iOS18 and iOS16.5.0 pushViewController crashed,But it looks like UIFont crashed,Can someone analyze that?

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Subtype: KERN_PROTECTION_FAILURE at 0x0000000205fc4a04
Exception Codes: 0x0000000000000002, 0x0000000205fc4a04
VM Region Info: 0x205fc4a04 is in 0x205fb2cd0-0x205ff9d60;  bytes after start: 73012  bytes before end: 217947
      REGION TYPE                 START - END      [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
      __DATA_CONST             205fad9c0-205fb2cd0 [   21K] r--/rw- SM=COW  .../DMCUtilities
--->  unused __TEXT            205fb2cd0-205ff9d60 [  284K] r--/rw- SM=COW  ...ed lib __TEXT
      __DATA_CONST             205ff9d60-2060070a0 [   53K] r--/rw- SM=COW  ...lCoordination
Termination Reason: SIGNAL 10 Bus error: 10
Terminating Process: exc handler [1039]

Triggered by Thread:  0



Thread 0 Crashed:
0   ???                           	0x0000000205fc4a04 0x0 + 8690354692
1   libsystem_pthread.dylib       	0x000000021608c2fc __pthread_once_handler + 76 (pthread.c:1924)
2   libsystem_platform.dylib      	0x0000000215ff2940 _os_once_callout + 32 (lock.c:1180)
3   libsystem_pthread.dylib       	0x0000000216088f68 pthread_once + 100 (pthread.c:1934)
4   libFontParser.dylib           	0x00000001ddd59648 TFont::CreateFontEntitiesForFile(char const*, timespec, bool, short, char const*) + 96 (Font.cpp:814)
5   libFontParser.dylib           	0x00000001ddce0908 FPFontCreateFontsWithPath + 252 (FontParser.cpp:2601)
6   CoreGraphics                  	0x00000001b7df77f8 create_private_data_array_with_path + 20 (xt-vtable.c:109)
7   CoreGraphics                  	0x00000001b7dd0f30 CGFontCreateFontsWithPath + 40 (CGFontCreate.c:501)
8   CoreGraphics                  	0x00000001b7da76c0 CGFontCreateFontsWithURL + 672 (CGFontURL.c:315)
9   libGSFont.dylib               	0x00000001d001e0b8 AddFontsFromURLOrPath + 240 (GSFont.m:996)
10  libGSFont.dylib               	0x00000001d0018d1c __Initialize_block_invoke + 1404 (GSFont.m:1478)
11  libdispatch.dylib             	0x00000001bd7a2eac _dispatch_client_callout + 20 (object.m:560)
12  libdispatch.dylib             	0x00000001bd7a46ec _dispatch_once_callout + 32 (once.c:52)
13  libGSFont.dylib               	0x00000001d0019080 Initialize + 212 (GSFont.m:1352)
14  libdispatch.dylib             	0x00000001bd7a2eac _dispatch_client_callout + 20 (object.m:560)
15  libdispatch.dylib             	0x00000001bd7a46ec _dispatch_once_callout + 32 (once.c:52)
16  libdispatch.dylib             	0x00000001bd7a2eac _dispatch_client_callout + 20 (object.m:560)
17  libdispatch.dylib             	0x00000001bd7a46ec _dispatch_once_callout + 32 (once.c:52)
18  CoreText                      	0x00000001b7b803c4 TDescriptorSource::TDescriptorSource() + 196 (TDescriptorSource.cpp:150)
19  CoreText                      	0x00000001b7b8e524 CTFontDescriptorCreateForUIType + 48 (CTFontDescriptor.cpp:571)
20  CoreText                      	0x00000001b7b8e240 CTFontCreateUIFontForLanguage + 20 (CTFont.cpp:181)
21  UIFoundation                  	0x00000001c06bdbc0 UINewFont + 840 (UIFont.m:247)
22  UIFoundation                  	0x00000001c06bd474 +[UIFont systemFontOfSize:traits:] + 44 (UIFont.m:1020)
