Windowmanager由于在android 4.2.2上删除指向InputChannel的指针而崩溃

时间:2016-12-20 07:57:47

标签: android android-windowmanager

我在这个问题上挣扎了一个星期。

*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
Build fingerprint: 'Android/full/generic:4.2.2/JDQ39/eng.nghia.20161128.131302:eng/test-keys'
Revision: '0'
pid: 427, tid: 453, name: WindowManager  >>> system_server <<<
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00000000
    r0 00000000  r1 73612c00  r2 ffffffff  r3 00000000
    r4 00000000  r5 719aba08  r6 73612c00  r7 71a53350
    r8 73612c48  r9 73512de0  sl 719b07f8  fp 73612c5c
    ip 401c6ee8  sp 73612be8  lr 401bbc03  pc 40193e9c  cpsr 20000010
    d0  3f00000000000000  d1  3f00000000000000
    d2  c19c000000000000  d3  3f000000c1a00000
    d4  0000000000000000  d5  3fe1ffffee00000d
    d6  000000018800759c  d7  000000003f000000
    d8  0000000000000000  d9  0000000000000000
    d10 0000000000000000  d11 0000000000000000
    d12 0000000000000000  d13 0000000000000000
    d14 0000000000000000  d15 0000000000000000
    scr 20000010

backtrace:
    #00  pc 00004e9c  /system/lib/libcutils.so (android_atomic_dec+8)
    #01  pc 0000fbff  /system/lib/libutils.so (android::RefBase::decStrong(void const*) const+10)
    #02  pc 0004a8ef  /system/lib/libandroid_runtime.so (android::sp<android::InputChannel>::~sp()+10)
    #03  pc 0005951f  /system/lib/libandroid_runtime.so
    #04  pc 0001e290  /system/lib/libdvm.so (dvmPlatformInvoke+112)
    #05  pc 0004d93d  /system/lib/libdvm.so (dvmCallJNIMethod(unsigned int const*, JValue*, Method const*, Thread*)+400)
    #06  pc 00038db7  /system/lib/libdvm.so (dvmCheckCallJNIMethod(unsigned int const*, JValue*, Method const*, Thread*)+10)
    #07  pc 000276a0  /system/lib/libdvm.so
    #08  pc 0002b6b4  /system/lib/libdvm.so (dvmInterpret(Thread*, Method const*, JValue*)+184)
    #09  pc 000606b1  /system/lib/libdvm.so (dvmCallMethodV(Thread*, Method const*, Object*, bool, JValue*, std::__va_list)+272)
    #10  pc 000606db  /system/lib/libdvm.so (dvmCallMethod(Thread*, Method const*, Object*, JValue*, ...)+20)
    #11  pc 00054ff3  /system/lib/libdvm.so
    #12  pc 0000e408  /system/lib/libc.so (__thread_entry+72)
    #13  pc 0000daf4  /system/lib/libc.so (pthread_create+160)

