Bug Il2cpp crash at malloc

You are talking about 2020.3.34f1? We will definitely try it, once it is released.

I also found a bug report for the Boehm GC (Mono) that has a very similar stack trace: https://bugzilla.xamarin.com/21/21939/bug.html (unfortunately it was never resolved) - but maybe this helps track the problem down, as the user in the bug report talks about a potential fix.

 

I don't see any clear indication of this bugfix on the .35 release notes, could you confirm if is there?

 

We have released a new version with unity .35 and are still seeing this problem. So it does not seem to been fixed

 

We also faces the similiar issue in Unity 2020.3.35

And, i am within android platform, not ios

 

Hi，We have a similar problems during the building process when ran into to GC_ push_all function. The "Unexpected mark stack overflow" exception is thrown and then show a message box, all threads is waiting for single object.

This is the call stack from dump file in main thread. Unity version is 2019.4.35

Code (Boo):

1. # Child-SP          RetAddr               Call Site
2. 00 000000b2`3c729b28 00007ffb`419bd6d1     win32u!NtUserWaitMessage+0x14
3. 01 000000b2`3c729b30 00007ffb`419bd441     user32!DialogBox2+0x261
4. 02 000000b2`3c729bd0 00007ffb`41a0bb4b     user32!InternalDialogBox+0x12d
5. 03 000000b2`3c729c30 00007ffb`41a0a465     user32!SoftModalMessageBox+0x85b
6. 04 000000b2`3c729d80 00007ffb`41a0b257     user32!MessageBoxWorker+0x341
7. 05 000000b2`3c729f30 00007ffb`41a0b048     user32!MessageBoxTimeoutW+0x1a7
8. 06 000000b2`3c72a030 00007ffb`41a0ac5e     user32!MessageBoxTimeoutA+0x108
9. 07 000000b2`3c72a090 00007ffa`d6f87da8     user32!MessageBoxA+0x4e
10. 08 (Inline Function) --------`--------     mono_2_0_bdwgc!GC_win32_MessageBoxA+0x18 [c:\build\output\unity-technologies\mono\external\bdwgc\misc.c @ 823]
11. 09 000000b2`3c72a0d0 00007ffa`d6f9304a     mono_2_0_bdwgc!GC_default_on_abort+0x30 [c:\build\output\unity-technologies\mono\external\bdwgc\misc.c @ 1950]
12. 0a 000000b2`3c72a100 00007ffa`d6c81bcc     mono_2_0_bdwgc!GC_push_all+0x46 [c:\build\output\unity-technologies\mono\external\bdwgc\mark.c @ 1351]
13. 0b 000000b2`3c72a130 00007ffa`d6d98bbf     mono_2_0_bdwgc!monoeg_g_hash_table_foreach+0x9c [c:\build\output\unity-technologies\mono\mono\eglib\ghashtable.c @ 354]
14. 0c 000000b2`3c72a180 00007ffa`d6f93c2d     mono_2_0_bdwgc!mono_push_other_roots+0x1f [c:\build\output\unity-technologies\mono\mono\metadata\boehm-gc.c @ 715]
15. 0d 000000b2`3c72a1b0 00007ffa`d6f91531     mono_2_0_bdwgc!GC_push_roots+0xc9 [c:\build\output\unity-technologies\mono\external\bdwgc\mark_rts.c @ 938]
16. 0e 000000b2`3c72a1e0 00007ffa`d6f9128d     mono_2_0_bdwgc!GC_mark_some_inner+0x24d [c:\build\output\unity-technologies\mono\external\bdwgc\mark.c @ 335]
17. 0f 000000b2`3c72a210 00007ffa`d6f8a385     mono_2_0_bdwgc!GC_mark_some+0x9 [c:\build\output\unity-technologies\mono\external\bdwgc\mark.c @ 495]
18. 10 000000b2`3c72a250 00007ffa`d6f8923a     mono_2_0_bdwgc!GC_collect_a_little_inner+0x49 [c:\build\output\unity-technologies\mono\external\bdwgc\alloc.c @ 649]
19. 11 000000b2`3c72a280 00007ffa`d6f8dda8     mono_2_0_bdwgc!GC_allocobj+0x7a [c:\build\output\unity-technologies\mono\external\bdwgc\alloc.c @ 1545]
20. 12 000000b2`3c72a2c0 00007ffa`d6f8da7f     mono_2_0_bdwgc!GC_generic_malloc_inner+0x124 [c:\build\output\unity-technologies\mono\external\bdwgc\malloc.c @ 191]
