[BUG] A random crash

~~~
04-18 17:37:26.367 31016 31016 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
04-18 17:37:26.368 31016 31016 F DEBUG : Build fingerprint: 'google/blueline/blueline:10/QQ3A.200605.001/6392402:user/release-keys'
04-18 17:37:26.368 31016 31016 F DEBUG : Revision: 'MP1.0'
04-18 17:37:26.368 31016 31016 F DEBUG : ABI: 'arm64'
04-18 17:37:26.376 31016 31016 F DEBUG : Timestamp: 2021-04-18 17:37:26+0800
04-18 17:37:26.376 31016 31016 F DEBUG : pid: 1447, tid: 4203, name: Binder:1447_1A >>> system_server <<<
04-18 17:37:26.376 31016 31016 F DEBUG : uid: 1000
04-18 17:37:26.376 31016 31016 F DEBUG : signal 11 (SIGSEGV), code 2 (SEGV_ACCERR), fault addr 0x15600000
04-18 17:37:26.376 31016 31016 F DEBUG : x0 0000000012ec0040 x1 000000712d9b8a10 x2 0000000012ec0040 x3 0000000012ec0010
04-18 17:37:26.376 31016 31016 F DEBUG : x4 0000000000000002 x5 000000712d9b8a0c x6 000000712d9b8a10 x7 000000712d9b8a14
04-18 17:37:26.376 31016 31016 F DEBUG : x8 000000712d9b91a8 x9 0000000000000004 x10 0000000000000004 x11 0000000000000008
04-18 17:37:26.376 31016 31016 F DEBUG : x12 0000000012ec00a8 x13 0000000015600000 x14 0000000071b11a40 x15 0000000016ee21a2
04-18 17:37:26.376 31016 31016 F DEBUG : x16 00000000607bfdd6 x17 ffffffff9f843ce8 x18 000000712ce68000 x19 00000071b85b4220
04-18 17:37:26.376 31016 31016 F DEBUG : x20 000000712d9b8a14 x21 000000722fddb280 x22 000000712d9b8a08 x23 000000712d9b8a10
04-18 17:37:26.376 31016 31016 F DEBUG : x24 00000000155ffff4 x25 000000712d9b9170 x26 000000712d9b8a0c x27 0000000000000010
04-18 17:37:26.376 31016 31016 F DEBUG : x28 0000000000000004 x29 000000712d9b89e0
04-18 17:37:26.376 31016 31016 F DEBUG : sp 000000712d9b8990 lr 0000007230715c8c pc 0000007230715cb8
04-18 17:37:26.853 31016 31016 F DEBUG :
04-18 17:37:26.853 31016 31016 F DEBUG : backtrace:
04-18 17:37:26.854 31016 31016 F DEBUG : #00 pc 0000000000050cb8
04-18 17:37:26.854 31016 31016 F DEBUG : #01 pc 000000000200b060 /memfd:/jit-cache (deleted) (art_jni_trampoline+272)
04-18 17:37:26.854 31016 31016 F DEBUG : #02 pc 0000000002003ef8 /memfd:/jit-cache (deleted) (top.canyie.pine.entry.Arm64Entry.getArgs+856)
04-18 17:37:26.854 31016 31016 F DEBUG : #03 pc 0000000002001cb4 /memfd:/jit-cache (deleted) (top.canyie.pine.entry.Arm64Entry.handleBridge+372)
04-18 17:37:26.854 31016 31016 F DEBUG : #04 pc 0000000002008a60 /memfd:/jit-cache (deleted) (top.canyie.pine.entry.Arm64Entry.intBridge+32)
04-18 17:37:26.854 31016 31016 F DEBUG : #05 pc 00000000001365b8 /apex/com.android.runtime/lib64/libart.so (art_quick_invoke_static_stub+568) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #06 pc 000000000014508c /apex/com.android.runtime/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+276) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #07 pc 00000000002df0d4 /apex/com.android.runtime/lib64/libart.so!libart.so (offset 0x291000) (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+384) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #08 pc 00000000002afdd8 /apex/com.android.runtime/lib64/libart.so!libart.so (offset 0x291000) (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEbb.llvm.1271440803783865717+424) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #09 pc 0000000000588e8c /apex/com.android.runtime/lib64/libart.so!libart.so (offset 0x291000) (artQuickToInterpreterBridge+1012) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #10 pc 000000000013f468 /apex/com.android.runtime/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #11 pc 0000000001605fd0 /system/framework/oat/arm64/services.odex (com.android.server.am.ActivityManagerService.checkPermission+144) (BuildId: 12c9f25ee4b5377745dd569037b649d657a4f017)
04-18 17:37:26.854 31016 31016 F DEBUG : #12 pc 00000000005d9a3c /system/framework/arm64/boot-framework.oat (android.app.IActivityManager$Stub.onTransact+32508) (BuildId: 8dd360e7ac2513f6c21e6f05c4163646b3e394be)
04-18 17:37:26.854 31016 31016 F DEBUG : #13 pc 00000000016192a0 /system/framework/oat/arm64/services.odex (com.android.server.am.ActivityManagerService.onTransact+1088) (BuildId: 12c9f25ee4b5377745dd569037b649d657a4f017)
