AAudio crashed on OPPO CPH1831 android 8.1.0 after unplugging the Headset

[jpxiong]

1. Android Model: OPPO CPH1831 android 8.1.0

2. Issue: crash

3. Step: recording audio by AAudio -> unplugging the headset

4. Explain: After receive the broadcast of unplugging the headset, I will close the stream manually to avoid leak. I only found the crash issue on OPPO CPH1831 android 8.1.0 at present.

5. logs:

--------- beginning of crash
09-30 10:32:35.733 F/libc    (23762): invalid pthread_t 0x5cd2 passed to libc
09-30 10:32:35.753 W//system/bin/hw/android.hidl.allocator@1.0-service(  705): ashmem_create_region(4096) returning hidl_memory(0x7f5482c510, 4096)
09-30 10:32:35.881 F/libc    (23762): Fatal signal 6 (SIGABRT), code -6 in tid 23762 (ndroid.test.demo), pid 23762 (ndroid.test.demo)
09-30 10:32:35.918 I/chatty  (  705): uid=1000(system) allocator@1.0-s identical 5 lines
09-30 10:32:35.949 W//system/bin/hw/android.hidl.allocator@1.0-service(  705): ashmem_create_region(4096) returning hidl_memory(0x7f5482c510, 4096)
09-30 10:32:36.030 I/chatty  (25393): uid=10140(com.test.demo) expire 2 lines
09-30 10:32:36.031 I//system/bin/tombstoned( 1220): received crash request for pid 23762
09-30 10:32:36.033 F/DEBUG   (25393): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
09-30 10:32:36.033 F/DEBUG   (25393): Build fingerprint: 'OPPO/CPH1831/CPH1831:8.1.0/OPM1.171019.011/1524655066:user/release-keys'
09-30 10:32:36.033 F/DEBUG   (25393): Revision: '0'
09-30 10:32:36.033 F/DEBUG   (25393): ABI: 'arm'
09-30 10:32:36.033 F/DEBUG   (25393): pid: 23762, tid: 23762, name: ndroid.test.demo >>> com.test.demo <<<
09-30 10:32:36.033 F/DEBUG   (25393): signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
09-30 10:32:36.042 F/DEBUG   (25393): Abort message: 'decStrong() called on 0xb3e0f450 too many times'
09-30 10:32:36.042 F/DEBUG   (25393):     r0 00000000  r1 00005cd2  r2 00000006  r3 00000008
09-30 10:32:36.042 F/DEBUG   (25393):     r4 00005cd2  r5 00005cd2  r6 f08a8bec  r7 0000010c
09-30 10:32:36.042 F/DEBUG   (25393):     r8 00000000  r9 00000000  sl f08a8d10  fp c9d90cc4
09-30 10:32:36.042 F/DEBUG   (25393):     ip 00000000  sp f08a8bd8  lr ee8a18ed  pc ee89b498  cpsr 200e0030
09-30 10:32:36.054 F/DEBUG   (25393):
09-30 10:32:36.054 F/DEBUG   (25393): backtrace:
09-30 10:32:36.054 F/DEBUG   (25393):     #00 pc 0001a498  /system/lib/libc.so (abort+63)
09-30 10:32:36.054 F/DEBUG   (25393):     #01 pc 00047dd1  /system/lib/libc.so (__pthread_internal_find(long)+96)
09-30 10:32:36.054 F/DEBUG   (25393):     #02 pc 00047cdd  /system/lib/libc.so (pthread_gettid_np+2)
09-30 10:32:36.054 F/DEBUG   (25393):     #03 pc 00048053  /system/lib/libc.so (pthread_kill+18)
09-30 10:32:36.054 F/DEBUG   (25393):     #05 pc 00018a64  /system/lib/libc.so
09-30 10:32:36.054 F/DEBUG   (25393):     #06 pc 0001a494  /system/lib/libc.so (abort+59)
09-30 10:32:36.054 F/DEBUG   (25393):     #07 pc 00006581  /system/lib/liblog.so (__android_log_assert+160)
09-30 10:32:36.054 F/DEBUG   (25393):     #08 pc 0000abbb  /system/lib/libutils.so (android::RefBase::decStrong(void const*) const+94)
09-30 10:32:36.054 F/DEBUG   (25393):     #09 pc 00014be5  /system/lib/libaaudio.so (aaudio::AudioStreamRecord::close()+68)
09-30 10:32:36.054 F/DEBUG   (25393):     #10 pc 00013fa9  /system/lib/libaaudio.so (AAudioStream_close+28)

[philburk]

