A seemingly certain crash of UIfont on ios18 Exception Subtype: KERN_INVALID_ADDRESS at 0x00005ddde5f28270 Exception Codes: 0x0000000000000001, 0x00005ddde5f28270 VM Region Info: 0x5ddde5f28270 is not in any region. Bytes after previous region: 102726590694001 REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL commpage (reserved) 1000000000-7000000000 [384.0G] ---/--- SM=NUL reserved VM address space (unallocated) ---> UNUSED SPACE AT END Termination Reason: SIGNAL 11 Segmentation fault: 11 Terminating Process: exc handler [4297] Triggered by Thread: 0 Thread 0 name: Thread 0 Crashed: 0 libobjc.A.dylib 0x00000001846cb008 objc_msgSend + 8 (:-1) 1 CoreFoundation 0x00000001872f64bc -[__NSDictionaryM objectForKey:] + 168 (NSDictionaryM.m:179) 2 CoreFoundation 0x000000018734c3e8 -[NSDictionary containsKey:] + 56 (NSDictionary.m:80) 3 CoreFoundation 0x000000018734c06c CFDictionaryContainsKey + 52 (CFDictionary.c:265) 4 libGSFont.dylib 0x00000001a5decc14 GSFontIsOverriddenSystemFontName + 32 (GSFont.m:2860) 5 CoreText 0x00000001891bb1fc CopyAttributeForSystemFont(__CFString const*, __CFString const*) + 64 (MetadataSupport.cpp:194) 6 CoreText 0x00000001891badd4 AddVariationInfo(TCFMutableDictionary&, __CFString const*) + 60 (SplicedFontSupport.cpp:6760) 7 CoreText 0x000000018922dea0 MakeSpliceDescriptor(__CFString const*, unsigned long, __CFString const*, __CFString const*, __CFNumber const*, __CFNumber const*, unsigned int, CTFontTextStylePlatform, unsigned int, __CFNumber co... + 4504 (SplicedFontSupport.cpp:7429) 8 CoreText 0x0000000189229374 TDescriptorSource::CopySpliceFontForName(__CFString const*, __CFString const*, __CFNumber const*, __CFNumber const*, CTFontLegibilityWeight, __CFBoolean const*, __CFNumber const*, __CFString const*... + 1376 (TDescriptorSource.cpp:4288) 9 CoreText 0x0000000189226800 TDescriptorSource::CopySplicedDescriptorForName(__CFString const*, __CFString const*, __CFString const*, __CFNumber const*, __CFNumber const*, CTFontLegibilityWeight, __CFBoolean const*, __CFNumber... + 172 (TDescriptorSource.cpp:4322) 10 CoreText 0x0000000189156214 TDescriptor::CreateMatchingDescriptorInternal(__CFSet const*, unsigned long) const + 2332 (TDescriptor.cpp:804) 11 CoreText 0x0000000189155148 TDescriptor::InitBaseFont(unsigned long, double) + 76 (TDescriptor.cpp:952) 12 CoreText 0x0000000189177d24 TDescriptor::CreateMatchingDescriptor(__CFSet const*, double, unsigned long) const + 448 (TDescriptor.cpp:927) 13 CoreText 0x0000000189177af8 