Skip to content

Update colors_material.xml #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
byytelope wants to merge 3 commits into from
Closed

Update colors_material.xml #6

byytelope wants to merge 3 commits into from

Conversation

@byytelope
Copy link

@byytelope byytelope commented Apr 11, 2017 •
edited
Loading

Replace blue_grey with grey to match system ui colors.

Gabriele M and others added 3 commits April 8, 2017 08:55
@raymanfx
PowerManager: Bring back the compatibility with AOSP
527e207 
We changed the behavior of setPowerHint() so that our HALs could
easily handle the POWER_HINT_SET_PROFILE hint. However, this silently
broke the compatibility with AOSP. Restore the original code and
handle differently only our custom hints.

Change-Id: Ifeaae04fff8cafb4df3becc87dfdbeae48006ee3
@maniac103 @mikeNG
Revert "SystemUI: Add SlotId for MultiSim"
d234822 
Causes format string parameter mismatches with non-English locales.

This reverts commit 0aae1f6.

Change-Id: I0422de74fad5acdac5a0201430d551fb4cf7cbc6
@byytelope
Update colors_material.xml
2073438 
Replace blue_grey with grey in theme colors.
@TheComputerGuy96
Copy link

TheComputerGuy96 commented Apr 15, 2017

Hi there;

This is an automated reply, to let you know LineageOS doesn't merge pull
requests submitted directly to our github.com repositories.

You can submit your change requests through our public review system,
located at https://review.lineageos.org/

That review system is an installation of Google's Gerrit code review.
If you've never interacted with Gerrit before, we also suggest you take
a look at https://zifnab.net/~zifnab/wiki_dump/Howto:_Gerrit.html

Thanks!

@byytelope byytelope closed this Apr 15, 2017
Rashed97 pushed a commit to Rashed97/android_frameworks_base that referenced this pull request Dec 24, 2017
@USA-RedDragon @Rashed97
SystemUI: Add a reversed version of OPA layout
638de3a 
AKA the pixel navbar

This is a combination of 8 commits.
This is the 1st commit message:
Pixel Navbar, reverse engineered from smali.

Notes:
- This is forcing the Pixel Home button on people,
  and it looks ugly with the other nav buttons being hollow

- There MAY still be a few fixes yet to be found in this code
  because it WAS a big file to RE from smali. I have yet to find
  any, but time is the best tester.

- Shoutout to @bigrushdog for providing a decompiled form used
  to verify the smali and as a guideline for the more obsure
  smali sections. It was a big help.

- Tagging myself here to see adoption rate. @USA-RedDragon

PureNexus Edits: By: @BeansTown106
*squashed with the landscape fix
*cleaned up some of the if statements and removed the unused constants
*removed the renamed icons, this was unnecessary as we will vectorize pixel icons

Change-Id: Ia45fc89e4f1518fcabc379c4790d1955a026daee

This is the commit message LineageOS#2:

Vectorize all navbar icons (pixel theme) fix landscape bug
*the only thing navbar related that is not vectorized is the lightsout/carmode/menu icons

This is the commit message LineageOS#3:

Pixel navbar: allow disabling based on config

Create new config_allowOpaLayout bool to allow themers to disable the Pixel Navbar

Fixes the dreaded "yellow" home button

Change-Id: I69ad9a0d87317c9d9732b08b33ceabd096afee77

This is the commit message LineageOS#4:

Pixel Navbar animation toggle [1/2]

*made to work with the exposure for themers to disable navbar animation

Change-Id: Icb057edaf0c49933d6a882df3af627a076a14561

This is the commit message LineageOS#5:

Pixel navbar: remove this. and OpaLayout references, cleanup

Since it's all on the same file, I don't think they are needed (?)
Replace some hardcoded int values with meaningful variables, like MotionEvent

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba

This is the commit message LineageOS#6:

Pixel navbar: Fix Home button FC

Change-Id: I7c463999a76ee02f1f5af615ddcff3c05ca4e4f2

This is the commit message LineageOS#7:

Reload Pixel Home Animation without reboot

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba
Rashed97 pushed a commit to Rashed97/android_frameworks_base that referenced this pull request Jan 5, 2018
@USA-RedDragon @Rashed97
SystemUI: Add a reversed version of OPA layout
d43c9fc 
AKA the pixel navbar

This is a combination of 8 commits.
This is the 1st commit message:
Pixel Navbar, reverse engineered from smali.

Notes:
- This is forcing the Pixel Home button on people,
  and it looks ugly with the other nav buttons being hollow

- There MAY still be a few fixes yet to be found in this code
  because it WAS a big file to RE from smali. I have yet to find
  any, but time is the best tester.

- Shoutout to @bigrushdog for providing a decompiled form used
  to verify the smali and as a guideline for the more obsure
  smali sections. It was a big help.

