Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Document popen.c/android_popen_python's shortcomings #31

Open
aaaaalbert opened this issue Mar 8, 2017 · 0 comments
Open

Document popen.c/android_popen_python's shortcomings #31

aaaaalbert opened this issue Mar 8, 2017 · 0 comments

Comments

@aaaaalbert
Copy link
Owner

aaaaalbert commented Mar 8, 2017 •
edited
Loading

See #14 (reference table overflow), #15 (list element args types), and note that a non-list type argument can also crash the app (see SensibilityTestbed/repy_v2@a85c876, and the debug log below).

We can work around these issues in the Repy implementation just fine, but we should document in the sources that android_popen_python must be used with greatest care if the Repy sanitizers are bypassed.

Example traceback: I called android.popen_python in a Python script and supplied a single str argument (i.e. not a list containing a string).

03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470] JNI DETECTED ERROR IN APPLICATION: negative array length: -1
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]     in call to NewObjectArray
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]     from void com.snakei.PythonInterpreterService.runScript(java.lang.String[], java.lang.String, java.lang.String, android.content.Context)
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470] "Thread-2" prio=5 tid=11 Runnable
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   | group="main" sCount=0 dsCount=0 obj=0x12ce6670 self=0xaa785900
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   | sysTid=27521 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa3337920
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   | state=R schedstat=( 110328910 103728906 243 ) utm=9 stm=1 core=0 HZ=100
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   | stack=0xa3235000-0xa3237000 stackSize=1038KB
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   | held mutexes= "mutator lock"(shared held)
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #00 pc 00351069  /system/lib/libart.so (_ZN3art15DumpNativeStackERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEEiP12BacktraceMapPKcPNS_9ArtMethodEPv+128)
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #01 pc 00331729  /system/lib/libart.so (_ZNK3art6Thread9DumpStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEbP12BacktraceMap+304)
03-08 12:16:40.767 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #02 pc 0023a327  /system/lib/libart.so (_ZN3art9JavaVMExt8JniAbortEPKcS2_+846)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #03 pc 0023a8d3  /system/lib/libart.so (_ZN3art9JavaVMExt9JniAbortFEPKcS2_z+66)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #04 pc 0027d9b3  /system/lib/libart.so (_ZN3art3JNI14NewObjectArrayEP7_JNIEnviP7_jclassP8_jobject+682)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #05 pc 000047d7  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (jni_get_string_array+62)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #06 pc 00004621  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (android_popen_python+100)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   native: #07 pc 000aa337  /data/app/com.sensibility_testbed-1/lib/arm/libpython2.7.so (PyEval_EvalFrameEx+18014)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   at com.snakei.PythonInterpreterService.runScript(Native method)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   at com.snakei.PythonInterpreterService$1.run(PythonInterpreterService.java:169)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.769 27507 27521 F art     : art/runtime/java_vm_ext.cc:470] 
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422] Runtime aborting...