CTFontCreateWithFontDescriptor + 68 (CTFont.cpp:142) 14 CoreText 0x00000001891b5dc4 CTFontCreateUIFontForLanguage + 44 (CTFont.cpp:210) 15 UIFoundation 0x0000000192b5635c UINewFont + 828 (UIFont.m:247) 16 UIFoundation 0x0000000192b55330 +[UIFont systemFontOfSize:traits:] + 44 (UIFont.m:1035) 17 UIKitCore 0x0000000189d2a76c -[_UITextAttributeDefaultCategories _genericDefaults:] + 112 (_UITextAttributeDefaults.m:98) 18 UIKitCore 0x0000000189d2a3d4 -[_UITextAttributeDefaultCategories initWithUserInterfaceIdiom:] + 208 (_UITextAttributeDefaults.m:80) 19 UIKitCore 0x0000000189d2a2e0 __48+[_UITextAttributeDefaults _unspecifiedDefaults]_block_invoke + 32 (_UITextAttributeDefaults.m:192) 20 libdispatch.dylib 0x000000018f1f1160 _dispatch_client_callout + 20 (object.m:576) 21 libdispatch.dylib 0x000000018f1f29a8 _dispatch_once_callout + 32 (once.c:52) 22 UIKitCore 0x0000000189b23ae0 +[_UITextAttributeDefaults _unspecifiedDefaults] + 80 (_UITextAttributeDefaults.m:191) 23 UIKitCore 0x0000000189c8aae8 -[_UICascadingTextStorage _setDefaults:] + 56 (_UICascadingTextStorage.m:51) 24 UIKitCore 0x0000000189c8aa98 -[_UICascadingTextStorage initWithDefaults:] + 80 (_UICascadingTextStorage.m:43) 25 UIKitCore 0x0000000189c8a74c -[UITextField _initTextStorage] + 36 (UITextField.m:8777) 26 UIKitCore 0x0000000189c89a94 -[UITextField _initWithFrame:textLayoutManagerEnabled:] + 312 (UITextField.m:666) 27 XxxxxxXXX 0x000000010560c20c __25-[IQKeyboardManager init]_block_invoke_2 + 28 (IQKeyboardManager.m:247) 28 libdispatch.dylib 0x000000018f1ef400 _dispatch_call_block_and_release + 32 (init.c:1549) 29 libdispatch.dylib 0x000000018f1f1160 _dispatch_client_callout + 20 (object.m:576) 30 libdispatch.dylib 0x000000018f1ffa70 _dispatch_main_queue_drain + 980 (queue.c:8085) 31 libdispatch.dylib 0x000000018f1ff68c _dispatch_main_queue_callback_4CF + 44 (queue.c:8245) 32 CoreFoundation 0x0000000187349168 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 16 (CFRunLoop.c:1775) 33 CoreFoundation 0x0000000187346388 __CFRunLoopRun + 2012 (CFRunLoop.c:3144) 34 CoreFoundation 0x0000000187345714 CFRunLoopRunSpecific + 608 (CFRunLoop.c:3415) 35 GraphicsServices 0x00000001d2e411c4 GSEventRunModal + 164 (GSEvent.c:2196) 36 UIKitCore 0x0000000189eb9564 -[UIApplication _run] + 888 (UIApplication.m:3809) 37 UIKitCore 0x0000000189f67530 UIApplicationMain + 340 (UIApplication.m:5409) 38 XxxxxxXXX 0x00000001055b7ea8 main + 84 (main.m:67) 39 dyld 0x00000001aceefcd0 start + 2760 (dyldMain.cpp:1335)

