GrapheneOS / os-issue-tracker

Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
https://grapheneos.org/
336 stars 18 forks source link

gpsd crash #3665

Open davidwilliams238 opened 2 weeks ago

davidwilliams238 commented 2 weeks ago

Crash on latest version of GrapheneOS, Pixel 7 Pro

type: crash
osVersion: google/cheetah/cheetah:14/AP2A.240605.024/2024061400:user/release-keys
uid: 1021 (u:r:gpsd:s0)
cmdline: /vendor/bin/hw/gpsd -c /vendor/etc/gnss/gps.xml
processUptime: 193485s

signal: 11 (SIGSEGV), code 2 (SEGV_ACCERR), faultAddr c62375779018
threadName: main

backtrace:
    /vendor/bin/hw/gpsd (Copy_SUPL10_SUPLINIT_to_GLSUPL_SUPLINIT(asn1_supl::ASN1T_SUPLINIT const&, GLSUPL_SUPLINIT&)+632, pc 7e7270)
    /vendor/bin/hw/gpsd (glsupl_DynamicDecodeSuplInit10+304, pc 7cf058)
    /vendor/bin/hw/gpsd (GlSuplEngineImpl::OnNetworkRequest(unsigned char const*, int, unsigned char const*, GLSUPL_StatusCode const*)+340, pc 7e9d18)
    /vendor/bin/hw/gpsd (GlSuplHalPlatform::OnNetworkRequest(unsigned char const*, int, bool)+788, pc 3d1a2c)
    /vendor/bin/hw/gpsd (CustomerModule::OnMessage(int, void const*, unsigned int)+7560, pc 322828)
    /vendor/bin/hw/gpsd (GpsiServer::HandleGpsExtensionMessage(IpcIncomingMessage&)+536, pc 38f1f0)
    /vendor/bin/hw/gpsd (IpcPipeTransportBase::OnSelect(int, bool, bool, bool, void*)+612, pc 360614)
    /vendor/bin/hw/gpsd (MainSelectManager::ProcessEvent(ISelectHandler&, int, bool, bool, bool, void*)+220, pc 363968)
    /vendor/bin/hw/gpsd (SelectManager::PerformOneWaitAndProcess()+1044, pc 35e878)
    /vendor/bin/hw/gpsd (GlGpsdInterface::Run()+288, pc 37b444)
    /vendor/bin/hw/gpsd (main+464, pc 31b234)
    /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+116, pc 5d304)
mar0ni commented 2 weeks ago

And Pixel 8a

type: crash
osVersion: google/akita/akita:14/AP2A.240605.024/2024062000:user/release-keys
uid: 1000 (u:r:hal_gnss_default:s0)
cmdline: /vendor/bin/hw/android.hardware.gnss-service
processUptime: 1038s

signal: 11 (SIGSEGV), code 9 (SEGV_MTESERR), faultAddr d00d64160d8d6a0
threadName: binder:1032_2
MTE: enabled

backtrace:
    /vendor/lib64/android.hardware.gnss-V3-ndk.so (aidl::android::hardware::gnss::measurement_corrections::BpMeasurementCorrectionsCallback::setCapabilitiesCb(int)+296, pc 6df78)
    /vendor/bin/hw/android.hardware.gnss-service (aidl::android::hardware::gnss::V2_0::tGNSSTargetSender::GNSSSetMeasCorrCapCallback(void*)+160, pc 669a8)
    /vendor/bin/hw/android.hardware.gnss-service (aidl::android::hardware::gnss::V2_0::tGNSSTargetSender::GNSSAndroidCbProcess(unsigned int, void*)+1728, pc 67194)
    /vendor/bin/hw/android.hardware.gnss-service (aidl::android::hardware::gnss::V2_0::GNSSAndroidCbThread(void*)+228, pc 67298)
    /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc 795dc)
    /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 69fa4)