SIGSEGV null pointer dereference in libjingle_peerconnection_so.so during active H265 stream

このレポートには、ソースファイル、テスト、またはシンボル化されたエントリポイントの記載がありません。まず、アクティブな H265 ストリームがある Android 14、32 ビット RK3528 環境でクラッシュを再現し、その後、ネイティブ tombstone とシンボル化されたオフセットを調査してください。null デリファレンスを特定して修正し、同じ接続が安定したままであることを確認できれば完了です。

Environment

• stream-webrtc-android version: tested on both 1.3.8 and 1.3.10 — crash on both
• Device: Android TV box, product model X96Q_RK3518 (device codename rk3518_box_32), actual SoC is Rockchip RK3528 (ro.board.platform/ro.product.board), manufacturer RockChip
• Android 14, API level 34
• ABI: armeabi-v7a only — no 64-bit userspace (ro.product.cpu.abilist64 empty)
• ABI in crash tombstone: arm (32-bit)

The app crashes with a native SIGSEGV inside libjingle_peerconnection_so.so a few seconds after a WebRTC connection with an H265 video track is fully established — ICE connected, DTLS/data channel open. The crash is not during codec negotiation setup; it consistently occurs ~3 seconds after onDataChannelOpen.

2026-07-23 12:49:43.190 14108-14553 libc                    com.onmo.plus                        A  Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 in tid 14553 (worker_thread -), pid 14108 (com.onmo.plus)
---------------------------- PROCESS STARTED (14847) for package com.onmo.plus ----------------------------
2026-07-23 12:49:44.656 14108-14560 org.webrtc.Logging      com.onmo.plus                        I  EglRenderer: Duration: 4014 ms. Frames received: 0. Dropped: 0. Rendered: 0. Render fps: .0. Average render time: NA. Average swapBuffer time: NA.
2026-07-23 12:49:45.065 14841-14841 DEBUG                   crash_dump32                         A  Cmdline: com.onmo.plus
2026-07-23 12:49:45.065 14841-14841 DEBUG                   crash_dump32                         A  pid: 14108, tid: 14553, name: worker_thread -  >>> com.onmo.plus <
2026-07-23 12:49:45.066 14841-14841 DEBUG                   crash_dump32                         A        #00 pc 005999a6  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.066 14841-14841 DEBUG                   crash_dump32                         A        #01 pc 005991bb  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #02 pc 00599229  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #03 pc 005563f1  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #04 pc 0054e6e1  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #05 pc 005c8b6b  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #06 pc 005cc425  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #07 pc 0026397d  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #08 pc 002632a3  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
2026-07-23 12:49:45.067 14841-14841 DEBUG                   crash_dump32                         A        #09 pc 00263b85  /data/app/~~TUTYWdqP2sEb_pelrS2Y0Q==/com.onmo.plus-DA2wdycnU0kxn1dL0ehkxA==/base.apk!libjingle_peerconnection_so.so (offset 0x302c000) (BuildId: 42abf81ae5dab70f)
---------------------------- PROCESS ENDED (14108) for package com.onmo.plus ----------------------------
---------------------------- PROCESS ENDED (14847) for package com.onmo.plus ----------------------------