get same problem： https://developer.apple.com/forums/thread/759866

the same crash here

I met the same issue ：https://developer.apple.com/forums/thread/759866

hello,has this problem been solved in ios18beta4?Really?

The same crash happened to WKWebview on ios18beta5: NSMutableRLEArray objectAtIndex:effectiveRange:: Out of bounds 0 CoreFoundation __exceptionPreprocess 1 libobjc.A.dylib objc_exception_throw 2 Foundation blockForLocation 3 WebKit __70-[WKContentView(WKInteraction) setAttributedMarkedText:selectedRange:]_block_invoke 4 WebKit -[WKContentView(WKInteraction) setAttributedMarkedText:selectedRange:] 5 UIKitCore -[UIResponder(UITextInput_Internal) _setAttributedMarkedText:selectedRange:] 6 UIKitCore -[UIKBInputDelegateManager setAttributedMarkedText:selectedRange:] 7 UIKitCore -[_UIKeyboardStateManager _setAttributedMarkedText:selectedRange:inputString:lastInputString:searchString:compareAttributes:] 8 UIKitCore -[_UIKeyboardStateManager setMarkedText:selectedRange:inputString:lastInputString:searchString:candidateOffset:liveConversionSegments:highlighSegmentIndex:] 9 UIKitCore -[_UIKeyboardStateManager assertIntermediateText:] 10 UIKitCore -[_UIKeyboardStateManager updateCandidateDisplayAsyncWithCandidateSet:] 11 UIKitCore -[_UIKeyboardStateManager inputManagerDidGenerateCandidateResultSet:] 12 UIKitCore __87-[_UIKeyboardStateManager generateCandidatesAsynchronouslyWithRange:selectedCandidate:]_block_invoke_3 13 UIKitCore -[UIKeyboardTaskExecutionContext returnExecutionToParentWithInfo:] 14 UIKitCore __87-[_UIKeyboardStateManager generateCandidatesAsynchronouslyWithRange:selectedCandidate:]_block_invoke_2 15 UIKitCore -[UIKeyboardTaskEntry execute:] 16 UIKitCore -[UIKeyboardTaskQueue continueExecutionOnMainThread] 17 UIKitCore -[UIKeyboardTaskQueue continueExecutionOnMainThread] 18 Foundation __NSThreadPerformPerform 19 CoreFoundation __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ 20 CoreFoundation __CFRunLoopDoSource0 21 CoreFoundation __CFRunLoopDoSources0 22 CoreFoundation __CFRunLoopRun 23 CoreFoundation CFRunLoopRunSpecific 24 GraphicsServices GSEventRunModal 25 UIKitCore -[UIApplication _run] 26 UIKitCore UIApplicationMain

we got the same problem and the Feedback report number is FB14782226

we got the same problem and the Feedback report number is FB14782226

Hi,has this problem been solved? We experience the same crash.This crash suddenly began to happen on October 26. At present, all the models of mobile phones that occurred were on iPhone17,1 and the iOS system version was iOS18.0.1. This crash was all from users on the appstore, and was collected via Xcode - Organizer - > Crashes. I've attached the crash report and picture. Distributor ID: com.apple.AppStore Hardware Model: iPhone17,1 Process: XxxxxxXXX [36671] Path: /private/var/containers/Bundle/Application/6E9E07EA-B7A4-4D57-B419-743DDCF7C3A6/XxxxxxXXX.app/XxxxxxXXX Identifier: com.XxxxxxXXX.XxxxxxXXX Version: 8.1.10 (811001) AppStoreTools: 16A242d AppVariant: 1:iPhone17,1:18 Code Type: ARM-64 (Native) Role: unknown Parent Process: launchd [1] Coalition: com.XxxxxxXXX.XxxxxxXXX [9448] Date/Time: 2024-11-03 08:27:19.0514 +0800 Launch Time: 2024-11-03 08:27:18.9394 +0800 OS Version: iPhone OS 18.0.1 (22A3370) Release Type: User Baseband Version: 1.00.00 Report Version: 104 Exception Type: EXC_CRASH (SIGKILL) Exception Codes: 0x0000000000000000, 0x0000000000000000 Termination Reason: GUARD 5 Triggered by Thread: 0 Thread 0 Crashed: 0 dyld 0x00000001039e57e0 dyld4::prepare(dyld4::APIs&, dyld3::MachOAnalyzer const*) + 2204 (dyldMain.cpp:798) 1 dyld 0x0000000103a0a7a8 dyld4::start(dyld4::KernelArgs*, void*, void*)::$_0::operator()() const + 544 (dyldMain.cpp:1322) 2 dyld 0x0000000103a03b1c start + 2188 (dyldMain.cpp:1299) Thread 0 crashed with ARM Thread State (64-bit): x0: 0x00000001e641c000 x1: 0x00000001e641c000 x2: 0x000000016f9b95af x3: 0x0000000000000000 x4: 0x0000000000000000 x5: 0x0000000000000000 x6: 0x0000000000000000 x7: 0x0000000000000ee0 x8: 0x000000016f9b9910 x9: 0xf3bd196b48ef00ac x10: 0x0000000103a58ba0 x11: 0x0000000003a60000 x12: 0x0000000000000003 x13: 0x00000001e5fb4000 x14: 0x0000000000000048 x15: 0x00000000000000a5 x16: 0x00000001039d2108 x17: 0x6ae100016f9b9618 x18: 0x0000000000000000 x19: 0x000000016f9bb370 x20: 0x0000000103a64470 x21: 0x0000000103a68f30 x22: 0x00000001e641c000 x23: 0x0000000103a67020 x24: 0x0000000273d4ba18 x25: 0x0000000000000000 x26: 0x000000016f9bb4e0 x27: 0x0000000103a68f30 x28: 0x0000000000000000 fp: 0x000000016f9bb6e0 lr: 0x656a0001039e57d4 sp: 0x000000016f9b9950 pc: 0x00000001039e57e0 cpsr: 0x60000000 esr: 0x92000047 (Data Abort) byte write Translation fault Binary Images: 0x100434000 - 0x102ee3fff XxxxxxXXX arm64 <086a82c13b863f4485895baddc3144ba> /private/var/containers/Bundle/Application/6E9E07EA-B7A4-4D57-B419-743DDCF7C3A6/XxxxxxXXX.app/XxxxxxXXX 0x1039d0000 - 0x103a53fff dyld arm64e <5db839882ee63756bd07b8d67b1133a5> /usr/lib/dyld EOF

