Random crash on Android plateform

Hello,

Below we detail a crash that we can’t track and that seems to be pointing at a replace scene.
We’re looking for any pointer on method to isolate the crash origin.

We are working on a cocos2d-x project since the last 6 months. We’ve started to use Eclipse to develop the android version of our game.
Few month ago we’ve posted on cocos2d-x forums to get help for the debugger configuration on Eclipse.
Thanks to folecr we have now a command line solution to debug our project.
Unfortunately, it’s not enough and the last month we ’ve switched to Xcode (cause laking of debugger) and fixed some leaks and crashes.
We finally have a stable version on iPhone. But last week, we switch again on Eclipse for the Android version and have some crashes again, when we switch scene.
To switch scene we are using this :
@
pScene = ElephantBaseLayer::scene();
CCDirector::sharedDirector()->replaceScene(pScene);
@

The scene static method is used to create a new scene and the CCLayer of the game :

CCScene *scene = CCScene::create(); ElephantBaseLayer *layer = ElephantBaseLayer::create(); scene->addChild(layer); return scene;

Crashes seems to appear when we replace the scene.
In the function init of ElephantBaseLayer we call :
CCSpriteFrameCache::sharedSpriteFrameCache()->removeUnusedSpriteFrames();
and load another atlas just after that.

It seems to be a corrupted memory.
We’ve logged all the destructor and all of them are called.
We’ve also logged the retainCount object and it seems good.

Does anybody know if there is any difference between Android and IOS platform for this kind of error/crash, because this crashes doesn’t appear on Iphone ?
Does anybody know what this log mean exactly or know how to deal with this kind of crash ?
And, as stated above, what we’re really looking for is any tip on methods to isolate the issue ?

Thanks,

Here is the log from logcat, it seems to be a corrupted memory :