21. 13 000000b2`3c72a300 00007ffa`d6f908bc     mono_2_0_bdwgc!GC_generic_malloc+0x16b [c:\build\output\unity-technologies\mono\external\bdwgc\malloc.c @ 252]
22. 14 000000b2`3c72a340 00007ffa`d6d9745d     mono_2_0_bdwgc!GC_malloc_kind_global+0xd8 [c:\build\output\unity-technologies\mono\external\bdwgc\malloc.c @ 327]
23. 15 000000b2`3c72a370 00007ffa`d6d3d3e1     mono_2_0_bdwgc!mono_gc_alloc_string+0x1d [c:\build\output\unity-technologies\mono\mono\metadata\boehm-gc.c @ 924]
24. 16 000000b2`3c72a3a0 00007ffa`d6d500bf     mono_2_0_bdwgc!mono_string_new_size_checked+0xc1 [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 6242]
25. 17 000000b2`3c72a440 000001da`6ab44947     mono_2_0_bdwgc!ves_icall_System_String_InternalAllocateStr+0x1f [c:\build\output\unity-technologies\mono\mono\metadata\string-icalls.c @ 41]
26. 18 000000b2`3c72a4e0 000001da`6aba3ef3     0x000001da`6ab44947
27. 19 000000b2`3c72a570 000001da`6aba3c23     0x000001da`6aba3ef3
28. 1a 000000b2`3c72a620 000001dc`0792221b     0x000001da`6aba3c23
29. 1b 000000b2`3c72a680 000001dc`0792f06b     0x000001dc`0792221b
30. 1c 000000b2`3c72a730 000001dc`078c035a     0x000001dc`0792f06b
31. 1d 000000b2`3c72a7a0 000001dc`078becbb     0x000001dc`078c035a
32. 1e 000000b2`3c72a870 000001dc`078dadb3     0x000001dc`078becbb
33. 1f 000000b2`3c72aa30 000001dc`078bfaf3     0x000001dc`078dadb3
34. 20 000000b2`3c72aaf0 000001dc`078a3a43     0x000001dc`078bfaf3
35. 21 000000b2`3c72acb0 000001dc`0784cafb     0x000001dc`078a3a43
36. 22 000000b2`3c72add0 000001dc`0784cf89     0x000001dc`0784cafb
37. 23 000000b2`3c72aed0 00007ffa`d6dae290     0x000001dc`0784cf89
38. 24 000000b2`3c72af80 00007ffa`d6d32ac2     mono_2_0_bdwgc!mono_jit_runtime_invoke+0x530 [c:\build\output\unity-technologies\mono\mono\mini\mini-runtime.c @ 2835]
39. 25 000000b2`3c72b160 00007ffa`d6d3bb1f     mono_2_0_bdwgc!do_runtime_invoke+0x82 [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 2921]
40. 26 (Inline Function) --------`--------     mono_2_0_bdwgc!mono_runtime_try_invoke+0x47 [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 3026]
41. 27 000000b2`3c72b1b0 00007ff7`0b99ceae     mono_2_0_bdwgc!mono_runtime_invoke+0x6f [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 2968]
42. 28 000000b2`3c72b260 00007ff7`0b99684d     Unity!scripting_method_invoke+0xbe
43. 29 000000b2`3c72b2a0 00007ff7`0b9901d3     Unity!ScriptingInvocation::Invoke+0x21d
44. 2a 000000b2`3c72b3f0 00007ff7`0a3efb7f     Unity!ScriptingInvocation::Invoke<ScriptingArrayPtr>+0x13
45. 2b 000000b2`3c72b420 00007ff7`0a3d1f37     Unity!BuildPipeline::GenerateAssemblyTypeInfos+0x27f
46. 2c 000000b2`3c72b680 00007ff7`0a7c28b6     Unity!BuildPipeline::CompilePlayerScripts+0x9f7
47. 2d 000000b2`3c72b920 000001db`908dbeeb     Unity!PlayerBuildInterface_CUSTOM_CompilePlayerScriptsNative_Injected+0x246
48. 2e 000000b2`3c72ba90 000001db`908dbce3     0x000001db`908dbeeb
49. 2f 000000b2`3c72bb20 000001db`908db683     0x000001db`908dbce3
50. 30 000000b2`3c72bbc0 000001db`908db33b     0x000001db`908db683
51. 31 000000b2`3c72bcd0 000001db`908da843     0x000001db`908db33b
52. 32 000000b2`3c72bda0 000001da`e0cbb263     0x000001db`908da843
53. 33 000000b2`3c72beb0 000001da`e0b976d3     0x000001da`e0cbb263
54. 34 000000b2`3c72c0f0 000001da`e09e3163     0x000001da`e0b976d3
