Crash on GrapheneOS: hardened_malloc: fatal allocator error: detected write after free

[upa58]

Description

OsmAnd occasionally crashes directly after trying to open it on GrapheneOS.

Steps to reproduce

The crash only occurs very sporadically (approx. 1x per month) when trying to open the app after not using it for some time. No steps to reproduce

Actual result

Crash.

Expected result

No crash.

Your Environment (required)

OsmAnd Version: 4.6.14 (F-Droid)
Android/iOS version: 14 (GrapheneOS Build-Number: 2024042200)
Device model: Google Pixel 8 Pro
Crash-Logs: (see below)

GrapheneOS Error message:

type: crash
osVersion: google/husky/husky:14/AP1A.240405.002.B1/2024042200:user/release-keys
uid: 10184 (u:r:untrusted_app_32:s0:c184,c256,c512,c768)
cmdline: net.osmand.plus
processUptime: 5s

abortMessage: hardened_malloc: fatal allocator error: detected write after free

signal: 6 (SIGABRT), code -1 (SI_QUEUE)
threadName: Worker (pooled)
MTE: not enabled

backtrace:
    /apex/com.android.runtime/lib64/bionic/libc.so (abort+168, pc 680f8)
    /apex/com.android.runtime/lib64/bionic/libc.so (fatal_error+48, pc 4fdfc)
    /apex/com.android.runtime/lib64/bionic/libc.so (allocate+3092, pc 4cbd4)
    /apex/com.android.runtime/lib64/bionic/libc.so (malloc+40, pc 47e48)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (operator new(unsigned long)+40, pc 856984)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::__grow_by_and_replace(unsigned long, unsigned long, unsigned long, unsigned long, unsigned long, unsigned long, char const*)+160, pc 16e278c)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> >::operator=(std::__ndk1::basic_string<char, std::__ndk1::char_traits<char>, std::__ndk1::allocator<char> > const&)+236, pc 16e4418)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc af7db4)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc af5eac)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc af5bb4)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 9a24b4)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 999d60)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 99d0e8)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 998550)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 8f16fc)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 8f0fec)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 86d16c)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 8a1a20)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 8cfe10)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 8cfb6c)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc 86da18)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc a7cc18)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc a5d010)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc a660e0)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libOsmAndCoreWithJNI.so (pc a68094)
    /data/app/~~CbOMSiQVVfLnjVf3tOKzRg==/net.osmand.plus-To4pqSD9s2NUmSc1_Vv80g==/lib/arm64/libQt5Core.so (pc 35cd0c)
    /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc d5e6c)
    /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 69a64)

Logcat

[...]
Logcat log exceeds maximum number of characters for this field. I can provide it on request if required.

[yuriiurshuliak]

Please update to the latest version and check if this crash occurs again. Additionally, try using the version available on Google Play to see if the issue persists.