- Tagging myself here to see adoption rate. @USA-RedDragon

PureNexus Edits: By: @BeansTown106
*squashed with the landscape fix
*cleaned up some of the if statements and removed the unused constants
*removed the renamed icons, this was unnecessary as we will vectorize pixel icons

Change-Id: Ia45fc89e4f1518fcabc379c4790d1955a026daee

This is the commit message LineageOS#2:

Vectorize all navbar icons (pixel theme) fix landscape bug
*the only thing navbar related that is not vectorized is the lightsout/carmode/menu icons

This is the commit message LineageOS#3:

Pixel navbar: allow disabling based on config

Create new config_allowOpaLayout bool to allow themers to disable the Pixel Navbar

Fixes the dreaded "yellow" home button

Change-Id: I69ad9a0d87317c9d9732b08b33ceabd096afee77

This is the commit message LineageOS#4:

Pixel Navbar animation toggle [1/2]

*made to work with the exposure for themers to disable navbar animation

Change-Id: Icb057edaf0c49933d6a882df3af627a076a14561

This is the commit message LineageOS#5:

Pixel navbar: remove this. and OpaLayout references, cleanup

Since it's all on the same file, I don't think they are needed (?)
Replace some hardcoded int values with meaningful variables, like MotionEvent

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba

This is the commit message LineageOS#6:

Pixel navbar: Fix Home button FC

Change-Id: I7c463999a76ee02f1f5af615ddcff3c05ca4e4f2

This is the commit message LineageOS#7:

Reload Pixel Home Animation without reboot

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba
Rashed97 pushed a commit to Rashed97/android_frameworks_base that referenced this pull request Mar 30, 2018
@USA-RedDragon @Rashed97
SystemUI: Add a reversed version of OPA layout
553c265 
AKA the pixel navbar

This is a combination of 8 commits.
This is the 1st commit message:
Pixel Navbar, reverse engineered from smali.

Notes:
- This is forcing the Pixel Home button on people,
  and it looks ugly with the other nav buttons being hollow

- There MAY still be a few fixes yet to be found in this code
  because it WAS a big file to RE from smali. I have yet to find
  any, but time is the best tester.

- Shoutout to @bigrushdog for providing a decompiled form used
  to verify the smali and as a guideline for the more obsure
  smali sections. It was a big help.

- Tagging myself here to see adoption rate. @USA-RedDragon

PureNexus Edits: By: @BeansTown106
*squashed with the landscape fix
*cleaned up some of the if statements and removed the unused constants
*removed the renamed icons, this was unnecessary as we will vectorize pixel icons

Change-Id: Ia45fc89e4f1518fcabc379c4790d1955a026daee

This is the commit message LineageOS#2:

Vectorize all navbar icons (pixel theme) fix landscape bug
*the only thing navbar related that is not vectorized is the lightsout/carmode/menu icons

This is the commit message LineageOS#3:

Pixel navbar: allow disabling based on config

Create new config_allowOpaLayout bool to allow themers to disable the Pixel Navbar

Fixes the dreaded "yellow" home button

Change-Id: I69ad9a0d87317c9d9732b08b33ceabd096afee77

This is the commit message LineageOS#4:

Pixel Navbar animation toggle [1/2]

*made to work with the exposure for themers to disable navbar animation

Change-Id: Icb057edaf0c49933d6a882df3af627a076a14561

This is the commit message LineageOS#5:

Pixel navbar: remove this. and OpaLayout references, cleanup

Since it's all on the same file, I don't think they are needed (?)
Replace some hardcoded int values with meaningful variables, like MotionEvent

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba

This is the commit message LineageOS#6:

Pixel navbar: Fix Home button FC

Change-Id: I7c463999a76ee02f1f5af615ddcff3c05ca4e4f2

This is the commit message LineageOS#7:

Reload Pixel Home Animation without reboot

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba
Koloses pushed a commit to GalaxyFork/android_frameworks_base that referenced this pull request May 29, 2018
@Koloses
Check if mSurface is valid before create SurfaceSession
eaa9015 
If mSurface has already been released in another thread,
this would result in a null-pointer dereference in
SurfaceSession contructor i.e. in nativeCreateScoped().

7757  7757 F DEBUG   : pid: 1402, tid: 1583, name: android.anim  >>> system_server <<<
7757  7757 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xd0
7757  7757 F DEBUG   : Cause: null pointer dereference
... <trimmed>
7757  7757 F DEBUG   : backtrace:
7757  7757 F DEBUG   :     #00 pc 000000000007fe58  /system/lib64/libgui.so (android::Surface::getIGraphicBufferProducer() const)
7757  7757 F DEBUG   :     LineageOS#1 pc 00000000000ff000  /system/lib64/libandroid_runtime.so (android::nativeCreateScoped(_JNIEnv*, _jclass*, long)+52)
7757  7757 F DEBUG   :     LineageOS#2 pc 0000000000ac8968  /system/framework/arm64/boot-framework.oat (offset 0x614000) (android.content.res.XmlBlock.nativeCreateParseState [DEDUPED]+152)
7757  7757 F DEBUG   :     LineageOS#3 pc 0000000001327d24  /system/framework/arm64/boot-framework.oat (offset 0x614000) (android.view.SurfaceSession.<init>+52)
7757  7757 F DEBUG   :     LineageOS#4 pc 00000000014b7320  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.drawSizeMismatchSnapshot+128)
7757  7757 F DEBUG   :     LineageOS#5 pc 00000000014b784c  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.drawSnapshot+188)
7757  7757 F DEBUG   :     LineageOS#6 pc 00000000014b6f2c  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.create+2684)
7757  7757 F DEBUG   :     LineageOS#7 pc 00000000014b0158  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotController.createStartingSurface+72)
7757  7757 F DEBUG   :     LineageOS#8 pc 00000000014a5ca0  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.SnapshotStartingData.createStartingSurface+96)
7757  7757 F DEBUG   :     LineageOS#9 pc 000000000144b030  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.AppWindowContainerController.lambda$-com_android_server_wm_AppWindowContainerController_4735+496)
... <trimmed>