23  UIKitCore                     	0x00000001b863265c -[_UITextAttributeDefaultCategories _genericDefaults:] + 96 (_UITextAttributeDefaults.m:98)
24  UIKitCore                     	0x00000001b8632534 -[_UITextAttributeDefaultCategories initWithUserInterfaceIdiom:] + 208 (_UITextAttributeDefaults.m:80)
25  UIKitCore                     	0x00000001b8632440 __48+[_UITextAttributeDefaults _unspecifiedDefaults]_block_invoke + 32 (_UITextAttributeDefaults.m:192)
26  libdispatch.dylib             	0x00000001bd7a2eac _dispatch_client_callout + 20 (object.m:560)
27  libdispatch.dylib             	0x00000001bd7a46ec _dispatch_once_callout + 32 (once.c:52)
28  UIKitCore                     	0x00000001b83b2044 +[_UITextAttributeDefaults _unspecifiedDefaults] + 80 (_UITextAttributeDefaults.m:191)
29  UIKitCore                     	0x00000001b83b1f3c +[UILabel defaultFont] + 88 (UILabel.m:660)
30  UIKitCore                     	0x00000001b849a020 __22-[UILabel _commonInit]_block_invoke_2 + 44 (UILabel.m:1349)
31  UIKitCore                     	0x00000001b83d45b0 +[UIView _performSystemAppearanceModifications:] + 72 (UIView.m:3759)
32  UIKitCore                     	0x00000001b83d4060 -[UILabel _commonInit] + 352 (UILabel.m:1359)
33  UIKitCore                     	0x00000001b83d3e18 -[UILabel initWithFrame:] + 56 (UILabel.m:1433)
34  UIKitCore                     	0x00000001b8521570 _UINavigationBarLargeTitleViewNewLabel + 28 (_UINavigationBarLargeTitleViewLayout.m:29)
35  UIKitCore                     	0x00000001b85bc7ec -[_UINavigationBarLargeTitleViewLayout initWithContentView:] + 76 (_UINavigationBarLargeTitleViewLayout.m:55)
36  UIKitCore                     	0x00000001b84869a0 -[_UINavigationBarLargeTitleView initWithFrame:] + 64 (_UINavigationBarLargeTitleView.m:61)
37  UIKitCore                     	0x00000001b8485fc4 -[_UINavigationBarVisualProviderModernIOS prepare] + 604 (_UINavigationBarVisualProviderModernIOS.m:246)
38  UIKitCore                     	0x00000001b8485ccc -[UINavigationBar _commonNavBarInit] + 188 (UINavigationBar.m:1444)
39  UIKitCore                     	0x00000001b84859a8 -[UINavigationBar initWithFrame:] + 160 (UINavigationBar.m:1495)
40  UIKitCore                     	0x00000001b835ab70 -[UINavigationController _navigationBarHiddenByDefault:] + 80 (UINavigationController.m:2513)
41  UIKitCore                     	0x00000001b835d014 -[UINavigationController loadView] + 168 (UINavigationController.m:4252)
42  UIKitCore                     	0x00000001b835c6a8 -[UIViewController loadViewIfRequired] + 100 (UIViewController.m:4235)
43  UIKitCore                     	0x00000001b835c624 -[UIViewController view] + 24 (UIViewController.m:4299)
44  UIKitCore                     	0x00000001b84f3524 -[UINavigationController pushViewController:transition:forceImmediate:] + 404 (UINavigationController.m:8388)
45  UIKitCore                     	0x00000001b84f335c -[UINavigationController pushViewController:animated:] + 628 
46  DUMovie                     	0x0000000104e19058 -[DUNavigationController pushViewController:animated:] + 1212 (DUNavigationController:324)
47  UIKitCore                     	0x00000001b84e41a0 -[UINavigationController initWithRootViewController:] + 152 (UINavigationController.m:609)

