Android JIT compiler crash

Hello,

There is a debug stack of android below which seems to indicate the JIT compiler is throwing a SIGSEGV due to an assertion. I don't know how to get started to figure out the problem. It actually only happens on one phone only (a Samsung Note N7000 international) and only when the game is build as 'Development'. The crash doesn't even happen 100% of the time, more like 95% on that phone, which caused me to think I had found a solution more than once by now.

I have tried to figure which part of the code causes the issue and I've narrowed it down to a specific Behaviour. Unfortunately, it is my loader, which means it calls a lot of code. I can continue looking at my code call by call, but I wanted to ask if others had run into similar issue and had suggestions?

Thanks
Alain-Daniel

F/mono (23759): * Assertion at mini-arm.c:2595, condition `pdata.found == 1' not met
F/libc (23759): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1)
I/DEBUG ( 1687): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG ( 1687): Build fingerprint: 'samsung/GT-N7000/GT-N7000:4.0.3/IML74K/ZSLPF:user/release-keys'
I/DEBUG ( 1687): pid: 23759, tid: 23775 >>> com.greencod.badtraffic <<<
I/DEBUG ( 1687): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00000000
I/DEBUG ( 1687): r0 00000000 r1 000bd578 r2 00000000 r3 00000000
I/DEBUG ( 1687): r4 5c1b2604 r5 5e1175e8 r6 00000002 r7 5e119d70
I/DEBUG ( 1687): r8 00dfebf4 r9 5c4a5eb0 10 009d3408 fp 5d1daacc
I/DEBUG ( 1687): ip 00000000 sp 5d1daac0 lr 5c0b2160 pc 5c0b2048 cpsr 60000010
I/DEBUG ( 1687): d0 656d20746f6e2027 d1 00220020003a0061
I/DEBUG ( 1687): d2 4025999990000074 d3 3fecccccc0000061
I/DEBUG ( 1687): d4 0070006900720063 d5 006e006f00690074
I/DEBUG ( 1687): d6 4062400000000000 d7 405d700000000000
I/DEBUG ( 1687): d8 3fba6eaf3dd3757a d9 0000000000000000
I/DEBUG ( 1687): d10 0000000000000000 d11 0000000000000000
I/DEBUG ( 1687): d12 0000000000000000 d13 0000000000000000
I/DEBUG ( 1687): d14 0000000000000000 d15 0000000000000000
I/DEBUG ( 1687): d16 3fe999999999999a d17 4020000000000000
I/DEBUG ( 1687): d18 bf2a00f7dcbb256c d19 3ec6cd878c3b46a7
I/DEBUG ( 1687): d20 3eab128f66bd6bdf d21 3e40214804f0ec17
I/DEBUG ( 1687): d22 431a999a00000000 d23 3f80000000000000
I/DEBUG ( 1687): d24 0000000043960000 d25 0000000000000000
I/DEBUG ( 1687): d26 4396000000000000 d27 0000000000000000
I/DEBUG ( 1687): d28 0000000000000000 d29 0000000043960000
I/DEBUG ( 1687): d30 431a999a00000000 d31 3f80000000000000
I/DEBUG ( 1687): scr 80000012
I/DEBUG ( 1687):
I/DEBUG ( 1687): #00 pc 002b8048 /data/data/com.greencod.badtraffic/lib/libmono.so (explicitly_abort_from_unity)
I/DEBUG ( 1687): #01 pc 002b815c /data/data/com.greencod.badtraffic/lib/libmono.so (g_logv)
I/DEBUG ( 1687): #02 pc 002b81b8 /data/data/com.greencod.badtraffic/lib/libmono.so (g_log)
I/DEBUG ( 1687): #03 pc 0011d8b4 /data/data/com.greencod.badtraffic/lib/libmono.so (handle_thunk)
I/DEBUG ( 1687): #04 pc 0011db28 /data/data/com.greencod.badtraffic/lib/libmono.so (arm_patch_general)
I/DEBUG ( 1687): #05 pc 00126d00 /data/data/com.greencod.badtraffic/lib/libmono.so (mono_arch_patch_code)
I/DEBUG ( 1687): #06 pc 0001e8b8 /data/data/com.greencod.badtraffic/lib/libmono.so (mono_codegen)