Change-Id: I41268c7680d3885c85fc3b682d0eba7415674062

Signed-off-by: Adesh15 <[email protected]>
i81u812 pushed a commit to i81u812/android_frameworks_base that referenced this pull request Jul 30, 2018
@SKULSHADY
Check if mSurface is valid before create SurfaceSession
9ae39d7 
If mSurface has already been released in another thread,
this would result in a null-pointer dereference in
SurfaceSession contructor i.e. in nativeCreateScoped().

7757  7757 F DEBUG   : pid: 1402, tid: 1583, name: android.anim  >>> system_server <<<
7757  7757 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xd0
7757  7757 F DEBUG   : Cause: null pointer dereference
... <trimmed>
7757  7757 F DEBUG   : backtrace:
7757  7757 F DEBUG   :     #00 pc 000000000007fe58  /system/lib64/libgui.so (android::Surface::getIGraphicBufferProducer() const)
7757  7757 F DEBUG   :     LineageOS#1 pc 00000000000ff000  /system/lib64/libandroid_runtime.so (android::nativeCreateScoped(_JNIEnv*, _jclass*, long)+52)
7757  7757 F DEBUG   :     LineageOS#2 pc 0000000000ac8968  /system/framework/arm64/boot-framework.oat (offset 0x614000) (android.content.res.XmlBlock.nativeCreateParseState [DEDUPED]+152)
7757  7757 F DEBUG   :     LineageOS#3 pc 0000000001327d24  /system/framework/arm64/boot-framework.oat (offset 0x614000) (android.view.SurfaceSession.<init>+52)
7757  7757 F DEBUG   :     LineageOS#4 pc 00000000014b7320  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.drawSizeMismatchSnapshot+128)
7757  7757 F DEBUG   :     LineageOS#5 pc 00000000014b784c  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.drawSnapshot+188)
7757  7757 F DEBUG   :     LineageOS#6 pc 00000000014b6f2c  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.create+2684)
7757  7757 F DEBUG   :     LineageOS#7 pc 00000000014b0158  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotController.createStartingSurface+72)
7757  7757 F DEBUG   :     LineageOS#8 pc 00000000014a5ca0  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.SnapshotStartingData.createStartingSurface+96)
7757  7757 F DEBUG   :     LineageOS#9 pc 000000000144b030  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.AppWindowContainerController.lambda$-com_android_server_wm_AppWindowContainerController_4735+496)
... <trimmed>

Change-Id: I41268c7680d3885c85fc3b682d0eba7415674062

Signed-off-by: Pranav Vashi <[email protected]>
i81u812 pushed a commit to i81u812/android_frameworks_base that referenced this pull request Jul 30, 2018
@USA-RedDragon @i81u812
SystemUI: Add a reversed version of OPA layout
d13fc56 
AKA the pixel navbar

This is a combination of 8 commits.
This is the 1st commit message:
Pixel Navbar, reverse engineered from smali.

Notes:
- This is forcing the Pixel Home button on people,
  and it looks ugly with the other nav buttons being hollow

- There MAY still be a few fixes yet to be found in this code
  because it WAS a big file to RE from smali. I have yet to find
  any, but time is the best tester.

- Shoutout to @bigrushdog for providing a decompiled form used
  to verify the smali and as a guideline for the more obsure
  smali sections. It was a big help.

- Tagging myself here to see adoption rate. @USA-RedDragon

PureNexus Edits: By: @BeansTown106
*squashed with the landscape fix
*cleaned up some of the if statements and removed the unused constants
*removed the renamed icons, this was unnecessary as we will vectorize pixel icons

Change-Id: Ia45fc89e4f1518fcabc379c4790d1955a026daee

This is the commit message LineageOS#2:

Vectorize all navbar icons (pixel theme) fix landscape bug
*the only thing navbar related that is not vectorized is the lightsout/carmode/menu icons

This is the commit message LineageOS#3:

Pixel navbar: allow disabling based on config

Create new config_allowOpaLayout bool to allow themers to disable the Pixel Navbar

Fixes the dreaded "yellow" home button

Change-Id: I69ad9a0d87317c9d9732b08b33ceabd096afee77

This is the commit message LineageOS#4:

Pixel Navbar animation toggle [1/2]

*made to work with the exposure for themers to disable navbar animation

Change-Id: Icb057edaf0c49933d6a882df3af627a076a14561

This is the commit message LineageOS#5:

Pixel navbar: remove this. and OpaLayout references, cleanup

Since it's all on the same file, I don't think they are needed (?)
Replace some hardcoded int values with meaningful variables, like MotionEvent

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba

This is the commit message LineageOS#6:

Pixel navbar: Fix Home button FC

Change-Id: I7c463999a76ee02f1f5af615ddcff3c05ca4e4f2

This is the commit message LineageOS#7:

Reload Pixel Home Animation without reboot

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba
Signed-off-by: Erfan Abdi <[email protected]>
Rashed97 pushed a commit to Rashed97/android_frameworks_base that referenced this pull request Aug 4, 2018
@USA-RedDragon @Rashed97
SystemUI: Add a reversed version of OPA layout
ee902a9 
AKA the pixel navbar

This is a combination of 8 commits.
This is the 1st commit message:
Pixel Navbar, reverse engineered from smali.