55. 35 000000b2`3c72c260 000001da`e09e28e3     0x000001da`e09e3163
56. 36 000000b2`3c72c2d0 000001da`e0b95d1b     0x000001da`e09e28e3
57. 37 000000b2`3c72c3a0 000001da`e0b94fe3     0x000001da`e0b95d1b
58. 38 000000b2`3c72c570 000001da`e0b904b3     0x000001da`e0b94fe3
59. 39 000000b2`3c72cdc0 000001da`e0b7be33     0x000001da`e0b904b3
60. 3a 000000b2`3c72d020 000001db`908d8a13     0x000001da`e0b7be33
61. 3b 000000b2`3c72d180 000001da`da09b9b5     0x000001db`908d8a13
62. 3c 000000b2`3c72d660 00007ffa`d6dae290     0x000001da`da09b9b5
63. 3d 000000b2`3c72d710 00007ffa`d6d32ac2     mono_2_0_bdwgc!mono_jit_runtime_invoke+0x530 [c:\build\output\unity-technologies\mono\mono\mini\mini-runtime.c @ 2835]
64. 3e 000000b2`3c72d8f0 00007ffa`d6d3b1dc     mono_2_0_bdwgc!do_runtime_invoke+0x82 [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 2921]
65. 3f 000000b2`3c72d940 00007ffa`d6da97bd     mono_2_0_bdwgc!mono_runtime_class_init_full+0x2bc [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 477]
66. 40 000000b2`3c72d9c0 00007ffa`d6dad742     mono_2_0_bdwgc!mono_jit_compile_method_inner+0x83d [c:\build\output\unity-technologies\mono\mono\mini\mini.c @ 4365]
67. 41 000000b2`3c72da60 00007ffa`d6e89a76     mono_2_0_bdwgc!mono_jit_compile_method_with_opt+0x3b2 [c:\build\output\unity-technologies\mono\mono\mini\mini-runtime.c @ 2159]
68. 42 000000b2`3c72dab0 00007ffa`d6e8bab4     mono_2_0_bdwgc!common_call_trampoline+0x606 [c:\build\output\unity-technologies\mono\mono\mini\mini-trampolines.c @ 716]
69. 43 000000b2`3c72db70 000001da`66a803a3     mono_2_0_bdwgc!mono_magic_trampoline+0x74 [c:\build\output\unity-technologies\mono\mono\mini\mini-trampolines.c @ 848]
70. 44 000000b2`3c72dc20 000001db`908d70ab     0x000001da`66a803a3
71. 45 000000b2`3c72de40 000001db`908d3bb3     0x000001db`908d70ab
72. 46 000000b2`3c72df10 000001da`e0b0238b     0x000001db`908d3bb3
73. 47 000000b2`3c72e270 000001da`e0a19f7b     0x000001da`e0b0238b
74. 48 000000b2`3c72e680 000001da`da09b9b5     0x000001da`e0a19f7b
75. 49 000000b2`3c72ea60 00007ffa`d6dae290     0x000001da`da09b9b5
76. 4a 000000b2`3c72eb10 00007ffa`d6d32ac2     mono_2_0_bdwgc!mono_jit_runtime_invoke+0x530 [c:\build\output\unity-technologies\mono\mono\mini\mini-runtime.c @ 2835]
77. 4b 000000b2`3c72ecf0 00007ffa`d6d3bb1f     mono_2_0_bdwgc!do_runtime_invoke+0x82 [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 2921]
78. 4c (Inline Function) --------`--------     mono_2_0_bdwgc!mono_runtime_try_invoke+0x47 [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 3026]
79. 4d 000000b2`3c72ed40 00007ff7`0b99ceae     mono_2_0_bdwgc!mono_runtime_invoke+0x6f [c:\build\output\unity-technologies\mono\mono\metadata\object.c @ 2968]
80. 4e 000000b2`3c72edf0 00007ff7`0b99684d     Unity!scripting_method_invoke+0xbe
81. 4f 000000b2`3c72ee30 00007ff7`096f54a0     Unity!ScriptingInvocation::Invoke+0x21d
82. 50 000000b2`3c72ef80 00007ff7`096eca7e     Unity!Application::ParseARGVCommands+0x830
83. 51 000000b2`3c72f360 00007ff7`0a0b4553     Unity!Application::FinishLoadingProject+0x22e
84. 52 000000b2`3c72f470 00007ff7`0d1b6f02     Unity!WinMain+0xc33
85. 53 000000b2`3c73f740 00007ffb`40397034     Unity!__scrt_common_main_seh+0x106
86. 54 000000b2`3c73f780 00007ffb`41ea2651     kernel32!BaseThreadInitThunk+0x14
87. 55 000000b2`3c73f7b0 00000000`00000000     ntdll!RtlUserThreadStart+0x21