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422] Aborting thread:
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422] "Thread-2" prio=5 tid=11 Native
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=0 dsCount=0 obj=0x12ce6670 self=0xaa785900
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27521 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa3337920
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=R schedstat=( 127348963 128681197 256 ) utm=10 stm=2 core=0 HZ=100
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa3235000-0xa3237000 stackSize=1038KB
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes= "abort lock"
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00351069  /system/lib/libart.so (_ZN3art15DumpNativeStackERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEEiP12BacktraceMapPKcPNS_9ArtMethodEPv+128)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 00331729  /system/lib/libart.so (_ZNK3art6Thread9DumpStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEbP12BacktraceMap+304)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 003247a1  /system/lib/libart.so (_ZNK3art10AbortState10DumpThreadERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEPNS_6ThreadE+24)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 00324629  /system/lib/libart.so (_ZNK3art10AbortState4DumpERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE+424)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 0031b351  /system/lib/libart.so (_ZN3art7Runtime5AbortEPKc+92)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 000b526b  /system/lib/libart.so (_ZN3art10LogMessageD2Ev+1134)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 0023a609  /system/lib/libart.so (_ZN3art9JavaVMExt8JniAbortEPKcS2_+1584)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #07 pc 0023a8d3  /system/lib/libart.so (_ZN3art9JavaVMExt9JniAbortFEPKcS2_z+66)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #08 pc 0027d9b3  /system/lib/libart.so (_ZN3art3JNI14NewObjectArrayEP7_JNIEnviP7_jclassP8_jobject+682)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #09 pc 000047d7  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (jni_get_string_array+62)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #10 pc 00004621  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (android_popen_python+100)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #11 pc 000aa337  /data/app/com.sensibility_testbed-1/lib/arm/libpython2.7.so (PyEval_EvalFrameEx+18014)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.snakei.PythonInterpreterService.runScript(Native method)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.snakei.PythonInterpreterService$1.run(PythonInterpreterService.java:169)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422] Dumping all threads without appropriate locks held: thread list lock mutator lock
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422] All threads:
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422] DALVIK THREADS (15):
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422] "Thread-2" prio=5 tid=11 Runnable
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=0 dsCount=0 obj=0x12ce6670 self=0xaa785900
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27521 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa3337920
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=R schedstat=( 151245786 162807551 286 ) utm=11 stm=3 core=0 HZ=100
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa3235000-0xa3237000 stackSize=1038KB
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes= "abort lock" "mutator lock"(shared held)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00351069  /system/lib/libart.so (_ZN3art15DumpNativeStackERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEEiP12BacktraceMapPKcPNS_9ArtMethodEPv+128)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 00331729  /system/lib/libart.so (_ZNK3art6Thread9DumpStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEbP12BacktraceMap+304)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 0034382f  /system/lib/libart.so (_ZN3art14DumpCheckpoint3RunEPNS_6ThreadE+622)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 0033d7bd  /system/lib/libart.so (_ZN3art10ThreadList13RunCheckpointEPNS_7ClosureE+336)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 0033d4b7  /system/lib/libart.so (_ZN3art10ThreadList4DumpERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEb+586)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 003245f5  /system/lib/libart.so (_ZNK3art10AbortState4DumpERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEE+372)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 0031b351  /system/lib/libart.so (_ZN3art7Runtime5AbortEPKc+92)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #07 pc 000b526b  /system/lib/libart.so (_ZN3art10LogMessageD2Ev+1134)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #08 pc 0023a609  /system/lib/libart.so (_ZN3art9JavaVMExt8JniAbortEPKcS2_+1584)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #09 pc 0023a8d3  /system/lib/libart.so (_ZN3art9JavaVMExt9JniAbortFEPKcS2_z+66)