I/DEBUG ( 1687): #07 pc 000203d0 /data/data/com.greencod.badtraffic/lib/libmono.so (mini_method_compile)
I/DEBUG ( 1687): #08 pc 000216f0 /data/data/com.greencod.badtraffic/lib/libmono.so (mono_jit_compile_method_inner)
I/DEBUG ( 1687): #09 pc 000224c8 /data/data/com.greencod.badtraffic/lib/libmono.so (mono_jit_compile_method_with_opt)
I/DEBUG ( 1687): #10 pc 000226d8 /data/data/com.greencod.badtraffic/lib/libmono.so (mono_jit_compile_method)
I/DEBUG ( 1687): #11 pc 001fc030 /data/data/com.greencod.badtraffic/lib/libmono.so (mono_compile_method)
I/DEBUG ( 1687): #12 pc 001943a4 /data/data/com.greencod.badtraffic/lib/libmono.so (ves_icall_System_Delegate_CreateDelegate_internal)
I/DEBUG ( 1687):
I/DEBUG ( 1687): code around pc:
I/DEBUG ( 1687): 5c0b2028 e8bd0800 e12fff1e e92d4800 e28db004 ....../..H-.....
I/DEBUG ( 1687): 5c0b2038 e24dd008 e3a03000 e50b3008 e51b3008 ..M..0...0...0..
I/DEBUG ( 1687): 5c0b2048 e5933000 e1a00003 ebf5762e e24bd004 .0.......v....K.
I/DEBUG ( 1687): 5c0b2058 e8bd8800 e92d4810 e28db008 e24dd024 .....H-.....$.M.
I/DEBUG ( 1687): 5c0b2068 e59f40f8 e08f4004 e50b0018 e50b101c .@...@..........
I/DEBUG ( 1687):
I/DEBUG ( 1687): code around lr:
I/DEBUG ( 1687): 5c0b2140 e7943003 e2830054 ebf5755a e59f3030 .0..T...Zu..00..
I/DEBUG ( 1687): 5c0b2150 e7943003 e28300a8 ebf57556 ebffffb3 .0......Vu......
I/DEBUG ( 1687): 5c0b2160 e24bd008 e8bd8810 00100590 000c5fc8 ..K.........._..
I/DEBUG ( 1687): 5c0b2170 000c5fb4 000c5fa4 000c5f84 000c5f88 ._..._..._..._..
I/DEBUG ( 1687): 5c0b2180 00104f24 00000474 e92d000c e92d4800 $O..t.....-..H-.
I/DEBUG ( 1687):
I/DEBUG ( 1687): stack:
I/DEBUG ( 1687): 5d1daa80 00004000
I/DEBUG ( 1687): 5d1daa84 00000000
I/DEBUG ( 1687): 5d1daa88 000bd578 [heap]
I/DEBUG ( 1687): 5d1daa8c 400eb758 /system/lib/libc.so
I/DEBUG ( 1687): 5d1daa90 00000000
I/DEBUG ( 1687): 5d1daa94 5e119d70
I/DEBUG ( 1687): 5d1daa98 00dfebf4 [heap]
I/DEBUG ( 1687): 5d1daa9c 5c4a5eb0 /data/data/com.greencod.badtraffic/lib/libunity.so
I/DEBUG ( 1687): 5d1daaa0 009d3408 [heap]
I/DEBUG ( 1687): 5d1daaa4 400c289f /system/lib/libc.so
I/DEBUG ( 1687): 5d1daaa8 000bd578 [heap]
I/DEBUG ( 1687): 5d1daaac 400c28c7 /system/lib/libc.so
I/DEBUG ( 1687): 5d1daab0 400eb59c /system/lib/libc.so
I/DEBUG ( 1687): 5d1daab4 400eb758 /system/lib/libc.so
I/DEBUG ( 1687): 5d1daab8 e3a070ad
I/DEBUG ( 1687): 5d1daabc ef9000ad
I/DEBUG ( 1687): #00 5d1daac0 5c1b2604 /data/data/com.greencod.badtraffic/lib/libmono.so
I/DEBUG ( 1687): 5d1daac4 00000000
I/DEBUG ( 1687): 5d1daac8 5d1daafc
I/DEBUG ( 1687): 5d1daacc 5c0b2160 /data/data/com.greencod.badtraffic/lib/libmono.so
I/DEBUG ( 1687): #01 5d1daad0 5c17808c /data/data/com.greencod.badtraffic/lib/libmono.so
I/DEBUG ( 1687): 5d1daad4 00f2d160 [heap]
I/DEBUG ( 1687): 5d1daad8 5d1dab1c
I/DEBUG ( 1687): 5d1daadc 5c0ede28 /data/data/com.greencod.badtraffic/lib/libmono.so
I/DEBUG ( 1687): 5d1daae0 00000004
I/DEBUG ( 1687): 5d1daae4 00000000
I/DEBUG ( 1687): 5d1daae8 5c0ee0ac /data/data/com.greencod.badtraffic/lib/libmono.so
I/DEBUG ( 1687): 5d1daaec 00f2d160 [heap]
I/DEBUG ( 1687): 5d1daaf0 00000002
I/DEBUG ( 1687): 5d1daaf4 00f2cee8 [heap]
I/DEBUG ( 1687): 5d1daaf8 5d1dab14
I/DEBUG ( 1687): 5d1daafc 5c0b21bc /data/data/com.greencod.badtraffic/lib/libmono.so