12-17 17:46:58.011: A/libc(27410): ABORTING: INVALID HEAP ADDRESS IN dlfree 12-17 17:46:58.011: A/libc(27410): Fatal signal 11 (SIGSEGV) at 0xdeadbaad (code=1) 12-17 17:46:58.522: I/DEBUG(27388): debuggerd: 2012-12-17 17:46:58 12-17 17:46:58.522: I/DEBUG(27388): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** 12-17 17:46:58.522: I/DEBUG(27388): Build fingerprint: 'vodafone_fr/htc_pyramid/pyramid:4.0.3/IML74K/355966.12:user/release-keys' 12-17 17:46:58.522: I/DEBUG(27388): pid: 27410, tid: 27445 >>> com.c4mprod.game <<< 12-17 17:46:58.522: I/DEBUG(27388): signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr deadbaad 12-17 17:46:58.522: I/DEBUG(27388): r0 deadbaad r1 00000001 r2 40000000 r3 00000000 12-17 17:46:58.532: I/DEBUG(27388): r4 00000000 r5 00000027 r6 4009d460 r7 400ac4b4 12-17 17:46:58.532: I/DEBUG(27388): r8 0091fc98 r9 515f5f1c 10 00000008 fp 56b03c24 12-17 17:46:58.532: I/DEBUG(27388): ip 400a77b4 sp 56b03168 lr 4007e7a9 pc 4007adb4 cpsr 60000030 12-17 17:46:58.532: I/DEBUG(27388): d0 5443555254534544 d1 657372615020524f 12-17 17:46:58.532: I/DEBUG(27388): d2 746553656d614772 d3 7e3a3a73676e6974 12-17 17:46:58.532: I/DEBUG(27388): d4 000000003f800000 d5 0000000000000000 12-17 17:46:58.532: I/DEBUG(27388): d6 4470000000000000 d7 3f80000043f00000 12-17 17:46:58.542: I/DEBUG(27388): d8 0000000000000000 d9 0000000000000000 12-17 17:46:58.542: I/DEBUG(27388): d10 0000000000000000 d11 0000000000000000 12-17 17:46:58.542: I/DEBUG(27388): d12 0000000000000000 d13 0000000000000000 12-17 17:46:58.542: I/DEBUG(27388): d14 0000000000000000 d15 0000000000000000 12-17 17:46:58.552: I/DEBUG(27388): d16 6147726573726150 d17 6e6974746553656d 12-17 17:46:58.552: I/DEBUG(27388): d18 3f8109e490ca995b d19 3f9292405d9a3385 12-17 17:46:58.552: I/DEBUG(27388): d20 bfc54283d15bb5aa d21 be5ae2e25b20b0f7 12-17 17:46:58.552: I/DEBUG(27388): d22 0000000000000000 d23 3de5d93a5acfd57c 12-17 17:46:58.552: I/DEBUG(27388): d24 3e66376972bea4d0 d25 c024000000000000 12-17 17:46:58.562: I/DEBUG(27388): d26 3ff0000000000000 d27 bf54c235f7136648 12-17 17:46:58.562: I/DEBUG(27388): d28 bfff353a67dd9157 d29 3fa98f22d74c5ace 12-17 17:46:58.562: I/DEBUG(27388): d30 3c3aa46eb8e46e96 d31 bde2da5320000000 12-17 17:46:58.562: I/DEBUG(27388): scr 60000012 12-17 17:46:58.722: I/DEBUG(27388): #00 pc 00017db4 /system/lib/libc.so 12-17 17:46:58.722: I/DEBUG(27388): #01 pc 00013d16 /system/lib/libc.so 12-17 17:46:58.732: I/DEBUG(27388): #02 pc 00016050 /system/lib/libc.so (dlfree) 12-17 17:46:58.732: I/DEBUG(27388): #03 pc 000166c8 /system/lib/libc.so (free) 12-17 17:46:58.732: I/DEBUG(27388): #04 pc 001c8384 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d13CCSpriteFrameD0Ev) 12-17 17:46:58.732: I/DEBUG(27388): #05 pc 001834fa /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d8CCObject7releaseEv) 12-17 17:46:58.732: I/DEBUG(27388): #06 pc 001c1696 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d16CCAnimationFrameD1Ev) 12-17 17:46:58.732: I/DEBUG(27388): #07 pc 001c16e2 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d16CCAnimationFrameD0Ev) 12-17 17:46:58.732: I/DEBUG(27388): #08 pc 001834fa /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d8CCObject7releaseEv) 12-17 17:46:58.732: I/DEBUG(27388): #09 pc 001ce062 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d23ccArrayRemoveAllObjectsEPNS_8_ccArrayE) 12-17 17:46:58.732: I/DEBUG(27388): #10 pc 001cdb08 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d11ccArrayFreeERPNS_8_ccArrayE) 12-17 17:46:58.742: I/DEBUG(27388): #11 pc 00185dee /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d7CCArrayD2Ev) 12-17 17:46:58.742: I/DEBUG(27388): #12 pc 00185e2a /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d7CCArrayD0Ev) 12-17 17:46:58.742: I/DEBUG(27388): #13 