alibaba/BeeHive

double-free Crash信息

Closed this issue · 1 comments

Dcell commented

在使用BeeHive过程中,偶现了N次,double-free 的Crash
Xcode9 iPhoneX iOS11
BeeHive版本 1.5.1
Swift/OC 混编

其实我有疑问,在对可变字典进行操作的时候,为什么不添加锁呢,我并没有看到多线程安全相关的代码。

########函数栈
#0	0x00000001031c6f68 in __asan::AsanDie() ()
#1	0x00000001031dacc0 in __sanitizer::Die() ()
#2	0x00000001031c45c4 in __asan::ScopedInErrorReport::~ScopedInErrorReport() ()
#3	0x00000001031c33bc in __asan::ReportDoubleFree(unsigned long, __sanitizer::BufferedStackTrace*) ()
#4	0x00000001031beea8 in wrap_free ()
#5	0x0000000182718d54 in mdict_rehashd ()
#6	0x00000001825a7da0 in -[__NSDictionaryM setObject:forKey:] ()
#7	0x0000000103096d58 in -[BHContext addServiceWithImplInstance:serviceName:] at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Pods/BeeHive/BeeHive/BHContext.m:38
#8	0x00000001030a08b4 in -[BHServiceManager createService:] at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Pods/BeeHive/BeeHive/BHServiceManager.m:103
#9	0x00000001030896bc in -[BeeHive createService:] at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Pods/BeeHive/BeeHive/BeeHive.m:34
#10	0x00000001044e9658 in closure #1 in closure #1 in ChatManager.syncOffLineMessage() at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/BaseLineModule/Mudules/Chat/ChatManager.swift:111
#11	0x000000010449878c in thunk for @callee_owned () -> () ()
#12	0x000000010a82d45c in _dispatch_client_callout ()
#13	0x000000010a839b74 in _dispatch_block_invoke_direct ()
#14	0x00000001031bdf24 in __wrap_dispatch_group_async_block_invoke ()
#15	0x000000010a82d49c in _dispatch_call_block_and_release ()
#16	0x000000010a82d45c in _dispatch_client_callout ()
#17	0x000000010a83a8c0 in _dispatch_continuation_pop ()
#18	0x000000010a83909c in _dispatch_async_redirect_invoke ()
#19	0x000000010a83eb54 in _dispatch_root_queue_drain ()
#20	0x000000010a83e880 in _dispatch_worker_thread3 ()
#21	0x0000000182303120 in _pthread_wqthread ()
#22	0x0000000182302c20 in start_wqthread ()
Enqueued from dispatchSerialQueue (Thread 4) Queue : dispatchSerialQueue (serial)
#0	0x000000010a83c9e8 in _dispatch_root_queue_push ()
#1	0x00000001031bde00 in wrap_dispatch_group_async ()
#2	0x000000010a3f6dd0 in _swift_dispatch_group_notifyTm ()
#3	0x000000010a3ef240 in DispatchQueue.async(group:qos:flags:execute:) ()
#4	0x00000001044e8d0c in closure #1 in ChatManager.syncOffLineMessage() at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/BaseLineModule/Mudules/Chat/ChatManager.swift:132
#5	0x000000010449878c in thunk for @callee_owned () -> () ()
#6	0x00000001031bdd5c in __wrap_dispatch_async_block_invoke ()
#7	0x000000010a82d49c in _dispatch_call_block_and_release ()
#8	0x000000010a82d45c in _dispatch_client_callout ()
#9	0x000000010a83c110 in _dispatch_queue_serial_drain ()
#10	0x000000010a8309a4 in _dispatch_queue_invoke ()
#11	0x000000010a83d104 in _dispatch_root_queue_drain_deferred_wlh ()
#12	0x000000010a844100 in _dispatch_workloop_worker_thread ()
#13	0x0000000182302fd0 in _pthread_wqthread ()
#14	0x0000000182302c20 in start_wqthread ()
Enqueued from LCU (Thread 2) Queue : LCU (serial)
#0	0x000000010a83cc50 in _dispatch_queue_push ()
#1	0x00000001031bdc3c in wrap_dispatch_async ()
#2	0x000000010a3f73c4 in _swift_dispatch_syncTm ()
#3	0x000000010a3ef2a8 in DispatchQueue.async(group:qos:flags:execute:) ()
#4	0x00000001044e85c8 in ChatManager.syncOffLineMessage() at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/BaseLineModule/Mudules/Chat/ChatManager.swift:156
#5	0x000000010454dce8 in ChatModule.connectStateCallBack(isconnect:) at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/BaseLineModule/Mudules/Chat/ChatModule.swift:99
#6	0x000000010454ddac in @objc ChatModule.connectStateCallBack(isconnect:) ()