 

I have the same problem, it occured when deserializing proto-buf data.


12-30 19:28:56.812: A/mono(18175): * Assertion at mini-arm.c:2595, condition `pdata.found == 1' not met
12-30 19:28:56.812: A/libc(18175): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1), thread 18256 (UnityMain)
12-30 19:28:56.912: I/DEBUG(1571): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
12-30 19:28:56.912: I/DEBUG(1571): Build fingerprint: 'Meizu/meizu_mx2/mx2:4.2.1/JOP40D/M04X.Flyme_OS_3.2.1387281333:user/release-keys'
12-30 19:28:56.912: I/DEBUG(1571): Revision: '17428'
12-30 19:28:56.912: I/DEBUG(1571): pid: 18175, tid: 18256, name: UnityMain >>> com.KodGames.WuLin <<<
12-30 19:28:56.912: I/DEBUG(1571): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00000000
12-30 19:28:57.057: I/DEBUG(1571): r0 00000000 r1 00000000 r2 00000001 r3 00000000
12-30 19:28:57.057: I/DEBUG(1571): r4 5f24c604 r5 5e402140 r6 00000002 r7 62976780
12-30 19:28:57.057: I/DEBUG(1571): r8 5de50548 r9 00000012 sl 5fc9cc0c fp 6000fc1c
12-30 19:28:57.057: I/DEBUG(1571): ip 00004000 sp 6000fc10 lr 5f14c160 pc 5f14c048 cpsr 80000050

 

I'm having the same problem in non-development builds:
01-08 16:20:44.920 F/libc (28867): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1), thread 28890 (UnityMain)
01-08 16:20:45.030 I/DEBUG ( 1894): pid: 28867, tid: 28890, name: UnityMain >>> com.joinstix.loonies <<<
01-08 16:20:46.640 I/ActivityManager( 2267): Process com.joinstix.loonies (pid 28867) has died.
01-08 16:20:46.670 D/Zygote ( 1897): Process 28867 terminated by signal (11)

It happens sometimes during attempt to LoadLevelAsync. Any ideas how to debug this?

 

Same here, only on a particular device.

F/mono (11988): * Assertion at mini-arm.c:2595, condition `pdata.found == 1' not met
F/libc (11988): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1), thread 12005 (UnityMain)
I/DEBUG ( 274): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG ( 274): Build fingerprint: 'qcom/bueller/bueller:4.2.2/JDQ39/51.1.0_userdebug_510008410:userdebug/test-keys'
I/DEBUG ( 274): Revision: '3'
I/DEBUG ( 274): pid: 11988, tid: 12005, name: UnityMain >>> com.studioevil.syderarcadehd <<<
I/DEBUG ( 274): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00000000
I/DEBUG ( 274): r0 00000000 r1 00000000 r2 00000001 r3 00000000
I/DEBUG ( 274): r4 5f348604 r5 775b1660 r6 00000002 r7 7abce2d0
I/DEBUG ( 274): r8 00000000 r9 5872b880 sl 6020db7c fp 6020d10c
I/DEBUG ( 274): ip 00004000 sp 6020d100 lr 5f248190 pc 5f248078 cpsr 80000010
I/DEBUG ( 274): d0 e5c01008e59b1008 d1 e89da980e28bd014
I/DEBUG ( 274): d2 e59f0000e1a0100e d3 0200067aeb000000
I/DEBUG ( 274): d4 0000000000000000 d5 44eaf12800000000
I/DEBUG ( 274): d6 407f600000000000 d7 4067d00000000000
I/DEBUG ( 274): d8 0000000000000000 d9 0000000000000000
I/DEBUG ( 274): d10 0000000000000000 d11 0000000000000000
I/DEBUG ( 274): d12 0000000000000000 d13 0000000000000000
I/DEBUG ( 274): d14 0000000000000000 d15 0000000000000000
I/DEBUG ( 274): d16 747265737341202a d17 6d207461206e6f69
I/DEBUG ( 274): d18 2e6d72612d696e69 d19 202c353935323a63
I/DEBUG ( 274): d20 6f697469646e6f63 d21 617461647060206e
I/DEBUG ( 274): d22 3d20646e756f662e d23 746f6e202731203d
I/DEBUG ( 274): d24 b3c000003f800003 d25 00000000b39bd7ca
I/DEBUG ( 274): d26 3f800001b3c00000 d27 00000000b4658c9c
I/DEBUG ( 274): d28 b4658c9cb39bd7ca d29 000000003f800002
I/DEBUG ( 274): d30 0000000000000000 d31 3f80000000000000
I/DEBUG ( 274): scr 8000009f

 

We also have the same problem, any solutions or new information?

 

Same problem when deserializing protobuf data.

 

We have the same problem(3.5.1f2):