03-08 12:16:40.961 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #10 pc 0027d9b3  /system/lib/libart.so (_ZN3art3JNI14NewObjectArrayEP7_JNIEnviP7_jclassP8_jobject+682)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #11 pc 000047d7  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (jni_get_string_array+62)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #12 pc 00004621  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (android_popen_python+100)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #13 pc 000aa337  /data/app/com.sensibility_testbed-1/lib/arm/libpython2.7.so (PyEval_EvalFrameEx+18014)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.snakei.PythonInterpreterService.runScript(Native method)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.snakei.PythonInterpreterService$1.run(PythonInterpreterService.java:169)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] "main" prio=5 tid=1 Native
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x745bc610 self=0xaa785400
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27507 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xad45d534
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 81408807 50192290 143 ) utm=3 stm=4 core=0 HZ=100
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xbe228000-0xbe22a000 stackSize=8MB
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00017418  /system/lib/libc.so (syscall+28)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b6e41  /system/lib/libart.so (_ZN3art17ConditionVariable16WaitHoldingLocksEPNS_6ThreadE+92)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 002660eb  /system/lib/libart.so (_ZN3art3JNI16CallObjectMethodEP7_JNIEnvP8_jobjectP10_jmethodIDz+218)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 0000303d  /system/lib/libnativehelper.so (jniGetReferent+92)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 000bece3  /system/lib/libandroid_runtime.so (???)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00011e73  /system/lib/libutils.so (_ZN7android6Looper9pollInnerEi+614)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 00011b7f  /system/lib/libutils.so (_ZN7android6Looper8pollOnceEiPiS1_PPv+26)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #07 pc 00093779  /system/lib/libandroid_runtime.so (_ZN7android18NativeMessageQueue8pollOnceEP7_JNIEnvP8_jobjecti+22)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #08 pc 0062577d  /system/framework/arm/boot-framework.oat (Java_android_os_MessageQueue_nativePollOnce__JI+96)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.os.MessageQueue.nativePollOnce(Native method)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.os.MessageQueue.next(MessageQueue.java:323)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.os.Looper.loop(Looper.java:136)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.app.ActivityThread.main(ActivityThread.java:6119)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.reflect.Method.invoke!(Native method)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:886)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:776)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] "Jit thread pool worker thread 0" prio=5 tid=2 Native (still starting up)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x0 self=0xa3524000
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27512 nice=9 cgrp=bg_non_interactive sched=0/0 handle=0xa9ea3920
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 747345 3171666 6 ) utm=0 stm=0 core=1 HZ=100
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9da5000-0xa9da7000 stackSize=1022KB
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00017418  /system/lib/libc.so (syscall+28)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b6e41  /system/lib/libart.so (_ZN3art17ConditionVariable16WaitHoldingLocksEPNS_6ThreadE+92)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 00344d85  /system/lib/libart.so (_ZN3art10ThreadPool7GetTaskEPNS_6ThreadE+160)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 003445b3  /system/lib/libart.so (_ZN3art16ThreadPoolWorker3RunEv+62)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 003440d9  /system/lib/libart.so (_ZN3art16ThreadPoolWorker8CallbackEPv+64)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00047003  /system/lib/libc.so (_ZL15__pthread_startPv+22)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 00019bdd  /system/lib/libc.so (__start_thread+6)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   (no managed stack frames)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] "Signal Catcher" prio=5 tid=3 WaitingInMainSignalCatcherLoop
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbe700 self=0xa098b800
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27513 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa9da2920
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 887918 2573124 4 ) utm=0 stm=0 core=1 HZ=100
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9ca6000-0xa9ca8000 stackSize=1014KB
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 000487f0  /system/lib/libc.so (__rt_sigtimedwait+12)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 0001dfdb  /system/lib/libc.so (sigwait+34)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 0032784f  /system/lib/libart.so (_ZN3art9SignalSet4WaitEv+22)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 00327449  /system/lib/libart.so (_ZN3art13SignalCatcher13WaitForSignalEPNS_6ThreadERNS_9SignalSetE+168)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 003261a9  /system/lib/libart.so (_ZN3art13SignalCatcher3RunEPv+276)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00047003  /system/lib/libc.so (_ZL15__pthread_startPv+22)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 00019bdd  /system/lib/libc.so (__start_thread+6)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   (no managed stack frames)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] "FinalizerWatchdogDaemon" prio=5 tid=4 Waiting
