After using the camera, the GAPlugin will crash Android app

[droizman]

Android 4.3 + 4.4, Cordova 3.4

10 seconds after running FileTransfer.upload plug-in, my app crashes. If I remove the GAPlugin or do not run the init function, my app does not crash. App was fine until I added the plug-in and it works fine on IOS.

Some testing results...

1. If the GAPlugin is loaded but NOT initialized, there is no crash.
2. If I stop the GAPlugin with the exit() function before FileTransfer.upload, it still crashes.
3. If I upload with XMLHttpRequest instead of FileTransfer.upload, it does not crash
4. If I run any AJAX requests instead of FileTransfer.upload, it does not trigger a crash
5. If I run FileTransfer.upload and then run an AJAX request, it still crashes. Thought this might flush or close any sockets.

I don't read machine code, so hopefully this snippet can point me or someone in the right direction.

F/libc ( 6402): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1), thread 6516 (GAThread)
I/DEBUG ( 180): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG ( 180): Build fingerprint: 'google/hammerhead/hammerhead:4.4.2/KOT49H/937116:user/release-keys'
I/DEBUG ( 180): Revision: '11'
I/DEBUG ( 180): pid: 6402, tid: 6516, name: GAThread >>> com.hiyu.android <<<
I/DEBUG ( 180): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00000000
I/DEBUG ( 180): r0 00000000 r1 00000000 r2 4caba23d r3 00000028
I/DEBUG ( 180): r4 00000008 r5 4caba23e r6 00000000 r7 ffffffff
I/DEBUG ( 180): r8 00000001 r9 40a9f130 sl 00000028 fp 4caba23d
I/DEBUG ( 180): ip 45fd6b34 sp 51cb13f8 lr 45fcb09d pc 40a89f2e cpsr 600f0030
I/DEBUG ( 180): d0 0000000000000000 d1 0000000000000000
I/DEBUG ( 180): d2 0000000000000000 d3 0000000000000000
I/DEBUG ( 180): d4 3268053561342f79 d5 796470730830312d
I/DEBUG ( 180): d6 64707306312e332f d7 7074746808332f79
I/DEBUG ( 180): d8 0000000000000000 d9 0000000000000000
I/DEBUG ( 180): d10 0000000000000000 d11 0000000000000000
I/DEBUG ( 180): d12 0000000000000000 d13 0000000000000000
I/DEBUG ( 180): d14 0000000000000000 d15 0000000000000000
I/DEBUG ( 180): d16 0000000000000000 d17 0000000000000000
I/DEBUG ( 180): d18 bbd6995585cb09b8 d19 3b4c0c382b81951f
I/DEBUG ( 180): d20 4156e36000000000 d21 4008000000000000
I/DEBUG ( 180): d22 3ff0000000000000 d23 4059000000000000
I/DEBUG ( 180): d24 3ff0000000000000 d25 0000000000000000
I/DEBUG ( 180): d26 4000000000000000 d27 547d42aea2879f2e
I/DEBUG ( 180): d28 0001000000010000 d29 0001000000010000
I/DEBUG ( 180): d30 4059000000000000 d31 4024000000000000
I/DEBUG ( 180): scr 60000012
I/DEBUG ( 180):
I/DEBUG ( 180): backtrace:
I/DEBUG ( 180): #00 pc 00026f2e /system/lib/libssl.so (SSL_select_next_proto+49)
I/DEBUG ( 180): #1 pc 00007099 /system/lib/libjavacrypto.so
I/DEBUG ( 180): #2 pc 0002f2f3 /system/lib/libssl.so (ssl_parse_serverhello_tlsext+434)
I/DEBUG ( 180): #3 pc 0001810d /system/lib/libssl.so (ssl3_get_server_hello+1004)