#7	0x0000000104941b1c in LCUMsgCallBack(unsigned int, char*, unsigned int, void*) at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/ClientAdapter/Adapter/LCU/LCUAdapter.mm:102
#8	0x0000000104e820e0 in LCUSdkManager::setLCUSdkMsgCb(unsigned int, int (*)(unsigned int, char*, unsigned int, void*), void*) ()
#9	0x0000000104e4e8e4 in LCU_SC_SetLCUMsg ()
#10	0x00000001049459a4 in ::__53-[LCUAdapter connect:ipInfo:svrDomid:serverid:error:]_block_invoke() at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/ClientAdapter/Adapter/LCU/LCUAdapter.mm:219
#11	0x000000010a82d45c in _dispatch_client_callout ()
#12	0x000000010a83ad50 in _dispatch_queue_barrier_sync_invoke_and_complete ()
#13	0x0000000104944d94 in ::-[LCUAdapter connect:ipInfo:svrDomid:serverid:error:](int, NSString *, NSString *, int, NSError **) at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/ClientAdapter/Adapter/LCU/LCUAdapter.mm:195
#14	0x00000001048eea38 in ::__30-[CMUAdapter messageCallBack:]_block_invoke_2() at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/ClientAdapter/Adapter/CMU/CMUAdapter.mm:172
#15	0x00000001031bdd5c in __wrap_dispatch_async_block_invoke ()
#16	0x000000010a82d49c in _dispatch_call_block_and_release ()
#17	0x000000010a82d45c in _dispatch_client_callout ()
#18	0x000000010a83c110 in _dispatch_queue_serial_drain ()
#19	0x000000010a8309a4 in _dispatch_queue_invoke ()
#20	0x000000010a83d104 in _dispatch_root_queue_drain_deferred_wlh ()
#21	0x000000010a844100 in _dispatch_workloop_worker_thread ()
#22	0x0000000182302fd0 in _pthread_wqthread ()
#23	0x0000000182302c20 in start_wqthread ()
Enqueued from com.apple.root.default-qos (Thread 2) Queue : com.apple.root.default-qos (serial)
#0	0x000000010a83cc50 in _dispatch_queue_push ()
#1	0x00000001031bdc3c in wrap_dispatch_async ()
#2	0x00000001048e9fec in ::__30-[CMUAdapter messageCallBack:]_block_invoke() at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/ClientAdapter/Adapter/CMU/CMUAdapter.mm:170
#3	0x00000001031bdd5c in __wrap_dispatch_async_block_invoke ()
#4	0x000000010a82d49c in _dispatch_call_block_and_release ()
#5	0x000000010a82d45c in _dispatch_client_callout ()
#6	0x000000010a83ecd8 in _dispatch_root_queue_drain ()
#7	0x000000010a83e880 in _dispatch_worker_thread3 ()
#8	0x0000000182303120 in _pthread_wqthread ()
#9	0x0000000182302c20 in start_wqthread ()
Enqueued from com.apple.root.default-qos.overcommit (Thread 22) Queue : com.apple.root.default-qos.overcommit (serial)
#0	0x000000010a83c9e8 in _dispatch_root_queue_push ()
#1	0x00000001031bdc3c in wrap_dispatch_async ()
#2	0x00000001048e90bc in ::-[CMUAdapter messageCallBack:](NSString *) at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/ClientAdapter/Adapter/CMU/CMUAdapter.mm:156
#3	0x00000001048e8c3c in CmuMsgCallBack(unsigned int, char*, unsigned int, void*) at /Users//Documents/workspace/IOS_VECD/Branches/RHTX_Branches/P_2018.04.21_RHTX_V2.0POC/Depend/ClientAdapter/Adapter/CMU/CMUAdapter.mm:150
#4	0x0000000104a9a80c in CmuSdkManager::CallBackMsgStr(unsigned int, char*, unsigned int) ()
#5	0x0000000104a9a548 in CmuSdkManager::CallBackSysMsg(unsigned int, peInnerMsg&) ()
#6	0x0000000104a77890 in IbpSdkMsg(unsigned int, peInnerMsg&, void*) ()
#7	0x0000000104aa2a40 in cmuReqMsg(unsigned int, peInnerMsg&, void*) ()
#8	0x0000000104a9da04 in CmuSession::DealWithOneRequest(peInnerMsg&, peInnerMsg&) ()
#9	0x000000010537a97c in SdkManager::DealWithOneRequest(peInnerMsg&) ()
#10	0x0000000104bf918c in CComProcessorBase::DealMsg(peInnerMsg&) ()
#11	0x00000001053789dc in SdkManagerThread::Heartbeat() ()
#12	0x0000000104bf7cb4 in CComProcessorBase::run() ()
#13	0x0000000104bf3a38 in CComProcessorBase::threadfuncNoEvent(void*) ()
#14	0x000000018230431c in _pthread_body ()
#15	0x00000001823041e8 in _pthread_start ()
#16	0x0000000182302c28 in thread_start ()