Notes:
- This is forcing the Pixel Home button on people,
  and it looks ugly with the other nav buttons being hollow

- There MAY still be a few fixes yet to be found in this code
  because it WAS a big file to RE from smali. I have yet to find
  any, but time is the best tester.

- Shoutout to @bigrushdog for providing a decompiled form used
  to verify the smali and as a guideline for the more obsure
  smali sections. It was a big help.

- Tagging myself here to see adoption rate. @USA-RedDragon

PureNexus Edits: By: @BeansTown106
*squashed with the landscape fix
*cleaned up some of the if statements and removed the unused constants
*removed the renamed icons, this was unnecessary as we will vectorize pixel icons

Change-Id: Ia45fc89e4f1518fcabc379c4790d1955a026daee

This is the commit message LineageOS#2:

Vectorize all navbar icons (pixel theme) fix landscape bug
*the only thing navbar related that is not vectorized is the lightsout/carmode/menu icons

This is the commit message LineageOS#3:

Pixel navbar: allow disabling based on config

Create new config_allowOpaLayout bool to allow themers to disable the Pixel Navbar

Fixes the dreaded "yellow" home button

Change-Id: I69ad9a0d87317c9d9732b08b33ceabd096afee77

This is the commit message LineageOS#4:

Pixel Navbar animation toggle [1/2]

*made to work with the exposure for themers to disable navbar animation

Change-Id: Icb057edaf0c49933d6a882df3af627a076a14561

This is the commit message LineageOS#5:

Pixel navbar: remove this. and OpaLayout references, cleanup

Since it's all on the same file, I don't think they are needed (?)
Replace some hardcoded int values with meaningful variables, like MotionEvent

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba

This is the commit message LineageOS#6:

Pixel navbar: Fix Home button FC

Change-Id: I7c463999a76ee02f1f5af615ddcff3c05ca4e4f2

This is the commit message LineageOS#7:

Reload Pixel Home Animation without reboot

Change-Id: I4d7b2fe57d3e1bf2fa034bf81efb11d37a5ebfba
ChronoMonochrome pushed a commit to CustomROMs/android_frameworks_base that referenced this pull request Sep 13, 2018
Check if mSurface is valid before create SurfaceSession
9696bd3 
If mSurface has already been released in another thread,
this would result in a null-pointer dereference in
SurfaceSession contructor i.e. in nativeCreateScoped().

7757  7757 F DEBUG   : pid: 1402, tid: 1583, name: android.anim  >>> system_server <<<
7757  7757 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0xd0
7757  7757 F DEBUG   : Cause: null pointer dereference
... <trimmed>
7757  7757 F DEBUG   : backtrace:
7757  7757 F DEBUG   :     #00 pc 000000000007fe58  /system/lib64/libgui.so (android::Surface::getIGraphicBufferProducer() const)
7757  7757 F DEBUG   :     LineageOS#1 pc 00000000000ff000  /system/lib64/libandroid_runtime.so (android::nativeCreateScoped(_JNIEnv*, _jclass*, long)+52)
7757  7757 F DEBUG   :     LineageOS#2 pc 0000000000ac8968  /system/framework/arm64/boot-framework.oat (offset 0x614000) (android.content.res.XmlBlock.nativeCreateParseState [DEDUPED]+152)
7757  7757 F DEBUG   :     LineageOS#3 pc 0000000001327d24  /system/framework/arm64/boot-framework.oat (offset 0x614000) (android.view.SurfaceSession.<init>+52)
7757  7757 F DEBUG   :     LineageOS#4 pc 00000000014b7320  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.drawSizeMismatchSnapshot+128)
7757  7757 F DEBUG   :     LineageOS#5 pc 00000000014b784c  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.drawSnapshot+188)
7757  7757 F DEBUG   :     LineageOS#6 pc 00000000014b6f2c  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotSurface.create+2684)
7757  7757 F DEBUG   :     LineageOS#7 pc 00000000014b0158  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.TaskSnapshotController.createStartingSurface+72)
7757  7757 F DEBUG   :     LineageOS#8 pc 00000000014a5ca0  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.SnapshotStartingData.createStartingSurface+96)
7757  7757 F DEBUG   :     LineageOS#9 pc 000000000144b030  /system/framework/oat/arm64/services.odex (offset 0x5be000) (com.android.server.wm.AppWindowContainerController.lambda$-com_android_server_wm_AppWindowContainerController_4735+496)
... <trimmed>