(UINavigationController.m:8304)




Could you please share the steps you've taken to identify where in your code the crash occurred?

Have you tried:

If you've done the above and still cannot determine the source of the crash, you can provide the symbolicated crash logs in a bug report via Feedback Assistant and share the Feedback number here. I would be happy to take a look at the symbolicated crash logs.

A seemingly certain crash of UIfont on ios18

Exception Subtype: KERN_INVALID_ADDRESS at 0x00005ddde5f28270
Exception Codes: 0x0000000000000001, 0x00005ddde5f28270
VM Region Info: 0x5ddde5f28270 is not in any region.  Bytes after previous region: 102726590694001  
      REGION TYPE                 START - END      [ VSIZE] PRT/MAX SHRMOD  REGION DETAIL
      commpage (reserved)     1000000000-7000000000 [384.0G] ---/--- SM=NUL  reserved VM address space (unallocated)
--->  
      UNUSED SPACE AT END
Termination Reason: SIGNAL 11 Segmentation fault: 11
Terminating Process: exc handler [4297]

Triggered by Thread:  0


Thread 0 name:
Thread 0 Crashed:
0   libobjc.A.dylib               	0x00000001846cb008 objc_msgSend + 8 (:-1)
1   CoreFoundation                	0x00000001872f64bc -[__NSDictionaryM objectForKey:] + 168 (NSDictionaryM.m:179)
2   CoreFoundation                	0x000000018734c3e8 -[NSDictionary containsKey:] + 56 (NSDictionary.m:80)
3   CoreFoundation                	0x000000018734c06c CFDictionaryContainsKey + 52 (CFDictionary.c:265)
4   libGSFont.dylib               	0x00000001a5decc14 GSFontIsOverriddenSystemFontName + 32 (GSFont.m:2860)
5   CoreText                      	0x00000001891bb1fc CopyAttributeForSystemFont(__CFString const*, __CFString const*) + 64 (MetadataSupport.cpp:194)
6   CoreText                      	0x00000001891badd4 AddVariationInfo(TCFMutableDictionary&, __CFString const*) + 60 (SplicedFontSupport.cpp:6760)
7   CoreText                      	0x000000018922dea0 MakeSpliceDescriptor(__CFString const*, unsigned long, __CFString const*, __CFString const*, __CFNumber const*, __CFNumber const*, unsigned int, CTFontTextStylePlatform, unsigned int, __CFNumber co... + 4504 (SplicedFontSupport.cpp:7429)
8   CoreText                      	0x0000000189229374 TDescriptorSource::CopySpliceFontForName(__CFString const*, __CFString const*, __CFNumber const*, __CFNumber const*, CTFontLegibilityWeight, __CFBoolean const*, __CFNumber const*, __CFString const*... + 1376 (TDescriptorSource.cpp:4288)
9   CoreText                      	0x0000000189226800 TDescriptorSource::CopySplicedDescriptorForName(__CFString const*, __CFString const*, __CFString const*, __CFNumber const*, __CFNumber const*, CTFontLegibilityWeight, __CFBoolean const*, __CFNumber... + 172 (TDescriptorSource.cpp:4322)
10  CoreText                      	0x0000000189156214 TDescriptor::CreateMatchingDescriptorInternal(__CFSet const*, unsigned long) const + 2332 (TDescriptor.cpp:804)
11  CoreText                      	0x0000000189155148 TDescriptor::InitBaseFont(unsigned long, double) + 76 (TDescriptor.cpp:952)
12  CoreText                      	0x0000000189177d24 TDescriptor::CreateMatchingDescriptor(__CFSet const*, double, unsigned long) const + 448 (TDescriptor.cpp:927)
13  CoreText                      	0x0000000189177af8 CTFontCreateWithFontDescriptor + 68 (CTFont.cpp:142)
14  CoreText                      	0x00000001891b5dc4 CTFontCreateUIFontForLanguage + 44 (CTFont.cpp:210)
15  UIFoundation                  	0x0000000192b5635c UINewFont + 828 (UIFont.m:247)
16  UIFoundation                  	0x0000000192b55330 +[UIFont systemFontOfSize:traits:] + 44 (UIFont.m:1035)
17  UIKitCore                     	0x0000000189d2a76c -[_UITextAttributeDefaultCategories _genericDefaults:] + 112 (_UITextAttributeDefaults.m:98)
18  UIKitCore                     	0x0000000189d2a3d4 -[_UITextAttributeDefaultCategories initWithUserInterfaceIdiom:] + 208 (_UITextAttributeDefaults.m:80)
19  UIKitCore                     	0x0000000189d2a2e0 __48+[_UITextAttributeDefaults _unspecifiedDefaults]_block_invoke + 32 (_UITextAttributeDefaults.m:192)
20  libdispatch.dylib             	0x000000018f1f1160 _dispatch_client_callout + 20 (object.m:576)
21  libdispatch.dylib             	0x000000018f1f29a8 _dispatch_once_callout + 32 (once.c:52)
22  UIKitCore                     	0x0000000189b23ae0 +[_UITextAttributeDefaults _unspecifiedDefaults] + 80 (_UITextAttributeDefaults.m:191)
23  UIKitCore                     	0x0000000189c8aae8 -[_UICascadingTextStorage _setDefaults:] + 56 (_UICascadingTextStorage.m:51)
24  UIKitCore                     	0x0000000189c8aa98 -[_UICascadingTextStorage initWithDefaults:] + 80 (_UICascadingTextStorage.m:43)
25  UIKitCore                     	0x0000000189c8a74c -[UITextField _initTextStorage] + 36 (UITextField.m:8777)
26  UIKitCore                     	0x0000000189c89a94 -[UITextField _initWithFrame:textLayoutManagerEnabled:] + 312 (UITextField.m:666)
27  XxxxxxXXX                      	0x000000010560c20c __25-[IQKeyboardManager init]_block_invoke_2 + 28 (IQKeyboardManager.m:247)
28  libdispatch.dylib             	0x000000018f1ef400 _dispatch_call_block_and_release + 32 (init.c:1549)
29  libdispatch.dylib             	0x000000018f1f1160 _dispatch_client_callout + 20 (object.m:576)
30  libdispatch.dylib             	0x000000018f1ffa70 _dispatch_main_queue_drain + 980 (queue.c:8085)
31  libdispatch.dylib             	0x000000018f1ff68c _dispatch_main_queue_callback_4CF + 44 (queue.c:8245)
32  CoreFoundation                	0x0000000187349168 __CFRUNLOOP_IS_SERVICING_THE_MAIN_DISPATCH_QUEUE__ + 16 (CFRunLoop.c:1775)
33  CoreFoundation                	0x0000000187346388 __CFRunLoopRun + 2012 (CFRunLoop.c:3144)
34  CoreFoundation                	0x0000000187345714 CFRunLoopRunSpecific + 608 (CFRunLoop.c:3415)
35  GraphicsServices              	0x00000001d2e411c4 GSEventRunModal + 164 (GSEvent.c:2196)
36  UIKitCore                     	0x0000000189eb9564 -[UIApplication _run] + 888 (UIApplication.m:3809)
37  UIKitCore                     	0x0000000189f67530 UIApplicationMain + 340 (UIApplication.m:5409)
38  XxxxxxXXX                      	0x00000001055b7ea8 main + 84 (main.m:67)
39  dyld                          	0x00000001aceefcd0 start + 2760 (dyldMain.cpp:1335)
iOS18 and iOS16.5.0 pushViewController crashed,But it looks like UIFont crashed,Can someone analyze that?
 
 
Q