###########log


=================================================================
==5288==ERROR: AddressSanitizer: attempting double-free on 0x00014ea2cdc0 in thread T1:
    #0 0x1031bede7 in wrap_free (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7)
    #1 0x182718d53 in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x180d53)
    #2 0x1825a7d9f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xfd9f)
    #3 0x103096d57 in -[BHContext addServiceWithImplInstance:serviceName:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x12d57)
    #4 0x1030a08b3 in -[BHServiceManager createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x1c8b3)
    #5 0x1030896bb in -[BeeHive createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x56bb)
    #6 0x1044e9657 in closure #1 () -> () in closure #1 () -> () in BaseLineModule.ChatManager.syncOffLineMessage() -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x5d657)
    #7 0x10449878b in reabstraction thunk helper from @callee_owned () -> () to @callee_unowned @convention(block) () -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0xc78b)
    #8 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
    #9 0x10a839b73 in _dispatch_block_invoke_direct (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xdb73)
    #10 0x1031bdf23 in __wrap_dispatch_group_async_block_invoke (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4df23)
    #11 0x10a82d49b in _dispatch_call_block_and_release (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x149b)
    #12 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
    #13 0x10a83a8bf in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe8bf)
    #14 0x10a83909b in _dispatch_async_redirect_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xd09b)
    #15 0x10a83eb53 in _dispatch_root_queue_drain (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x12b53)
    #16 0x10a83e87f in _dispatch_worker_thread3 (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x1287f)
    #17 0x18230311f in _pthread_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0x111f)
    #18 0x182302c1f in start_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0xc1f)

0x00014ea2cdc0 is located 0 bytes inside of 368-byte region [0x00014ea2cdc0,0x00014ea2cf30)
freed by thread T12 here:
    #0 0x1031bede7 in wrap_free (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7)
    #1 0x182718d53 in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x180d53)
    #2 0x1825a7d9f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xfd9f)
    #3 0x103096d57 in -[BHContext addServiceWithImplInstance:serviceName:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x12d57)
    #4 0x1030a08b3 in -[BHServiceManager createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x1c8b3)
    #5 0x1030896bb in -[BeeHive createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x56bb)
    #6 0x1044ebc43 in closure #2 () -> () in closure #1 () -> () in BaseLineModule.ChatManager.syncOffLineMessage() -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x5fc43)
    #7 0x10449878b in reabstraction thunk helper from @callee_owned () -> () to @callee_unowned @convention(block) () -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0xc78b)
    #8 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
    #9 0x10a839b73 in _dispatch_block_invoke_direct (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xdb73)
    #10 0x1031bdf23 in __wrap_dispatch_group_async_block_invoke (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4df23)
    #11 0x10a82d49b in _dispatch_call_block_and_release (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x149b)
    #12 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
    #13 0x10a83a8bf in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe8bf)
    #14 0x10a83909b in _dispatch_async_redirect_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xd09b)
    #15 0x10a83eb53 in _dispatch_root_queue_drain (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x12b53)
    #16 0x10a83e87f in _dispatch_worker_thread3 (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x1287f)
    #17 0x18230311f in _pthread_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0x111f)
    #18 0x182302c1f in start_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0xc1f)

