AudioEngine crash

[semgilo]

• cocos2d-x version:3.14
• devices test on:iPhone 6
• developing environments

May be it crash when preloading and uncaching the sound At the same time, but i can't produce it always

i received some crashes from test flight

the device logs:

Thread 6 name:  AURemoteIO::IOThread
Thread 6 Crashed:
0   AudioToolbox                  	0x0000000183a80608 CrashIfClientProvidedBogusAudioBufferList + 156
1   AudioToolbox                  	0x0000000183a80480 AudioConverterConvertComplexBuffer + 300
2   AudioToolbox                  	0x0000000183ae439c AUSpatialMixer::Render(unsigned int&, AudioTimeStamp const&, unsigned int) + 1392
3   AudioToolbox                  	0x0000000183b8a42c AUBase::DoRenderBus(unsigned int&, AudioTimeStamp const&, unsigned int, AUOutputElement*, unsigned int, AudioBufferList&) + 216
4   AudioToolbox                  	0x0000000183b88c34 AUBase::DoRender(unsigned int&, AudioTimeStamp const&, unsigned int, unsigned int, AudioBufferList&) + 604
5   AudioToolbox                  	0x0000000183bb2038 AUMethodRender(void*, unsigned int*, AudioTimeStamp const*, unsigned int, unsigned int, AudioBufferList*) + 44
6   AudioToolbox                  	0x0000000183b8d094 AUInputElement::PullInput(unsigned int&, AudioTimeStamp const&, unsigned int, unsigned int) + 148
7   AudioToolbox                  	0x0000000183b80548 AUInputFormatConverter2::InputProc(OpaqueAudioConverter*, unsigned int*, AudioBufferList*, AudioStreamPacketDescription**, void*) + 216
8   AudioToolbox                  	0x0000000183ad3318 AudioConverterChain::CallInputProc(unsigned int) + 332
9   AudioToolbox                  	0x0000000183ad3000 AudioConverterChain::FillBufferFromInputProc(unsigned int*, CABufferList*) + 148
10  AudioToolbox                  	0x0000000183aaea5c BufferedAudioConverter::GetInputBytes(unsigned int, unsigned int&, CABufferList const*&) + 180
11  AudioToolbox                  	0x0000000183addb58 Resampler2Wrapper::RenderOutput(CABufferList*, unsigned int, unsigned int&) + 196
12  AudioToolbox                  	0x0000000183aae8e4 BufferedAudioConverter::FillBuffer(unsigned int&, AudioBufferList&, AudioStreamPacketDescription*) + 444
13  AudioToolbox                  	0x0000000183ad2d80 AudioConverterChain::RenderOutput(CABufferList*, unsigned int, unsigned int&, AudioStreamPacketDescription*) + 116
14  AudioToolbox                  	0x0000000183aae8e4 BufferedAudioConverter::FillBuffer(unsigned int&, AudioBufferList&, AudioStreamPacketDescription*) + 444
15  AudioToolbox                  	0x0000000183a8793c AudioConverterFillComplexBuffer + 340
16  AudioToolbox                  	0x0000000183b80208 AUInputFormatConverter2::PullAndConvertInput(AudioTimeStamp const&, unsigned int&, AudioBufferList&, AudioStreamPacketDescription*, bool&) + 120
17  AudioToolbox                  	0x0000000183b7fc9c AUConverterBase::RenderBus(unsigned int&, AudioTimeStamp const&, unsigned int, unsigned int) + 268
18  AudioToolbox                  	0x0000000183b8a42c AUBase::DoRenderBus(unsigned int&, AudioTimeStamp const&, unsigned int, AUOutputElement*, unsigned int, AudioBufferList&) + 216
19  AudioToolbox                  	0x0000000183b88c34 AUBase::DoRender(unsigned int&, AudioTimeStamp const&, unsigned int, unsigned int, AudioBufferList&) + 604
20  AudioToolbox                  	0x0000000183b6edb8 AURemoteIO::PerformIO(unsigned int, unsigned int, unsigned int, AudioTimeStamp const&, AudioTimeStamp const&, AudioBufferList const*, AudioBufferList*, int&) + 488
21  AudioToolbox                  	0x0000000183b6fd48 AURIOCallbackReceiver_PerformIO + 560
22  AudioToolbox                  	0x0000000183b6622c _XPerformIO + 104
23  AudioToolbox                  	0x0000000183a93924 mshMIGPerform + 248
24  AudioToolbox                  	0x0000000183b39c30 MSHMIGDispatchMessage + 36
25  AudioToolbox                  	0x0000000183b6f0fc AURemoteIO::IOThread::Run() + 136
26  AudioToolbox                  	0x0000000183b72914 AURemoteIO::IOThread::Entry(void*) + 12
27  AudioToolbox                  	0x0000000183a7ed70 CAPThread::Entry(CAPThread*) + 124
28  libsystem_pthread.dylib       	0x0000000180ef7b28 _pthread_body + 156
29  libsystem_pthread.dylib       	0x0000000180ef7a8c _pthread_body + 0
30  libsystem_pthread.dylib       	0x0000000180ef5028 thread_start + 4

[dumganhar]

Thanks for your feedback. I could reproduce this issue by the last test case in cpp-tests/NewAudioEngineTest.

[dumganhar]

Fixed this issue at #17500.

[semgilo]

@dumganhar @minggo
timerWithTimeInterval only available for iOS 10.0 ,when run in iOS 9.0 or other, it will crash
+ (NSTimer *)timerWithTimeInterval:(NSTimeInterval)interval repeats:(BOOL)repeats block:(void (^)(NSTimer *timer))block API_AVAILABLE(macosx(10.12), ios(10.0), watchos(3.0), tvos(10.0));

-        free(_pcmData);
 +        // fixed #17494: CrashIfClientProvidedBogusAudioBufferList
 +        // We're using 'alBufferDataStaticProc' for speeding up
 +        // the performance of playing audio without preload, but we need to manage the memory by ourself carefully.
 +        // It's probably that '_pcmData' is freed before OpenAL finishes the audio render task,
 +        // then 'CrashIfClientProvidedBogusAudioBufferList' may be triggered.
 +        // 'cpp-tests/NewAudioEngineTest/AudioSwitchStateTest' can reproduce this issue without the following fix.
 +        // The workaround is delaying 200ms to free pcm data.
 +        char* data = _pcmData;
 +        NSTimer* timer = [NSTimer timerWithTimeInterval:0.2 repeats:NO block:^(NSTimer* t) {
 +            free(data);
 +        }];
 +
 +        [[NSRunLoop currentRunLoop] addTimer:timer forMode:NSDefaultRunLoopMode];

[shaniamjad]

I am still getting this crash even after this change. I am using Cocos2dx3.15.1 and i have confirmed that i have the changes of setTimeOut function.
Any ideas why this still be occurring and how it can be fixed? Thanks
@dumganhar @minggo