pc 001834fa /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d8CCObject7releaseEv) 12-17 17:46:58.742: I/DEBUG(27388): #14 pc 001c1ace /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d11CCAnimationD2Ev) 12-17 17:46:58.742: I/DEBUG(27388): #15 pc 001c1b0a /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d11CCAnimationD0Ev) 12-17 17:46:58.742: I/DEBUG(27388): #16 pc 001834fa /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d8CCObject7releaseEv) 12-17 17:46:58.742: I/DEBUG(27388): #17 pc 0017187a /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d9CCAnimateD2Ev) 12-17 17:46:58.742: I/DEBUG(27388): #18 pc 001718ea /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d9CCAnimateD0Ev) 12-17 17:46:58.742: I/DEBUG(27388): #19 pc 001834fa /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d8CCObject7releaseEv) 12-17 17:46:58.742: I/DEBUG(27388): #20 pc 0016d40a /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d15CCRepeatForeverD2Ev) 12-17 17:46:58.752: I/DEBUG(27388): #21 pc 0016d446 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d15CCRepeatForeverD0Ev) 12-17 17:46:58.752: I/DEBUG(27388): #22 pc 001834fa /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d8CCObject7releaseEv) 12-17 17:46:58.752: I/DEBUG(27388): #23 pc 001ce062 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d23ccArrayRemoveAllObjectsEPNS_8_ccArrayE) 12-17 17:46:58.752: I/DEBUG(27388): #24 pc 00174422 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d15CCActionManager26removeAllActionsFromTargetEPNS_8CCObjectE) 12-17 17:46:58.752: I/DEBUG(27388): #25 pc 0017c42e /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d6CCNode14stopAllActionsEv) 12-17 17:46:58.752: I/DEBUG(27388): #26 pc 0017b442 /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d6CCNode7cleanupEv) 12-17 17:46:58.752: I/DEBUG(27388): #27 pc 0017b4bc /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d6CCNode7cleanupEv) 12-17 17:46:58.752: I/DEBUG(27388): #28 pc 0017b4bc /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d6CCNode7cleanupEv) 12-17 17:46:58.752: I/DEBUG(27388): #29 pc 0017b4bc /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d6CCNode7cleanupEv) 12-17 17:46:58.752: I/DEBUG(27388): #30 pc 0017b4bc /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d6CCNode7cleanupEv) 12-17 17:46:58.752: I/DEBUG(27388): #31 pc 0017b4bc /data/data/com.c4mprod.game/lib/libgame.so (_ZN7cocos2d6CCNode7cleanupEv) 12-17 17:46:58.752: I/DEBUG(27388): code around pc: 12-17 17:46:58.762: I/DEBUG(27388): 4007ad94 4623b15c 2c006824 e026d1fb b12368db \.#F$h.,..&..h#. 12-17 17:46:58.762: I/DEBUG(27388): 4007ada4 21014a17 6011447a 48124798 24002527 .J.!zD.`.G.H'%.$ 12-17 17:46:58.762: I/DEBUG(27388): 4007adb4 f7f47005 2106ed66 ee28f7f5 460aa901 .p..f..!..(....F 12-17 17:46:58.762: I/DEBUG(27388): 4007adc4 f04f2006 94015380 94029303 e9bef7f5 . O..S.......... 12-17 17:46:58.762: I/DEBUG(27388): 4007add4 4622a905 f7f52002 f7f4e9c8 2106ed52 .."F. ......R..! 12-17 17:46:58.762: I/DEBUG(27388): code around lr: 12-17 17:46:58.762: I/DEBUG(27388): 4007e788 41f0e92d 46804c0c 447c2600 68a56824 -..A.L.F.&|D$h.h 12-17 17:46:58.762: I/DEBUG(27388): 4007e798 e0076867 300cf9b5 dd022b00 47c04628 gh.....0.+..(F.G 12-17 17:46:58.762: I/DEBUG(27388): 4007e7a8 35544306 37fff117 6824d5f4 d1ee2c00 .CT5...7..$h.,.. 12-17 17:46:58.762: I/DEBUG(27388): 4007e7b8 e8bd4630 bf0081f0 00028d92 41f0e92d 0F..........-..A 12-17 17:46:58.762: I/DEBUG(27388): 4007e7c8 fb01b086 9004f602 461f4815 4615460c .........H.F.F.F 12-17 17:46:58.762: I/DEBUG(27388): memory map around addr deadbaad: 12-17 17:46:58.762: I/DEBUG(27388): b0001000-b0009000 /system/bin/linker 12-17 17:46:58.762: I/DEBUG(27388): (no map for address) 12-17 17:46:58.762: I/DEBUG(27388): ffff0000-ffff1000 [vectors]