In addition,app recently encountered a dyld crash similar to this crash on iOS15.5, which looks somewhat similar to the current crash. Not sure if it's the same, but it looks similar.See if it helps the analysis.I have a file bug,number is FB15719846 (iOS 15.5 dyld Crash),hope it helps.Thanks. Hardware Model: iPhone14,5 Process: XxxxxxXXX [265] Path: /private/var/containers/Bundle/Application/DAC8B886-80BB-48DB-916D-DBB854B69DFD/XxxxxxXXX.app/XxxxxxXXX Identifier: com.XxxxxxXXX.XxxxxxXXX Version: 8.1.3 (81300) AppStoreTools: 15F31e AppVariant: 1:iPhone14,5:15 Code Type: ARM-64 (Native) Role: Foreground Parent Process: launchd [1] Coalition: com.XxxxxxXXX.XxxxxxXXX [409] Date/Time: 2024-08-20 11:59:31.9614 +0800 Launch Time: 2024-08-20 11:37:02.3165 +0800 OS Version: iPhone OS 15.5 (19F77) Release Type: User Baseband Version: 1.61.00 Report Version: 104 Exception Type: EXC_BAD_ACCESS (SIGKILL - CODESIGNING) Exception Subtype: UNKNOWN_0x32 at 0x00000001048d0000 Exception Codes: 0x0000000000000032, 0x00000001048d0000 VM Region Info: 0x1048d0000 is in 0x103064000-0x104a54000; bytes after start: 25608192 bytes before end: 1589247 REGION TYPE START - END [ VSIZE] PRT/MAX SHRMOD REGION DETAIL mapped file 103060000-103064000 [ 16K] r-x/r-x SM=COW ...t_id=6db61fab ---> mapped file 103064000-104a54000 [ 25.9M] r-x/r-x SM=COW ...t_id=6dc412ab __DATA 104a54000-105198000 [ 7440K] rw-/rw- SM=COW ....app/XxxxxxXXX Exception Note: EXC_CORPSE_NOTIFY Termination Reason: CODESIGNING 2 Triggered by Thread: 0 Kernel Triage: VM - pmap_enter failed with resource shortage VM - pmap_enter failed with resource shortage VM - pmap_enter failed with resource shortage VM - pmap_enter failed with resource shortage VM - pmap_enter failed with resource shortage Thread 0 Crashed: 0 dyld 0x00000001056750f0 strlen + 48 1 dyld 0x0000000105675b0c objc::StringHashTable::tryGetIndex(char const*) const + 36 (OptimizerObjC.h:100) 2 dyld 0x00000001056a55f4 dyld4::PrebuiltObjC::ObjCOptimizerImage::visitReferenceToObjCSelector(objc::SelectorHashTable const*, dyld3::Map<char const*, dyld4::Loader::BindTarget, dyld3::HashCString, dyld3::EqualCString> con... + 52 (PrebuiltObjC.cpp:440) 3 dyld 0x000000010567fbe4 dyld3::MachOAnalyzer::forEachObjCSelectorReference(unsigned long long, unsigned long long, dyld3::MachOAnalyzer::VMAddrConverter const&, void (unsigned long long, unsigned long long, bool&) block_p... + 136 (MachOAnalyzer.cpp:5111) 4 dyld 0x000000010567cea4 dyld4::PrebuiltObjC::forEachSelectorReferenceToUnique(dyld4::RuntimeState&, dyld3::MachOAnalyzer const*, unsigned long long, dyld4::ObjCBinaryInfo const&, dyld3::MachOAnalyzer::VMAddrConverter cons... + 168 (PrebuiltObjC.cpp:1013) 5 dyld 0x00000001056812cc dyld4::PrebuiltObjC::make(Diagnostics&, dyld4::RuntimeState&) + 2940 (PrebuiltObjC.cpp:729) 6 dyld 0x000000010569e054 dyld4::PrebuiltLoaderSet::makeLaunchSet(Diagnostics&, dyld4::RuntimeState&, dyld4::MissingPaths const&) + 508 (PrebuiltLoader.cpp:1737) 7 dyld 0x000000010568f6b4 dyld4::prepare(dyld4::APIs&, dyld3::MachOAnalyzer const*) + 2876 (dyldMain.cpp:694) 8 dyld 0x000000010568dcc4 start + 488 (dyldMain.cpp:864) Thread 0 crashed with ARM Thread State (64-bit): x0: 0x00000001048cfff1 x1: 0x00000001048cfff0 x2: 0x000000000000000f x3: 0x000000010567500f x4: 0x00000000028b7ff1 x5: 0x00000001048cfff1 x6: 0x6f43726568744f65 x7: 0x656956644172656e x8: 0x00000001055d4000 x9: 0x0000000102018000 x10: 0x00028b7faf008000 x11: 0x00ffff80028b7faf x12: 0xa894531b1e09a0a0 x13: 0x9aab2687810ea50a x14: 0x0000000000000000 x15: 0x9aab2687810f905c x16: 0xc7c7cef5f586937c x17: 0x964228877634f009 x18: 0x0000000000000000 x19: 0x00000001048cfff1 x20: 0x00000001e3dd4388 x21: 0x000000016dde3700 x22: 0x0000000105058138 x23: 0x0000000102018000 x24: 0x0000000100000000 x25: 0x000000016dde0980 x26: 0x0000000000005b1c x27: 0x00000001055d4018 x28: 0x00000001055d4000 fp: 0x000000016dde07a0 lr: 0x0000000105675b0c sp: 0x000000016dde0780 pc: 0x00000001056750f0 cpsr: 0x20001000 esr: 0x92000007 (Data Abort) byte read Translation fault Binary Images: 0x102018000 - 0x104a53fff XxxxxxXXX arm64 <a1a0951fa96f3fa88eb809506e361156> /private/var/containers/Bundle/Application/DAC8B886-80BB-48DB-916D-DBB854B69DFD/XxxxxxXXX.app/XxxxxxXXX 0x105674000 - 0x1056cbfff dyld arm64e <7c9c7851823738a7b1eb9cd2deb4b746> /usr/lib/dyld EOF