Bug [Mac 10.13] Crash everytime a new window is attempted to be opened

OMGUS

New member
Everytime I select an option on a Dropdown that needs to open a new window (e.g. Daily Deeds, Modifier Maximizer), KoLMafia crashes.

This repros 100% of the time for me. I'm on Mac OS X 10.13.6. Looks like something is being double released.

I've reproed this on 17.12, r18726, and r18736 100% of the time. Let me know if you need any more debugging info since I can consistently reproduce this.

Here's an example stack:
Code:
Process:               java [28498]
Path:                  /Library/Java/JavaVirtualMachines/jdk1.8.0_73.jdk/Contents/Home/bin/java
Identifier:            net.java.openjdk.cmd
Version:               1.0 (1.0)
Code Type:             X86-64 (Native)
Parent Process:        Jar Launcher [28497]
Responsible:           java [28498]
User ID:               334095855

Date/Time:             2018-08-16 12:46:05.442 -0400
OS Version:            Mac OS X 10.13.6 (17G65)
Report Version:        12
Anonymous UUID:        FA62C402-DC34-9F31-28BE-4DB853B010BC

Sleep/Wake UUID:       957D2368-3AAD-4F70-BD0D-B583B9F8CD75

Time Awake Since Boot: 730000 seconds
Time Since Wake:       6300 seconds

System Integrity Protection: enabled

Crashed Thread:        0  AppKit Thread  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_INSTRUCTION (SIGABRT)
Exception Codes:       0x0000000000000001, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Application Specific Information:
Detected over-release of a CFTypeRef
abort() called