 

This happen in Unity Editor when BuildPipeline::CompilePlayerScripts is invoked. This problem occurs occasionally.

Incremental GC is enabled in Build Player Setting. But I think this option only affect the final application.

 

Hi,
Have encountered same issue. Using unity 2020.3.35. Incremental GC is disabled.

The game crashing very often. It is multiplayer, so it's crashing on multiple clients at the same time. Here is stack trace:
IL2CPP

Code (Boo):

1. ======= OUTPUTTING STACK TRACE ==================
2.  
3. 0x00007FFAEF60EFE2 (GameAssembly) [c:\program files\unity\2020.3.35f1\editor\data\il2cpp\external\bdwgc\malloc.c:333] GC_malloc_kind
4. 0x00007FFAEF5F743F (GameAssembly) [c:\program files\unity\2020.3.35f1\editor\data\il2cpp\libil2cpp\vm\array.cpp:128] il2cpp::vm::Array::NewSpecific
5. 0x00007FFAF08F6388 (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\photon3unity3d2.cpp:19349] StreamBuffer_ToArray_m84C066019D36E263104C521B4EB3CC7002C7D536
6. 0x00007FFAF08F17D6 (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\photon3unity3d2.cpp:11474] SocketTcp_ReceiveLoop_m90541B0DC94FC026611E1A2B6140F7D7D90BC29F
7. 0x00007FFAF03DA632 (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\mscorlib19.cpp:24069] ThreadStart_Invoke_m784444605A7ADF6A9948A4587DF33CDAC1B06536
8. 0x00007FFAEFD1753D (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\mscorlib2.cpp:43070] ContextCallback_Invoke_mF4F8496213E8F0925947DD8994A477AE2E54EFDF
9. 0x00007FFAF04FF097 (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\mscorlib8.cpp:18943] ExecutionContext_RunInternal_mC5D58D6EDE270B4CDA05181E9064E040D6692B2B
10. 0x00007FFAF04FF220 (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\mscorlib8.cpp:18788] ExecutionContext_Run_m818AB2408824BF47B0D639082CDC164DBF9259D4
11. 0x00007FFAF03DA632 (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\mscorlib19.cpp:24069] ThreadStart_Invoke_m784444605A7ADF6A9948A4587DF33CDAC1B06536
12. 0x00007FFAEF42711C (GameAssembly) [d:\escapismsoftworks\quad force\camps2020\library\il2cppbuildcache\windows\x64\il2cppoutput\il2cppinvokertable.cpp:114168] RuntimeInvoker_TrueVoid_t700C6383A2A510C2CF4DD86DABD5CA9FF70ADAC5
13. 0x00007FFAEF5F2C29 (GameAssembly) [c:\program files\unity\2020.3.35f1\editor\data\il2cpp\libil2cpp\vm\runtime.cpp:568] il2cpp::vm::Runtime::Invoke
14. 0x00007FFAEF5CF61F (GameAssembly) [c:\program files\unity\2020.3.35f1\editor\data\il2cpp\libil2cpp\icalls\mscorlib\system.threading\thread.cpp:158] il2cpp::icalls::mscorlib::System::Threading::ThreadStart
15. 0x00007FFAEF5B9892 (GameAssembly) [c:\program files\unity\2020.3.35f1\editor\data\il2cpp\libil2cpp\os\thread.cpp:186] il2cpp::os::Thread::RunWrapper
16. 0x00007FFAEF5BAA53 (GameAssembly) [c:\program files\unity\2020.3.35f1\editor\data\il2cpp\libil2cpp\os\win32\threadimpl.cpp:28] il2cpp::os::ThreadStartWrapper
17. 0x00007FFBA09F7034 (KERNEL32) BaseThreadInitThunk
18. 0x00007FFBA21C2651 (ntdll) RtlUserThreadStart
19.  
20. ========== END OF STACKTRACE ===========