I/DEBUG ( 180): #4 pc 00017517 /system/lib/libssl.so (ssl3_connect+566)
I/DEBUG ( 180): #5 pc 00027ccb /system/lib/libssl.so (SSL_do_handshake+50)
I/DEBUG ( 180): #6 pc 0000aeb3 /system/lib/libjavacrypto.so
I/DEBUG ( 180): #7 pc 00464e34 /data/dalvik-cache/system@framework@boot.oat
I/DEBUG ( 180):
I/DEBUG ( 180): stack:
I/DEBUG ( 180): 51cb13b8 068660c5
I/DEBUG ( 180): 51cb13bc 3dfceab7
I/DEBUG ( 180): 51cb13c0 00000002
I/DEBUG ( 180): 51cb13c4 45fcafd5 /system/lib/libjavacrypto.so
I/DEBUG ( 180): 51cb13c8 00000002
I/DEBUG ( 180): 51cb13cc 45fcafd5 /system/lib/libjavacrypto.so
I/DEBUG ( 180): 51cb13d0 00000003
I/DEBUG ( 180): 51cb13d4 40a59e64 /system/lib/libcrypto.so
I/DEBUG ( 180): 51cb13d8 400f61b8
I/DEBUG ( 180): 51cb13dc 40a59e64 /system/lib/libcrypto.so
I/DEBUG ( 180): 51cb13e0 509e8e70 [anon:libc_malloc]
I/DEBUG ( 180): 51cb13e4 400b8e6b /system/lib/libc.so (dlmalloc+4254)
I/DEBUG ( 180): 51cb13e8 00000003
I/DEBUG ( 180): 51cb13ec fbbaf7fc
I/DEBUG ( 180): 51cb13f0 400b7dcd /system/lib/libc.so (dlmalloc)
I/DEBUG ( 180): 51cb13f4 00000003
I/DEBUG ( 180): #00 51cb13f8 40a59e64 /system/lib/libcrypto.so
I/DEBUG ( 180): 51cb13fc 51cb1478 [stack:6516]
I/DEBUG ( 180): 51cb1400 51cb1474 [stack:6516]
I/DEBUG ( 180): 51cb1404 4caba23d [anon:libc_malloc]
I/DEBUG ( 180): 51cb1408 00000028
I/DEBUG ( 180): 51cb140c 4caba23d [anon:libc_malloc]
I/DEBUG ( 180): 51cb1410 4e492480 [anon:libc_malloc]
I/DEBUG ( 180): 51cb1414 51cb1474 [stack:6516]
I/DEBUG ( 180): 51cb1418 51cb1478 [stack:6516]
I/DEBUG ( 180): 51cb141c 4ca0cc68 [anon:libc_malloc]
I/DEBUG ( 180): 51cb1420 40a9f130 /system/lib/libssl.so
I/DEBUG ( 180): 51cb1424 00000028
I/DEBUG ( 180): 51cb1428 4caba239 [anon:libc_malloc]
I/DEBUG ( 180): 51cb142c 45fcb09d /system/lib/libjavacrypto.so
I/DEBUG ( 180): #1 51cb1430 00000000
I/DEBUG ( 180): 51cb1434 ffffffff
I/DEBUG ( 180): 51cb1438 4caba265 [anon:libc_malloc]
I/DEBUG ( 180): 51cb143c 51cb14b0 [stack:6516]
I/DEBUG ( 180): 51cb1440 51cb14b0 [stack:6516]
I/DEBUG ( 180): 51cb1444 4caba23d [anon:libc_malloc]
I/DEBUG ( 180): 51cb1448 00003374
I/DEBUG ( 180): 51cb144c 40a922f5 /system/lib/libssl.so (ssl_parse_serverhello_tlsext+436)
I/DEBUG ( 180): #2 51cb1450 00000028
I/DEBUG ( 180): 51cb1454 00000000
I/DEBUG ( 180): 51cb1458 40a9a5a5 /system/lib/libssl.so
I/DEBUG ( 180): 51cb145c 00000000
I/DEBUG ( 180): 51cb1460 00000001
I/DEBUG ( 180): 51cb1464 51cb14b4 [stack:6516]
I/DEBUG ( 180): 51cb1468 4caba261 [anon:libc_malloc]
I/DEBUG ( 180): 51cb146c 4caba265 [anon:libc_malloc]
I/DEBUG ( 180): 51cb1470 4ca0cc68 [anon:libc_malloc]
I/DEBUG ( 180): 51cb1474 4caeeae8 [anon:libc_malloc]
I/DEBUG ( 180): 51cb1478 40a57dc0 /system/lib/libcrypto.so
I/DEBUG ( 180): 51cb147c 4ca0cc68 [anon:libc_malloc]
I/DEBUG ( 180): 51cb1480 00000081
I/DEBUG ( 180): 51cb1484 4caba1e4 [anon:libc_malloc]
I/DEBUG ( 180): 51cb1488 4c7e50e0 [anon:libc_malloc]
I/DEBUG ( 180): 51cb148c 4caba207 [anon:libc_malloc]
