Skip to content

NSData.dataWithBytesNoCopy_length_ is crashing #1107

Closed

Description

@liamappelbe

ns_data_test.dart causes some sort of seg faults crash loop when using NSData.dataWithBytesNoCopy_length_. I'm switching to NSData.dataWithBytes_length_ for now, which fixes the crash but is slower. Logs.

I noticed the crash in #1100, but it predates that PR (that log is from a nightly run). I haven't been able to get GDB working on my macbook, so I'm not sure exactly where the crash is happening. From the logs it seems to be happening when the NSData is destroyed.

Activity

  1. brianquinlan commented on Apr 29, 2024

    @brianquinlan
    Contributor

    @dcharkes

    NSData dataWithBytesNoCopy:length:freeWhenDone: takes ownership of a block of memory that was allocated with malloc.

    Is the package:ffi malloc the (presumably) libc malloc that NSData expects?

  2. dcharkes commented on May 1, 2024

    @dcharkes
    Collaborator

    I haven't been able to get GDB working on my macbook

    LLDB is the Mac variant.

    Is the package:ffi malloc the (presumably) libc malloc that NSData expects?

    final PosixMalloc posixMalloc =
    stdlib.lookupFunction<PosixMallocNative, PosixMalloc>('malloc');

    Yep, it's malloc in the current process.

  3. brianquinlan commented on May 1, 2024

    @brianquinlan
    Contributor

    I haven't been able to get GDB working on my macbook

    LLDB is the Mac variant.

    Is the package:ffi malloc the (presumably) libc malloc that NSData expects?

    final PosixMalloc posixMalloc =
    stdlib.lookupFunction<PosixMallocNative, PosixMalloc>('malloc');

    Yep, it's malloc in the current process.

    I'm not sure how this fits together. Presumably the malloc of the current process could mean tcmalloc or jemalloc, depending on how the application is linked? But I'd guess that NSData uses whatever the standard deallocator is? Or maybe not ;-)

    Apple's documentation isn't very clear on this. I also notice that we don't use NSData dataWithBytesNoCopy:length:freeWhenDone: at Google at all.

    I think that this code is probably OK how it is now. If people complain about the performance when using large blocks of memory, we could use initWithBytesNoCopy:length:deallocator:

  4. removed their assignment
    on May 1, 2024
  5. vaind commented on Jul 2, 2024

    @vaind
    Contributor

    Presumably the malloc of the current process could mean tcmalloc or jemalloc, depending on how the application is linked

    From the docs:

    A buffer containing data for the new object. If freeWhenDone is YES, bytes must point to a memory block allocated with malloc.

  6. brianquinlan commented on Jun 26, 2025

    @brianquinlan
    Contributor

    I think that we can close this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions