App crash on iOS using Realm v11.3.1

[xwartz]

How frequently does the bug occur?

Sometimes

Description

We have seen many devices crash in Firebase, and here is the log for the crash.

Stacktrace & log output

SIGSEGV 0x0000000000000008


Crashed: com.facebook.react.JavaScript
0  token                          0x789d44 std::__1::unordered_map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::unordered_map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, facebook::jsi::Function, std::__1::hash<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::equal_to<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, facebook::jsi::Function> > >, std::__1::hash<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::equal_to<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, std::__1::unordered_map<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, facebook::jsi::Function, std::__1::hash<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::equal_to<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, std::__1::allocator<std::__1::pair<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const, facebook::jsi::Function> > > > > >::operator[](std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) + 148
1  token                          0x7891b4 realm::js::realmjsi::ObjectWrap<realm::js::RealmObjectClass<realm::js::realmjsi::Types> >::create_instance_by_schema(realm::js::JsiEnv, realm::js::JsiFunc*, realm::ObjectSchema const&, realm::js::RealmObject<realm::js::realmjsi::Types>*) + 408
2  token                          0x787184 realm::js::RealmObjectClass<realm::js::realmjsi::Types>::create_instance(realm::js::JsiEnv, realm::js::RealmObject<realm::js::realmjsi::Types>) + 500
3  token                          0x7b0304 realm::js::NativeAccessor<realm::js::realmjsi::Types>::box(realm::Obj) + 168
4  token                          0x7cd310 realm::js::NativeAccessor<realm::js::realmjsi::Types> realm::Results::dispatch<auto realm::Results::get<realm::js::NativeAccessor<realm::js::realmjsi::Types> >(realm::js::NativeAccessor<realm::js::realmjsi::Types>&, unsigned long)::'lambda'(realm::js::NativeAccessor<realm::js::realmjsi::Types>&)>(realm::js::NativeAccessor<realm::js::realmjsi::Types>&) const + 472
5  token                          0x7cd00c realm::js::ResultsClass<realm::js::realmjsi::Types>::get_index(realm::js::JsiEnv, realm::js::JsiObj, unsigned int, realm::js::ReturnValue<realm::js::realmjsi::Types>&) + 208
6  token                          0x7c9b24 facebook::jsi::Value realm::js::wrap<&(realm::js::ResultsClass<realm::js::realmjsi::Types>::get_index(realm::js::JsiEnv, realm::js::JsiObj, unsigned int, realm::js::ReturnValue<realm::js::realmjsi::Types>&))>(facebook::jsi::Runtime&, facebook::jsi::Value const&, facebook::jsi::Value const*, unsigned long) + 152
7  token                          0x36a67c std::__1::function<facebook::jsi::Value (facebook::jsi::Runtime&, facebook::jsi::Value const&, facebook::jsi::Value const*, unsigned long)>::operator()(facebook::jsi::Runtime&, facebook::jsi::Value const&, facebook::jsi::Value const*, unsigned long) const + 1182 (function.h:1182)
8  token                          0x36a3c4 facebook::jsc::JSCRuntime::createFunctionFromHostFunction(facebook::jsi::PropNameID const&, unsigned int, std::__1::function<facebook::jsi::Value (facebook::jsi::Runtime&, facebook::jsi::Value const&, facebook::jsi::Value const*, unsigned long)>)::HostFunctionMetadata::call(OpaqueJSContext const*, OpaqueJSValue*, OpaqueJSValue*, unsigned long, OpaqueJSValue const* const*, OpaqueJSValue const**) + 1172 (JSCRuntime.cpp:1172)
9  JavaScriptCore                 0x24c670 JSC::JSCallbackObject<JSC::JSNonFinalObject>::call(JSC::JSGlobalObject*, JSC::CallFrame*) + 420
10 JavaScriptCore                 0x897560 JSC::LLInt::setUpCall(JSC::CallFrame*, JSC::CodeSpecializationKind, JSC::JSValue, JSC::LLIntCallLinkInfo*) + 752
11 JavaScriptCore                 0x1f6f28 llint_entry + 139448
12 JavaScriptCore                 0x1d4bc8 vmEntryToJavaScript + 264
13 JavaScriptCore                 0x7bfa64 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 480