stack:
         73612ba8  408c91eb  /system/lib/libdvm.so
         73612bac  6cd4fd8c  /dev/ashmem/dalvik-LinearAlloc (deleted)
         73612bb0  00000000  
         73612bb4  6cd4fd8c  /dev/ashmem/dalvik-LinearAlloc (deleted)
         73612bb8  00000000  
         73612bbc  0000006c  
         73612bc0  00000000  
         73612bc4  71991e68  
         73612bc8  408de688  /system/lib/libdvm.so
         73612bcc  00000000  
         73612bd0  40522568  /system/lib/libgui.so
         73612bd4  7195ff30  
         73612bd8  719aba08  
         73612bdc  401beac5  /system/lib/libutils.so (android::VectorImpl::release_storage()+18)
         73612be0  df0027ad  
         73612be4  00000000  
    #00  73612be8  73612c00  [stack:453]
         ........  ........
    #01  73612be8  73612c00  [stack:453]
         73612bec  402b3e94  /system/lib/libandroid_runtime.so
         73612bf0  2fb00001  
         73612bf4  4025a8f3  /system/lib/libandroid_runtime.so (android::sp<android::InputChannel>::~sp()+14)
    #02  73612bf8  71991e68  
         73612bfc  40269523  /system/lib/libandroid_runtime.so
    #03  73612c00  719aba08  
         73612c04  00000000  
         73612c08  00000000  
         73612c0c  00000000  
         73612c10  00000000  
         73612c14  00000000  
         73612c18  00000000  
         73612c1c  00000000  
         73612c20  00000000  
         73612c24  00000000  
         73612c28  00000000  
         73612c2c  00000000  
         73612c30  719b07e8  
         73612c34  6cd50828  /dev/ashmem/dalvik-LinearAlloc (deleted)
         73612c38  719b07e8  
         73612c3c  00000000  
         ........  ........
    #04  73612c48  73512ddc  
         73612c4c  00000001  
         73612c50  412dd4f8  /dev/ashmem/dalvik-heap (deleted)
         73612c54  6e9a3c4c  /data/dalvik-cache/system@framework@framework.jar@classes.dex
         73612c58  00000004  
         73612c5c  40886941  /system/lib/libdvm.so (dvmCallJNIMethod(unsigned int const*, JValue*, Method const*, Thread*)+404)
    #05  73612c60  73512ddc  
         73612c64  6e9a3c4a  /data/dalvik-cache/system@framework@framework.jar@classes.dex
         73612c68  40269481  /system/lib/libandroid_runtime.so
         73612c6c  719b07f8  
         73612c70  6f4fd000  /dev/ashmem/dalvik-aux-structure (deleted)
         73612c74  00000000  
         73612c78  00000000  
         73612c7c  00000000  
         73612c80  b7ee814a  
         73612c84  4016b228  
         73612c88  00000000  
         73612c8c  6e91358f  /data/dalvik-cache/system@framework@framework.jar@classes.dex
         73612c90  408e81b0  /system/lib/libdvm.so
         73612c94  408a2a77  /system/lib/libdvm.so (dvmLookupClass(char const*, Object*, bool)+62)
         73612c98  00000000  
         73612c9c  00000000  
         ........  ........
    #06  73612d78  6f52369c  /dev/ashmem/dalvik-aux-structure (deleted)
         73612d7c  6e70ebf4  /data/dalvik-cache/system@framework@framework.jar@classes.dex
         73612d80  73512df8  
         73612d84  719b07e8  
         73612d88  00002070  
         73612d8c  6e70ebf4  /data/dalvik-cache/system@framework@framework.jar@classes.dex
         73612d90  73512df8  
         73612d94  719b07e8  
         73612d98  40e6a0a8  /dev/ashmem/dalvik-heap (deleted)
         73612d9c  408606a4  /system/lib/libdvm.so
    #07  73612da0  61004d00  /dev/ashmem/dalvik-bitmap-1 (deleted)
         73612da4  719b07e8  
         73612da8  408e3c98  /system/lib/libdvm.so
         73612dac  6ce72e10  /dev/ashmem/dalvik-LinearAlloc (deleted)
         73612db0  fffffe6c  
         73612db4  73612dd4  [stack:453]
         73612db8  73612ea8  [stack:453]
         73612dbc  00000000  
         73612dc0  00000000  
         73612dc4  408646b8  /system/lib/libdvm.so (dvmInterpret(Thread*, Method const*, JValue*)+188)
    #08  73612dc8  00000000  
         73612dcc  00000000  
         73612dd0  00000000  
         73612dd4  00000000  
         73612dd8  73512fe4  
         73612ddc  00000000  
         73612de0  00000000  
         73612de4  00000000  
         73612de8  00000000  
         73612dec  00000000  
         73612df0  00000000  
         73612df4  00000000  
         73612df8  00000000  
         73612dfc  00000000  
         73612e00  00000000  
         73612e04  00000000  
         ........  ........
    #09  73612e58  719b07e8  
         73612e5c  6ce72e10  /dev/ashmem/dalvik-LinearAlloc (deleted)
         73612e60  41101ad8  /dev/ashmem/dalvik-heap (deleted)
         73612e64  73612ea8  [stack:453]
         73612e68  719b07e8  
         73612e6c  408e81b0  /system/lib/libdvm.so
         73612e70  408e84b8  /system/lib/libdvm.so
         73612e74  408e84bc  /system/lib/libdvm.so
         73612e78  00100000  
         73612e7c  719b07e8  
         73612e80  00000016  
         73612e84  408996df  /system/lib/libdvm.so (dvmCallMethod(Thread*, Method const*, Object*, JValue*, ...)+24)
    #10  73612e88  73612ea8  [stack:453]
         73612e8c  73612ea8  [stack:453]
         73612e90  719b07e8  
         73612e94  73612ea8  [stack:453]
         73612e98  408e84b8  /system/lib/libdvm.so
         73612e9c  4016b228  
         73612ea0  4088dff7  /system/lib/libdvm.so
         73612ea4  73612ea8  [stack:453]
    #11  73612ea8  00000000  
         73612eac  00000000  
         73612eb0  00000000  
         73612eb4  646e6957  /dev/ashmem/dalvik-mark-stack (deleted)
         73612eb8  614d776f  /dev/ashmem/dalvik-bitmap-1 (deleted)
         73612ebc  6567616e  /dev/ashmem/dalvik-mark-stack (deleted)
         73612ec0  00000072  
         73612ec4  73612ec1  [stack:453]
         73612ec8  73612eb4  [stack:453]
         73612ecc  a91292d2  
         73612ed0  73612f00  [stack:453]
         73612ed4  71991e28  
         73612ed8  4088df55  /system/lib/libdvm.so
         73612edc  719b07e8  
         73612ee0  4088df55  /system/lib/libdvm.so
         73612ee4  4012e40c  /system/lib/libc.so (__thread_entry+76)
    #12  73612ee8  719b07e8  
         73612eec  73612f00  [stack:453]
         73612ef0  7340ad68  [stack:451]
         73612ef4  71991e28  
         73612ef8  00000078  
         73612efc  4012daf8  /system/lib/libc.so (pthread_create+164)
    #13  73612f00  73612f00  [stack:453]
         73612f04  71991e28  
         73612f08  00000016  
         73612f0c  00000000  
         73612f10  00000000  
         73612f14  00000000  
         73612f18  719b07e8  
         73612f1c  00000000  
         73612f20  00000000  
         73612f24  00000000  
         73612f28  00000000  
         73612f2c  00000000  
         73612f30  00000000  
         73612f34  00000000  
         73612f38  71986858  
         73612f3c  7199c268  