Thread 0 Crashed:: AppKit Thread  Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	0x00007fff51e6ab66 __pthread_kill + 10
1   libsystem_pthread.dylib       	0x00007fff52035080 pthread_kill + 333
2   libsystem_c.dylib             	0x00007fff51dc61ae abort + 127
3   libjvm.dylib                  	0x0000000108483053 os::abort(bool) + 25
4   libjvm.dylib                  	0x00000001085a6e9e VMError::report_and_die() + 2304
5   libjvm.dylib                  	0x0000000108484c7e JVM_handle_bsd_signal + 1131
6   libjvm.dylib                  	0x0000000108480ee3 signalHandler(int, __siginfo*, void*) + 47
7   libsystem_platform.dylib      	0x00007fff52028f5a _sigtramp + 26
8   com.apple.HIToolbox           	0x00007fff2919a2d5 TypeManager::FindCallbacks(unsigned int, unsigned char, HITypeCompressedCallBacks*) + 79
9   com.apple.HIToolbox           	0x00007fff29307292 ReleaseEventParam + 75
10  com.apple.HIToolbox           	0x00007fff2919a4fd ReleaseEvent + 124
11  com.apple.HIToolbox           	0x00007fff291982a4 HIApplication::EventHandler(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 2660
12  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
13  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
14  com.apple.HIToolbox           	0x00007fff291b0f21 SendEventToEventTarget + 39
15  com.apple.HIToolbox           	0x00007fff2920a865 SendMenuOpening(MenuSelectData*, MenuData*, double, unsigned int, unsigned int, __CFDictionary*, unsigned char, unsigned char*) + 683
16  com.apple.HIToolbox           	0x00007fff2933aa3c _SimulateMenuOpening + 111
17  com.apple.HIToolbox           	0x00007fff293302c7 OpenMenuForInspection(MenuData*) + 94
18  com.apple.HIToolbox           	0x00007fff2933008d MenuData::HandleGetAccessibleChildren(unsigned long long, __CFArray*) + 233
19  com.apple.HIToolbox           	0x00007fff2933300b MenuData::ContentViewGetNamedAccessibleAttribute(unsigned long long, __CFString const*, unsigned int, OpaqueEventRef*, void*) + 71
20  com.apple.HIToolbox           	0x00007fff2934b51b HIObject::DispatchAccessibilityEvent(OpaqueEventRef*, unsigned long long, AccessibilityHandlers const*, void*) + 489
21  com.apple.HIToolbox           	0x00007fff29332f69 MenuData::MenuContentViewAccessibilityHandler(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 97
22  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
23  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
24  com.apple.HIToolbox           	0x00007fff2919bac3 SendEventToEventTargetWithOptions + 45
25  com.apple.HIToolbox           	0x00007fff292394ae Accessible::GetNamedAttributeData(__CFString const*, void const*, void const**, unsigned char*) + 178
26  com.apple.HIToolbox           	0x00007fff29239234 HLTBCopyUIElementAttributeValue + 57
27  com.apple.HIToolbox           	0x00007fff2932fec6 MenuData::GetAccessibleChildrenSelf(unsigned long long, __CFArray*) + 62
28  com.apple.HIToolbox           	0x00007fff2934b804 HIObject::HasAccessibleChildrenSelf(unsigned long long) + 68
29  com.apple.HIToolbox           	0x00007fff2934ba3f HIObject::GetAllAccessibleAttributeNamesSelf(unsigned long long, __CFArray*) + 181
30  com.apple.HIToolbox           	0x00007fff29330c2b MenuData::GetAllAccessibleAttributeNamesSelf(unsigned long long, __CFArray*) + 27
31  com.apple.HIToolbox           	0x00007fff2934b3b7 HIObject::DispatchAccessibilityEvent(OpaqueEventRef*, unsigned long long, AccessibilityHandlers const*, void*) + 133
32  com.apple.HIToolbox           	0x00007fff2934b1ee HIObject::HandleClassAccessibilityEvent(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 106
33  com.apple.HIToolbox           	0x00007fff2919cf01 HIObject::EventHook(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 135
34  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
35  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
36  com.apple.HIToolbox           	0x00007fff2922176a CallNextEventHandler + 105
37  com.apple.AppKit              	0x00007fff27901a32 -[NSCarbonMenuImpl _carbonGetAccessibleAttributeNamesEvent:handlerCallRef:axElement:] + 35
38  com.apple.AppKit              	0x00007fff275ed363 NSSLMMenuEventHandler + 1075
39  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
40  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
41  com.apple.HIToolbox           	0x00007fff2919bac3 SendEventToEventTargetWithOptions + 45
42  com.apple.HIToolbox           	0x00007fff29239139 Accessible::GetAllNames(Accessible::ElementType, __CFArray const**) + 207
43  com.apple.HIToolbox           	0x00007fff29239525 Accessible::IsNamedAttributeSupported(__CFString const*) + 27
44  com.apple.HIToolbox           	0x00007fff292393aa HLTBCopyUIElementAttributeValue + 431
45  com.apple.HIToolbox           	0x00007fff2923b8e4 CarbonCopyAttributeValueCallback(__CFData const*, unsigned int, __CFString const*, void const**, void*) + 88
46  com.apple.AppKit              	0x00007fff2785945c CopyCarbonUIElementAttributeValue + 55
47  com.apple.AppKit              	0x00007fff27856fba CopyAttributeValue + 128
48  com.apple.HIServices          	0x00007fff2875a029 _AXXMIGCopyAttributeValue + 282
49  com.apple.HIServices          	0x00007fff28763fa4 _XCopyAttributeValue + 455
50  com.apple.HIServices          	0x00007fff2873c6ed mshMIGPerform + 212
51  com.apple.CoreFoundation      	0x00007fff29ee23f9 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41
52  com.apple.CoreFoundation      	0x00007fff29ee2345 __CFRunLoopDoSource1 + 533
53  com.apple.CoreFoundation      	0x00007fff29ed9f00 __CFRunLoopRun + 2848
54  com.apple.CoreFoundation      	0x00007fff29ed9153 CFRunLoopRunSpecific + 483
55  com.apple.HIToolbox           	0x00007fff291c3d96 RunCurrentEventLoopInMode + 286
56  com.apple.HIToolbox           	0x00007fff291c3b06 ReceiveNextEventCommon + 613
57  com.apple.HIToolbox           	0x00007fff291c3884 _BlockUntilNextEventMatchingListInModeWithFilter + 64
58  com.apple.AppKit              	0x00007fff27474a73 _DPSNextEvent + 2085
59  com.apple.AppKit              	0x00007fff27c0ae34 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044
60  libosxapp.dylib               	0x000000010b44c3aa -[NSApplicationAWT nextEventMatchingMask:untilDate:inMode:dequeue:] + 124
61  com.apple.AppKit              	0x00007fff27469885 -[NSApplication run] + 764
62  libosxapp.dylib               	0x000000010b44c14d +[NSApplicationAWT runAWTLoopWithApp:] + 156
63  libawt_lwawt.dylib            	0x0000000125c7a55b -[AWTStarter starter:] + 905
64  com.apple.Foundation          	0x00007fff2c01d2b5 __NSThreadPerformPerform + 334
65  com.apple.CoreFoundation      	0x00007fff29ef7a11 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
66  com.apple.CoreFoundation      	0x00007fff29fb142c __CFRunLoopDoSource0 + 108
67  com.apple.CoreFoundation      	0x00007fff29eda470 __CFRunLoopDoSources0 + 208
68  com.apple.CoreFoundation      	0x00007fff29ed98ed __CFRunLoopRun + 1293
69  com.apple.CoreFoundation      	0x00007fff29ed9153 CFRunLoopRunSpecific + 483
70  java                          	0x0000000106e7d463 CreateExecutionEnvironment + 871
71  java                          	0x0000000106e791ac JLI_Launch + 1952
72  java                          	0x0000000106e7f4c0 main + 101
73  java                          	0x0000000106e78a04 start + 52
 

OMGUS

New member
There are debug files in that folder, but they don't appear to be produced when I induce a crash and look like benign networking issues so I think they're unrelated.
I've pasted them anyway here: https://pastebin.com/512RbPi6

I do see files of the form hs_err_pid<pid#>.log get generated when I induce a crash in the /Applications folder (where I'm launching it from).
Here's a paste of an example hs_err_pid file (generated upon crash): https://pastebin.com/vVfPU91b
 

Darzil

Developer
Are you able to upgrade to a more recent Java, that one is from 2.5 years ago?

No guarantees it'll help of course.
 

OMGUS

New member
I updated to Java 8 update 181, the latest public currently available (weird as based on the modified time, I installed Java for KoLMafia last month -- not sure why I had an ancient version).

The issue still repros 100% of the time. One interesting thing is that it does not reproduce when not logged in. Both daily deeds and the modifier window show up when I'm not logged in, but when opening them logged in, it repros.


hs_err_pid.log: https://pastebin.com/xSAMd1AL

Code:
Latest stack:
Process:               java [83245]
Path:                  /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java
Identifier:            net.java.openjdk.cmd
Version:               1.0 (1.0)
Code Type:             X86-64 (Native)
Parent Process:        Jar Launcher [83244]
Responsible:           java [83245]
User ID:               334095855

Date/Time:             2018-08-16 16:14:25.495 -0400
OS Version:            Mac OS X 10.13.6 (17G65)
Report Version:        12
Anonymous UUID:        FA62C402-DC34-9F31-28BE-4DB853B010BC

Sleep/Wake UUID:       463D6072-EB96-4F25-8BCA-F9F395F1362C

Time Awake Since Boot: 740000 seconds
Time Since Wake:       1600 seconds

System Integrity Protection: enabled

Crashed Thread:        0  AppKit Thread  Dispatch queue: com.apple.main-thread

Exception Type:        EXC_BAD_INSTRUCTION (SIGABRT)
Exception Codes:       0x0000000000000001, 0x0000000000000000
Exception Note:        EXC_CORPSE_NOTIFY

Application Specific Information:
Detected over-release of a CFTypeRef
abort() called

Thread 0 Crashed:: AppKit Thread  Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib        	0x00007fff51e6ab66 __pthread_kill + 10
1   libsystem_pthread.dylib       	0x00007fff52035080 pthread_kill + 333
2   libsystem_c.dylib             	0x00007fff51dc61ae abort + 127
3   libjvm.dylib                  	0x0000000107c8dad9 os::abort(bool) + 25
4   libjvm.dylib                  	0x0000000107db5d22 VMError::report_and_die() + 2304
5   libjvm.dylib                  	0x0000000107c8f71e JVM_handle_bsd_signal + 1131
6   libjvm.dylib                  	0x0000000107c8b963 signalHandler(int, __siginfo*, void*) + 47
7   libsystem_platform.dylib      	0x00007fff52028f5a _sigtramp + 26
8   com.apple.HIToolbox           	0x00007fff2919a2d5 TypeManager::FindCallbacks(unsigned int, unsigned char, HITypeCompressedCallBacks*) + 79
9   com.apple.HIToolbox           	0x00007fff29307292 ReleaseEventParam + 75
10  com.apple.HIToolbox           	0x00007fff2919a4fd ReleaseEvent + 124
11  com.apple.HIToolbox           	0x00007fff291982a4 HIApplication::EventHandler(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 2660
12  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
13  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
14  com.apple.HIToolbox           	0x00007fff291b0f21 SendEventToEventTarget + 39
15  com.apple.HIToolbox           	0x00007fff2920a865 SendMenuOpening(MenuSelectData*, MenuData*, double, unsigned int, unsigned int, __CFDictionary*, unsigned char, unsigned char*) + 683
16  com.apple.HIToolbox           	0x00007fff2933aa3c _SimulateMenuOpening + 111
17  com.apple.HIToolbox           	0x00007fff293302c7 OpenMenuForInspection(MenuData*) + 94
18  com.apple.HIToolbox           	0x00007fff2933008d MenuData::HandleGetAccessibleChildren(unsigned long long, __CFArray*) + 233
19  com.apple.HIToolbox           	0x00007fff2933300b MenuData::ContentViewGetNamedAccessibleAttribute(unsigned long long, __CFString const*, unsigned int, OpaqueEventRef*, void*) + 71
20  com.apple.HIToolbox           	0x00007fff2934b51b HIObject::DispatchAccessibilityEvent(OpaqueEventRef*, unsigned long long, AccessibilityHandlers const*, void*) + 489
21  com.apple.HIToolbox           	0x00007fff29332f69 MenuData::MenuContentViewAccessibilityHandler(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 97
22  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
23  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
24  com.apple.HIToolbox           	0x00007fff2919bac3 SendEventToEventTargetWithOptions + 45
25  com.apple.HIToolbox           	0x00007fff292394ae Accessible::GetNamedAttributeData(__CFString const*, void const*, void const**, unsigned char*) + 178
26  com.apple.HIToolbox           	0x00007fff29239234 HLTBCopyUIElementAttributeValue + 57
27  com.apple.HIToolbox           	0x00007fff2932fec6 MenuData::GetAccessibleChildrenSelf(unsigned long long, __CFArray*) + 62
28  com.apple.HIToolbox           	0x00007fff2934b804 HIObject::HasAccessibleChildrenSelf(unsigned long long) + 68
29  com.apple.HIToolbox           	0x00007fff2934ba3f HIObject::GetAllAccessibleAttributeNamesSelf(unsigned long long, __CFArray*) + 181
30  com.apple.HIToolbox           	0x00007fff29330c2b MenuData::GetAllAccessibleAttributeNamesSelf(unsigned long long, __CFArray*) + 27
31  com.apple.HIToolbox           	0x00007fff2934b3b7 HIObject::DispatchAccessibilityEvent(OpaqueEventRef*, unsigned long long, AccessibilityHandlers const*, void*) + 133
32  com.apple.HIToolbox           	0x00007fff2934b1ee HIObject::HandleClassAccessibilityEvent(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 106
33  com.apple.HIToolbox           	0x00007fff2919cf01 HIObject::EventHook(OpaqueEventHandlerCallRef*, OpaqueEventRef*, void*) + 135
34  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
35  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
36  com.apple.HIToolbox           	0x00007fff2922176a CallNextEventHandler + 105
37  com.apple.AppKit              	0x00007fff27901a32 -[NSCarbonMenuImpl _carbonGetAccessibleAttributeNamesEvent:handlerCallRef:axElement:] + 35