previously allocated by thread T1 here:
    #0 0x1031bf13f in wrap_calloc (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4f13f)
    #1 0x182718c83 in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x180c83)
    #2 0x1825a7d9f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xfd9f)
    #3 0x103096d57 in -[BHContext addServiceWithImplInstance:serviceName:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x12d57)
    #4 0x1030a08b3 in -[BHServiceManager createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x1c8b3)
    #5 0x1030896bb in -[BeeHive createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x56bb)
    #6 0x1048f4587 in -[CMUAdapter disConnectOtherModules] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/ClientAdapter.framework/ClientAdapter:arm64+0x14587)
    #7 0x1048f364f in __35-[CMUAdapter logoutAndReturnError:]_block_invoke (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/ClientAdapter.framework/ClientAdapter:arm64+0x1364f)
    #8 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
    #9 0x10a83ad4f in _dispatch_queue_barrier_sync_invoke_and_complete (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xed4f)
    #10 0x1048f349f in -[CMUAdapter logoutAndReturnError:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/ClientAdapter.framework/ClientAdapter:arm64+0x1349f)
    #11 0x10449e2f7 in BaseLineModule.AccountModule.logout() throws -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x122f7)
    #12 0x10449e5db in @objc BaseLineModule.AccountModule.logout() throws -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x125db)
    #13 0x1044b12d7 in BaseLineModule.AccountModule.relogin() -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x252d7)
    #14 0x1044a9973 in closure #2 () -> () in closure #2 (Alamofire.NetworkReachabilityManager.NetworkReachabilityStatus) -> () in BaseLineModule.AccountModule.init() -> BaseLineModule.AccountModule (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x1d973)
    #15 0x10449878b in reabstraction thunk helper from @callee_owned () -> () to @callee_unowned @convention(block) () -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0xc78b)
    #16 0x1031bdd5b in __wrap_dispatch_async_block_invoke (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4dd5b)
    #17 0x10a82d49b in _dispatch_call_block_and_release (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x149b)
    #18 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
    #19 0x10a83956b in _dispatch_queue_override_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xd56b)
    #20 0x10a83eb53 in _dispatch_root_queue_drain (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x12b53)
    #21 0x10a83e87f in _dispatch_worker_thread3 (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x1287f)
    #22 0x18230311f in _pthread_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0x111f)
    #23 0x182302c1f in start_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0xc1f)