memory near r1:
    73612be0 df0027ad 00000000 73612c00 402b3e94  
    73612bf0 2fb00001 4025a8f3 71991e68 40269523  
    73612c00 719aba08 00000000 00000000 00000000  
    73612c10 00000000 00000000 00000000 00000000  
    73612c20 00000000 00000000 00000000 00000000  
    73612c30 719b07e8 6cd50828 719b07e8 00000000  
    73612c40 73512de8 40857294 73512ddc 00000001  
    73612c50 412dd4f8 6e9a3c4c 00000004 40886941  
    73612c60 73512ddc 6e9a3c4a 40269481 719b07f8  
    73612c70 6f4fd000 00000000 00000000 00000000  
    73612c80 b7ee814a 4016b228 00000000 6e91358f  
    73612c90 408e81b0 408a2a77 00000000 00000000  
    73612ca0 6e91358f 00000000 6cd50320 00000000  
    73612cb0 719b07e8 408a3de5 73512d38 6ce18ed8  
    73612cc0 00000000 410f9008 00000058 00000058  
    73612cd0 412849c0 412849c0 00000058 00000058  

memory near r5:
    719ab9e8 00000010 4016ac74 40e39048 4020af04  
    719ab9f8 719acf30 4016ac00 00000048 000003fb  
    719aba08 401c65a0 00000000 00000000 0000006c  
    719aba18 00000000 00000000 00000000 00000000  
    719aba28 40511b63 40511b39 00000000 00000000  
    719aba38 00000001 43a00000 43a00000 0000004f  
    719aba48 00000055 00000061 00000072 40511ac1  
    719aba58 40512705 40511b0b 40511b19 40511b2b  
    719aba68 40511b43 40511af9 40511acf 40511aeb  
    719aba78 40511add 7198e120 70251118 404e6c98  
    719aba88 70251200 00000001 00000007 00000010  
    719aba98 00000000 404e6c98 7035a2d8 00000001  
    719abaa8 00000007 00000010 00000000 404e6c98  
    719abab8 7024efe8 00000001 00000007 00000010  
    719abac8 00000000 404e6c98 738157e0 00000001  
    719abad8 00000007 00000010 00000000 404e6c98  