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbe8b0 self=0xa098cc00
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27516 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa9a99920
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 289321 171929 7 ) utm=0 stm=0 core=1 HZ=100
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9997000-0xa9999000 stackSize=1038KB
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00017418  /system/lib/libc.so (syscall+28)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b6e41  /system/lib/libart.so (_ZN3art17ConditionVariable16WaitHoldingLocksEPNS_6ThreadE+92)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 002a00d1  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadExibNS_11ThreadStateE+512)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 002a1923  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadEPNS_6mirror6ObjectExibNS_11ThreadStateE+258)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 002b01ff  /system/lib/libart.so (_ZN3artL11Object_waitEP7_JNIEnvP8_jobject+32)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00000557  /system/framework/arm/boot.oat (Java_java_lang_Object_wait__+74)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Object.wait!(Native method)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   - waiting on <0x08b5e01b> (a java.lang.Daemons$FinalizerWatchdogDaemon)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Daemons$FinalizerWatchdogDaemon.sleepUntilNeeded(Daemons.java:269)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   - locked <0x08b5e01b> (a java.lang.Daemons$FinalizerWatchdogDaemon)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Daemons$FinalizerWatchdogDaemon.run(Daemons.java:249)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422] "FinalizerDaemon" prio=5 tid=5 Waiting
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbe820 self=0xa098c200
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27515 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa9b9e920
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 755729 3324271 5 ) utm=0 stm=0 core=1 HZ=100
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9a9c000-0xa9a9e000 stackSize=1038KB
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00017418  /system/lib/libc.so (syscall+28)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b6e41  /system/lib/libart.so (_ZN3art17ConditionVariable16WaitHoldingLocksEPNS_6ThreadE+92)
03-08 12:16:40.962 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 002a00d1  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadExibNS_11ThreadStateE+512)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 002a1923  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadEPNS_6mirror6ObjectExibNS_11ThreadStateE+258)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 002b022b  /system/lib/libart.so (_ZN3artL13Object_waitJIEP7_JNIEnvP8_jobjectxi+36)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00000655  /system/framework/arm/boot.oat (Java_java_lang_Object_wait__JI+96)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Object.wait!(Native method)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   - waiting on <0x0f9ad5b8> (a java.lang.Object)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Object.wait(Object.java:407)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:188)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   - locked <0x0f9ad5b8> (a java.lang.Object)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:209)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Daemons$FinalizerDaemon.run(Daemons.java:204)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] "ReferenceQueueDaemon" prio=5 tid=6 Waiting
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbe790 self=0xa098bd00
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27514 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa9ca3920
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 362187 4371146 7 ) utm=0 stm=0 core=1 HZ=100
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9ba1000-0xa9ba3000 stackSize=1038KB
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00017418  /system/lib/libc.so (syscall+28)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b6e41  /system/lib/libart.so (_ZN3art17ConditionVariable16WaitHoldingLocksEPNS_6ThreadE+92)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 002a00d1  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadExibNS_11ThreadStateE+512)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 002a1923  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadEPNS_6mirror6ObjectExibNS_11ThreadStateE+258)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 002b01ff  /system/lib/libart.so (_ZN3artL11Object_waitEP7_JNIEnvP8_jobject+32)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00000557  /system/framework/arm/boot.oat (Java_java_lang_Object_wait__+74)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Object.wait!(Native method)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   - waiting on <0x065b3f91> (a java.lang.Class<java.lang.ref.ReferenceQueue>)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Daemons$ReferenceQueueDaemon.run(Daemons.java:150)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   - locked <0x065b3f91> (a java.lang.Class<java.lang.ref.ReferenceQueue>)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] "HeapTaskDaemon" prio=5 tid=7 Blocked