F/mono (22518): * Assertion at mini-arm.c:2575, condition `pdata.found == 1' not met
F/libc (22518): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1)
D/memalloc( 133): /dev/pmem: Allocated buffer base:0x427be000 size:3112960 offset:18026496 fd:68
D/memalloc( 133): /dev/pmem: Freeing buffer base:0x445f1000 size:3485696 offset:31666176 fd:38
D/memalloc( 469): /dev/pmem: Unmapping buffer base:0x613c7000 size:35151872 offset:31666176
D/memalloc( 469): /dev/pmem: Mapped buffer base:0x613c7000 size:21139456 offset:18026496 fd:64
I/Adreno200-EGLSUB( 133): <CreateImage:893>: Android Image
I/Adreno200-EGLSUB( 133): <GetImageAttributes:1102>: RGBA_8888
D/Unity (22518): Watchdog wakeup : 4.33s has past without activity
I/DEBUG ( 131): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
I/DEBUG ( 131): Build fingerprint: 'SEMC/LT26i_1257-4009/LT26i:4.0.4/6.1.A.0.452/O_5_zw:user/release-keys'
I/DEBUG ( 131): pid: 22518, tid: 22538 >>> cn.com.lingosoft.tmxy <<<
I/DEBUG ( 131): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 00000000
I/DEBUG ( 131): r0 00000000 r1 0127ef68 r2 00000000 r3 00000000
I/DEBUG ( 131): r4 5c6a4678 r5 02496660 r6 00000002 r7 6ad49140
I/DEBUG ( 131): r8 5d28ba28 r9 00000000 10 00000000 fp 5d28afc4
I/DEBUG ( 131): ip 00000000 sp 5d28afb8 lr 5c5b72d0 pc 5c5b71b8 cpsr 60000010
I/DEBUG ( 131): d0 6f697469646e6f63 d1 617461647060206e
I/DEBUG ( 131): d2 3d20646e756f662e d3 746f6e202731203d
I/DEBUG ( 131): d4 e59fc000e597e000 d5 00000000ea000000
I/DEBUG ( 131): d6 e1a00007e12fff3c d7 e59fc000e597e000
I/DEBUG ( 131): d8 4019452140ca290a d9 0000000000000000
I/DEBUG ( 131): d10 0000000000000000 d11 0000000000000000
I/DEBUG ( 131): d12 0000000000000000 d13 0000000000000000
I/DEBUG ( 131): d14 0000000000000000 d15 0000000000000000
I/DEBUG ( 131): d16 6f662e6174616470 d17 31203d3d20646e75
I/DEBUG ( 131): d18 e3500000e1a04001 d19 e3550000ca000000
I/DEBUG ( 131): d20 e30906bc1a000000 d21 e59fc000e340024b
I/DEBUG ( 131): d22 00000000ea000000 d23 e1a01000e12fff3c
I/DEBUG ( 131): d24 0000000000000000 d25 0000000000000000
I/DEBUG ( 131): d26 0000000000000000 d27 0000000000000000
I/DEBUG ( 131): d28 0000000000000000 d29 00000000bca237c3
I/DEBUG ( 131): d30 0000000000000000 d31 0000000000000000
I/DEBUG ( 131): scr 8000001a
I/DEBUG ( 131):
I/DEBUG ( 131): #00 pc 002b91b8 /data/data/cn.com.lingosoft.tmxy/lib/libmono.so (explicitly_abort_from_unity)
I/DEBUG ( 131): #01 lr 5c5b72d0 /data/data/cn.com.lingosoft.tmxy/lib/libmono.so
I/DEBUG ( 131):
I/DEBUG ( 131): code around pc:
I/DEBUG ( 131): 5c5b7198 e8bd0800 e12fff1e e92d4800 e28db004 ....../..H-.....
I/DEBUG ( 131): 5c5b71a8 e24dd008 e3a03000 e50b3008 e51b3008 ..M..0...0...0..
I/DEBUG ( 131): 5c5b71b8 e5933000 e1a00003 ebf570c5 e24bd004 .0.......p....K.
I/DEBUG ( 131): 5c5b71c8 e8bd8800 e92d4810 e28db008 e24dd024 .....H-.....$.M.
I/DEBUG ( 131): 5c5b71d8 e59f40f8 e08f4004 e50b0018 e50b101c .@...@..........
I/DEBUG ( 131):
I/DEBUG ( 131): code around lr:
I/DEBUG ( 131): 5c5b72b0 e7943003 e2830054 ebf56fee e59f3030 .0..T....o..00..
I/DEBUG ( 131): 5c5b72c0 e7943003 e28300a8 ebf56fea ebffffb3 .0.......o......
I/DEBUG ( 131): 5c5b72d0 e24bd008 e8bd8810 000ed494 000c5da0 ..K..........]..
I/DEBUG ( 131): 5c5b72e0 000c5d8c 000c5d7c 000c5d5c 000c5d60 .]..|]..\]..`]..
I/DEBUG ( 131): 5c5b72f0 000f1fa0 00000474 e92d000c e92d4800 ....t.....-..H-.
I/DEBUG ( 131):
I/DEBUG ( 131): stack:
I/DEBUG ( 131): 5d28af78 00004000
I/DEBUG ( 131): 5d28af7c 00000000
I/DEBUG ( 131): 5d28af80 0127ef68 [heap]
I/DEBUG ( 131): 5d28af84 40119778 /system/lib/libc.so
I/DEBUG ( 131): 5d28af88 00000000
I/DEBUG ( 131): 5d28af8c 6ad49140
I/DEBUG ( 131): 5d28af90 5d28ba28
I/DEBUG ( 131): 5d28af94 00000000
I/DEBUG ( 131): 5d28af98 00000000
I/DEBUG ( 131): 5d28af9c 400f005f /system/lib/libc.so
I/DEBUG ( 131): 5d28afa0 0127ef68 [heap]
I/DEBUG ( 131): 5d28afa4 400f0087 /system/lib/libc.so
I/DEBUG ( 131): 5d28afa8 401195a0 /system/lib/libc.so
I/DEBUG ( 131): 5d28afac 40119778 /system/lib/libc.so
I/DEBUG ( 131): 5d28afb0 e3a070ad
I/DEBUG ( 131): 5d28afb4 ef9000ad
I/DEBUG ( 131): #00 5d28afb8 5c6a4678 /data/data/cn.com.lingosoft.tmxy/lib/libmono.so
I/DEBUG ( 131): 5d28afbc 00000000
I/DEBUG ( 131): 5d28afc0 5d28aff4
I/DEBUG ( 131): 5d28afc4 5c5b72d0 /data/data/cn.com.lingosoft.tmxy/lib/libmono.so
I/DEBUG ( 131): 5d28afc8 5c67cfd4 /data/data/cn.com.lingosoft.tmxy/lib/libmono.so
I/DEBUG ( 131): 5d28afcc 02430ae0 [heap]
I/DEBUG ( 131): 5d28afd0 5d28b014
I/DEBUG ( 131): 5d28afd4 5c5f2ef4 /data/data/cn.com.lingosoft.tmxy/lib/libmono.so
I/DEBUG ( 131): 5d28afd8 00000004
I/DEBUG ( 131): 5d28afdc 00000000
I/DEBUG ( 131): 5d28afe0 5c5f3178 /data/data/cn.com.lingosoft.tmxy/lib/libmono.so
I/DEBUG ( 131): 5d28afe4 02430ae0 [heap]
I/DEBUG ( 131): 5d28afe8 00000002
I/DEBUG ( 131): 5d28afec 02430ba0 [heap]
I/DEBUG ( 131): 5d28aff0 5d28b00c
I/DEBUG ( 131): 5d28aff4 5c5b732c /data/data/cn.com.lingosoft.tmxy/lib/libmono.so
I/DEBUG ( 131): 5d28aff8 00000004
I/DEBUG ( 131): 5d28affc 00000000