Bug: 74129970

Change-Id: I41268c7680d3885c85fc3b682d0eba7415674062
villarleg pushed a commit to villarleg/android_frameworks_base that referenced this pull request Dec 18, 2018
@ezio84 @villarleg
Lockscreen visualizer: fix SystemUI FC when using Pulse
d6e355c 
11-13 20:00:00.527 10645 10645 I crash_dump64: performing dump of process 1467 (target tid = 10124)
11-13 20:00:00.538 10645 10645 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-13 20:00:00.539 10645 10645 F DEBUG   : Build fingerprint: 'HONOR/BKL-L09/HWBKL:8.0.0/HUAWEIBKL-L09S/172(C432):user/release-keys'
11-13 20:00:00.539 10645 10645 F DEBUG   : Revision: '0'
11-13 20:00:00.539 10645 10645 F DEBUG   : ABI: 'arm64'
11-13 20:00:00.539 10645 10645 F DEBUG   : pid: 1467, tid: 10124, name: Visualizer  >>> com.android.systemui <<<
11-13 20:00:00.539 10645 10645 F DEBUG   : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
11-13 20:00:00.539 10645 10645 F DEBUG   : Abort message: 'FORTIFY: pthread_mutex_lock called on a destroyed mutex (0x7c633df0f4)'
11-13 20:00:00.539 10645 10645 F DEBUG   :     x0  0000000000000000  x1  000000000000278c  x2  0000000000000006  x3  0000000000000008
11-13 20:00:00.539 10645 10645 F DEBUG   :     x4  0000000000008080  x5  0000000000008080  x6  0000000000008080  x7  0000000000000038
11-13 20:00:00.539 10645 10645 F DEBUG   :     x8  0000000000000083  x9  40ef6d32d31c854a  x10 0000000000000000  x11 fffffffc7ffffbdf
11-13 20:00:00.539 10645 10645 F DEBUG   :     x12 0000000000000001  x13 000000005beb1f30  x14 0005a1f49bc3a000  x15 0000112f9e154a12
11-13 20:00:00.539 10645 10645 F DEBUG   :     x16 0000007cffb6f2c8  x17 0000007cffaad0d0  x18 00000000fffbfffe  x19 00000000000005bb
11-13 20:00:00.539 10645 10645 F DEBUG   :     x20 000000000000278c  x21 0000007d000d96d0  x22 0000000000000001  x23 0000000000000035
11-13 20:00:00.539 10645 10645 F DEBUG   :     x24 0000007d000c6fc8  x25 0000007d000c7680  x26 0000007c52a14588  x27 0000000000000000
11-13 20:00:00.539 10645 10645 F DEBUG   :     x28 0000000000000005  x29 0000007c52a141a0
11-13 20:00:00.539 10645 10645 F DEBUG   :     sp  0000007c52a14160  lr  0000007cffaa1bfc  pc  0000007cffaa1c24
11-13 20:00:00.564 10645 10645 F DEBUG   :
11-13 20:00:00.564 10645 10645 F DEBUG   : backtrace:
11-13 20:00:00.564 10645 10645 F DEBUG   :     #00 pc 0000000000021c24  /system/lib64/libc.so (abort+116)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#1 pc 0000000000082f04  /system/lib64/libc.so (__fortify_fatal(char const*, ...)+120)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#2 pc 0000000000082600  /system/lib64/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+52)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#3 pc 00000000000824b4  /system/lib64/libc.so (pthread_mutex_lock+228)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#4 pc 00000000000a8c54  /system/lib64/libmedia.so (android::Visualizer::periodicCapture()+56)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#5 pc 00000000000a8aac  /system/lib64/libmedia.so (android::Visualizer::CaptureThread::threadLoop()+88)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#6 pc 000000000000f9d8  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+280)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#7 pc 00000000000b4980  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::javaThreadShell(void*)+140)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#8 pc 0000000000081938  /system/lib64/libc.so (__pthread_start(void*)+36)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#9 pc 0000000000023478  /system/lib64/libc.so (__start_thread+68)
Change-Id: Ic7f9788df8a38084c3b150eaa22d67f869085ca2