memory near r6:
    73612be0 df0027ad 00000000 73612c00 402b3e94  
    73612bf0 2fb00001 4025a8f3 71991e68 40269523  
    73612c00 719aba08 00000000 00000000 00000000  
    73612c10 00000000 00000000 00000000 00000000  
    73612c20 00000000 00000000 00000000 00000000  
    73612c30 719b07e8 6cd50828 719b07e8 00000000  
    73612c40 73512de8 40857294 73512ddc 00000001  
    73612c50 412dd4f8 6e9a3c4c 00000004 40886941  
    73612c60 73512ddc 6e9a3c4a 40269481 719b07f8  
    73612c70 6f4fd000 00000000 00000000 00000000  
    73612c80 b7ee814a 4016b228 00000000 6e91358f  
    73612c90 408e81b0 408a2a77 00000000 00000000  
    73612ca0 6e91358f 00000000 6cd50320 00000000  
    73612cb0 719b07e8 408a3de5 73512d38 6ce18ed8  
    73612cc0 00000000 410f9008 00000058 00000058  
    73612cd0 412849c0 412849c0 00000058 00000058  

memory near r7:
    71a53330 000a0100 000b0100 000a0100 000a0100  
    71a53340 000a0100 000a0100 000b0100 0000014b  
    71a53350 40443418 00000001 70251290 70251388  
    71a53360 00000058 00000000 00000001 00000000  
    71a53370 71a53388 70251300 0000006c 71a53388  
    71a53380 00000001 71a5339c 70251300 00000000  
    71a53390 71a5339c 71a53408 71a53408 00000000  
    71a533a0 71a533b4 71a533dc 00000000 70251960  
    71a533b0 70251960 3f800000 00000000 00000000  
    71a533c0 00000000 3f800000 00000000 00000000  
    71a533d0 00000000 3f800000 000b0110 00000000  
    71a533e0 00000000 00000000 00000000 ffffffff  
    71a533f0 00000000 00000000 00000000 00000000  
    71a53400 00000000 00000001 00000000 00000000  
    71a53410 00000000 00000001 00000000 00000000  
    71a53420 00000000 00000000 00000001 00000000  

memory near r8:
    73612c28 00000000 00000000 719b07e8 6cd50828  
    73612c38 719b07e8 00000000 73512de8 40857294  
    73612c48 73512ddc 00000001 412dd4f8 6e9a3c4c  
    73612c58 00000004 40886941 73512ddc 6e9a3c4a  
    73612c68 40269481 719b07f8 6f4fd000 00000000  
    73612c78 00000000 00000000 b7ee814a 4016b228  
    73612c88 00000000 6e91358f 408e81b0 408a2a77  
    73612c98 00000000 00000000 6e91358f 00000000  
    73612ca8 6cd50320 00000000 719b07e8 408a3de5  
    73612cb8 73512d38 6ce18ed8 00000000 410f9008  
    73612cc8 00000058 00000058 412849c0 412849c0  
    73612cd8 00000058 00000058 00000004 6f4fd000  
    73612ce8 73612d54 6cd5083c 00000001 40e6a0a8  
    73612cf8 00000001 6cd50828 00000a80 6ea4066a  
    73612d08 0000002f 00000000 73612d54 408a4c99  
    73612d18 6ea4066a 40e6a0a8 6ea4066a 00009634  

memory near r9:
    73512dc0 00000000 73512df4 73512df8 6e70ebf4  
    73512dd0 6cd50828 00000000 00000000 2fb00001  
    73512de0 1f600005 73512e14 6f3b1740 6cd51128  
    73512df0 6e70ebf4 00000000 412dd4f8 412dd558  
    73512e00 73512e50 6f3b17b6 6d09ef70 6f3b1740  
    73512e10 00000000 412dd558 00000000 412dd7a0  
    73512e20 00000000 412dd4f8 40f01348 00000000  
    73512e30 ffff0000 00000014 412dd4d8 73512e70  
    73512e40 6f3bb74e 6d09efe8 6f3b17b6 00000000  
    73512e50 412dd4f8 412dd4d8 00000000 73512eb0  
    73512e60 6f3b62d4 6d000f18 6f3bb74e 00000000  
    73512e70 4113e3e0 4113eaf8 00000000 412845c0  
    73512e80 412dd4d8 4119c100 4114bc88 4121ac08  
    73512e90 411dbe48 00000000 000001ab 73512ed0  
    73512ea0 6f3b5390 6cfffc10 6f3b62d4 00000000  
    73512eb0 411dbe48 00000000 000001ab 73512f84  