04-18 17:37:26.854 31016 31016 F DEBUG : #14 pc 00000000008341bc /system/framework/arm64/boot-framework.oat (android.os.Binder.execTransactInternal+748) (BuildId: 8dd360e7ac2513f6c21e6f05c4163646b3e394be)
04-18 17:37:26.854 31016 31016 F DEBUG : #15 pc 0000000000833da8 /system/framework/arm64/boot-framework.oat (android.os.Binder.execTransact+296) (BuildId: 8dd360e7ac2513f6c21e6f05c4163646b3e394be)
04-18 17:37:26.854 31016 31016 F DEBUG : #16 pc 0000000000136334 /apex/com.android.runtime/lib64/libart.so (art_quick_invoke_stub+548) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #17 pc 000000000014506c /apex/com.android.runtime/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+244) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #18 pc 00000000004a9110 /apex/com.android.runtime/lib64/libart.so!libart.so (offset 0x291000) (art::(anonymous namespace)::InvokeWithArgArray(art::ScopedObjectAccessAlreadyRunnable const&, art::ArtMethod*, art::(anonymous namespace)::ArgArray*, art::JValue*, char const*)+104) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #19 pc 00000000004aa460 /apex/com.android.runtime/lib64/libart.so!libart.so (offset 0x291000) (art::InvokeVirtualOrInterfaceWithVarArgs(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, std::__va_list)+424) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #20 pc 0000000000387758 /apex/com.android.runtime/lib64/libart.so!libart.so (offset 0x291000) (art::JNI::CallBooleanMethodV(_JNIEnv*, _jobject*, _jmethodID*, std::__va_list)+632) (BuildId: f9ff276075287a1d376fcd141f6042aa)
04-18 17:37:26.854 31016 31016 F DEBUG : #21 pc 00000000000d1e44 /system/lib64/libandroid_runtime.so (_JNIEnv::CallBooleanMethod(_jobject*, _jmethodID*, ...)+116) (BuildId: a4deef8d84f80b74d5707e20f76e8091)
04-18 17:37:26.854 31016 31016 F DEBUG : #22 pc 00000000001472b4 /system/lib64/libandroid_runtime.so (JavaBBinder::onTransact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+152) (BuildId: a4deef8d84f80b74d5707e20f76e8091)
04-18 17:37:26.854 31016 31016 F DEBUG : #23 pc 000000000004c670 /system/lib64/libbinder.so (android::BBinder::transact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+136) (BuildId: 3b3157019df8c6095f4884ba25e5c04f)
04-18 17:37:26.854 31016 31016 F DEBUG : #24 pc 000000000005898c /system/lib64/libbinder.so (android::IPCThreadState::executeCommand(int)+980) (BuildId: 3b3157019df8c6095f4884ba25e5c04f)
04-18 17:37:26.854 31016 31016 F DEBUG : #25 pc 0000000000058504 /system/lib64/libbinder.so (android::IPCThreadState::getAndExecuteCommand()+156) (BuildId: 3b3157019df8c6095f4884ba25e5c04f)
04-18 17:37:26.854 31016 31016 F DEBUG : #26 pc 0000000000058c40 /system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+60) (BuildId: 3b3157019df8c6095f4884ba25e5c04f)
04-18 17:37:26.854 31016 31016 F DEBUG : #27 pc 000000000007ee14 /system/lib64/libbinder.so (android::PoolThread::threadLoop()+24) (BuildId: 3b3157019df8c6095f4884ba25e5c04f)
04-18 17:37:26.854 31016 31016 F DEBUG : #28 pc 0000000000013600 /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+288) (BuildId: 0df2a8dd53d2bcb22474e13735f3cab5)
04-18 17:37:26.854 31016 31016 F DEBUG : #29 pc 00000000000c1794 /system/lib64/libandroid_runtime.so (android::AndroidRuntime::javaThreadShell(void*)+140) (BuildId: a4deef8d84f80b74d5707e20f76e8091)
04-18 17:37:26.854 31016 31016 F DEBUG : #30 pc 00000000000e10a0 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+36) (BuildId: 8de865099c99977483c8947f9b7937e9)
04-18 17:37:26.854 31016 31016 F DEBUG : #31 pc 0000000000083ab0 /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 8de865099c99977483c8947f9b7937e9)
~~~
Riru.hide is enabled, don't have more info now.

Start with the crash frames for top.canyie.pine.entry.Arm64Entry.getArgs, handleBridge, and intBridge, then compare them with the Android ART checkPermission path shown in the backtrace. The report provides no reproduction steps or additional diagnostic information because Riru.hide is enabled; done would require identifying a reproducible cause and verifying that the random crash no longer occurs.

Written by the indexing model from the issue text.