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbe940 self=0xa098db00
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27517 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa9994920
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 726720 2877240 8 ) utm=0 stm=0 core=1 HZ=100
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9892000-0xa9894000 stackSize=1038KB
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 0001741c  /system/lib/libc.so (syscall+32)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b726d  /system/lib/libart.so (_ZN3art17ConditionVariable9TimedWaitEPNS_6ThreadExi+108)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 001b5911  /system/lib/libart.so (_ZN3art2gc13TaskProcessor7GetTaskEPNS_6ThreadE+228)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 001b5fc1  /system/lib/libart.so (_ZN3art2gc13TaskProcessor11RunAllTasksEPNS_6ThreadE+44)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 001615cf  /system/framework/arm/boot-core-libart.oat (Java_dalvik_system_VMRuntime_runHeapTasks__+74)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at dalvik.system.VMRuntime.runHeapTasks(Native method)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   - waiting to lock an unknown object
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Daemons$HeapTaskDaemon.run(Daemons.java:433)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] "Binder:27507_1" prio=5 tid=8 Native
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbeaf0 self=0xa3525400
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27518 nice=0 cgrp=default sched=0/0 handle=0xa9791920
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 4774062 3377240 13 ) utm=0 stm=0 core=0 HZ=100
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9695000-0xa9697000 stackSize=1014KB
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 000485c4  /system/lib/libc.so (__ioctl+8)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 0001abdb  /system/lib/libc.so (ioctl+38)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 0003cc39  /system/lib/libbinder.so (_ZN7android14IPCThreadState14talkWithDriverEb+168)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 0003cd35  /system/lib/libbinder.so (_ZN7android14IPCThreadState20getAndExecuteCommandEv+8)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 0003d29f  /system/lib/libbinder.so (_ZN7android14IPCThreadState14joinThreadPoolEb+46)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 0004f695  /system/lib/libbinder.so (???)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 0000e325  /system/lib/libutils.so (_ZN7android6Thread11_threadLoopEPv+144)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #07 pc 00067d21  /system/lib/libandroid_runtime.so (_ZN7android14AndroidRuntime15javaThreadShellEPv+80)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #08 pc 00047003  /system/lib/libc.so (_ZL15__pthread_startPv+22)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #09 pc 00019bdd  /system/lib/libc.so (__start_thread+6)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   (no managed stack frames)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] "Binder:27507_2" prio=5 tid=9 Native
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbeb80 self=0xaa786800
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27519 nice=0 cgrp=default sched=0/0 handle=0xa9692920
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 1146823 328594 7 ) utm=0 stm=0 core=0 HZ=100
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa9596000-0xa9598000 stackSize=1014KB
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 000485c4  /system/lib/libc.so (__ioctl+8)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 0001abdb  /system/lib/libc.so (ioctl+38)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 0003cc39  /system/lib/libbinder.so (_ZN7android14IPCThreadState14talkWithDriverEb+168)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 0003cd35  /system/lib/libbinder.so (_ZN7android14IPCThreadState20getAndExecuteCommandEv+8)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 0003d29f  /system/lib/libbinder.so (_ZN7android14IPCThreadState14joinThreadPoolEb+46)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 0004f695  /system/lib/libbinder.so (???)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 0000e325  /system/lib/libutils.so (_ZN7android6Thread11_threadLoopEPv+144)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #07 pc 00067d21  /system/lib/libandroid_runtime.so (_ZN7android14AndroidRuntime15javaThreadShellEPv+80)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #08 pc 00047003  /system/lib/libc.so (_ZL15__pthread_startPv+22)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #09 pc 00019bdd  /system/lib/libc.so (__start_thread+6)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   (no managed stack frames)
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422] "Profile Saver" prio=5 tid=10 Native
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12cbef70 self=0xa3526800
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27520 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa919a920
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 694531 0 3 ) utm=0 stm=0 core=2 HZ=100