Thread T1 created by T0 here:
    <empty stack>

Thread T12 created by T3 here:
    <empty stack>

Thread T3 created by T1 here:
    <empty stack>

SUMMARY: AddressSanitizer: double-free (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7) in wrap_free
2018-05-24 20:36:12.418319+0800 vecd[5288:4198043] ==5288==WARNING: unexpected format specifier in printf interceptor: %U
2018-05-24 20:36:12.418398+0800 vecd[5288:4198043] ==5288==WARNING: unexpected format specifier in printf interceptor: %U
2018-05-24 20:36:12.418410+0800 vecd[5288:4198043] =================================================================
2018-05-24 20:36:12.418421+0800 vecd[5288:4198043] ==5288==ERROR: AddressSanitizer: attempting double-free on 0x00014ea2cdc0 in thread T1:
2018-05-24 20:36:12.418432+0800 vecd[5288:4198043]     #0 0x1031bede7 in wrap_free (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7)
2018-05-24 20:36:12.418443+0800 vecd[5288:4198043]     #1 0x182718d53 in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x180d53)
2018-05-24 20:36:12.418454+0800 vecd[5288:4198043]     #2 0x1825a7d9f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xfd9f)
2018-05-24 20:36:12.418465+0800 vecd[5288:4198043]     #3 0x103096d57 in -[BHContext addServiceWithImplInstance:serviceName:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x12d57)
2018-05-24 20:36:12.418477+0800 vecd[5288:4198043]     #4 0x1030a08b3 in -[BHServiceManager createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x1c8b3)
2018-05-24 20:36:12.418489+0800 vecd[5288:4198043]     #5 0x1030896bb in -[BeeHive createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x56bb)
2018-05-24 20:36:12.418500+0800 vecd[5288:4198043]     #6 0x1044e9657 in closure #1 () -> () in closure #1 () -> () in BaseLineModule.ChatManager.syncOffLineMessage() -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x5d657)
2018-05-24 20:36:12.418512+0800 vecd[5288:4198043]     #7 0x10449878b in reabstraction thunk helper from @callee_owned () -> () to @callee_unowned @convention(block) () -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0xc78b)
2018-05-24 20:36:12.418524+0800 vecd[5288:4198043]     #8 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
2018-05-24 20:36:12.418534+0800 vecd[5288:4198043]     #9 0x10a839b73 in _dispatch_block_invoke_direct (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xdb73)
2018-05-24 20:36:12.418545+0800 vecd[5288:4198043]     #10 0x1031bdf23 in __wrap_dispatch_group_async_block_invoke (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4df23)
2018-05-24 20:36:12.418571+0800 vecd[5288:4198043]     #11 0x10a82d49b in _dispatch_call_block_and_release (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x149b)
2018-05-24 20:36:12.418582+0800 vecd[5288:4198043]     #12 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
2018-05-24 20:36:12.418593+0800 vecd[5288:4198043]     #13 0x10a83a8bf in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe8bf)
2018-05-24 20:36:12.418603+0800 vecd[5288:4198043]     #14 0x10a83909b in _dispatch_async_redirect_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xd09b)
2018-05-24 20:36:12.418614+0800 vecd[5288:4198043]     #15 0x10a83eb53 in _dispatch_root_queue_drain (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x12b53)
2018-05-24 20:36:12.418624+0800 vecd[5288:4198043]     #16 0x10a83e87f in _dispatch_worker_thread3 (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x1287f)
2018-05-24 20:36:12.418634+0800 vecd[5288:4198043]     #17 0x18230311f in _pthread_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0x111f)
2018-05-24 20:36:12.418645+0800 vecd[5288:4198043]     #18 0x182302c1f in start_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0xc1f)
2018-05-24 20:36:12.418662+0800 vecd[5288:4198043] 
2018-05-24 20:36:12.418671+0800 vecd[5288:4198043] 0x00014ea2cdc0 is located 0 bytes inside of 368-byte region [0x00014ea2cdc0,0x00014ea2cf30)
2018-05-24 20:36:12.418681+0800 vecd[5288:4198043] freed by thread T12 here:
2018-05-24 20:36:12.418692+0800 vecd[5288:4198043]     #0 0x1031bede7 in wrap_free (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7)