memory near sl:
    719b07d8 00000004 00000000 71945648 00000453  
    719b07e8 6e66f410 73512ddc 6cd51128 6ed9e000  
    719b07f8 00000000 00000000 73612da0 00000000  
    719b0808 73612dd4 0000000e 00000000 40857400  
    719b0818 00000000 00000000 6c0cd870 7350f300  
    719b0828 00000000 00000000 00000001 00004000  
    719b0838 00000000 71991e28 40857400 4085c2c0  
    719b0848 00000000 408603bc 40860430 408602e0  
    719b0858 40860300 4086035c 00000000 00000000  
    719b0868 760bc2d8 00000028 00000000 00000000  
    719b0878 00000000 00000000 00002000 408e88d4  
    719b0888 00000000 6cda2758 00000003 7199c060  
    719b0898 00000001 00000040 00000200 00000000  
    719b08a8 00000001 6dde757c 6dde757c 00000001  
    719b08b8 6dd832bc 6cda2758 b348126f b3481a40  
    719b08c8 b36a5ee2 b39a1104 b33bf6a6 b3f33bce  

memory near fp:
    73612c3c 00000000 73512de8 40857294 73512ddc  
    73612c4c 00000001 412dd4f8 6e9a3c4c 00000004  
    73612c5c 40886941 73512ddc 6e9a3c4a 40269481  
    73612c6c 719b07f8 6f4fd000 00000000 00000000  
    73612c7c 00000000 b7ee814a 4016b228 00000000  
    73612c8c 6e91358f 408e81b0 408a2a77 00000000  
    73612c9c 00000000 6e91358f 00000000 6cd50320  
    73612cac 00000000 719b07e8 408a3de5 73512d38  
    73612cbc 6ce18ed8 00000000 410f9008 00000058  
    73612ccc 00000058 412849c0 412849c0 00000058  
    73612cdc 00000058 00000004 6f4fd000 73612d54  
    73612cec 6cd5083c 00000001 40e6a0a8 00000001  
    73612cfc 6cd50828 00000a80 6ea4066a 0000002f  
    73612d0c 00000000 73612d54 408a4c99 6ea4066a  
    73612d1c 40e6a0a8 6ea4066a 00009634 6ed9e000  
    73612d2c 00000001 6e402ee0 4016b228 40d78d70  

memory near ip:
    401c6ec8 401452c1 40136f64 4015a12c 40158e34  
    401c6ed8 40138c10 40142f51 40144709 40193e5c  
    401c6ee8 40193e94 40193e38 40193ed0 40137044  
    401c6ef8 40158bd1 401414fd 4014547d 4014540d  
    401c6f08 4014503d 401758e7 401758d9 40141fd7  
    401c6f18 4013bff3 4014a9ad 40136e58 40136a7c  
    401c6f28 40145605 40145711 4019539d 4013ed8d  
    401c6f38 4012d144 4012d18c 4012d218 4012da54  
    401c6f48 4012d174 40136c0c 4012e9f0 40195709  
    401c6f58 40136d08 4012d0f0 4013beb9 4012e098  
    401c6f68 4012e4cc 4012ebd0 4012e0d4 4012e0f0  
    401c6f78 401377f0 40137780 40158efc 40158fd8  
    401c6f88 401374a8 40136d9c 4013bf8f 4012cf4d  
    401c6f98 40136dd4 40138978 401de218 401de464  
    401c6fa8 401e017c 40136db8 4013d9b1 4013eb1d  
    401c6fb8 4013e3d5 4013d2bd 4013d2e9 4013dfe9  