It looks like the recording stream is being closed by two different threads at the same time. Are you running an example program from AAudio or Oboe? Or are you running your own program? Note that when a headset is disconnected the error callback is called and Oboe will automatically close the stream for you. So you do not have to close it in your application. But you may want to open a new stream in the on-air after close method. Phil Burk

…

On Mon, Oct 8, 2018, 2:53 AM jpxiong ***@***.***> wrote: 1. Android Model: OPPO CPH1831 android 8.1.0 2. issue: crash 3. Step: recording audio by AAudio -> unplugging the headset 4. logs: --------- beginning of crash 09-30 10:32:35.733 F/libc (23762): invalid pthread_t 0x5cd2 passed to libc 09-30 10:32:35.753 ***@***.***( 705): ashmem_create_region(4096) returning hidl_memory(0x7f5482c510, 4096) 09-30 10:32:35.881 F/libc (23762): Fatal signal 6 (SIGABRT), code -6 in tid 23762 (ndroid.test.demo), pid 23762 (ndroid.test.demo) 09-30 10:32:35.918 I/chatty ( 705): uid=1000(system) ***@***.*** identical 5 lines 09-30 10:32:35.949 ***@***.***( 705): ashmem_create_region(4096) returning hidl_memory(0x7f5482c510, 4096) 09-30 10:32:36.030 I/chatty (25393): uid=10140(com.test.demo) expire 2 lines 09-30 10:32:36.031 I//system/bin/tombstoned( 1220): received crash request for pid 23762 09-30 10:32:36.033 F/DEBUG (25393): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** 09-30 10:32:36.033 F/DEBUG (25393): Build fingerprint: 'OPPO/CPH1831/CPH1831:8.1.0/OPM1.171019.011/1524655066:user/release-keys' 09-30 10:32:36.033 F/DEBUG (25393): Revision: '0' 09-30 10:32:36.033 F/DEBUG (25393): ABI: 'arm' 09-30 10:32:36.033 F/DEBUG (25393): pid: 23762, tid: 23762, name: ndroid.test.demo >>> com.test.demo <<< 09-30 10:32:36.033 F/DEBUG (25393): signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr -------- 09-30 10:32:36.042 F/DEBUG (25393): Abort message: 'decStrong() called on 0xb3e0f450 too many times' 09-30 10:32:36.042 F/DEBUG (25393): r0 00000000 r1 00005cd2 r2 00000006 r3 00000008 09-30 10:32:36.042 F/DEBUG (25393): r4 00005cd2 r5 00005cd2 r6 f08a8bec r7 0000010c 09-30 10:32:36.042 F/DEBUG (25393): r8 00000000 r9 00000000 sl f08a8d10 fp c9d90cc4 09-30 10:32:36.042 F/DEBUG (25393): ip 00000000 sp f08a8bd8 lr ee8a18ed pc ee89b498 cpsr 200e0030 09-30 10:32:36.054 F/DEBUG (25393): 09-30 10:32:36.054 F/DEBUG (25393): backtrace: 09-30 10:32:36.054 F/DEBUG (25393): #00 pc 0001a498 /system/lib/libc.so (abort+63) 09-30 10:32:36.054 F/DEBUG (25393): #1 pc 00047dd1 /system/lib/libc.so (__pthread_internal_find(long)+96) 09-30 10:32:36.054 F/DEBUG (25393): #2 pc 00047cdd /system/lib/libc.so (pthread_gettid_np+2) 09-30 10:32:36.054 F/DEBUG (25393): #3 pc 00048053 /system/lib/libc.so (pthread_kill+18) 09-30 10:32:36.054 F/DEBUG (25393): #5 pc 00018a64 /system/lib/libc.so 09-30 10:32:36.054 F/DEBUG (25393): #6 pc 0001a494 /system/lib/libc.so (abort+59) 09-30 10:32:36.054 F/DEBUG (25393): #7 pc 00006581 /system/lib/liblog.so (__android_log_assert+160) 09-30 10:32:36.054 F/DEBUG (25393): #8 pc 0000abbb /system/lib/libutils.so (android::RefBase::decStrong(void const*) const+94) 09-30 10:32:36.054 F/DEBUG (25393): #9 pc 00014be5 /system/lib/libaaudio.so (aaudio::AudioStreamRecord::close()+68) 09-30 10:32:36.054 F/DEBUG (25393): #10 pc 00013fa9 /system/lib/libaaudio.so (AAudioStream_close+28) — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#237>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AE76aWGZ283ibws4jrwc_zjaLJen-Czwks5uiyCqgaJpZM4XMmUt> .