I/DEBUG ( 180): ........ ........
I/DEBUG ( 180):
I/DEBUG ( 180): memory near r2:
I/DEBUG ( 180): 4caba21c 68ae6717 e05c3f40 c0ac0868 39000011
I/DEBUG ( 180): 4caba22c 010001ff 000b0000 01000304 00743302
I/DEBUG ( 180): 4caba23c 70730828 342f7964 68053561 30312d32
I/DEBUG ( 180): 4caba24c 64707308 2e332f79 70730631 332f7964
I/DEBUG ( 180): 4caba25c 74746808 2e312f70 00000031 00000000
I/DEBUG ( 180): 4caba26c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba27c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba28c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba29c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2ac 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2bc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2cc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2dc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2ec 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2fc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba30c 00000000 00000000 00000000 00000000
I/DEBUG ( 180):
I/DEBUG ( 180): memory near r5:
I/DEBUG ( 180): 4caba21c 68ae6717 e05c3f40 c0ac0868 39000011
I/DEBUG ( 180): 4caba22c 010001ff 000b0000 01000304 00743302
I/DEBUG ( 180): 4caba23c 70730828 342f7964 68053561 30312d32
I/DEBUG ( 180): 4caba24c 64707308 2e332f79 70730631 332f7964
I/DEBUG ( 180): 4caba25c 74746808 2e312f70 00000031 00000000
I/DEBUG ( 180): 4caba26c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba27c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba28c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba29c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2ac 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2bc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2cc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2dc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2ec 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2fc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba30c 00000000 00000000 00000000 00000000
I/DEBUG ( 180):
I/DEBUG ( 180): memory near r9:
I/DEBUG ( 180): 40a9f110 00000001 00000020 00000002 00000002
I/DEBUG ( 180): 40a9f120 00000105 0000c030 00000000 00000000
I/DEBUG ( 180): 40a9f130 00000001 40a9560f 0300c011 00000080
I/DEBUG ( 180): 40a9f140 00000001 00000004 00000002 00000002
I/DEBUG ( 180): 40a9f150 00000041 0000c030 00000080 00000080
I/DEBUG ( 180): 40a9f160 00000001 40a95621 0300c012 00000080
I/DEBUG ( 180): 40a9f170 00000001 00000002 00000002 00000002
I/DEBUG ( 180): 40a9f180 00000181 0000c030 000000a8 000000a8
I/DEBUG ( 180): 40a9f190 00000001 40a95638 0300c013 00000080
I/DEBUG ( 180): 40a9f1a0 00000001 00000040 00000002 00000002
I/DEBUG ( 180): 40a9f1b0 00000181 0000c030 00000080 00000080
I/DEBUG ( 180): 40a9f1c0 00000001 40a9564d 0300c014 00000080
I/DEBUG ( 180): 40a9f1d0 00000001 00000080 00000002 00000002
I/DEBUG ( 180): 40a9f1e0 00000181 0000c030 00000100 00000100
