GrapheneOS
… and the same crash also on my Pixel 7 Pro:
type: crash
osVersion: google/cheetah/cheetah:14/UQ1A.231205.015/2023120701:user/release-keys
uid: 1000 (u:r:surfaceflinger:s0)
cmdline: /system/bin/surfaceflinger
processUptime: 10s
abortMessage: hardened_malloc: fatal allocator error: detected write after free
signal: 6 (SIGABRT), code -1 (SI_QUEUE)
threadName: binder:598_2
backtrace:
/apex/com.android.runtime/lib64/bionic/libc.so (abort+164, pc 62e64)
/apex/com.android.runtime/lib64/bionic/libc.so (fatal_error+24, pc 4d3a0)
/apex/com.android.runtime/lib64/bionic/libc.so (allocate+1912, pc 4a3d8)
/apex/com.android.runtime/lib64/bionic/libc.so (malloc+36, pc 45d54)
/system/lib64/libc++.so (operator new(unsigned long)+24, pc 51028)
/system/bin/surfaceflinger (android::surfaceflinger::frontend::TransactionHandler::queueTransaction(android::TransactionState&&)+56, pc 1a0018)
/system/bin/surfaceflinger (android::SurfaceFlinger::setTransactionState(android::gui::FrameTimelineInfo const&, android::Vector<android::ComposerState>&, android::Vector<android::DisplayState> const&, unsigned int, android::sp<android::IBinder> const&, android::InputWindowCommands, long, bool, std::__1::vector<android::client_cache_t, std::__1::allocator<android::client_cache_t> > const&, bool, std::__1::vector<android::ListenerCallbacks, std::__1::allocator<android::ListenerCallbacks> > const&, unsigned long, std::__1::vector<unsigned long, std::__1::allocator<unsigned long> > const&)+3604, pc 21e1b4)
/system/lib64/libgui.so (android::BnSurfaceComposer::onTransact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+2836, pc cfbc4)
/system/bin/surfaceflinger (android::SurfaceFlinger::onTransact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+408, pc 225518)
/system/lib64/libbinder.so (android::BBinder::transact(unsigned int, android::Parcel const&, android::Parcel*, unsigned int)+304, pc 74b00)
/system/lib64/libbinder.so (android::IPCThreadState::executeCommand(int)+1016, pc 5ed78)
/system/lib64/libbinder.so (android::IPCThreadState::getAndExecuteCommand()+160, pc 5e8c0)
/system/lib64/libbinder.so (android::IPCThreadState::joinThreadPool(bool)+112, pc 5f210)
/system/lib64/libbinder.so (android::PoolThread::threadLoop()+24, pc 69078)
/system/lib64/libutils.so (android::Thread::_threadLoop(void*)+284, pc 1430c)
/apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+204, pc cf9ec)
/apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64, pc 64730)
… after activating in Settings menu “Notify about system process crashes” like on my P8P and booting it again.
BTW: What does “surfaceflinger” mean?