Test with Mono. Crashed simultaneously on client and master.
Player (Master)

Code (Boo):

1. ========== OUTPUTTING STACK TRACE ==================
2.  
3. 0x00007FFAEFA21A5A (mono-2.0-bdwgc) GC_malloc_kind
4. 0x00007FFAEF827689 (mono-2.0-bdwgc) mono_object_hash
5. 0x00007FFAEF7C9BC5 (mono-2.0-bdwgc) mono_object_new_alloc_specific
6. 0x00007FFAEF7CA0FA (mono-2.0-bdwgc) mono_object_new_specific
7. 0x00007FFAEF7CF503 (mono-2.0-bdwgc) mono_vtable_get_static_field_data
8. 0x0000023A66BC1004 (Mono JIT Code) (wrapper managed-to-native) object:__icall_wrapper_ves_icall_object_new_specific (intptr)
9. 0x0000023CC752603B (Mono JIT Code) System.NumberFormatter/CustomInfo:Parse (string,int,int,System.Globalization.NumberFormatInfo)
10. 0x0000023CC752524B (Mono JIT Code) System.NumberFormatter:FormatCustom (string,System.Globalization.NumberFormatInfo)
11. 0x0000023C14339463 (Mono JIT Code) System.NumberFormatter:IntegerToString (string,System.IFormatProvider)
12. 0x0000023C143385BB (Mono JIT Code) System.NumberFormatter:NumberToString (string,int,System.IFormatProvider)
13. 0x0000023C143384F3 (Mono JIT Code) System.Number:FormatInt32 (int,string,System.Globalization.NumberFormatInfo)
14. 0x0000023CEC098FDB (Mono JIT Code) int:ToString (string,System.IFormatProvider)
15. 0x0000023A66BCA201 (Mono JIT Code) System.Text.StringBuilder:AppendFormatHelper (System.IFormatProvider,string,System.ParamsArray)
16. 0x0000023A66BC9253 (Mono JIT Code) string:FormatHelper (System.IFormatProvider,string,System.ParamsArray)
17. 0x0000023CEC03CD3B (Mono JIT Code) string:Format (string,object,object)
18. 0x0000023C1B94A0A3 (Mono JIT Code) MainBarUI:UpdateUITick ()
19. 0x0000023C1B949E8C (Mono JIT Code) UIPersonal:OnLocalSyncTick ()
20. 0x0000023CEC076DB2 (Mono JIT Code) (wrapper delegate-invoke) <Module>:invoke_void ()
21. 0x0000023C1B946F90 (Mono JIT Code) GameManager:RpcSyncTick (int)
22. 0x0000023CEE0AEDCC (Mono JIT Code) (wrapper runtime-invoke) <Module>:runtime_invoke_void__this___int (object,intptr,intptr,intptr)
23. 0x00007FFAEF83F1E0 (mono-2.0-bdwgc) mono_get_runtime_build_info
24. 0x00007FFAEF7C2AC2 (mono-2.0-bdwgc) mono_perfcounters_init
25. 0x00007FFAEF7CBCF2 (mono-2.0-bdwgc) mono_runtime_invoke_array
26. 0x00007FFAEF7CC489 (mono-2.0-bdwgc) mono_runtime_set_main_args
27. 0x00007FFAEF7CBC86 (mono-2.0-bdwgc) mono_runtime_invoke_array
28. 0x00007FFAEF7704A4 (mono-2.0-bdwgc) mono_lookup_internal_call
29. 0x0000023CB9F64290 (Mono JIT Code) (wrapper managed-to-native) System.Reflection.MonoMethod:InternalInvoke (System.Reflection.MonoMethod,object,object[],System.Exception&)
