor const&, profiling::memory::ScriptingMemorySnapshot::LegacySnapshotStepDescriptor const&)(Capture:116)
at libunity.MemorySnapshotProcess::Process(dynamic_array<unsigned char, 0ul>&)(Process:896)
at libunity.MemorySnapshotProcess::RunSerialization(BufferSerializeState&, unsigned int, dynamic_array<unsigned char, 0ul>&)(RunSerialization:56)
at libunity.MemorySnapshotOperation::CaptureSnapshot(void ()(unsigned char, unsigned long, void*))(CaptureSnapshot:184)
at libunity.profiling::memory::MemorySnapshotManager::StreamMemorySnapshotToEditor(unsigned int)(StreamMemorySnapshotToEditor:224)
at libunity.profiling::memory::MemorySnapshotManager::StartOperation(unsigned int, bool, core::basic_string_ref, bool)(StartOperation:196)
at libunity.profiling::memory::MemorySnapshotManager::OnEditorMemorySnapshotRequestMessage(MessageCallbackData&)(OnEditorMemorySnapshotRequestMessage:108)
at libunity.GeneralConnection::Poll()(Poll:864)
at libunity.PlayerConnection::Poll()(Poll:76)
at libunity.0x2f46dc(Native Method)
at libunity.ExecutePlayerLoop(NativePlayerLoopSystem*)(ExecutePlayerLoop:92)
at libunity.ExecutePlayerLoop(NativePlayerLoopSystem*)(ExecutePlayerLoop:156)
at libunity.PlayerLoop()(PlayerLoop:312)
at libunity.UnityPlayerLoop()(UnityPlayerLoop:824)
at libunity.nativeRender(_JNIEnv*, _jobject*)(nativeRender:72)
at base.0x7c69c(Native Method)

Kichang-Kim · March 8, 2023, 1:21am

Unity 2022.2.9f1 fixes this issue

francismoy · March 8, 2023, 3:36pm

Thanks, but the thing is that I’m locked in production and therefore I need an LTS version.

MartinTilo · March 15, 2023, 9:32pm

The bug tracked here is now fixed in:
2021.3.16f1, 2022.2.5f1, 2023.1.0b6, 2023.2.0a1
So the crash you are experiencing is a different one. Could you please file a bug report for it via the Editor menu item Help > Report A Bug?

kg-lijiacan · July 27, 2023, 11:41am

I reproduced this bug in 2021.3.21f1

9175286–1277573–crash.txt (122 KB)

MartinTilo · July 27, 2023, 5:49pm

Hello,
That looks a lot like the same call stack that @francismoy reported above, i.e. not the same crash as the one at the start of the thread that would have been fixed in this version. I’m unsure if @francismoy filed a bug report about this but I can’t recall seeing anything about that. Could you please file a bug report so that we can investigate and fix this @kg-lijiacan ?

kg-lijiacan · July 28, 2023, 2:29am

Sure, the case number is IN-49387.