[Android] Scudo ERROR: corrupted chunk header #286
Description
OS: LineageOS 20 (Android 13)
I have been getting this bug report from one user for quite some time now, but the crash was vague (signal 11 without any message). After updating the library to the latest version, a clear crash message appeared: Scudo ERROR: corrupted chunk header:
01-29 18:44:07.039 19798 19798 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
01-29 18:44:07.039 19798 19798 F DEBUG : LineageOS Version: '20.0-20240312-microG-FP3'
01-29 18:44:07.039 19798 19798 F DEBUG : Build fingerprint: 'Fairphone/FP3/FP3:13/6.A.023.1/gms-497e9bef:user/release-keys'
01-29 18:44:07.039 19798 19798 F DEBUG : Revision: '0'
01-29 18:44:07.039 19798 19798 F DEBUG : ABI: 'arm64'
01-29 18:44:07.039 19798 19798 F DEBUG : Timestamp: 2025-01-29 18:44:06.234891743+0100
01-29 18:44:07.039 19798 19798 F DEBUG : Process uptime: 231s
01-29 18:44:07.039 19798 19798 F DEBUG : Cmdline: org.proninyaroslav.libretorrent
01-29 18:44:07.039 19798 19798 F DEBUG : pid: 17963, tid: 17991, name: av.libretorrent >>> org.proninyaroslav.libretorrent <<<
01-29 18:44:07.039 19798 19798 F DEBUG : uid: 10237
01-29 18:44:07.039 19798 19798 F DEBUG : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
01-29 18:44:07.039 19798 19798 F DEBUG : Abort message: 'Scudo ERROR: race on chunk header at address 0x2000076e827ecf0'
01-29 18:44:07.039 19798 19798 F DEBUG : x0 0000000000000000 x1 0000000000004647 x2 0000000000000006 x3 000000765a4f6c10
01-29 18:44:07.039 19798 19798 F DEBUG : x4 0000000000000080 x5 0000000000000080 x6 0000000000000080 x7 8080808080808080
01-29 18:44:07.039 19798 19798 F DEBUG : x8 00000000000000f0 x9 000000798bed5a00 x10 0000000000000001 x11 000000798bf13dd4
01-29 18:44:07.039 19798 19798 F DEBUG : x12 0101010101010101 x13 00000000679a68e6 x14 000550d82787b2b1 x15 0000000000000040
01-29 18:44:07.039 19798 19798 F DEBUG : x16 000000798bf78d58 x17 000000798bf55c40 x18 000000765a2c4000 x19 000000000000462b
01-29 18:44:07.039 19798 19798 F DEBUG : x20 0000000000004647 x21 00000000ffffffff x22 0000000000000051 x23 6a9d000000010101
01-29 18:44:07.039 19798 19798 F DEBUG : x24 00000076e827ecf0 x25 02000076e827ece0 x26 0000000000000001 x27 0000000000010001
01-29 18:44:07.039 19798 19798 F DEBUG : x28 000000778827a2f0 x29 000000765a4f6c90
01-29 18:44:07.039 19798 19798 F DEBUG : lr 000000798bf05958 sp 000000765a4f6bf0 pc 000000798bf05984 pst 0000000000000000
01-29 18:44:07.040 19798 19798 F DEBUG : backtrace:
01-29 18:44:07.040 19798 19798 F DEBUG : #00 pc 0000000000051984 /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
01-29 18:44:07.040 19798 19798 F DEBUG : #01 pc 0000000000041814 /apex/com.android.runtime/lib64/bionic/libc.so (scudo::die()+8) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
01-29 18:44:07.040 19798 19798 F DEBUG : #02 pc 0000000000041ec0 /apex/com.android.runtime/lib64/bionic/libc.so (scudo::ScopedErrorReport::~ScopedErrorReport()+32) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
01-29 18:44:07.040 19798 19798 F DEBUG : #03 pc 000000000004205c /apex/com.android.runtime/lib64/bionic/libc.so (scudo::reportHeaderRace(void*)+96) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
01-29 18:44:07.040 19798 19798 F DEBUG : #04 pc 0000000000047e24 /apex/com.android.runtime/lib64/bionic/libc.so (scudo::Allocator<scudo::AndroidConfig, &(scudo_malloc_postinit)>::quarantineOrDeallocateChunk(scudo::Options, void*, scudo::Chunk::UnpackedHeader*, unsigned long)+656) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
01-29 18:44:07.040 19798 19798 F DEBUG : #05 pc 00000000000439c0 /apex/com.android.runtime/lib64/bionic/libc.so (scudo::Allocator<scudo::AndroidConfig, &(scudo_malloc_postinit)>::deallocate(void*, scudo::Chunk::Origin, unsigned long, unsigned long)+212) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
01-29 18:44:07.040 19798 19798 F DEBUG : #06 pc 0000000000c60fdc /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #07 pc 0000000000d2b378 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #08 pc 0000000000c67004 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #09 pc 0000000000de268c /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #10 pc 0000000000c671bc /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #11 pc 0000000000c66d98 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #12 pc 0000000000c672d0 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #13 pc 0000000000db6e80 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #14 pc 0000000000c4930c /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #15 pc 0000000000c480dc /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #16 pc 0000000000c4930c /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #17 pc 0000000000c480dc /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #18 pc 0000000000c47a6c /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #19 pc 0000000000e9e688 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #20 pc 0000000000e9abc8 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #21 pc 000000000070b340 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #22 pc 00000000008e60b4 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #23 pc 00000000008e6c58 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #24 pc 000000000064e3dc /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #25 pc 000000000064df40 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #26 pc 000000000064a138 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #27 pc 000000000068a280 /data/app/~~WLwqtILwIoKLRaOUaEZb2w==/org.proninyaroslav.libretorrent-TGUtLXKyzz27A1ZEK8aGdw==/base.apk!libtorrent4j.so (offset 0x708000) (BuildId: 63b131f3743fceed02013b86467a87f384f8d56a)
01-29 18:44:07.040 19798 19798 F DEBUG : #28 pc 00000000000b6380 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+208) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
01-29 18:44:07.040 19798 19798 F DEBUG : #29 pc 00000000000530a8 /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: f73b4091a9c819a21763f5bf11b53c2b)
Full logcat: