View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0001773T99X171.00 SKB EagleSW Issuepublic2023-07-24 10:432023-12-27 14:12
Reporter(ALTech) JunGyu Kim Assigned To(SW) Peter ChenDue Date2023-07-31 11:35
PrioritynormalSeveritys4-minorReproducibilitysometimes
Status closedResolutionfixed 
Summary0001773: [Smart3][ATV12] Tombstone issue in libhal_display.so
DescriptionHi Kerwin,

Amlogic is checking tombstone issue through ASAN.
Jira ticket is https://jira.skbroadband.com/browse/AMANDROIDS-35

Amlogic found the reason that tombstone causing by libhal_display.so.

======================================================================================
#4 0xe488c552 (/vendor/lib/libhdmicec.so+0x4552)
(gdb) info line *0x4552
Line 295 of "vendor/amlogic/common/frameworks/services/hdmicec/binder/HdmiCecHidlClient.cpp"
   starts at address 0x454e <_ZN7android17HdmiCecHidlClient19HdmiCecHidlCallback14notifyCallbackERKN6vendor7amlogic8hardware7hdmicec4V1_08CecEventE+145>
   and ends at 0x4558 <_ZN7android17HdmiCecHidlClient19HdmiCecHidlCallback14notifyCallbackERKN6vendor7amlogic8hardware7hdmicec4V1_08CecEventE+155>.290 for (size_t i = 0; i < event.cec.length; i++) {
291 event.cec.body[i] = hidlEvent.cec.body[i];
292 }
293 }
294
295 cecClient->mEventListener->onEventUpdate(&event);
296 }
297 return Void();
298 }
299


#4 0xe488c552 (/vendor/lib/libhdmicec.so+0x4552)
(gdb) info line *0x46cc
No line number information available for address 0x46cc <_ZN18HalHdmiCecCallback13onEventUpdateEPKN7android14hdmi_cec_eventE+72>


      #08 pc 0009b964 /system/lib/libclang_rt.asan-arm-android.so (__asan_memset+328) (BuildId: 012c3850e7999895f08564e7f22d7523dcf1f885)
      #09 pc 00011f90 /vendor/bin/hw/com.skb.btvsochalservice@1.0-service (com::skb::btvsochalservice::V1_0::implementation::BtvSocHalServiceImpl::remoteHalBtv_SetHdmiHotpluggedListener(unsigned int)+48) (BuildId: fad8a636e4b859ad8b065d6ae1d40a91)
      #10 pc 000046cf /vendor/lib/libhal_display.so (HalHdmiCecCallback::onEventUpdate(android::hdmi_cec_event const*)+74) (BuildId: cbe54ab7f73ee97e225eac10983bc79b)
======================================================================================

It looks like libhal_display.so send a null pointer as a parameter when calling memset at remoteHalBtv_SetHdmiHotpluggedListener(unsigned int)+48 .
Please check attached tombstone file.

Thank you.
Kim
TagsNo tags attached.
Attach Tags

Users monitoring this issue

User List (ALTech) SY Yoon , (ALTech) Younkwang Jung

Activities

(ALTech) JunGyu Kim

2023-07-24 10:43

developer  

0721_tombstone_00_BFXAT100 (280,096 bytes)

(SW) Jason Ling

2023-07-25 15:58

developer   ~0013717

Hi Jungyu,

I've checked https://jira.skbroadband.com/browse/AMANDROIDS-35

According to Amlogic's comment "When calling memset at remoteHalBtv_SetHdmiHotpluggedListener(unsigned int)+48 , it looks like you passed a null pointer as a parameter."

remoteHalBtv_SetHdmiHotpluggedListener is not Foxconn's code. Please check it with SPTEK.
As you can see in this ticket. Intek also can see this tombstone, the problem is not in libhal_display.so implemented by manufacturer.

By the way, the return type of function onEventUpdate is void, we don't send/return any null pointer as a parameter.

Thanks,
Jason

(ALTech) JunGyu Kim

2023-07-25 16:47

developer   ~0013719

Hi Jason,

remoteHalBtv_SetHdmiHotpluggedListener is not Foxconn's code. Please check it with SPTEK.
As you can see in this ticket. Intek also can see this tombstone, the problem is not in libhal_display.so implemented by manufacturer.
[ALT] Can I just say that the remoteHalBtv_SetHdmiHotpluggedListener function is not called from libhal_display.so ?

By the way, the return type of function onEventUpdate is void, we don't send/return any null pointer as a parameter.
[ALT] I wonder the memset code is exist in onEventUpdate function. Amlogic suspects that when calling memset, passed a null pointer as a parameter.

Thank you.
Kim

(SW) Jason Ling

2023-07-25 17:32

developer   ~0013721

Hi JunGyu,

[ALT] Can I just say that the remoteHalBtv_SetHdmiHotpluggedListener function is not called from libhal_display.so ?
I think Amlogic mentioned libhal_display.so, It's just that they don't have the source code to verify further

>>[ALT] I wonder the memset code is exist in onEventUpdate function. Amlogic suspects that when calling memset, passed a null pointer as a parameter.
No, we don't use memset in onEventUpdate function.

Thanks,
Jason

(ALTech) JunGyu Kim

2023-08-17 16:25

developer   ~0013900

Hi Peter.

Amlogic is still checking this issue but they want to help by FXN.
They want the result of gdb like as follow:

* example *
$ prebuilts/gdb/linux-x86/bin/gdb
(gdb) file out/target/product/BFX-AT100/symbols/vendor/bin/hw/com.skb.btvsochalservice@1.0-service
(gdb) info line *0x11f90

When you build libhal_display.so with source code, the library that have symbol is created below path:
  out/target/product/BFX-AT100/symbols/vendor/lib/

Please share the result of gdb by using created library.
The address is 0xe218d6cc

Thank you,
Kim

(ALTech) JunGyu Kim

2023-08-17 16:34

developer   ~0013902

Hi Peter,

The command is follow:
$ prebuilts/gdb/linux-x86/bin/gdb
(gdb) file out/target/product/BFX-AT100/symbols/vendor/lib/libhal_display.so
(gdb) info line *0xe218d6cc

Thank you.
Kim

(ALTech) JunGyu Kim

2023-12-27 14:12

developer   ~0014821

This issue is checking by Amlogic.
So I close this issue.

If I have any additional requests, I will re-open this ticket.

Thank you.
Kim

Issue History

Date Modified Username Field Change
2023-07-24 10:43 (ALTech) JunGyu Kim New Issue
2023-07-24 10:43 (ALTech) JunGyu Kim Status new => assigned
2023-07-24 10:43 (ALTech) JunGyu Kim Assigned To => (SW) Kerwin Chen
2023-07-24 10:43 (ALTech) JunGyu Kim File Added: 0721_tombstone_00_BFXAT100
2023-07-24 10:43 (ALTech) JunGyu Kim Issue Monitored: (ALTech) SY Yoon
2023-07-24 10:43 (ALTech) JunGyu Kim Issue Monitored: (ALTech) Younkwang Jung
2023-07-24 11:15 (SW) Kerwin Chen Assigned To (SW) Kerwin Chen => (SW) Jason Ling
2023-07-25 15:58 (SW) Jason Ling Note Added: 0013717
2023-07-25 15:58 (SW) Jason Ling Assigned To (SW) Jason Ling => (ALTech) JunGyu Kim
2023-07-25 16:47 (ALTech) JunGyu Kim Note Added: 0013719
2023-07-25 17:32 (SW) Jason Ling Note Added: 0013721
2023-08-17 16:25 (ALTech) JunGyu Kim Note Added: 0013900
2023-08-17 16:25 (ALTech) JunGyu Kim Status assigned => new
2023-08-17 16:25 (ALTech) JunGyu Kim Assigned To (ALTech) JunGyu Kim => (SW) Peter Chen
2023-08-17 16:34 (ALTech) JunGyu Kim Note Added: 0013902
2023-12-27 14:12 (ALTech) JunGyu Kim Status new => closed
2023-12-27 14:12 (ALTech) JunGyu Kim Resolution open => fixed
2023-12-27 14:12 (ALTech) JunGyu Kim Note Added: 0014821