30. 0x0000023CB9F63DFB (Mono JIT Code) System.Reflection.MonoMethod:Invoke (object,System.Reflection.BindingFlags,System.Reflection.Binder,object[],System.Globalization.CultureInfo)
31. 0x0000023CB9F63D1E (Mono JIT Code) System.Reflection.MethodBase:Invoke (object,object[])
32. 0x0000023CB9F6299B (Mono JIT Code) Photon.Pun.PhotonNetwork:ExecuteRpc (ExitGames.Client.Photon.Hashtable,Photon.Realtime.Player)
33. 0x0000023CB9F609FB (Mono JIT Code) Photon.Pun.PhotonNetwork:RPC (Photon.Pun.PhotonView,string,Photon.Pun.RpcTarget,Photon.Realtime.Player,bool,object[])
34. 0x0000023CB9F17DDB (Mono JIT Code) Photon.Pun.PhotonNetwork:RPC (Photon.Pun.PhotonView,string,Photon.Pun.RpcTarget,bool,object[])
35. 0x0000023CB9F17C73 (Mono JIT Code) Photon.Pun.PhotonView:RPC (string,Photon.Pun.RpcTarget,object[])
36. 0x0000023C1B9381E3 (Mono JIT Code) GameManager/<GameMainTickOp>d__134:MoveNext ()
37. 0x0000023C1442837C (Mono JIT Code) UnityEngine.SetupCoroutine:InvokeMoveNext (System.Collections.IEnumerator,intptr)
38. 0x0000023C144284A7 (Mono JIT Code) (wrapper runtime-invoke) <Module>:runtime_invoke_void_object_intptr (object,intptr,intptr,intptr)
39. 0x00007FFAEF83F1E0 (mono-2.0-bdwgc) mono_get_runtime_build_info
40. 0x00007FFAEF7C2AC2 (mono-2.0-bdwgc) mono_perfcounters_init
41. 0x00007FFAEF7CBB1F (mono-2.0-bdwgc) mono_runtime_invoke
42. 0x00007FFAF076DADD (UnityPlayer) UnityMain
43. 0x00007FFAF076ABD2 (UnityPlayer) UnityMain
44. 0x00007FFAF074E055 (UnityPlayer) UnityMain
45. 0x00007FFAF04C6054 (UnityPlayer) UnityMain
46. 0x00007FFAF05F839A (UnityPlayer) UnityMain
47. 0x00007FFAF05F8440 (UnityPlayer) UnityMain
48. 0x00007FFAF05FC6D8 (UnityPlayer) UnityMain
49.   ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFAF03BC95A)
50. 0x00007FFAF03BC95A (UnityPlayer) (function-name not available)
51.   ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFAF03BAE2B)
52. 0x00007FFAF03BAE2B (UnityPlayer) (function-name not available)
53.   ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FFAF03BFF92)
54. 0x00007FFAF03BFF92 (UnityPlayer) (function-name not available)
55. 0x00007FFAF03C0F1B (UnityPlayer) UnityMain
56.   ERROR: SymGetSymFromAddr64, GetLastError: 'Attempt to access invalid address.' (Address: 00007FF60F5411F2)
57. 0x00007FF60F5411F2 (CAMPS) (function-name not available)
58. 0x00007FFBA09F7034 (KERNEL32) BaseThreadInitThunk
59. 0x00007FFBA21C2651 (ntdll) RtlUserThreadStart
60.  
61. ========== END OF STACKTRACE ===========