 

I encountered this too yesterday. It died when deserializing the class ADVTreeNode using protobuf-net:

[ProtoContract]
[ProtoInclude(100, "ADVTreeNode"]
public class TreeNode<T>;

[ProtoContract]
public class ADVTreeNode : TreeNode<ADVScene>;

After some desperate tries, I found that making the class NOT inheriting from a generic class would solve the problem.
Which means merging the class TreeNode to ADVTreeNode and makes ADVTreeNode become:

[ProtoContract]
public class ADVTreeNode; // move all codes in TreeNode<ADVScene> into this class

I have no idea why, but it did fix the problem. I hope this would help.

P.S. This problem occurred again after changing the order of the scenes. This time I re-order the loading sequence and it was mysteriously solved.

P.P.S This problem occurred once again, and this time I keep the proto-buf deserializing part of code in Awake() while moving all Unity game object initializing code into Start(). This solved the problem, but I do not know why.

 

Also having this issue, also happens around a section of code that handles serialization (using Newtonsoft json.net). Only happens on the Nexus 7.

 

I have met the problem and solve it recently.
protobuf-net will cause jit assetion err when using protobuf-net.dll.
I found a simple way to solve it, just copy protobuf-net source code to your unity project.

 

same problem

 

We are having the same trouble here (it happens only in one device), latest version of Unity5 (does not happen in Unity4). We also have observed that the error disappear activating FULL .NET 2.0 instead of .NET 2.0 (subset).

Any progress on this? It seems to be hitting lot of people.

 

we have same problem
when call
MemoryStream mem5 = new MemoryStream();

DTOSerializer dtoSerializer2 = new DTOSerializer();

ReqTestCmd testCmd = new ReqTestCmd();
Debug.Log("CallBackTryConnect3 1");
dtoSerializer2.Serialize(mem5, testCmd);

how to fix it~~~

 

I have same problem use protobuf-net
how fix it

 

I having the same trouble, and you just fix it by switch to .NET 2.0 or need something else?