Crashes on certain hardware

[smelfungus]

Hi! Thank you for maintaining such a useful library. We’ve begun to see crashes (native?) in production on devices like the Samsung Galaxy Tab A8, and the stack traces seem to originate from Java_com_securevale_rasp_android_emulator_checks_DeviceChecks_u. Do you have any insight into what might be causing this or how we can work around it?

Build fingerprint: 'samsung/gta8wifixx/gta8wifi:14/UP1A.231005.007/X200XXS3DXD5:user/release-keys'
Revision: '0'
ABI: 'arm64'
Processor: '6'
Timestamp: 2025-05-05 17:09:53.341575881-0600
Process uptime: 1s
Cmdline: com.a.b
pid: 20936, tid: 20936, name: a.b  >>> com.a.b <<<
uid: 10266
signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
    x0  0000000000000000  x1  00000000000051c8  x2  0000000000000006  x3  0000007fe68f1130
    x4  0000000000000000  x5  0000000000000000  x6  0000000000000000  x7  2074612064656b63
    x8  00000000000000f0  x9  000000724e4d9e68  x10 0000000000000001  x11 000000724e555b10
    x12 00000000000012a8  x13 0000007128e83268  x14 0000000000000000  x15 0000007fe68f12b0
    x16 000000724e5c49e0  x17 000000724e59e4b0  x18 00000072624da000  x19 00000000000051c8
    x20 00000000000051c8  x21 00000000ffffffff  x22 ffffffff80000014  x23 b40000711ab766a0
    x24 0000000000000002  x25 0000000000000003  x26 0000007128e7eb40  x27 0000007128e82000
    x28 0000007128e82970  x29 0000007fe68f11b0
    lr  000000724e546158  sp  0000007fe68f1110  pc  000000724e546184  pst 0000000000000000
60 total frames
backtrace:
      #00 pc 0000000000094184  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: 59cafcd8c6514064584f920f18ea8760)
      #01 pc 000000000004c7f0  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #02 pc 000000000004c890  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #03 pc 000000000004bed0  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #04 pc 0000000000070370  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #05 pc 00000000000702e8  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #06 pc 0000000000070aa0  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #07 pc 0000000000022984  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #08 pc 0000000000024c5c  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000)
      #09 pc 0000000000040e1c  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/split_config.arm64_v8a.apk (offset 0xa9c000) (Java_com_securevale_rasp_android_emulator_checks_DeviceChecks_u+1520)
      #10 pc 000000000010b084  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/oat/arm64/base.odex (art_jni_trampoline+116)
      #11 pc 000000000040bed4  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/oat/arm64/base.odex (h5.a+8724)
      #12 pc 000000000028dc8c  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/oat/arm64/base.odex (Pe0.j+6012)
      #13 pc 00000000005baed4  /apex/com.android.art/lib64/libart.so (nterp_helper+7636) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #14 pc 0000000000425db4  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/base.apk (KX0.next+20)
      #15 pc 000000000033e9a4  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+612) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #16 pc 00000000005107c0  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, bool, art::JValue*)+1976) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #17 pc 0000000000497c1c  /apex/com.android.art/lib64/libart.so (void art::interpreter::ExecuteSwitchImplCpp<false>(art::interpreter::SwitchImplContext*)+4772) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #18 pc 0000000000357bd8  /apex/com.android.art/lib64/libart.so (ExecuteSwitchImplAsm+8) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #19 pc 000000000052c2a0  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/base.apk (Ir1.a+0)
      #20 pc 0000000000373b98  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.__uniq.112435418011751916792819755956732575238.llvm.13623008766270104645)+232) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #21 pc 0000000000373490  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+964) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #22 pc 0000000000355568  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #23 pc 00000000005b9198  /apex/com.android.art/lib64/libart.so (nterp_helper+152) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #24 pc 00000000002ec2fa  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/base.apk (v70.j+122)
      #25 pc 00000000005bae74  /apex/com.android.art/lib64/libart.so (nterp_helper+7540) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #26 pc 00000000002d59da  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/base.apk (R30.u+58)
      #27 pc 000000000033f8b0  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/oat/arm64/base.odex (Y30.y+2384)
      #28 pc 000000000033df1c  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/oat/arm64/base.odex (Y30.a+2492)
      #29 pc 00000000004728a4  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/oat/arm64/base.odex (m30.j+356)
      #30 pc 00000000004f7bbc  /data/app/~~Sh9jSkP8JytAuWi2CoHbvQ==/com.a.b-pwrrfWct8HVdvhvnysITKQ==/oat/arm64/base.odex (s5.onAttachedToWindow+5740)
      #31 pc 0000000000791e80  /system/framework/arm64/boot-framework.oat (android.view.View.dispatchAttachedToWindow+496) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #32 pc 00000000008369f8  /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.dispatchAttachedToWindow+72) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #33 pc 0000000000836a98  /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.dispatchAttachedToWindow+232) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #34 pc 0000000000836a98  /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.dispatchAttachedToWindow+232) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #35 pc 0000000000836a98  /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.dispatchAttachedToWindow+232) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #36 pc 0000000000836a98  /system/framework/arm64/boot-framework.oat (android.view.ViewGroup.dispatchAttachedToWindow+232) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #37 pc 00000000007ccf18  /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.performTraversals+1800) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #38 pc 00000000007d9be0  /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl.doTraversal+272) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #39 pc 00000000006f028c  /system/framework/arm64/boot-framework.oat (android.view.ViewRootImpl$TraversalRunnable.run+60) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #40 pc 00000000006d1a58  /system/framework/arm64/boot-framework.oat (android.view.Choreographer.doCallbacks+1256) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #41 pc 00000000006d2898  /system/framework/arm64/boot-framework.oat (android.view.Choreographer.doFrame+2440) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #42 pc 000000000075c668  /system/framework/arm64/boot-framework.oat (android.view.Choreographer$FrameDisplayEventReceiver.run+104) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #43 pc 000000000059085c  /system/framework/arm64/boot-framework.oat (android.os.Handler.dispatchMessage+76) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #44 pc 0000000000593b1c  /system/framework/arm64/boot-framework.oat (android.os.Looper.loopOnce+1036) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #45 pc 0000000000593688  /system/framework/arm64/boot-framework.oat (android.os.Looper.loop+552) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #46 pc 000000000032b7a0  /system/framework/arm64/boot-framework.oat (android.app.ActivityThread.main+1680) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #47 pc 000000000033ec80  /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #48 pc 0000000000383aac  /apex/com.android.art/lib64/libart.so (_jobject* art::InvokeMethod<(art::PointerSize)8>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jobject*, _jobject*, unsigned long)+1556) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #49 pc 0000000000383488  /apex/com.android.art/lib64/libart.so (art::Method_invoke(_JNIEnv*, _jobject*, _jobject*, _jobjectArray*) (.__uniq.165753521025965369065708152063621506277)+32) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #50 pc 00000000000a2578  /system/framework/arm64/boot.oat (art_jni_trampoline+120) (BuildId: b61ceddad05b78a56c2b2995b9ee8ab75cb9e28c)
      #51 pc 00000000008d2b04  /system/framework/arm64/boot-framework.oat (com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run+132) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #52 pc 00000000008dc5e0  /system/framework/arm64/boot-framework.oat (com.android.internal.os.ZygoteInit.main+3440) (BuildId: 3c030ec59a6eab9c81a359b679de1d7ccf2dfc42)
      #53 pc 000000000033ec80  /apex/com.android.art/lib64/libart.so (art_quick_invoke_static_stub+640) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #54 pc 00000000004e1620  /apex/com.android.art/lib64/libart.so (art::JValue art::InvokeWithVarArgs<_jmethodID*>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+728) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #55 pc 000000000057b224  /apex/com.android.art/lib64/libart.so (art::JNI<true>::CallStaticVoidMethodV(_JNIEnv*, _jclass*, _jmethodID*, std::__va_list)+156) (BuildId: 5c67d8dcc5daac4c933a359a39f5f19f)
      #56 pc 00000000000deca8  /system/lib64/libandroid_runtime.so (_JNIEnv::CallStaticVoidMethod(_jclass*, _jmethodID*, ...)+104) (BuildId: 7698900845ba7540328e8a3c9c680613)
      #57 pc 00000000000eb5cc  /system/lib64/libandroid_runtime.so (android::AndroidRuntime::start(char const*, android::Vector<android::String8> const&, bool)+860) (BuildId: 7698900845ba7540328e8a3c9c680613)
      #58 pc 000000000000256c  /system/bin/app_process64 (main+1292) (BuildId: 701a1a516a0e5d7fe46a274b7795f75f)
      #59 pc 000000000008c5b8  /apex/com.android.runtime/lib64/bionic/libc.so (__libc_init+104) (BuildId: 59cafcd8c6514064584f920f18ea8760)

[bmaciejm]

Hi first thanks for using my library!
Second unfortunately I don't have access to Samsung Galaxy Tab A8 to fully reproduce it, but it's crashing on isRadioVersionSuspicious method from the SDK, so it might be problematic if there is no radio hardware (or it's not recognizable at the moment).

I will investigate the issue (and a potential fix).

Galaxy Tab A8 is a tablet so mind checking whether other devices affected are also tablets? If so you might be able to exclude this particular checks (EmulatorChecks.RadioVersion) if the app is running on tablets as a temporary workaround.

Unfortunately API currently won't support the checks exclusion (but it's planned in future releases) so you need to add check for all EmulatorChecks types except the RadioVersion one.

It can be done that way (check the project README for further info):

import com.securevale.rasp.android.api.result.DebuggerChecks
import com.securevale.rasp.android.api.result.EmulatorChecks
import com.securevale.rasp.android.api.result.RootChecks

val check = builder.build()
check.subscribeVulnerabilitiesOnly(
  granular = true,
  checkOnlyFor = arrayOf(
    EmulatorChecks.AvdDevice,
    EmulatorChecks.AvdHardware,
    EmulatorChecks.Genymotion,
    EmulatorChecks.Nox,
    DebuggerChecks.Debuggable,
    DebuggerChecks.DebugField,
    RootChecks.SuUser,
    RootChecks.TestTags,
    RootChecks.RootApps,
    RootChecks.RootCloakingApps,
    RootChecks.WritablePaths,
    RootChecks.SuspiciousProperties
  )
) {
  // examine result(s) here
}

[bmaciejm]

Closing due to over 6 months of inactivity.