03-08 12:16:40.963 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0xa909e000-0xa90a0000 stackSize=1014KB
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 0001741c  /system/lib/libc.so (syscall+32)
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b726d  /system/lib/libart.so (_ZN3art17ConditionVariable9TimedWaitEPNS_6ThreadExi+108)
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 0025ab87  /system/lib/libart.so (_ZN3art12ProfileSaver3RunEv+138)
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 0025bf55  /system/lib/libart.so (_ZN3art12ProfileSaver21RunProfileSaverThreadEPv+52)
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 00047003  /system/lib/libc.so (_ZL15__pthread_startPv+22)
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00019bdd  /system/lib/libc.so (__start_thread+6)
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   (no managed stack frames)
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422] "ConnectivityThread" prio=5 tid=12 Native
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12ce6820 self=0xa0993f00
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27522 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0x91eac920
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 709063 3065416 7 ) utm=0 stm=0 core=0 HZ=100
03-08 12:16:40.964 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0x91daa000-0x91dac000 stackSize=1038KB
03-08 12:16:40.968 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.968 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00048484  /system/lib/libc.so (__epoll_pwait+20)
03-08 12:16:40.968 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 00019f8d  /system/lib/libc.so (epoll_pwait+60)
03-08 12:16:40.968 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 00019fbd  /system/lib/libc.so (epoll_wait+12)
03-08 12:16:40.968 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 00011c83  /system/lib/libutils.so (_ZN7android6Looper9pollInnerEi+118)
03-08 12:16:40.968 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 00011b7f  /system/lib/libutils.so (_ZN7android6Looper8pollOnceEiPiS1_PPv+26)
03-08 12:16:40.968 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00093779  /system/lib/libandroid_runtime.so (_ZN7android18NativeMessageQueue8pollOnceEP7_JNIEnvP8_jobjecti+22)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #06 pc 0062577d  /system/framework/arm/boot-framework.oat (Java_android_os_MessageQueue_nativePollOnce__JI+96)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.os.MessageQueue.nativePollOnce(Native method)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.os.MessageQueue.next(MessageQueue.java:323)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.os.Looper.loop(Looper.java:136)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at android.os.HandlerThread.run(HandlerThread.java:61)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422] "GAC_Executor[0]" prio=5 tid=13 Waiting
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12d6c160 self=0xa0994400
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27523 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0x91c4b920
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 7782711 30674531 27 ) utm=0 stm=0 core=0 HZ=100
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0x91b49000-0x91b4b000 stackSize=1038KB
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00017418  /system/lib/libc.so (syscall+28)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b6e41  /system/lib/libart.so (_ZN3art17ConditionVariable16WaitHoldingLocksEPNS_6ThreadE+92)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 002a00d1  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadExibNS_11ThreadStateE+512)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 002a1923  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadEPNS_6mirror6ObjectExibNS_11ThreadStateE+258)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 002b022b  /system/lib/libart.so (_ZN3artL13Object_waitJIEP7_JNIEnvP8_jobjectxi+36)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00000655  /system/framework/arm/boot.oat (Java_java_lang_Object_wait__JI+96)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Object.wait!(Native method)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   - waiting on <0x0d5e6ef6> (a java.lang.Object)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.parkFor$(Thread.java:2127)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   - locked <0x0d5e6ef6> (a java.lang.Object)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at sun.misc.Unsafe.park(Unsafe.java:325)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.locks.LockSupport.park(LockSupport.java:161)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.await(AbstractQueuedSynchronizer.java:2035)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.LinkedBlockingQueue.take(LinkedBlockingQueue.java:413)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1058)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1118)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:607)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.google.android.gms.internal.zzpu.run(unavailable:-1)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422] "GAC_Executor[1]" prio=5 tid=14 Waiting
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12d6cd30 self=0xaa785e00
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27527 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0x91b46920