2018-05-24 20:36:12.418703+0800 vecd[5288:4198043]     #1 0x182718d53 in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x180d53)
2018-05-24 20:36:12.418715+0800 vecd[5288:4198043]     #2 0x1825a7d9f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xfd9f)
2018-05-24 20:36:12.418726+0800 vecd[5288:4198043]     #3 0x103096d57 in -[BHContext addServiceWithImplInstance:serviceName:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x12d57)
2018-05-24 20:36:12.418737+0800 vecd[5288:4198043]     #4 0x1030a08b3 in -[BHServiceManager createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x1c8b3)
2018-05-24 20:36:12.418749+0800 vecd[5288:4198043]     #5 0x1030896bb in -[BeeHive createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x56bb)
2018-05-24 20:36:12.418760+0800 vecd[5288:4198043]     #6 0x1044ebc43 in closure #2 () -> () in closure #1 () -> () in BaseLineModule.ChatManager.syncOffLineMessage() -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x5fc43)
2018-05-24 20:36:12.418772+0800 vecd[5288:4198043]     #7 0x10449878b in reabstraction thunk helper from @callee_owned () -> () to @callee_unowned @convention(block) () -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0xc78b)
2018-05-24 20:36:12.418782+0800 vecd[5288:4198043]     #8 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
2018-05-24 20:36:12.418799+0800 vecd[5288:4198043]     #9 0x10a839b73 in _dispatch_block_invoke_direct (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xdb73)
2018-05-24 20:36:12.418811+0800 vecd[5288:4198043]     #10 0x1031bdf23 in __wrap_dispatch_group_async_block_invoke (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4df23)
2018-05-24 20:36:12.418822+0800 vecd[5288:4198043]     #11 0x10a82d49b in _dispatch_call_block_and_release (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x149b)
2018-05-24 20:36:12.418833+0800 vecd[5288:4198043]     #12 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
2018-05-24 20:36:12.418843+0800 vecd[5288:4198043]     #13 0x10a83a8bf in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe8bf)
2018-05-24 20:36:12.418853+0800 vecd[5288:4198043]     #14 0x10a83909b in _dispatch_async_redirect_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xd09b)
2018-05-24 20:36:12.418863+0800 vecd[5288:4198043]     #15 0x10a83eb53 in _dispatch_root_queue_drain (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x12b53)
2018-05-24 20:36:12.418874+0800 vecd[5288:4198043]     #16 0x10a83e87f in _dispatch_worker_thread3 (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x1287f)
2018-05-24 20:36:12.418885+0800 vecd[5288:4198043]     #17 0x18230311f in _pthread_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0x111f)
2018-05-24 20:36:12.418896+0800 vecd[5288:4198043]     #18 0x182302c1f in start_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0xc1f)
2018-05-24 20:36:12.418907+0800 vecd[5288:4198043] 
2018-05-24 20:36:12.418916+0800 vecd[5288:4198043] previously allocated by thread T1 here:
2018-05-24 20:36:12.418926+0800 vecd[5288:4198043]     #0 0x1031bf13f in wrap_calloc (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4f13f)
2018-05-24 20:36:12.418937+0800 vecd[5288:4198043]     #1 0x182718c83 in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x180c83)
2018-05-24 20:36:12.418947+0800 vecd[5288:4198043]     #2 0x1825a7d9f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xfd9f)
2018-05-24 20:36:12.418958+0800 vecd[5288:4198043]     #3 0x103096d57 in -[BHContext addServiceWithImplInstance:serviceName:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x12d57)
2018-05-24 20:36:12.418969+0800 vecd[5288:4198043]     #4 0x1030a08b3 in -[BHServiceManager createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x1c8b3)
2018-05-24 20:36:12.418985+0800 vecd[5288:4198043]     #5 0x1030896bb in -[BeeHive createService:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BeeHive.framework/BeeHive:arm64+0x56bb)
2018-05-24 20:36:12.418997+0800 vecd[5288:4198043]     #6 0x1048f4587 in -[CMUAdapter disConnectOtherModules] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/ClientAdapter.framework/ClientAdapter:arm64+0x14587)