Signed-off-by: Pranav Vashi <[email protected]>
partcyborg pushed a commit to partcyborg/android_frameworks_base-lineage that referenced this pull request Jul 31, 2019
@ezio84 @mracar07
Lockscreen visualizer: fix SystemUI FC when using Pulse
ba17066 
11-13 20:00:00.527 10645 10645 I crash_dump64: performing dump of process 1467 (target tid = 10124)
11-13 20:00:00.538 10645 10645 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-13 20:00:00.539 10645 10645 F DEBUG   : Build fingerprint: 'HONOR/BKL-L09/HWBKL:8.0.0/HUAWEIBKL-L09S/172(C432):user/release-keys'
11-13 20:00:00.539 10645 10645 F DEBUG   : Revision: '0'
11-13 20:00:00.539 10645 10645 F DEBUG   : ABI: 'arm64'
11-13 20:00:00.539 10645 10645 F DEBUG   : pid: 1467, tid: 10124, name: Visualizer  >>> com.android.systemui <<<
11-13 20:00:00.539 10645 10645 F DEBUG   : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
11-13 20:00:00.539 10645 10645 F DEBUG   : Abort message: 'FORTIFY: pthread_mutex_lock called on a destroyed mutex (0x7c633df0f4)'
11-13 20:00:00.539 10645 10645 F DEBUG   :     x0  0000000000000000  x1  000000000000278c  x2  0000000000000006  x3  0000000000000008
11-13 20:00:00.539 10645 10645 F DEBUG   :     x4  0000000000008080  x5  0000000000008080  x6  0000000000008080  x7  0000000000000038
11-13 20:00:00.539 10645 10645 F DEBUG   :     x8  0000000000000083  x9  40ef6d32d31c854a  x10 0000000000000000  x11 fffffffc7ffffbdf
11-13 20:00:00.539 10645 10645 F DEBUG   :     x12 0000000000000001  x13 000000005beb1f30  x14 0005a1f49bc3a000  x15 0000112f9e154a12
11-13 20:00:00.539 10645 10645 F DEBUG   :     x16 0000007cffb6f2c8  x17 0000007cffaad0d0  x18 00000000fffbfffe  x19 00000000000005bb
11-13 20:00:00.539 10645 10645 F DEBUG   :     x20 000000000000278c  x21 0000007d000d96d0  x22 0000000000000001  x23 0000000000000035
11-13 20:00:00.539 10645 10645 F DEBUG   :     x24 0000007d000c6fc8  x25 0000007d000c7680  x26 0000007c52a14588  x27 0000000000000000
11-13 20:00:00.539 10645 10645 F DEBUG   :     x28 0000000000000005  x29 0000007c52a141a0
11-13 20:00:00.539 10645 10645 F DEBUG   :     sp  0000007c52a14160  lr  0000007cffaa1bfc  pc  0000007cffaa1c24
11-13 20:00:00.564 10645 10645 F DEBUG   : 
11-13 20:00:00.564 10645 10645 F DEBUG   : backtrace:
11-13 20:00:00.564 10645 10645 F DEBUG   :     #00 pc 0000000000021c24  /system/lib64/libc.so (abort+116)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#1 pc 0000000000082f04  /system/lib64/libc.so (__fortify_fatal(char const*, ...)+120)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#2 pc 0000000000082600  /system/lib64/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+52)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#3 pc 00000000000824b4  /system/lib64/libc.so (pthread_mutex_lock+228)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#4 pc 00000000000a8c54  /system/lib64/libmedia.so (android::Visualizer::periodicCapture()+56)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#5 pc 00000000000a8aac  /system/lib64/libmedia.so (android::Visualizer::CaptureThread::threadLoop()+88)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#6 pc 000000000000f9d8  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+280)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#7 pc 00000000000b4980  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::javaThreadShell(void*)+140)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#8 pc 0000000000081938  /system/lib64/libc.so (__pthread_start(void*)+36)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#9 pc 0000000000023478  /system/lib64/libc.so (__start_thread+68)
Change-Id: Ic7f9788df8a38084c3b150eaa22d67f869085ca2
pengus77 pushed a commit to pengus77/frameworks_base that referenced this pull request Sep 30, 2019
@ezio84 @eyosen
Lockscreen visualizer: fix SystemUI FC when using Pulse
9d4a057 
11-13 20:00:00.527 10645 10645 I crash_dump64: performing dump of process 1467 (target tid = 10124)
11-13 20:00:00.538 10645 10645 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
11-13 20:00:00.539 10645 10645 F DEBUG   : Build fingerprint: 'HONOR/BKL-L09/HWBKL:8.0.0/HUAWEIBKL-L09S/172(C432):user/release-keys'
11-13 20:00:00.539 10645 10645 F DEBUG   : Revision: '0'
11-13 20:00:00.539 10645 10645 F DEBUG   : ABI: 'arm64'
11-13 20:00:00.539 10645 10645 F DEBUG   : pid: 1467, tid: 10124, name: Visualizer  >>> com.android.systemui <<<
11-13 20:00:00.539 10645 10645 F DEBUG   : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
11-13 20:00:00.539 10645 10645 F DEBUG   : Abort message: 'FORTIFY: pthread_mutex_lock called on a destroyed mutex (0x7c633df0f4)'
11-13 20:00:00.539 10645 10645 F DEBUG   :     x0  0000000000000000  x1  000000000000278c  x2  0000000000000006  x3  0000000000000008
11-13 20:00:00.539 10645 10645 F DEBUG   :     x4  0000000000008080  x5  0000000000008080  x6  0000000000008080  x7  0000000000000038
11-13 20:00:00.539 10645 10645 F DEBUG   :     x8  0000000000000083  x9  40ef6d32d31c854a  x10 0000000000000000  x11 fffffffc7ffffbdf
11-13 20:00:00.539 10645 10645 F DEBUG   :     x12 0000000000000001  x13 000000005beb1f30  x14 0005a1f49bc3a000  x15 0000112f9e154a12
11-13 20:00:00.539 10645 10645 F DEBUG   :     x16 0000007cffb6f2c8  x17 0000007cffaad0d0  x18 00000000fffbfffe  x19 00000000000005bb
11-13 20:00:00.539 10645 10645 F DEBUG   :     x20 000000000000278c  x21 0000007d000d96d0  x22 0000000000000001  x23 0000000000000035
11-13 20:00:00.539 10645 10645 F DEBUG   :     x24 0000007d000c6fc8  x25 0000007d000c7680  x26 0000007c52a14588  x27 0000000000000000
11-13 20:00:00.539 10645 10645 F DEBUG   :     x28 0000000000000005  x29 0000007c52a141a0
11-13 20:00:00.539 10645 10645 F DEBUG   :     sp  0000007c52a14160  lr  0000007cffaa1bfc  pc  0000007cffaa1c24
11-13 20:00:00.564 10645 10645 F DEBUG   : 
11-13 20:00:00.564 10645 10645 F DEBUG   : backtrace:
11-13 20:00:00.564 10645 10645 F DEBUG   :     #00 pc 0000000000021c24  /system/lib64/libc.so (abort+116)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#1 pc 0000000000082f04  /system/lib64/libc.so (__fortify_fatal(char const*, ...)+120)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#2 pc 0000000000082600  /system/lib64/libc.so (HandleUsingDestroyedMutex(pthread_mutex_t*, char const*)+52)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#3 pc 00000000000824b4  /system/lib64/libc.so (pthread_mutex_lock+228)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#4 pc 00000000000a8c54  /system/lib64/libmedia.so (android::Visualizer::periodicCapture()+56)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#5 pc 00000000000a8aac  /system/lib64/libmedia.so (android::Visualizer::CaptureThread::threadLoop()+88)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#6 pc 000000000000f9d8  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+280)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#7 pc 00000000000b4980  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::javaThreadShell(void*)+140)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#8 pc 0000000000081938  /system/lib64/libc.so (__pthread_start(void*)+36)
11-13 20:00:00.564 10645 10645 F DEBUG   :     LineageOS#9 pc 0000000000023478  /system/lib64/libc.so (__start_thread+68)
Change-Id: Ic7f9788df8a38084c3b150eaa22d67f869085ca2
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 9, 2023
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
208f62d 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 9, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
02d4c0b 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 9, 2023
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
6b1a4c1 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 9, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
74decfe 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 15, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
942c783 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 17, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
bcb99a0 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 17, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
651f52e 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 21, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
dddd834 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 21, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
25195d4 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 21, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
83091a1 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 23, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
c38f82e 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 26, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
8bf53a1 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Jun 4, 2023
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
5bef9fb 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
xenxynon pushed a commit to xenxynon/lineage that referenced this pull request Dec 5, 2024
@songlongdaiduong @xenxynon
hwui: Add NULL pointer check in AnimatorManager::pushStaging
25aaf2b 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
xenxynon pushed a commit to xenxynon/lineage that referenced this pull request Dec 5, 2024
@songlongdaiduong @xenxynon
hwui: Add NULL pointer check in AnimatorManager::pushStaging
910d9d9 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Dec 10, 2024
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
f38a75a 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Dec 10, 2024
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
29aee71 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Dec 17, 2024
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
e1a7ad1 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Dec 17, 2024
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
fc513f3 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
kshitij-vk pushed a commit to TenX-OS-VIC/frameworks_base that referenced this pull request Dec 27, 2024
@songlongdaiduong @kshitij-vk
base: [hwui] Add NULL pointer check in AnimatorManager::pushStaging
425138e 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Change-Id: Icba46f4521e11b146461dec67a68a92393a9bba1
Signed-off-by: Pranav Vashi <[email protected]>
Signed-off-by: Aston-Martinn <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Jan 27, 2025
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
b3ddcf6 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Jan 27, 2025
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
4a9d15b 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
minaripenguin added a commit to unofficial-risingos-backup/android_frameworks_base that referenced this pull request Feb 1, 2025
@minaripenguin
Merge pull request LineageOS#6 from MohammadAlArabi/fifteen
7ae7380 
base: Allow disabling color inversion support [1/2]
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Feb 18, 2025
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
1c10b26 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Feb 18, 2025
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
5ddf0c4 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Mar 13, 2025
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
2d6a3eb 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Mar 13, 2025
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
c62b5c1 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 10, 2025
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
04a0b8c 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request May 10, 2025
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
29e81ee 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Jun 7, 2025
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
9180e7d 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Jun 7, 2025
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
f1f1610 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Jun 13, 2025
@songlongdaiduong @MJPollard
hwui: Add NULL pointer check in AnimatorManager::pushStaging
5e89346 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
MJPollard pushed a commit to AltairROM/android_frameworks_base that referenced this pull request Jun 13, 2025
@minaripenguin @MJPollard
libs: hwui: Avoid system crash if font contains invalid/null font data
b98d313 
* i thought this was fixed by dropping HB and freetype modifications but a user reported a sysui crash without logcat nor context so im using my old copy

