JNI Crash com.radaee.pdf.Page.renderToBmp

Hello, 

We've been getting a crash with the SDK when viewing and closing a PDF file with images multiple times. 

Here is a stack trace of the crash:
```
2001-01-31T20:23:38.900Z com.sample [google-breakpad] <warn>:  ### ### ### ### ### ### ### ### ### ### ### ### ###
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545] JNI DETECTED ERROR IN APPLICATION: JNI GetLongField called with pending exception java.lang.RuntimeException: signal 11 (Address not mapped to object) at address 0x0
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at boolean com.radaee.pdf.Page.renderToBmp(long, android.graphics.Bitmap, long, int) (Page.java:-2)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at boolean com.radaee.pdf.Page.RenderToBmp(android.graphics.Bitmap, com.radaee.pdf.Matrix) (Page.java:1)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at void com.radaee.view.VPageCache$VBlock.Render(com.radaee.pdf.Document, int, com.radaee.pdf.Matrix, int, int) (VPageCache.java:4)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at void com.radaee.view.VPageCache$VBlock.Render() (VPageCache.java:12)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at void com.radaee.view.VThread$2.handleMessage(android.os.Message) (VThread.java:14)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at void android.os.Handler.dispatchMessage(android.os.Message) (Handler.java:106)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at void android.os.Looper.loop() (Looper.java:193)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at void com.radaee.view.VThread.run() (VThread.java:4)
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]     in call to GetLongField
2001-01-31T20:23:39.126Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]     from boolean com.radaee.pdf.Page.renderToBmp(long, android.graphics.Bitmap, long, int)
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545] "Thread-20" prio=5 tid=42 Runnable
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   | group="main" sCount=0 dsCount=0 flags=0 obj=0x132c3970 self=0x79c3135c2c00
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   | sysTid=9982 nice=0 cgrp=default sched=0/0 handle=0x79c2f7da44f0
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   | state=R schedstat=( 138402625 87560240 76 ) utm=11 stm=2 core=3 HZ=100
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   | stack=0x79c2f7ca1000-0x79c2f7ca3000 stackSize=1041KB
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   | held mutexes= "mutator lock"(shared held)
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #00 pc 0000000000403c53  /system/lib64/libart.so (art::DumpNativeStack(std::__1::basic_ostream<char, std::__1::char_traits<char>>&, int, BacktraceMap*, char const*, art::ArtMethod*, void*, bool)+227)
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #01 pc 00000000004ee017  /system/lib64/libart.so (art::Thread::DumpStack(std::__1::basic_ostream<char, std::__1::char_traits<char>>&, bool, BacktraceMap*, bool) const+343)
2001-01-31T20:23:39.127Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #02 pc 000000000031d8c3  /system/lib64/libart.so (art::JavaVMExt::JniAbort(char const*, char const*)+1011)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #03 pc 000000000031dcc2  /system/lib64/libart.so (art::JavaVMExt::JniAbortV(char const*, char const*, __va_list_tag*)+82)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #04 pc 00000000000fcce7  /system/lib64/libart.so (art::(anonymous namespace)::ScopedCheck::AbortF(char const*, ...)+183)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #05 pc 00000000000fb5ae  /system/lib64/libart.so (art::(anonymous namespace)::ScopedCheck::CheckPossibleHeapValue(art::ScopedObjectAccess&, char, art::(anonymous namespace)::JniValueType)+1182)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #06 pc 00000000000fa836  /system/lib64/libart.so (art::(anonymous namespace)::ScopedCheck::Check(art::ScopedObjectAccess&, bool, char const*, art::(anonymous namespace)::JniValueType*)+758)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #07 pc 0000000000102561  /system/lib64/libart.so (art::(anonymous namespace)::CheckJNI::GetField(char const*, _JNIEnv*, _jobject*, _jfieldID*, bool, art::Primitive::Type)+865)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #08 pc 00000000001341b2  /system/lib64/libandroid_runtime.so (android::bitmap::unlockPixels(_JNIEnv*, _jobject*)+18)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #09 pc 0000000000000734  /system/lib64/libjnigraphics.so (AndroidBitmap_unlockPixels+20)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #10 pc 000000000006b11c  /data/app/com.sample-wXzSLUocmIr8WYZbEFXHvQ==/lib/x86_64/librdpdf.so (Java_com_radaee_pdf_Page_renderToBmp+556)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #11 pc 00000000005cde61  /system/lib64/libart.so (art_quick_generic_jni_trampoline+209)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #12 pc 00000000005c3c16  /system/lib64/libart.so (art_quick_invoke_static_stub+806)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #13 pc 00000000000cf483  /system/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+243)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #14 pc 00000000002a1a11  /system/lib64/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+321)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #15 pc 000000000029c0c7  /system/lib64/libart.so (bool art::interpreter::DoCall<true, false>;(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+1319)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #16 pc 00000000005928b4  /system/lib64/libart.so (MterpInvokeStaticRange+148)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #17 pc 00000000005b5219  /system/lib64/libart.so (ExecuteMterpImpl+15385)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #18 pc 00000000003f81ba  /dev/ashmem/dalvik-classes2.dex extracted in memory from /data/app/com.sample-wXzSLUocmIr8WYZbEFXHvQ==/base.apk!classes2.dex (deleted) (com.radaee.pdf.Page.RenderToBmp+26)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #19 pc 0000000000271d61  /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEb.llvm.2620325170+561)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #20 pc 00000000002778ce  /system/lib64/libart.so (art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+222)
2001-01-31T20:23:39.128Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #21 pc 000000000029aad4  /system/lib64/libart.so (bool art::interpreter::DoCall<false, false>;(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+1236)
2001-01-31T20:23:39.129Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #22 pc 000000000058f96b  /system/lib64/libart.so (MterpInvokeVirtual+619)
2001-01-31T20:23:39.129Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #23 pc 00000000005b4d99  /system/lib64/libart.so (ExecuteMterpImpl+14233)
2001-01-31T20:23:39.129Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #24 pc 0000000000411c38  /dev/ashmem/dalvik-classes2.dex extracted in memory from /data/app/com.sample-wXzSLUocmIr8WYZbEFXHvQ==/base.apk!classes2.dex (deleted) (com.radaee.view.VPageCache$VBlock.Render+44)
2001-01-31T20:23:39.130Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #25 pc 0000000000271d61  /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEb.llvm.2620325170+561)
2001-01-31T20:23:39.131Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #26 pc 00000000002778ce  /system/lib64/libart.so (art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+222)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #27 pc 000000000029c0ab  /system/lib64/libart.so (bool art::interpreter::DoCall<true, false>;(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+1291)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #28 pc 000000000059270f  /system/lib64/libart.so (MterpInvokeDirectRange+271)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #29 pc 00000000005b5199  /system/lib64/libart.so (ExecuteMterpImpl+15257)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #30 pc 0000000000411d82  /dev/ashmem/dalvik-classes2.dex extracted in memory from /data/app/com.sample-wXzSLUocmIr8WYZbEFXHvQ==/base.apk!classes2.dex (deleted) (com.radaee.view.VPageCache$VBlock.Render+154)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #31 pc 0000000000271d61  /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEb.llvm.2620325170+561)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #32 pc 00000000002778ce  /system/lib64/libart.so (art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+222)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #33 pc 000000000029aad4  /system/lib64/libart.so (bool art::interpreter::DoCall<false, false>;(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+1236)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #34 pc 000000000058f96b  /system/lib64/libart.so (MterpInvokeVirtual+619)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #35 pc 00000000005b4d99  /system/lib64/libart.so (ExecuteMterpImpl+14233)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #36 pc 0000000000412b02  /dev/ashmem/dalvik-classes2.dex extracted in memory from /data/app/com.sample-wXzSLUocmIr8WYZbEFXHvQ==/base.apk!classes2.dex (deleted) (com.radaee.view.VThread$2.handleMessage+206)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #37 pc 0000000000271d61  /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEb.llvm.2620325170+561)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #38 pc 000000000057e367  /system/lib64/libart.so (artQuickToInterpreterBridge+1223)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #39 pc 00000000005cdfec  /system/lib64/libart.so (art_quick_to_interpreter_bridge+140)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #40 pc 000000000009b06a  /dev/ashmem/dalvik-jit-code-cache (deleted) (android.os.Handler.dispatchMessage+170)