I/DEBUG ( 180): 40a9f1f0 00000001 40a95662 0300c015 00000080
I/DEBUG ( 180): 40a9f200 00000004 00000020 00000002 00000002
I/DEBUG ( 180):
I/DEBUG ( 180): memory near fp:
I/DEBUG ( 180): 4caba21c 68ae6717 e05c3f40 c0ac0868 39000011
I/DEBUG ( 180): 4caba22c 010001ff 000b0000 01000304 00743302
I/DEBUG ( 180): 4caba23c 70730828 342f7964 68053561 30312d32
I/DEBUG ( 180): 4caba24c 64707308 2e332f79 70730631 332f7964
I/DEBUG ( 180): 4caba25c 74746808 2e312f70 00000031 00000000
I/DEBUG ( 180): 4caba26c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba27c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba28c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba29c 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2ac 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2bc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2cc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2dc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2ec 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba2fc 00000000 00000000 00000000 00000000
I/DEBUG ( 180): 4caba30c 00000000 00000000 00000000 00000000
I/DEBUG ( 180):
I/DEBUG ( 180): memory near ip:
I/DEBUG ( 180): 45fd6b14 409ef6e1 409b3af9 409e5d21 409e59c5
I/DEBUG ( 180): 45fd6b24 409e670d 409de9cd 409e9d41 400bb021
I/DEBUG ( 180): 45fd6b34 40a89efd 400b67dc 400b68e0 409fd091
I/DEBUG ( 180): 45fd6b44 40a89775 40103927 400a43b1 4027c5b5
I/DEBUG ( 180): 45fd6b54 409f219d 409eaa49 409ea8b5 409ea851
I/DEBUG ( 180): 45fd6b64 409eadd9 409ecec9 400cd235 409ecea9
I/DEBUG ( 180): 45fd6b74 409ecf8d 400b5c01 400bb415 400b9ef5
I/DEBUG ( 180): 45fd6b84 4027c6f5 40a89f79 40a8ce9d 40a24bfd
I/DEBUG ( 180): 45fd6b94 409bd5f5 409bd6dd 40a24c45 409c0799
I/DEBUG ( 180): 45fd6ba4 409b6a29 409b925d 40a24385 40a17ef9
I/DEBUG ( 180): 45fd6bb4 409bf2f5 409c2a5d 409f2ad9 409c2b01
I/DEBUG ( 180): 45fd6bc4 409b2905 409f3135 409e2f01 409e3265
I/DEBUG ( 180): 45fd6bd4 409e2a5d 409e2c69 409e309d 409e29d9
I/DEBUG ( 180): 45fd6be4 409e2e8d 409fcf39 409e2e99 409e2e91
I/DEBUG ( 180): 45fd6bf4 409e2d6d 409f4839 409f473d 409f4b79
I/DEBUG ( 180): 45fd6c04 409b3b01 409e3365 409b19a1 409bcb61
I/DEBUG ( 180):
I/DEBUG ( 180): memory near sp:
I/DEBUG ( 180): 51cb13d8 400f61b8 40a59e64 509e8e70 400b8e6b
I/DEBUG ( 180): 51cb13e8 00000003 fbbaf7fc 400b7dcd 00000003
I/DEBUG ( 180): 51cb13f8 40a59e64 51cb1478 51cb1474 4caba23d
I/DEBUG ( 180): 51cb1408 00000028 4caba23d 4e492480 51cb1474
I/DEBUG ( 180): 51cb1418 51cb1478 4ca0cc68 40a9f130 00000028
I/DEBUG ( 180): 51cb1428 4caba239 45fcb09d 00000000 ffffffff
I/DEBUG ( 180): 51cb1438 4caba265 51cb14b0 51cb14b0 4caba23d
I/DEBUG ( 180): 51cb1448 00003374 40a922f5 00000028 00000000
I/DEBUG ( 180): 51cb1458 40a9a5a5 00000000 00000001 51cb14b4
I/DEBUG ( 180): 51cb1468 4caba261 4caba265 4ca0cc68 4caeeae8
I/DEBUG ( 180): 51cb1478 40a57dc0 4ca0cc68 00000081 4caba1e4
I/DEBUG ( 180): 51cb1488 4c7e50e0 4caba207 40a9f130 00000020
I/DEBUG ( 180): 51cb1498 00001110 40a7b111 51cb14b0 51cb14ac