* addr2line was pointing the NPD [1] to a new instance of SkMemoryStream (if im not mistaken)
minaripenguin@minaripenguin:~/bugreport-oriole-TQ2A.230405.003.E1-2023-04-13-09-02-17/FS/data/tombstones$ addr2line -f -e '/mnt/xxxx/xxxxx/out/target/product/oriole/system/lib/libhwui.so' 000000000024a61c
_ZN14SkMemoryStreamC2E5sk_spI6SkDataE

* to temporarily aid the crash issue, until we find and fix the font that causes the crash, silently swallow the errors since the rom shouldn't booting at all if current font in use has invalid data.

[1]
*** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
RisingOS Version: '1.0-20230412-UNOFFICIAL-oriole'
Build fingerprint: 'google/oriole/oriole:13/TQ2A.230305.008.E1/9677224:user/release-keys'
Revision: 'MP1.0'
ABI: 'arm64'
Timestamp: 2023-04-13 00:41:15.026955853+0800
Process uptime: 216s
Cmdline: com.android.systemui
pid: 17576, tid: 17613, name: RenderThread  >>> com.android.systemui <<<
uid: 10403
tagged_addr_ctrl: 0000000000000001 (PR_TAGGED_ADDR_ENABLE)
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b4000074cc5b7e60  x1  00000072ca63fa20  x2  00000072ca63fa20  x3  0000000000000001
    x4  00000072ca63efa0  x5  000000747c59e4bc  x6  00005a120000edab  x7  0000906f00008280
    x8  0000000000000000  x9  56bd015d3f6fc8f6  x10 0000000000000000  x11 000000000000001a
    x12 0000000000000000  x13 b4000074ecbba980  x14 0000000000000033  x15 0000000000000019
    x16 00000075f74ae6a8  x17 00000075fdb0fec0  x18 00000072ca470000  x19 b4000074cc5b7e60
    x20 b4000074cc5b7e88  x21 b4000074cc5b7e60  x22 b40000737c76ae48  x23 b40000737c76ae30
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b4000073cc52f898
    x28 00000072ca547000  x29 00000072ca63f7e0
    lr  00000075eec487e0  sp  00000072ca63f7e0  pc  00000075eec4a61c  pst 0000000020001000

backtrace:
      #00 pc 000000000024a61c  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+108) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#1 pc 00000000002487dc  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#2 pc 000000000025b2a4  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#3 pc 000000000027fdcc  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+348) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#4 pc 0000000000282bdc  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+364) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#5 pc 0000000000272c34  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+580) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#6 pc 0000000000292e9c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+412) (BuildId: f37109e40765e94e2634e351e2ba0981)
      LineageOS#7 pc 0000000000013220  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+416) (BuildId: 536947a6fb111c99b28090cdd95ee772)
      LineageOS#8 pc 00000000000bc1cc  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204) (BuildId: 7c802f36645db769f96376c94049c9cf)
      LineageOS#9 pc 0000000000055020  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 7c802f36645db769f96376c94049c9cf)

Signed-off-by: minaripenguin <[email protected]>
Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Aug 3, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
ee0455f 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Aug 3, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
1970aff 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Aug 16, 2025
@songlongdaiduong @NurKeinNeid
hwui: Add NULL pointer check in AnimatorManager::pushStaging
b7a5f31 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Sep 1, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
2feaadd 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Sep 1, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
dea18a0 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Sep 4, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
bb60738 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Sep 4, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
b5b2320 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Sep 5, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
771d9a9 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Sep 5, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
b799f41 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
toukashishigaya pushed a commit to youkai-b/los_fwb that referenced this pull request Sep 7, 2025
@songlongdaiduong @MocaRafee
hwui: Add NULL pointer check in AnimatorManager::pushStaging
b50d5cd 
Fix NULL deref

```
Cmdline: com.android.systemui
pid: 2530, tid: 2589, name: RenderThread  >>> com.android.systemui <<<
uid: 10293
signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000010
Cause: null pointer dereference
    x0  b400007cbe7b8ff0  x1  0000007bf78fb9f0  x2  b400007c8c184898  x3  0000000000000001
    x4  0000007bf78faf80  x5  00000000007f5687  x6  000000001991ade0  x7  0000000000000010
    x8  0000000000000000  x9  43490de4ff9b0700  x10 b400007cbe7b8c00  x11 0000000000000002
    x12 0000000000000000  x13 000000003f800000  x14 000000003f800000  x15 0000000000000000
    x16 0000007d71724720  x17 0000007d57ccdb00  x18 0000007bf7568000  x19 b400007cbe7b8ff0
    x20 b400007cbe7b9018  x21 b400007cbe7b8ff0  x22 b400007cbe280010  x23 b400007cbe280000
    x24 7ffffffffffffff8  x25 1fffffffffffffff  x26 00000000ffffffff  x27 b400007c7e1b0da8
    x28 0000007bf78fc000  x29 0000007bf78fb7a0
    lr  0000007d67aaf330  sp  0000007bf78fb7a0  pc  0000007d67ab1590  pst 0000000020001000

backtrace:
      #00 pc 0000000000253590  /system/lib64/libhwui.so (android::uirenderer::AnimatorManager::pushStaging()+112)
      LineageOS#1 pc 000000000025132c  /system/lib64/libhwui.so (android::uirenderer::AnimationContext::runRemainingAnimations(android::uirenderer::TreeInfo&)+44)
      LineageOS#2 pc 0000000000267664  /system/lib64/libhwui.so (android::uirenderer::AnimationContextBridge::runRemainingAnimations(android::uirenderer::TreeInfo&)+36)
      LineageOS#3 pc 0000000000292720  /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::prepareTree(android::uirenderer::TreeInfo&, long*, long, android::uirenderer::RenderNode*)+352)
      LineageOS#4 pc 00000000002959c8  /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.c1671e787f244890c877724752face20)+360)
      LineageOS#5 pc 0000000000282ce4  /system/lib64/libhwui.so (android::uirenderer::WorkQueue::process()+1108)
      LineageOS#6 pc 00000000002a808c  /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+556)
      LineageOS#7 pc 0000000000013a14  /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+436)
      LineageOS#8 pc 00000000000d07ac  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204)
      LineageOS#9 pc 00000000000567f0  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64)
```

Signed-off-by: Pranav Vashi <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@byytelope @TheComputerGuy96 @maniac103