Skip to content

App crashes on java.perform #360

@flogosec

Description

@flogosec

I'm using frida-gadget. Connecting with frida works fine, but as soon as Java.perform is called in any script the app crashes. Even with minimal scripts. I tried out multiple apps with the same result.

Android version is 14.
Debug output:

07-15 22:27:05.755 20983 20983 F DEBUG   : Revision: '0'
07-15 22:27:05.755 20983 20983 F DEBUG   : ABI: 'arm64'
07-15 22:27:05.755 20983 20983 F DEBUG   : Timestamp: 2025-07-15 22:27:05.391940016+0200
07-15 22:27:05.755 20983 20983 F DEBUG   : Process uptime: 163s
07-15 22:27:05.755 20983 20983 F DEBUG   : Cmdline: com.xyz
07-15 22:27:05.755 20983 20983 F DEBUG   : pid: 20668, tid: 20879, name: Thread-36  >>> com.xyz <<<
07-15 22:27:05.755 20983 20983 F DEBUG   : uid: 10307
07-15 22:27:05.755 20983 20983 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0000000000000011
07-15 22:27:05.755 20983 20983 F DEBUG   : Cause: null pointer dereference
07-15 22:27:05.755 20983 20983 F DEBUG   :     x0  0000000000000011  x1  0000000000000004  x2  0000000000000004  x3  00000078d0e2692c
07-15 22:27:05.755 20983 20983 F DEBUG   :     x4  0000000000000013  x5  0000000000000000  x6  0000000000000000  x7  3037376631303037
07-15 22:27:05.755 20983 20983 F DEBUG   :     x8  0fbcb7452278d023  x9  0fbcb7452278d023  x10 00000000fffffffc  x11 0000000000000000
07-15 22:27:05.755 20983 20983 F DEBUG   :     x12 0000007c80ee79fc  x13 0000007c80ee7a00  x14 0000000003602208  x15 0000000000000030
07-15 22:27:05.755 20983 20983 F DEBUG   :     x16 0000000000000001  x17 0000007c6f255488  x18 0000000000000000  x19 0000000000000001
07-15 22:27:05.755 20983 20983 F DEBUG   :     x20 00000078d0e26c00  x21 0000000000000008  x22 0000007879b08ea0  x23 0000000000000000
07-15 22:27:05.755 20983 20983 F DEBUG   :     x24 0000000000000018  x25 0000007c7f8ce840  x26 0000000000000003  x27 00000078d0e26be0
07-15 22:27:05.755 20983 20983 F DEBUG   :     x28 0000000000000018  x29 00000078d0e26780
07-15 22:27:05.755 20983 20983 F DEBUG   :     lr  0000007c7ab39528  sp  00000078d0e26760  pc  0000007c7ab3b814  pst 0000000060001000
07-15 22:27:05.755 20983 20983 F DEBUG   : 1 total frames
07-15 22:27:05.755 20983 20983 F DEBUG   : backtrace:
07-15 22:27:05.755 20983 20983 F DEBUG   :       #00 pc 0000000000002814  <anonymous:7c7ab39000>

Maybe this is a dublicate of #359 and #3525. The output and descriptions look similar. I'm also facing the same issue with frida-server as described in #3525.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions