RSA Authenticator hardend_malloc detected

guy-with-a-hat

Hi,
I am using RSA Authenticator for 2fa.
App is working most of the times, so it's usable.
But it also crashes time to time.
"hardened_malloc detected an error in Authenticator"
Installed from the google app store.

See error log.

type: crash
package: com.rsa.securidapp:326, targetSdk 34
osVersion: google/tokay/tokay:16/BP4A.251205.006.E1/2025122501:user/release-keys
uid: 10186 (u:r:untrusted_app:s0:c186,c256,c512,c768)
cmdline: com.rsa.securidapp
processUptime: 8s
abortMessage: hardened_malloc: fatal allocator error: detected write after free
signal: 6 (SIGABRT), code -1 (SI_QUEUE)
threadName: RenderThread
MTE: not enabled
backtrace:
    /apex/com.android.runtime/lib64/bionic/libc.so (abort+160, pc 7d9c0)
    /apex/com.android.runtime/lib64/bionic/libc.so (fatal_error+48, pc 61250)
    /apex/com.android.runtime/lib64/bionic/libc.so (allocate(unsigned int, unsigned long) (.__uniq.113816362394208727042336347611812082814)+2220, pc 5dfec)
    /apex/com.android.runtime/lib64/bionic/libc.so (malloc+44, pc 5951c)
    /system/lib64/libc++.so (operator new(unsigned long)+28, pc 10689c)
    /system/lib64/libhwui.so (skgpu::ganesh::FillRectOp::Make(GrRecordingContext*, GrPaint&&, GrAAType, DrawQuad*, GrUserStencilSettings const*, GrSimpleMeshDrawOpHelper::InputFlags)+1016, pc 25ccf8)
    /system/lib64/libhwui.so (skgpu::ganesh::SurfaceDrawContext::fillRectToRect(GrClip const*, GrPaint&&, GrAA, SkMatrix const&, SkRect const&, SkRect const&)+2044, pc 25b57c)
    /system/lib64/libhwui.so (skgpu::ganesh::Device::drawRect(SkRect const&, SkPaint const&)+624, pc 5bd420)
    /system/lib64/libhwui.so (SkCanvas::onDrawRect(SkRect const&, SkPaint const&)+488, pc 519508)
    /system/lib64/libhwui.so (SkCanvas::drawRect(SkRect const&, SkPaint const&)+96, pc 31ea50)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::drawContent(SkCanvas*) const+3356, pc 23ca5c)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::onDraw(SkCanvas*)+336, pc 6fc6c0)
    /system/lib64/libhwui.so (SkDrawable::draw(SkCanvas*, SkMatrix const*)+128, pc 2b9890)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::drawContent(SkCanvas*) const+3356, pc 23ca5c)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::onDraw(SkCanvas*)+336, pc 6fc6c0)
    /system/lib64/libhwui.so (SkDrawable::draw(SkCanvas*, SkMatrix const*)+128, pc 2b9890)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::drawContent(SkCanvas*) const+3356, pc 23ca5c)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::onDraw(SkCanvas*)+336, pc 6fc6c0)
    /system/lib64/libhwui.so (SkDrawable::draw(SkCanvas*, SkMatrix const*)+128, pc 2b9890)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::drawContent(SkCanvas*) const+3356, pc 23ca5c)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::RenderNodeDrawable::onDraw(SkCanvas*)+336, pc 6fc6c0)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::SkiaPipeline::renderFrame(android::uirenderer::LayerUpdateQueue const&, SkRect const&, std::__1::vector<android::sp<android::uirenderer::RenderNode>, std::__1::allocator<android::sp<android::uirenderer::RenderNode>>> const&, bool, android::uirenderer::Rect const&, sk_sp<SkSurface>, SkMatrix const&)+1772, pc 2a79cc)
    /system/lib64/libhwui.so (android::uirenderer::skiapipeline::SkiaVulkanPipeline::draw(android::uirenderer::renderthread::Frame const&, SkRect const&, SkRect const&, android::uirenderer::LightGeometry const&, android::uirenderer::LayerUpdateQueue*, android::uirenderer::Rect const&, bool, android::uirenderer::LightInfo const&, std::__1::vector<android::sp<android::uirenderer::RenderNode>, std::__1::allocator<android::sp<android::uirenderer::RenderNode>>> const&, android::uirenderer::FrameInfoVisualizer*, android::uirenderer::renderthread::HardwareBufferRenderParams const&, std::__1::mutex&)+336, pc 5efa30)
    /system/lib64/libhwui.so (android::uirenderer::renderthread::CanvasContext::draw(bool)+832, pc 2b0160)
    /system/lib64/libhwui.so (std::__1::__function::__func<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0, std::__1::allocator<android::uirenderer::renderthread::DrawFrameTask::postAndWait()::$_0>, void ()>::operator()() (.__uniq.264041412789356548918088680803242235290.c303f2d2360db58ed70a2d0ac7ed911b)+972, pc 58215c)
    /system/lib64/libhwui.so (android::uirenderer::renderthread::RenderThread::threadLoop()+808, pc 577c48)
    /system/lib64/libutils.so (android::Thread::_threadLoop(void*)+208, pc 18250)
    /system/lib64/libutils.so (libutil_thread_trampoline(void*) (.__uniq.226528677032898775202282855395389835431)+24, pc 1a5b8)
    /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*) (.__uniq.67847048707805468364044055584648682506)+180, pc 91584)
    /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+68, pc 813d4)

meowijuana

guy-with-a-hat RSA isn't very good in terms of reputation or quality. You might wanna move to Aegis like the other user said, I've never had a single issue with it.

AcclaimSublevel19

The error message means that GrapheneOS's memory allocator detected a use-after-free, which is a memory safety bug that causes undefined behaviour. I'm not entirely sure if the crash happens because of the allocator detecting the bug or the undefined behaviour made things go really wrong (or maybe it's Android default behaviour?), but in any case it's best to report the bug to the app developers so it can be fixed.

On a side note, you should consider using a FOSS 2FA app which can be trusted more, like Aegis Authenticator. RSA is a company that has been known to backdoor their products and that should make them untrustworthy.