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 2386563 19668281 7 ) utm=0 stm=0 core=0 HZ=100
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0x91a44000-0x91a46000 stackSize=1038KB
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 00017418  /system/lib/libc.so (syscall+28)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b6e41  /system/lib/libart.so (_ZN3art17ConditionVariable16WaitHoldingLocksEPNS_6ThreadE+92)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 002a00d1  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadExibNS_11ThreadStateE+512)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 002a1923  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadEPNS_6mirror6ObjectExibNS_11ThreadStateE+258)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 002b022b  /system/lib/libart.so (_ZN3artL13Object_waitJIEP7_JNIEnvP8_jobjectxi+36)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00000655  /system/framework/arm/boot.oat (Java_java_lang_Object_wait__JI+96)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Object.wait!(Native method)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   - waiting on <0x0f4862f7> (a java.lang.Object)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.parkFor$(Thread.java:2127)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   - locked <0x0f4862f7> (a java.lang.Object)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at sun.misc.Unsafe.park(Unsafe.java:325)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.locks.LockSupport.park(LockSupport.java:161)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.await(AbstractQueuedSynchronizer.java:2035)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.LinkedBlockingQueue.take(LinkedBlockingQueue.java:413)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1058)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1118)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:607)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at com.google.android.gms.internal.zzpu.run(unavailable:-1)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422] "AsyncTask #1" prio=5 tid=15 TimedWaiting
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | group="" sCount=1 dsCount=0 obj=0x12d6cdc0 self=0xaa786300
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | sysTid=27528 nice=10 cgrp=bg_non_interactive sched=0/0 handle=0x91a41920
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | state=S schedstat=( 1261457 40873439 9 ) utm=0 stm=0 core=0 HZ=100
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | stack=0x9193f000-0x91941000 stackSize=1038KB
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   | held mutexes=
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #00 pc 0001741c  /system/lib/libc.so (syscall+32)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #01 pc 000b726d  /system/lib/libart.so (_ZN3art17ConditionVariable9TimedWaitEPNS_6ThreadExi+108)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #02 pc 002a00e1  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadExibNS_11ThreadStateE+528)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #03 pc 002a1923  /system/lib/libart.so (_ZN3art7Monitor4WaitEPNS_6ThreadEPNS_6mirror6ObjectExibNS_11ThreadStateE+258)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #04 pc 002b022b  /system/lib/libart.so (_ZN3artL13Object_waitJIEP7_JNIEnvP8_jobjectxi+36)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   native: #05 pc 00000655  /system/framework/arm/boot.oat (Java_java_lang_Object_wait__JI+96)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Object.wait!(Native method)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   - waiting on <0x02039564> (a java.lang.Object)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.parkFor$(Thread.java:2127)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   - locked <0x02039564> (a java.lang.Object)
03-08 12:16:40.969 27507 27521 F art     : art/runtime/runtime.cc:422]   at sun.misc.Unsafe.park(Unsafe.java:325)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.locks.LockSupport.parkNanos(LockSupport.java:201)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.locks.AbstractQueuedSynchronizer$ConditionObject.awaitNanos(AbstractQueuedSynchronizer.java:2077)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.LinkedBlockingQueue.poll(LinkedBlockingQueue.java:438)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor.getTask(ThreadPoolExecutor.java:1057)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1118)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:607)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:422] 
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427] JNI DETECTED ERROR IN APPLICATION: negative array length: -1
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]     in call to NewObjectArray
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]     from void com.snakei.PythonInterpreterService.runScript(java.lang.String[], java.lang.String, java.lang.String, android.content.Context)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427] "Thread-2" prio=5 tid=11 Runnable
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   | group="main" sCount=0 dsCount=0 obj=0x12ce6670 self=0xaa785900
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   | sysTid=27521 nice=0 cgrp=bg_non_interactive sched=0/0 handle=0xa3337920
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   | state=R schedstat=( 110328910 103728906 243 ) utm=9 stm=1 core=0 HZ=100