2018-05-24 20:36:12.419008+0800 vecd[5288:4198043]     #7 0x1048f364f in __35-[CMUAdapter logoutAndReturnError:]_block_invoke (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/ClientAdapter.framework/ClientAdapter:arm64+0x1364f)
2018-05-24 20:36:12.419018+0800 vecd[5288:4198043]     #8 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
2018-05-24 20:36:12.419029+0800 vecd[5288:4198043]     #9 0x10a83ad4f in _dispatch_queue_barrier_sync_invoke_and_complete (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xed4f)
2018-05-24 20:36:12.419046+0800 vecd[5288:4198043]     #10 0x1048f349f in -[CMUAdapter logoutAndReturnError:] (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/ClientAdapter.framework/ClientAdapter:arm64+0x1349f)
2018-05-24 20:36:12.419057+0800 vecd[5288:4198043]     #11 0x10449e2f7 in BaseLineModule.AccountModule.logout() throws -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x122f7)
2018-05-24 20:36:12.419068+0800 vecd[5288:4198043]     #12 0x10449e5db in @objc BaseLineModule.AccountModule.logout() throws -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x125db)
2018-05-24 20:36:12.419080+0800 vecd[5288:4198043]     #13 0x1044b12d7 in BaseLineModule.AccountModule.relogin() -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x252d7)
2018-05-24 20:36:12.419091+0800 vecd[5288:4198043]     #14 0x1044a9973 in closure #2 () -> () in closure #2 (Alamofire.NetworkReachabilityManager.NetworkReachabilityStatus) -> () in BaseLineModule.AccountModule.init() -> BaseLineModule.AccountModule (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0x1d973)
2018-05-24 20:36:12.419105+0800 vecd[5288:4198043]     #15 0x10449878b in reabstraction thunk helper from @callee_owned () -> () to @callee_unowned @convention(block) () -> () (/private/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/BaseLineModule.framework/BaseLineModule:arm64+0xc78b)
2018-05-24 20:36:12.419118+0800 vecd[5288:4198043]     #16 0x1031bdd5b in __wrap_dispatch_async_block_invoke (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4dd5b)
2018-05-24 20:36:12.419129+0800 vecd[5288:4198043]     #17 0x10a82d49b in _dispatch_call_block_and_release (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x149b)
2018-05-24 20:36:12.419140+0800 vecd[5288:4198043]     #18 0x10a82d45b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)
2018-05-24 20:36:12.419150+0800 vecd[5288:4198043]     #19 0x10a83956b in _dispatch_queue_override_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xd56b)
2018-05-24 20:36:12.419161+0800 vecd[5288:4198043]     #20 0x10a83eb53 in _dispatch_root_queue_drain (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x12b53)
2018-05-24 20:36:12.419171+0800 vecd[5288:4198043]     #21 0x10a83e87f in _dispatch_worker_thread3 (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x1287f)
2018-05-24 20:36:12.419181+0800 vecd[5288:4198043]     #22 0x18230311f in _pthread_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0x111f)
2018-05-24 20:36:12.419192+0800 vecd[5288:4198043]     #23 0x182302c1f in start_wqthread (/usr/lib/system/libsystem_pthread.dylib:arm64+0xc1f)
2018-05-24 20:36:12.419202+0800 vecd[5288:4198043] 
2018-05-24 20:36:12.419210+0800 vecd[5288:4198043] Thread T1 created by T0 here:
2018-05-24 20:36:12.419220+0800 vecd[5288:4198043]     <empty stack>
2018-05-24 20:36:12.419230+0800 vecd[5288:4198043] 
2018-05-24 20:36:12.419239+0800 vecd[5288:4198043] Thread T12 created by T3 here:
2018-05-24 20:36:12.419248+0800 vecd[5288:4198043]     <empty stack>
2018-05-24 20:36:12.419258+0800 vecd[5288:4198043] 
2018-05-24 20:36:12.419266+0800 vecd[5288:4198043] Thread T3 created by T1 here:
2018-05-24 20:36:12.419280+0800 vecd[5288:4198043]     <empty stack>
2018-05-24 20:36:12.419290+0800 vecd[5288:4198043] 
2018-05-24 20:36:12.419299+0800 vecd[5288:4198043] SUMMARY: AddressSanitizer: double-free (/var/containers/Bundle/Application/8A9ACE53-100B-4D52-9787-25B17AE84DB0/vecd.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7) in wrap_free
2018-05-24 20:36:12.419310+0800 vecd[5288:4198043] 
==5288==ABORTING
Dcell commented

Sorry , 是我们底层C代码出问题了,导致上层内存混乱。 同事连续几次都出现BeeHive框架上,才疑问是框架本身代码的问题。 sorry