14 JavaScriptCore                 0xb3be10 JSC::ProxyObject::performGet(JSC::JSGlobalObject*, JSC::PropertyName, JSC::PropertySlot&) + 1508
15 JavaScriptCore                 0xb3df88 JSC::ProxyObject::getOwnPropertySlotCommon(JSC::JSGlobalObject*, JSC::PropertyName, JSC::PropertySlot&) + 140
16 JavaScriptCore                 0xb3b2bc JSC::ProxyObject::getOwnPropertySlotByIndex(JSC::JSObject*, JSC::JSGlobalObject*, unsigned int, JSC::PropertySlot&) + 68
17 JavaScriptCore                 0x88408c llint_slow_path_get_by_val + 4052
18 JavaScriptCore                 0x1e1218 llint_entry + 50088
19 JavaScriptCore                 0x1ebf3c llint_entry + 94412
20 JavaScriptCore                 0x1f6e94 llint_entry + 139300
21 JavaScriptCore                 0x1f6e94 llint_entry + 139300
22 JavaScriptCore                 0x1f6e94 llint_entry + 139300
23 JavaScriptCore                 0x1f6e94 llint_entry + 139300
24 JavaScriptCore                 0x1f6f3c llint_entry + 139468
25 JavaScriptCore                 0x1d4bc8 vmEntryToJavaScript + 264
26 JavaScriptCore                 0x7bfa64 JSC::Interpreter::executeCall(JSC::JSGlobalObject*, JSC::JSObject*, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 480
27 JavaScriptCore                 0x9ae4e4 JSC::profiledCall(JSC::JSGlobalObject*, JSC::ProfilingReason, JSC::JSValue, JSC::CallData const&, JSC::JSValue, JSC::ArgList const&) + 156
28 JavaScriptCore                 0x259bd8 JSObjectCallAsFunction + 648
29 token                          0x368718 facebook::jsc::JSCRuntime::call(facebook::jsi::Function const&, facebook::jsi::Value const&, facebook::jsi::Value const*, unsigned long) + 1275 (JSCRuntime.cpp:1275)
30 token                          0x7746e0 realm::js::Function<realm::js::realmjsi::Types>::callback(realm::js::JsiEnv, realm::js::JsiFunc const&, realm::js::JsiObj const&, unsigned long, realm::js::JsiVal const*) + 148
31 token                          0x7cb988 void realm::js::ResultsClass<realm::js::realmjsi::Types>::add_listener<realm::js::Results<realm::js::realmjsi::Types> >(realm::js::JsiEnv, realm::js::Results<realm::js::realmjsi::Types>&, realm::js::JsiObj, realm::js::Arguments<realm::js::realmjsi::Types>&)::'lambda'(realm::CollectionChangeSet const&)::operator()(realm::CollectionChangeSet const&) const + 216
32 token                          0x852c74 realm::_impl::CollectionNotifier::after_advance() + 652
33 token                          0x863cd0 realm::_impl::RealmCoordinator::process_available_async(realm::Realm&) + 188
34 token                          0x8bb5e0 realm::Realm::notify() + 396
35 token                          0x878374 realm::util::UniqueFunction<void ()>::SpecificImpl<realm::_impl::WeakRealmNotifier::notify()::$_0>::call() + 48
36 token                          0x91924c realm::util::InvocationQueue::invoke_all() + 80
37 CoreFoundation                 0x9abe0 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24
38 CoreFoundation                 0x9aae0 __CFRunLoopDoSource0 + 204
39 CoreFoundation                 0x99e8c __CFRunLoopDoSources0 + 356
40 CoreFoundation                 0x943d0 __CFRunLoopRun + 776
41 CoreFoundation                 0x93b90 CFRunLoopRunSpecific + 572
42 token                          0x2b1f88 +[RCTCxxBridge runRunLoop] + 335 (RCTCxxBridge.mm:335)
43 Foundation                     0x1644bc __NSThread__start__ + 848
44 libsystem_pthread.dylib        0x9b3c _pthread_start + 288
45 libsystem_pthread.dylib        0xe880 thread_start + 8

Can you reproduce the bug?

No

Reproduction Steps

No response

Version

11.3.1

What services are you using?

Local Database only

Are you using encryption?

No

Platform OS and version(s)

iOS 13/14/15

Build environment

Which debugger for React Native: ..

Cocoapods version

No response

[kneth]

As far I can tell, you observe the crash when doing a query. Do you know the query? Since v11.3.1 we have had a couple of bug fixes related to queries e.g., in v11.8.0 we fixed a bug leading to crash if your query has many logical-ORs.

[xwartz]

I don't know the query. I will try the v11.8.0.

[kneth]

@xwartz Thank you

[sync-by-unito]

➤ takameyer commented:

Closed as the issue has become inactive. Please open again if the problem persists.