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   | stack=0xa3235000-0xa3237000 stackSize=1038KB
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   | held mutexes= "mutator lock"(shared held)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #00 pc 00351069  /system/lib/libart.so (_ZN3art15DumpNativeStackERNSt3__113basic_ostreamIcNS0_11char_traitsIcEEEEiP12BacktraceMapPKcPNS_9ArtMethodEPv+128)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #01 pc 00331729  /system/lib/libart.so (_ZNK3art6Thread9DumpStackERNSt3__113basic_ostreamIcNS1_11char_traitsIcEEEEbP12BacktraceMap+304)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #02 pc 0023a327  /system/lib/libart.so (_ZN3art9JavaVMExt8JniAbortEPKcS2_+846)
03-08 12:16:40.970 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #03 pc 0023a8d3  /system/lib/libart.so (_ZN3art9JavaVMExt9JniAbortFEPKcS2_z+66)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #04 pc 0027d9b3  /system/lib/libart.so (_ZN3art3JNI14NewObjectArrayEP7_JNIEnviP7_jclassP8_jobject+682)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #05 pc 000047d7  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (jni_get_string_array+62)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #06 pc 00004621  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (android_popen_python+100)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427]   native: #07 pc 000aa337  /data/app/com.sensibility_testbed-1/lib/arm/libpython2.7.so (PyEval_EvalFrameEx+18014)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427]   at com.snakei.PythonInterpreterService.runScript(Native method)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427]   at com.snakei.PythonInterpreterService$1.run(PythonInterpreterService.java:169)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427]   at java.lang.Thread.run(Thread.java:761)
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427] 
03-08 12:16:40.972 27507 27521 F art     : art/runtime/runtime.cc:427] 
03-08 12:16:40.973 27507 27521 F libc    : Fatal signal 6 (SIGABRT), code -6 in tid 27521 (Thread-2)
03-08 12:16:40.974   270   270 W         : debuggerd: handling request: pid=27507 uid=10175 gid=10175 tid=27521
03-08 12:16:41.048 27529 27529 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
03-08 12:16:41.049 27529 27529 F DEBUG   : Build fingerprint: 'google/shamu/shamu:7.1.1/N6F26Q/3549652:user/release-keys'
03-08 12:16:41.049 27529 27529 F DEBUG   : Revision: '0'
03-08 12:16:41.049 27529 27529 F DEBUG   : ABI: 'arm'
03-08 12:16:41.049 27529 27529 F DEBUG   : pid: 27507, tid: 27521, name: Thread-2  >>> com.sensibility_testbed:nmmain <<<
03-08 12:16:41.049 27529 27529 F DEBUG   : signal 6 (SIGABRT), code -6 (SI_TKILL), fault addr --------
03-08 12:16:41.058 27529 27529 F DEBUG   : Abort message: 'art/runtime/java_vm_ext.cc:470] JNI DETECTED ERROR IN APPLICATION: negative array length: -1'
03-08 12:16:41.058 27529 27529 F DEBUG   :     r0 00000000  r1 00006b81  r2 00000006  r3 00000008
03-08 12:16:41.058 27529 27529 F DEBUG   :     r4 a3337978  r5 00000006  r6 a3337920  r7 0000010c
03-08 12:16:41.058 27529 27529 F DEBUG   :     r8 00000000  r9 0000000a  sl 000006ad  fp aa785900
03-08 12:16:41.058 27529 27529 F DEBUG   :     ip 00000000  sp a3336b10  lr aaae5537  pc aaae7da0  cpsr 600f0010
03-08 12:16:41.080 27529 27529 F DEBUG   : 
03-08 12:16:41.080 27529 27529 F DEBUG   : backtrace:
03-08 12:16:41.080 27529 27529 F DEBUG   :     #00 pc 00049da0  /system/lib/libc.so (tgkill+12)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #01 pc 00047533  /system/lib/libc.so (pthread_kill+34)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #02 pc 0001d635  /system/lib/libc.so (raise+10)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #03 pc 00019181  /system/lib/libc.so (__libc_android_abort+34)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #04 pc 00017048  /system/lib/libc.so (abort+4)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #05 pc 0031b43d  /system/lib/libart.so (_ZN3art7Runtime5AbortEPKc+328)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #06 pc 000b526b  /system/lib/libart.so (_ZN3art10LogMessageD2Ev+1134)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #07 pc 0023a609  /system/lib/libart.so (_ZN3art9JavaVMExt8JniAbortEPKcS2_+1584)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #08 pc 0023a8d3  /system/lib/libart.so (_ZN3art9JavaVMExt9JniAbortFEPKcS2_z+66)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #09 pc 0027d9b3  /system/lib/libart.so (_ZN3art3JNI14NewObjectArrayEP7_JNIEnviP7_jclassP8_jobject+682)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #10 pc 000047d7  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (jni_get_string_array+62)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #11 pc 00004621  /data/app/com.sensibility_testbed-1/lib/arm/libsnakei.so (android_popen_python+100)
03-08 12:16:41.081 27529 27529 F DEBUG   :     #12 pc 000aa337  /data/app/com.sensibility_testbed-1/lib/arm/libpython2.7.so (PyEval_EvalFrameEx+18014)
aaaaalbert added a commit to SensibilityTestbed/repy_v2 that referenced this issue Mar 8, 2017
@aaaaalbert
Type-check Android popen_python's call arg
a85c876 
Make sure the call argument is a list. The underlying C implementation
does little checking, so we must sanitize the arguments we supply to
it. See also aaaaalbert/sensibility-testbed#31 .
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@aaaaalbert