memory near sp:
    73612bc8 408de688 00000000 40522568 7195ff30  
    73612bd8 719aba08 401beac5 df0027ad 00000000  
    73612be8 73612c00 402b3e94 2fb00001 4025a8f3  
    73612bf8 71991e68 40269523 719aba08 00000000  
    73612c08 00000000 00000000 00000000 00000000  
    73612c18 00000000 00000000 00000000 00000000  
    73612c28 00000000 00000000 719b07e8 6cd50828  
    73612c38 719b07e8 00000000 73512de8 40857294  
    73612c48 73512ddc 00000001 412dd4f8 6e9a3c4c  
    73612c58 00000004 40886941 73512ddc 6e9a3c4a  
    73612c68 40269481 719b07f8 6f4fd000 00000000  
    73612c78 00000000 00000000 b7ee814a 4016b228  
    73612c88 00000000 6e91358f 408e81b0 408a2a77  
    73612c98 00000000 00000000 6e91358f 00000000  
    73612ca8 6cd50320 00000000 719b07e8 408a3de5  
    73612cb8 73512d38 6ce18ed8 00000000 410f9008  

code around pc:
    40193e7c e1930f9f e2801001 e1832f91 e3520000  
    40193e8c 1afffffa e12fff1e e1a03000 e3e02000  
    40193e9c e1930f9f e080c002 e1831f9c e3510000  
    40193eac 1afffffa e12fff1e e1a03000 e1910f9f  
    40193ebc e000c003 e1812f9c e3520000 1afffffa  
    40193ecc e12fff1e e1a03000 e1910f9f e180c003  
    40193edc e1812f9c e3520000 1afffffa e12fff1e  
    40193eec 4605b538 42a16884 f06fdd2a 2c004340  
    40193efc 2404bf08 bfd84299 dd0e461a 0060e022  
    40193f0c bfac42a0 24012400 bfc84290 0401f044  
    40193f1c bf0c2c00 f06f4604 428c4440 f06fdbef  
    40193f2c 428c4140 6828d80e b92000a1 f7fe4608  
    40193f3c b918ead6 f7fee006 b130eb0e 602860ac  
    40193f4c bd382000 30fff04f f04fbd38 bd3830ff  
    40193f5c 210c2001 bf76f005 4604b510 f7fe6800  
    40193f6c 4620ea8e 4010e8bd bf5cf005 460eb570  

code around lr:
    401bbbe0 68e34790 d50407da b11068a0 68536802  
    401bbbf0 bd384798 4605b570 460e6844 f7fd4620  
    401bbc00 2801ea86 68a0d10b 68ca6801 47904631  
    401bbc10 07d868e3 6828d403 46286843 46204798  
    401bbc20 e8bd4631 f7ff4070 0000bfbd 4604b570  
    401bbc30 460e3004 e9daf7fd 1c69e005 46224628  
    401bbc40 ea6af7fd 6825b160 bfd42d00 23012300  
    401bbc50 5f80f1b5 2300bf0c 0301f003 d1ec2b00  
    401bbc60 5180f1a5 eb404248 2d000301 461dbfcc  
    401bbc70 0501f043 d0262d00 68e2b11b d52607d2  
    401bbc80 68e3e002 d50607db 463268a0 690b6801  
    401bbc90 47982101 4620b9d8 f7ff4631 2000ff83  
    401bbca0 68a0bd70 68034631 479068da f1b0e00b  
    401bbcb0 d10a5f80 f04f4621 f7fd4070 68a0ea22  
    401bbcc0 68916802 20014788 2001bd70 4620bd70  
    401bbcd0 e98cf7fd 1e414b02 d8e84299 bf00e7e1

我追踪了

的地址
#02  pc 0004a8ef  /system/lib/libandroid_runtime.so (android::sp<android::InputChannel>::~sp()+10)
#03  pc 0005951f  /system/lib/libandroid_runtime.so

发现崩溃发生在framework / base / core / jni / android_view_Surface.cpp的nativeUnlockCanvasAndPost函数中。 在此函数中,它声明了Surface的局部变量,当函数退出时,系统删除局部变量导致删除指向InputChannel的强指针。 我检查了logcat并找不到任何可疑点,WindowMnager,InputManager,InputReader,InputDispatcher已经启动。 我尝试使用InputChannel_test命令进行测试,所有测试用例都已通过。

请帮我指出解决这个问题的一些要点。 提前谢谢

0 个答案:

没有答案
相关问题