I/DEBUG ( 180): 51cb14a8 4ca0cc68 00000001 4e492480 4caba22a
I/DEBUG ( 180): 51cb14b8 4ca0cc68 00001120 4e492480 45fcb1fd
I/DEBUG ( 180): 51cb14c8 00000000 00001120 00001000 40a7a51b
I/DEBUG ( 180):
I/DEBUG ( 180): code around pc:
I/DEBUG ( 180): 40a89f0c d02c2b00 9f0f9701 21009102 4001f81b
I/DEBUG ( 180): 40a89f1c 0801f101 eb0bb1cf eb0b0001 90030508
I/DEBUG ( 180): 40a89f2c f8162000 f1009000 454c0a01 eb06d109
I/DEBUG ( 180): 40a89f3c 4628010a f7e54622 4601ef8c 29002001
I/DEBUG ( 180): 40a89f4c eb0ad00a 42b80009 eb08d3eb 9a040104
I/DEBUG ( 180): 40a89f5c 42912002 e000d3da 99029e03 1c729f01
I/DEBUG ( 180): 40a89f6c 7832603a b005700a 8ff0e8bd 3178f8d0
I/DEBUG ( 180): 40a89f7c 2100600b bf182b00 117cf890 47706011
I/DEBUG ( 180): 40a89f8c 11a4f8c0 21a8f8c0 bf004770 11acf8c0
I/DEBUG ( 180): 40a89f9c 21b0f8c0 bf004770 4605b570 f8d54614
I/DEBUG ( 180): 40a89fac 460e01bc bf182800 ee02f7e5 f240480a
I/DEBUG ( 180): 40a89fbc 490a6296 44014478 f7e54620 2101edee
I/DEBUG ( 180): 40a89fcc 01bcf8c5 4631b130 f7e54622 2100ee2e
I/DEBUG ( 180): 40a89fdc 41c0f8c5 bd704608 00013a84 ffffb5ae
I/DEBUG ( 180): 40a89fec 4605b570 f8d54614 460e019c bf182800
I/DEBUG ( 180): 40a89ffc eddef7e5 f240480a 490a62aa 44014478
I/DEBUG ( 180):
I/DEBUG ( 180): code around lr:
I/DEBUG ( 180): 45fcb07c 46052121 f7fe4640 6a6aef98 b13c6aab
I/DEBUG ( 180): 45fcb08c 000ce88d 46314638 9b084622 ef74f7fe
I/DEBUG ( 180): 45fcb09c e8bd2000 b53881fc b1884604 b1556a05
I/DEBUG ( 180): 45fcb0ac ffccf7ff 68036829 47906d9a f7fe4628
I/DEBUG ( 180): 45fcb0bc 2000ef82 21006220 60e12001 bd386161
I/DEBUG ( 180): 45fcb0cc b508bd38 6d5a6803 bd084790 6803b508
I/DEBUG ( 180): 45fcb0dc 47906dda b508bd08 6fda6803 bd084790
I/DEBUG ( 180): 45fcb0ec 6804b510 4084f8d4 bd1047a0 b513b40c
I/DEBUG ( 180): 45fcb0fc 6804ab04 2b04f853 40c8f8d4 47a09301
I/DEBUG ( 180): 45fcb10c 401ce8bd 4770b002 b513b40c 6804ab04
I/DEBUG ( 180): 45fcb11c 2b04f853 40f8f8d4 47a09301 401ce8bd
I/DEBUG ( 180): 45fcb12c 4770b002 b513b40c 6804ab04 2b04f853
I/DEBUG ( 180): 45fcb13c 41ccf8d4 47a09301 401ce8bd 4770b002
I/DEBUG ( 180): 45fcb14c 6803b508 229cf8d3 bd084790 6803b508
I/DEBUG ( 180): 45fcb15c 22acf8d3 bd084790 6804b510 42b0f8d4
I/DEBUG ( 180): 45fcb16c bd1047a0 6803b508 32b4f8d3 bd084798

[reynacho]

This is happening with me as well. I tried threading the GAPlugin calls in GAPlugin.java as well as several combinations of stopping tracking after a FileTransfer.upload is run.

I found that this actually spans multiple runs of the same app. Here's my scenario:

Run app, track views/events
Once I hit the view where the FIleTransfer.upload happens, turn off tracking
App continues running fine since tracking is now off
Close app
Run again, tracking is back on, app crashes after 10 seconds

FYI, that 10 seconds I believe is the delay for GAPlugin's tracking set as the last argument in the init method.

[gregavola]

Has there been any progress with this?

Greg