[BUG] Google Camera app segfaults on laucnh

Open IsaacOscar opened this issue 4 years ago • 0 comments

What happened? My Camera app (com.google.android.GoogleCamera) segfaults uppon starting whenever I have any modules loaded. Even a trivial one like this:

public class TestModule implements IXposedHookZygoteInit {
    @Override public void initZygote(IXposedHookZygoteInit.StartupParam startupParam) { } }

Xposed Module List Just my pkg.testmodule with the above code.

Magisk Module List Riru and Riru - EdXposed

Versions

Device: Pixel 4a Build Number: RQ2A.210505.002

Android: 11

Magisk: 23.0

Riru: v25.4.4r426.05efc94

EdXposed: 0.5.2.2_4683-master

Related Logs The relavent part of "adb logcat" is:

D/Zygote  (  986): Forked child process 4880
I/am_proc_start( 1676): [User=0,PID=4880,UID=10191,Process Name=com.google.android.GoogleCamera,Type=pre-top-activity,Component={com.google.android.GoogleCamera/com.android.camera.CameraLauncher}]
I/ActivityManager( 1676): Start proc 4880:com.google.android.GoogleCamera/u0a191 for pre-top-activity {com.google.android.GoogleCamera/com.android.camera.CameraLauncher}
E/id.GoogleCamer( 4880): Not starting debugger since process cannot load the jdwp agent.
I/EdXposed( 4880): Start to install inline hooks
I/EdXposed( 4880): Using api level 30
I/EdXposed( 4880): Start to install Riru hook
I/EdXposed( 4880): Riru hooks installed
I/EdXposed( 4880): ART hooks installed
I/EdXposed( 4880): Loading modules for com.google.android.GoogleCamera
I/EdXposed-Bridge( 4880): Loading modules from /data/app/~~gZhixBA2n3g-EIHgCUd5cQ==/pkg.testmodule-vIv0RB9m5hXad-gwkNqtHg==/base.apk
I/EdXposed-Bridge( 4880):   Loading class pkg.testmodule.TestModule
W/Riru64  ( 4880): 544a is too old to hide so
I/am_proc_bound( 1676): [User=0,PID=4880,Process Name=com.google.android.GoogleCamera]
I/id.GoogleCamer( 4880): The ClassLoaderContext is a special shared library.
D/nativeloader( 4880): classloader namespace configured for unbundled vendor apk. library_path=/data/app/~~BEi3Zr_85_TV0c1T0TT8fw==/com.google.android.GoogleCamera-k6suFXNQM6X9P3lMhN1YiA==/lib/arm64:/data/app/~~BEi3Zr_85_TV0c1T0TT8fw==/com.google.android.GoogleCamera-k6suFXNQM6X9P3lMhN1YiA==/base.apk!/lib/arm64-v8a:/data/app/~~BEi3Zr_85_TV0c1T0TT8fw==/com.google.android.GoogleCamera-k6suFXNQM6X9P3lMhN1YiA==/split_config.arm64_v8a.apk!/lib/arm64-v8a:/data/app/~~BEi3Zr_85_TV0c1T0TT8fw==/com.google.android.GoogleCamera-k6suFXNQM6X9P3lMhN1YiA==/split_config.en.apk!/lib/arm64-v8a:/data/app/~~BEi3Zr_85_TV0c1T0TT8fw==/com.google.android.GoogleCamera-k6suFXNQM6X9P3lMhN1YiA==/split_config.xxhdpi.apk!/lib/arm64-v8a:/vendor/lib64
W/id.GoogleCamer( 4880): JIT profile information will not be recorded: profile file does not exist.
I/chatty  ( 4880): uid=10191(com.google.android.GoogleCamera) identical 1 line
W/id.GoogleCamer( 4880): JIT profile information will not be recorded: profile file does not exist.
D/NetworkSecurityConfig( 4880): No Network Security Config specified, using platform default
F/libc    ( 4880): Fatal signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0x7d6285ed60 in tid 4880 (id.GoogleCamera), pid 4880 (id.GoogleCamera)
D/NetworkSecurityConfig( 4880): No Network Security Config specified, using platform default
I/crash_dump64( 4915): obtaining output fd from tombstoned, type: kDebuggerdTombstone
I/tombstoned(  974): received crash request for pid 4880
I/crash_dump64( 4915): performing dump of process 4880 (target tid = 4880)
F/DEBUG   ( 4915): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
F/DEBUG   ( 4915): Build fingerprint: 'google/sunfish/sunfish:11/RQ2A.210505.002/7246365:user/release-keys'
F/DEBUG   ( 4915): Revision: 'MP1.0'
F/DEBUG   ( 4915): ABI: 'arm64'
F/DEBUG   ( 4915): Timestamp: 2021-06-30 14:34:56+1000
F/DEBUG   ( 4915): pid: 4880, tid: 4880, name: id.GoogleCamera  >>> com.google.android.GoogleCamera <<<
F/DEBUG   ( 4915): uid: 10191
F/DEBUG   ( 4915): signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0x7d6285ed60
F/DEBUG   ( 4915):     x0  0000007fcbe0a8d0  x1  b400007cd27ed260  x2  0000000000000000  x3  0000000000000010
F/DEBUG   ( 4915):     x4  0000000000000000  x5  0000007c7202e1a0  x6  6c2f7472612e6469  x7  62696c2f34366269
F/DEBUG   ( 4915):     x8  4e62aff34ed10823  x9  4e62aff34ed10823  x10 00000000f66ff12b  x11 00000000d27ed290
F/DEBUG   ( 4915):     x12 000000002768ed9b  x13 0000007c7223f49c  x14 0000007c7223f4fc  x15 000000000000000c
F/DEBUG   ( 4915):     x16 0000007c5ec3df18  x17 0000007f04600b8c  x18 0000007f08ebc000  x19 0000000000013b7f
F/DEBUG   ( 4915):     x20 b400007d327f1df0  x21 af82bf7b7c11beb6  x22 000000003229e6f3  x23 00000000bf806bd9
F/DEBUG   ( 4915):     x24 00000000ffffe9a3  x25 0000000060768d76  x26 00000000cbe46a31  x27 b400007d6285ed60
F/DEBUG   ( 4915):     x28 0000007fcbe0abc0  x29 0000007f07dc7000
F/DEBUG   ( 4915):     lr  0000007c5ec281bc  sp  0000007fcbe0a950  pc  0000007c5ec281bc  pst 0000000060000000
F/DEBUG   ( 4915): backtrace:
F/DEBUG   ( 4915):       #00 pc 00000000000571bc  /data/app/~~BEi3Zr_85_TV0c1T0TT8fw==/com.google.android.GoogleCamera-k6suFXNQM6X9P3lMhN1YiA==/split_config.arm64_v8a.apk (offset 0x3d4d000)
I/Zygote  (  986): Process 4880 exited due to signal 11 (Segmentation fault)
I/ActivityManager( 1676): Process com.google.android.GoogleCamera (pid 4880) has died: fg  TOP 
I/am_proc_died( 1676): [User=0,PID=4880,Process Name=com.google.android.GoogleCamera,OomAdj=0,ProcState=2]
I/libprocessgroup( 1676): Successfully killed process cgroup uid 10191 pid 4880 in 0ms

I've attached the full log, both during startup and when launching the camera app. (Note: the issue template said I should use a "debug" version to get proper logs, I don't know what this meant).

Jun 30 '21 04:06 IsaacOscar