Editor (Client)

Code (Boo):

1. ========== OUTPUTTING STACK TRACE ==================
2.  
3. 0x00007FFB24691A5A (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\external\bdwgc\malloc.c:308] GC_malloc_kind_global
4. 0x00007FFB2449774D (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\boehm-gc.c:1083] mono_gc_alloc_string
5. 0x00007FFB2443D3E1 (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\object.c:6242] mono_string_new_size_checked
6. 0x00007FFB2443D524 (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\object.c:6147] mono_string_new_utf16_handle
7. 0x00007FFB243D99F4 (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\w32file.c:281] ves_icall_System_IO_MonoIO_FindNextFile
8. 0x0000025D3DBAAAFA (Mono JIT Code) (wrapper managed-to-native) System.IO.MonoIO:FindNextFile (intptr,string&,int&,int&)
9. 0x0000025D3DBAA78B (Mono JIT Code) System.IO.FileSystemEnumerableIterator`1<TSource_REF>:MoveNext ()
10. 0x0000025CD14F936A (Mono JIT Code) System.Collections.Generic.List`1<T_REF>:.ctor (System.Collections.Generic.IEnumerable`1<T_REF>)
11. 0x0000025D3DBA7C5B (Mono JIT Code) System.IO.Directory:InternalGetFileDirectoryNames (string,string,string,bool,bool,System.IO.SearchOption,bool)
12. 0x0000025D3DBA7BA3 (Mono JIT Code) System.IO.Directory:InternalGetFileSystemEntries (string,string,System.IO.SearchOption)
13. 0x0000025D3DBA7A9B (Mono JIT Code) System.IO.Directory:GetFileSystemEntries (string,string)
14. 0x0000025D3DBA7873 (Mono JIT Code) System.IO.DefaultWatcher:DoFiles (System.IO.DefaultWatcherData,string,bool)
15. 0x0000025D3DBA76EB (Mono JIT Code) System.IO.DefaultWatcher:UpdateDataAndDispatch (System.IO.DefaultWatcherData,bool)
16. 0x0000025D3DBA687B (Mono JIT Code) System.IO.DefaultWatcher:Monitor ()
17. 0x0000025D3C6EC6A6 (Mono JIT Code) System.Threading.ThreadHelper:ThreadStart_Context (object)
18. 0x0000025D3C6EC36E (Mono JIT Code) System.Threading.ExecutionContext:RunInternal (System.Threading.ExecutionContext,System.Threading.ContextCallback,object,bool)
19. 0x0000025D3C6EC15B (Mono JIT Code) System.Threading.ExecutionContext:Run (System.Threading.ExecutionContext,System.Threading.ContextCallback,object,bool)
20. 0x0000025D3C6EBF1B (Mono JIT Code) System.Threading.ExecutionContext:Run (System.Threading.ExecutionContext,System.Threading.ContextCallback,object)
21. 0x0000025D3C6EBD73 (Mono JIT Code) System.Threading.ThreadHelper:ThreadStart ()
22. 0x0000025D3C6EBCD4 (Mono JIT Code) (wrapper runtime-invoke) object:runtime_invoke_void__this__ (object,intptr,intptr,intptr)
23. 0x00007FFB244AF1E0 (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\mini\mini-runtime.c:2849] mono_jit_runtime_invoke
24. 0x00007FFB24432AC2 (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\object.c:2921] do_runtime_invoke
25. 0x00007FFB2443BCF2 (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\object.c:3073] mono_runtime_invoke_checked
26. 0x00007FFB24456C2F (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\threads.c:1077] start_wrapper_internal
27. 0x00007FFB24456976 (mono-2.0-bdwgc) [c:\build\output\unity-technologies\mono\mono\metadata\threads.c:1127] start_wrapper
28. 0x00007FFBA09F7034 (KERNEL32) BaseThreadInitThunk
29. 0x00007FFBA21C2651 (ntdll) RtlUserThreadStart
30.  
31. ========== END OF STACKTRACE ===========

 

Hi, I would like to report it, but the problem is that I still can't isolate the problem or get the precise pattern of it's appearing.
Yesterday I've moved to 2020.3.38. Today we did some tests and the issue is still exists.