2001-01-31T20:23:39.132Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #41 pc 00000000000509da  /dev/ashmem/dalvik-jit-code-cache (deleted) (android.os.Looper.loop+1178)
2001-01-31T20:23:39.133Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #42 pc 00000000005c3c16  /system/lib64/libart.so (art_quick_invoke_static_stub+806)
2001-01-31T20:23:39.133Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #43 pc 00000000000cf483  /system/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+243)
2001-01-31T20:23:39.133Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #44 pc 00000000002a1a11  /system/lib64/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+321)
2001-01-31T20:23:39.133Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #45 pc 000000000029aaed  /system/lib64/libart.so (bool art::interpreter::DoCall<false, false>;(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+1261)
2001-01-31T20:23:39.133Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #46 pc 0000000000590f8d  /system/lib64/libart.so (MterpInvokeStatic+189)
2001-01-31T20:23:39.133Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #47 pc 00000000005b4f19  /system/lib64/libart.so (ExecuteMterpImpl+14617)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #48 pc 0000000000412d2e  /dev/ashmem/dalvik-classes2.dex extracted in memory from /data/app/com.sample-wXzSLUocmIr8WYZbEFXHvQ==/base.apk!classes2.dex (deleted) (com.radaee.view.VThread.run+34)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #49 pc 0000000000271d61  /system/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEb.llvm.2620325170+561)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #50 pc 000000000057e367  /system/lib64/libart.so (artQuickToInterpreterBridge+1223)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #51 pc 00000000005cdfec  /system/lib64/libart.so (art_quick_to_interpreter_bridge+140)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #52 pc 00000000005c38b4  /system/lib64/libart.so (art_quick_invoke_stub+756)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #53 pc 00000000000cf472  /system/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+226)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #54 pc 00000000004b7389  /system/lib64/libart.so (art::(anonymous namespace)::InvokeWithArgArray(art::ScopedObjectAccessAlreadyRunnable const&, art::ArtMethod*, art::(anonymous namespace)::ArgArray*, art::JValue*, char const*)+89)
2001-01-31T20:23:39.134Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #55 pc 00000000004b865a  /system/lib64/libart.so (art::InvokeVirtualOrInterfaceWithJValues(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, _jmethodID*, jvalue*)+442)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #56 pc 00000000004e7918  /system/lib64/libart.so (art::Thread::CreateCallback(void*)+1352)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #57 pc 0000000000092bab  /system/lib64/libc.so (__pthread_start(void*)+27)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   native: #58 pc 000000000002af2d  /system/lib64/libc.so (__start_thread+61)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at com.radaee.pdf.Page.renderToBmp(Native method)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at com.radaee.pdf.Page.RenderToBmp(Page.java:1)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at com.radaee.view.VPageCache$VBlock.Render(VPageCache.java:4)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at com.radaee.view.VPageCache$VBlock.Render(VPageCache.java:12)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at com.radaee.view.VThread$2.handleMessage(VThread.java:14)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at android.os.Handler.dispatchMessage(Handler.java:106)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at android.os.Looper.loop(Looper.java:193)
2001-01-31T20:23:39.137Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]   at com.radaee.view.VThread.run(VThread.java:4)
2001-01-31T20:23:39.138Z com.sample [com.sample] <fatal>:  java_vm_ext.cc:545]
```

This crash happens on this version 3.65.7 of the SDK.

I've attached 2 log files which contains the stacktrace and also a sample pdf file that crashes.

Please let me know if there's a fix for this. Thank you.

dear user:
i have not found the sample PDF file here.
but we have fixed lots issues, since 3.65.7
plz replace native libraries attached here.
 

Hi admin.

Thank you for the response. Please see attachments in the reply.
I'll try out the new version and check if the crash is fixed. Thank you again.

dear user:
this sample file already tested.
plz download 3.65.8

Thank you I will try 3.65.8 and will report back if it's solved.

I tried version 3.65.8 and we intermittently get a crash when opening a PDF but might be caused by a different error.

Please see attached trace.