38  com.apple.AppKit              	0x00007fff275ed363 NSSLMMenuEventHandler + 1075
39  com.apple.HIToolbox           	0x00007fff2919c904 DispatchEventToHandlers(EventTargetRec*, OpaqueEventRef*, HandlerCallRec*) + 1541
40  com.apple.HIToolbox           	0x00007fff2919bc4d SendEventToEventTargetInternal(OpaqueEventRef*, OpaqueEventTargetRef*, HandlerCallRec*) + 374
41  com.apple.HIToolbox           	0x00007fff2919bac3 SendEventToEventTargetWithOptions + 45
42  com.apple.HIToolbox           	0x00007fff29239139 Accessible::GetAllNames(Accessible::ElementType, __CFArray const**) + 207
43  com.apple.HIToolbox           	0x00007fff29239525 Accessible::IsNamedAttributeSupported(__CFString const*) + 27
44  com.apple.HIToolbox           	0x00007fff292393aa HLTBCopyUIElementAttributeValue + 431
45  com.apple.HIToolbox           	0x00007fff2923b8e4 CarbonCopyAttributeValueCallback(__CFData const*, unsigned int, __CFString const*, void const**, void*) + 88
46  com.apple.AppKit              	0x00007fff2785945c CopyCarbonUIElementAttributeValue + 55
47  com.apple.AppKit              	0x00007fff27856fba CopyAttributeValue + 128
48  com.apple.HIServices          	0x00007fff2875a029 _AXXMIGCopyAttributeValue + 282
49  com.apple.HIServices          	0x00007fff28763fa4 _XCopyAttributeValue + 455
50  com.apple.HIServices          	0x00007fff2873c6ed mshMIGPerform + 212
51  com.apple.CoreFoundation      	0x00007fff29ee23f9 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE1_PERFORM_FUNCTION__ + 41
52  com.apple.CoreFoundation      	0x00007fff29ee2345 __CFRunLoopDoSource1 + 533
53  com.apple.CoreFoundation      	0x00007fff29ed9f00 __CFRunLoopRun + 2848
54  com.apple.CoreFoundation      	0x00007fff29ed9153 CFRunLoopRunSpecific + 483
55  com.apple.HIToolbox           	0x00007fff291c3d96 RunCurrentEventLoopInMode + 286
56  com.apple.HIToolbox           	0x00007fff291c3b06 ReceiveNextEventCommon + 613
57  com.apple.HIToolbox           	0x00007fff291c3884 _BlockUntilNextEventMatchingListInModeWithFilter + 64
58  com.apple.AppKit              	0x00007fff27474a73 _DPSNextEvent + 2085
59  com.apple.AppKit              	0x00007fff27c0ae34 -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044
60  libosxapp.dylib               	0x000000010e37c328 -[NSApplicationAWT nextEventMatchingMask:untilDate:inMode:dequeue:] + 124
61  com.apple.AppKit              	0x00007fff27469885 -[NSApplication run] + 764
62  libosxapp.dylib               	0x000000010e37bf72 +[NSApplicationAWT runAWTLoopWithApp:] + 156
63  libawt_lwawt.dylib            	0x000000010e30711f -[AWTStarter starter:] + 905
64  com.apple.Foundation          	0x00007fff2c01d2b5 __NSThreadPerformPerform + 334
65  com.apple.CoreFoundation      	0x00007fff29ef7a11 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
66  com.apple.CoreFoundation      	0x00007fff29fb142c __CFRunLoopDoSource0 + 108
67  com.apple.CoreFoundation      	0x00007fff29eda470 __CFRunLoopDoSources0 + 208
68  com.apple.CoreFoundation      	0x00007fff29ed98ed __CFRunLoopRun + 1293
69  com.apple.CoreFoundation      	0x00007fff29ed9153 CFRunLoopRunSpecific + 483
70  java                          	0x000000010659a46e CreateExecutionEnvironment + 871
71  java                          	0x000000010659603c JLI_Launch + 1952
72  java                          	0x000000010659c4cb main + 101
73  java                          	0x0000000106595894 start + 52
 
Last edited:

Veracity

Developer
Staff member
Java programs don't choose to "release" things. Your error is in the JVM, not in KoLmafia.
Can't understand why it says you are using a JavaAppletPlugin, whatever that is, rather than a normal Java JVM.

How do you invoke KoLmafia?
 

OMGUS

New member
I run the .jar nightly that I downloaded.

This is the what the process command line looks like:
Code:
/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/bin/java -jar /Applications/KoLmafia-18736.jar

How is it supposed to look / how do you recommend invoking it?
 

Veracity

Developer
Staff member
What is a "process command line"? Do you type that into a terminal window, or what?

I just do "java -jar xxx.jar".
 
Top