Native Android crash in OkHttp 2.2.0

[ayjindal]

Using OkHttp 2.2, getting a native crash with the following backtrace. This might be related to #1338, the difference being in the backtrace that shows dlmalloc as the cause, instead of dlfree as in 1338.

---

UUID: 35d6876c-60a2-47ad-a4de-5c792e00870f
Build fingerprint: 'Sony/C6902/C6902:4.4.4/14.4.A.0.157/Yv__jQ:user/release-keys'
Revision: '0'
pid: 9570, tid: 16160, name: pool-75-thread- >>> to.go <<<
signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
Abort message: 'heap corruption detected by dlmalloc'
r0 00000000 r1 00003f20 r2 00000006 r3 00000000
r4 00000006 r5 00000000 r6 00003f20 r7 0000010c
r8 0000711c r9 0000063d sl 00000004 fp 76773059
ip 00000000 sp 8087b900 lr 400a516d pc 400b4118 cpsr 000f0010
d0 0000000000000000 d1 0000000000000000
d2 0000000000000000 d3 0000000000000000
d4 000000000000005e d5 0000000000000007
d6 3735313731343122 d7 550ac56d35353338
d8 4274c3210b77f000 d9 0000000000000000
d10 0000000000000000 d11 0000000000000000
d12 0000000000000000 d13 0000000000000000
d14 0000000000000000 d15 0000000000000000
d16 726f632070616568 d17 206e6f6974707572
d18 7094605e64ee8867 d19 7393f38faeed20b5
d20 ce207393f38faeed d21 3ad4fa314b453a18
d22 a8ab0d77b36e660c d23 394ef71e557a18b7
d24 3fc7467373b0ee8f d25 3fc2f112df3e5244
d26 3fe62e42fefa39ef d27 0000000000000000
d28 0000000000000000 d29 0000000000000000
d30 0000000000000000 d31 0000000000000000
scr 80000010

backtrace:
#00 pc 00022118 /system/lib/libc.so (tgkill+12)
#1 pc 00013169 /system/lib/libc.so (pthread_kill+48)
#2 pc 0001337d /system/lib/libc.so (raise+10)
#3 pc 000120b3 /system/lib/libc.so
#4 pc 000219cc /system/lib/libc.so (abort+4)
#5 pc 00012b99 /system/lib/libc.so
#6 pc 0000f2a5 /system/lib/libc.so
#7 pc 000101b1 /system/lib/libc.so (dlmalloc+604)
#8 pc 0000dcdf /system/lib/libc.so (malloc+10)
#9 pc 000832c1 /system/lib/libcrypto.so
#10 pc 00083749 /system/lib/libcrypto.so (CRYPTO_malloc+76)
#11 pc 0002f4af /system/lib/libssl.so (ssl_parse_serverhello_tlsext+750)
#12 pc 00018129 /system/lib/libssl.so (ssl3_get_server_hello+1008)
#13 pc 00017527 /system/lib/libssl.so (ssl3_connect+566)
#14 pc 00027d4b /system/lib/libssl.so (SSL_do_handshake+50)
#15 pc 0000aedd /system/lib/libjavacrypto.so
#16 pc 0002034c /system/lib/libdvm.so (dvmPlatformInvoke+112)
#17 pc 00050fcf /system/lib/libdvm.so (dvmCallJNIMethod(unsigned int const_, JValue_, Method const_, Thread_)+398)
#18 pc 000297e0 /system/lib/libdvm.so
#19 pc 00030c6c /system/lib/libdvm.so (dvmMterpStd(Thread*)+76)
#20 pc 0002e304 /system/lib/libdvm.so (dvmInterpret(Thread_, Method const_, JValue*)+184)
#21 pc 00063431 /system/lib/libdvm.so (dvmCallMethodV(Thread_, Method const_, Object_, bool, JValue_, std::va_list)+336)
#22 pc 00063455 /system/lib/libdvm.so (dvmCallMethod(Thread, Method const, Object_, JValue_, ...)+20)
#23 pc 00058133 /system/lib/libdvm.so
#24 pc 0000d258 /system/lib/libc.so (__thread_entry+72)
#25 pc 0000d3f0 /system/lib/libc.so (pthread_create+240)

code around pc:
400b40f8 e8bd00f0 e3700a01 912fff1e e2600000
400b4108 ea006e3c e92d50f0 e3a07f43 ef000000
400b4118 e8bd50f0 e3700a01 912fff1e e2600000
400b4128 ea006e34 e92d50f0 e3a070ee ef000000
400b4138 e8bd50f0 e3700a01 912fff1e e2600000
400b4148 ea006e2c f200429a bf0080b9 f040f891
400b4158 4001e92d f2c02a04 2a1080a5 8093f2c0
400b4168 f2c02a20 2a408088 ea4fdb7f f1bc1c92
400b4178 dd6c0f0a 0600e92d 0f40f1bc f500dd4a
400b4188 f5016e80 ebae7920 ea4f0e09 ea4f5e4e
400b4198 f50e5e5e ebbc7e20 dd3b1f9e f04fbfc4
400b41a8 ebd9090a dd35199e 0a0eeb01 0a3ff02a
400b41b8 1c9eebac bfd245e1 0c09ebac f04f46e1
400b41c8 f8910c00 f891f240 f921f280 f921028d
400b41d8 f8da428d f1b93000 f9000901 f900028d
400b41e8 f10a428d d1ee0a40 0f00f1bc f5bcd02b

code around lr:
400a514c 447b4b13 42b3e010 6a1ed10e 44784811
400a515c ec84f7fb ea0ef00d 46224631 efd0f00e
400a516c d00a3001 e00b2400 2b00681b 480ad1eb
400a517c 44782403 ec72f7fb f001e002 6804fa23
400a518c fa20f001 46206005 bf00bd70 0003b266
400a519c 0003b25a 0003b252 0003b22e bf7ef7ff
400a51ac 4a3e4b3d e92d447b b08b43f0 4606589c
400a51bc 6823460d 930946a1 fa04f001 8000f8d0
400a51cc d0482d00 f0104628 280ff937 d8444604
400a51dc ffe4f7ff d1064286 4629200f e8d8f00d
400a51ec d03c2800 482ee02e f7fb4478 482debb6
400a51fc e0154478 d11342b0 482b6a06 f7fb4478
400a520c 4a2aec2e 46332120 a801447a fa0af013
400a521c a8012101 fd28f01a 46061c42 e011d104
400a522c 28006800 e02cd1e6 46294630 f00d4622
400a523c 1c43e914 d11e4607 f9c4f001 29046801

[swankjesse]

Fixed in 2.3.

[ayjindal]

@swankjesse Thanks for the confirmation. Could you please tell if there is a consistent way to reproduce this crash in 2.2 so that we can verify that it doesn't occur for us after moving to 2.3?

Also, are there any other known issues that we should be wary of, after moving to 2.3?

[swankjesse]

Reproduce by doing HTTPS on an Android 4.4 device against a site like google.com that supports ALPN to negotiate SPDY and HTTP/2.

As far as I know there are no regressions in 2.3. The full bug database is available to browse if you like!

[ppamorim]

+1 it happens at Moto X API 22 too