The only thing I can say for sure, it mostly happens when something is "exploded" (allocated) during the game. But the pattern of this issue is unpredictable. It happen on both clients simultaneously, or might be only on one client.
I did external tests with debug "explosion" button to spam explosions over the map. It may take over couple hundred explosions with no issue, but next time just few with exactly same crash for both clients.

 

Sure, I'll keep looking for a reason as it's high priority atm. Maybe even have to try it on previous versions of engine. The project is already third year in development, and there wasn't any issue before. Ill be right back after I have more details.

 

Ok, the issue was finally isolated. As I said it was on explosion during memory allocation. There is a method that modifying the terrain. You may try it yourself by putting this into infinity loop.

Code (CSharp):

1.  
2.  
3. private TerrainData GetTerrainData() => _targetTerrain.terrainData;
4. private Vector3 GetTerrainSize() => GetTerrainData().size;
5.  
6. public Vector3 WorldToTerrainPosition(Vector3 worldPosition)
7.     {
8.         var terrainPosition = worldPosition - _targetTerrain.GetPosition();
9.  
10.         var terrainSize = GetTerrainSize();
11.  
12.         var heightmapResolution = GetHeightmapResolution();
13.  
14.         terrainPosition = new Vector3(terrainPosition.x / terrainSize.x, terrainPosition.y / terrainSize.y, terrainPosition.z / terrainSize.z);
15.  
16.         return new Vector3(terrainPosition.x * heightmapResolution, 0, terrainPosition.z * heightmapResolution);
17.     }
18.  
19.     public Vector2Int GetBrushPosition(Vector3 worldPosition, int brushWidth, int brushHeight)
20.     {
21.         var terrainPosition = WorldToTerrainPosition(worldPosition);
22.  
23.         var heightmapResolution = GetHeightmapResolution();
24.  
25.         return new Vector2Int((int)Mathf.Clamp(terrainPosition.x - brushWidth / 2.0f, 0.0f, heightmapResolution), (int)Mathf.Clamp(terrainPosition.z - brushHeight / 2.0f, 0.0f, heightmapResolution));
26.     }
27.  
28.     public Vector2Int GetSafeBrushSize(int brushX, int brushY, int brushWidth, int brushHeight)
29.     {
30.         var heightmapResolution = GetHeightmapResolution();
31.  
32.         while (heightmapResolution - (brushX + brushWidth) < 0) brushWidth--;
33.  
34.         while (heightmapResolution - (brushY + brushHeight) < 0) brushHeight--;
35.  
36.         return new Vector2Int(brushWidth, brushHeight);
37.     }
38.  
39. public void LowerTerrain(Vector3 worldPosition, float strength, int brushWidth, int brushHeight)
40.     {
41.         var brushPosition = GetBrushPosition(worldPosition, brushWidth, brushHeight);
42.  
43.         var brushSize = GetSafeBrushSize(brushPosition.x, brushPosition.y, brushWidth, brushHeight);
44.  
45.         var tempHeights = GetTerrainData().GetHeights(brushPosition.x, brushPosition.y, brushSize.x, brushSize.y);
46.         var tempDetails = GetTerrainData().GetDetailLayer(brushPosition.x, brushPosition.y, brushSize.x, brushSize.y, 0);
47.  
48.         for (var y = 0; y < brushSize.y; y++)
49.         {
50.             for (var x = 0; x < brushSize.x; x++)
51.             {
52.                 tempHeights[y, x] -= strength * Time.fixedDeltaTime;
53.             }
54.         }
55.         GetTerrainData().SetHeights(brushPosition.x, brushPosition.y, tempHeights);// terrainData.SetHeightsDelayLOD(brushPosition.x, brushPosition.y, heights);
56.         //terrainData.SyncHeightmap();
57.     }

The engine does silent crash at some point if "LowerTerrain" function are repeatedly invoking.

 

Can someone help on this - https://forum.unity.com/threads/crashes-in-lts-2021-3-13.1375125/#post-8677377??
Thanks in advance

 

So any solution for this GC problem? or any way to get around it ?

 

Still see in Unity 2021 latest version