The application crashes immediately when the system attempts to display the automatic password input view controller (_SFAutomaticPasswordInputViewController). This occurs during the login or password-filling process.
OS Version: iOS 26.2 Beta 1
Build Number: (23C5027f)
Fatal Exception: NSInvalidArgumentException
*** -[__NSArrayM insertObject:atIndex:]: object cannot be nil
Update: I’ve found additional conditions for this crash. It only reproduces on iOS 26.2 beta (1 and 2) and only when the user has Accessibility → Keyboards → Hover Typing turned ON.
Steps:
On a device running iOS 26.2 beta, go to Settings → Accessibility → Keyboards and enable Hover Typing.
Launch the app and navigate to the login / OTP screen.
Present a view controller that contains a text field that automatically becomes first responder (for entering OTP / password).
When the system tries to show the automatic password / OTP input UI, the app crashes with: NSInvalidArgumentException – -[__NSArrayM insertObject:atIndex:]: object cannot be nil The backtrace always shows:
_SFPasswordViewController _addRemoteViewAsChild
_SFAppPasswordSavingViewController viewDidLoad
This does not happen on iOS 26.1 with the same app build and the same steps.
It looks like SafariServices’ password-saving / automatic password input path is interacting badly with the Hover Typing accessibility keyboard. Please check the interaction between Hover Typing and the automatic password / OTP UI (_SFAutomaticPasswordInputViewController, _SFPasswordViewController, _SFAppPasswordSavingViewController).
This is error log from Xcode
libc++abi: terminating due to uncaught exception of type NSException
*** Terminating app due to uncaught exception 'NSInvalidArgumentException', reason: '*** -[__NSArrayM insertObject:atIndex:]: object cannot be nil'
*** First throw call stack:
(0x195dee964 0x192cd1814 0x195e01650 0x19c30cebc 0x1e80b0a1c 0x1e804ceb8 0x19b691ef4 0x19b68311c 0x19b682d4c 0x2b0912864 0x19c318e2c 0x19c31b524 0x2b09122b0 0x1e80dd764 0x19c6da640 0x19c47d648 0x19cac9940 0x19b6ee48c 0x19b6edee0 0x19b9904ac 0x101ca692c 0x101ca6bd4 0x19ca9f9e8 0x19c358598 0x19c3588dc 0x19c35534c 0x19c357460 0x19cacfd64 0x19cad11c4 0x19cab3c00 0x2b08027ec 0x19b6eb454 0x19b6fa65c 0x19b6ed36c 0x19b6fb80c 0x19b6faba8 0x284a26560 0x195d91f10 0x195d91e84 0x195d6facc 0x195d466d8 0x195d45a6c 0x237885498 0x19b71b73c 0x19b6c3f80 0x1016bcef0 0x192d26e28)
terminating due to uncaught exception of type NSException
error: Assertion failed: (false && "LLDBMemoryReader module to address map ran into pointer " "authentication mask!"), function addModuleToAddressMap, file LLDBMemoryReader.cpp, line 536
Stack dump without symbol names (ensure you have llvm-symbolizer in your PATH or set the environment var `LLVM_SYMBOLIZER_PATH` to point to it):
0 LLDB 0x000000011ae89120 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) + 56
1 LLDB 0x000000011acdede8 lldb_private::_lldb_assert(bool, char const*, char const*, char const*, unsigned int) + 204
2 LLDB 0x0000000115f0c88c lldb_private::LLDBMemoryReader::addModuleToAddressMap(std::__1::shared_ptr<lldb_private::Module>, bool) + 508
3 LLDB 0x0000000115f6b00c lldb_private::SwiftLanguageRuntime::AddObjectFileToReflectionContext(std::__1::shared_ptr<lldb_private::Module>, llvm::SmallVector<llvm::StringRef, 1u>) + 1088
4 LLDB 0x0000000115f6be04 lldb_private::SwiftLanguageRuntime::AddModuleToReflectionContext(std::__1::shared_ptr<lldb_private::Module> const&) + 2452
5 LLDB 0x0000000115f75108 std::__1::__function::__func<lldb_private::SwiftLanguageRuntime::ProcessModulesToAdd()::$_0, std::__1::allocator<lldb_private::SwiftLanguageRuntime::ProcessModulesToAdd()::$_0>, bool (std::__1::shared_ptr<lldb_private::Module> const&)>::operator()(std::__1::shared_ptr<lldb_private::Module> const&) + 52
6 LLDB 0x0000000115c7d06c lldb_private::ModuleList::ForEach(std::__1::function<bool (std::__1::shared_ptr<lldb_private::Module> const&)> const&) const + 68
7 LLDB 0x0000000115f69a74 lldb_private::SwiftLanguageRuntime::ProcessModulesToAdd() + 300
8 LLDB 0x0000000115f69484 lldb_private::SwiftLanguageRuntime::GetReflectionContext() + 64
9 LLDB 0x0000000115f7765c lldb_private::SwiftLanguageRuntime::ForEachSuperClassType(lldb_private::ValueObject&, std::__1::function<bool (lldb_private::SuperClassType)>) + 52
10 LLDB 0x0000000115f7d9d8 lldb_private::SwiftLanguageRuntime::GetDynamicTypeAndAddress_Class(lldb_private::ValueObject&, lldb_private::CompilerType, lldb::DynamicValueType, lldb_private::TypeAndOrName&, lldb_private::Address&, lldb_private::Value::ValueType&) + 512
11 LLDB 0x0000000115f81bb0 lldb_private::SwiftLanguageRuntime::GetDynamicTypeAndAddress(lldb_private::ValueObject&, lldb::DynamicValueType, lldb_private::TypeAndOrName&, lldb_private::Address&, lldb_private::Value::ValueType&) + 620
12 LLDB 0x0000000115e35780 lldb_private::ValueObjectDynamicValue::UpdateValue() + 700
13 LLDB 0x0000000115e26a1c lldb_private::ValueObject::UpdateValueIfNeeded(bool) + 844
14 LLDB 0x0000000115e2d3dc lldb_private::ValueObject::GetDynamicValue(lldb::DynamicValueType) + 76
15 LLDB 0x00000001159bfcd8 ValueImpl::GetSP(lldb_private::ProcessRunLock::ProcessRunLocker&, std::__1::unique_lock<std::__1::recursive_mutex>&, lldb_private::Status&) + 376
16 LLDB 0x00000001159b665c lldb::SBValue::GetSP(ValueLocker&) const + 396
17 LLDB 0x00000001159b72ec lldb::SBValue::GetValueType() + 256
18 lldb-rpc-server 0x0000000100412668 rpc_server::_ZN4lldb7SBValue12GetValueTypeEv::HandleRPCCall(rpc_common::Connection&, rpc_common::RPCStream&, rpc_common::RPCStream&) + 52
19 lldb-rpc-server 0x000000010041d2d8 rpc_common::Connection::PrivateHandleRPCPacket(rpc_common::RPCPacket&, rpc_common::RPCPacket&, bool&) + 604
20 lldb-rpc-server 0x000000010042061c Packets::ProcessPackets() + 528
21 lldb-rpc-server 0x0000000100420330 Packets::ReadThread() + 176
22 lldb-rpc-server 0x0000000100420274 Packets::RunReadThread(void*) + 12
23 libsystem_pthread.dylib 0x000000019995dc08 _pthread_start + 136
24 libsystem_pthread.dylib 0x0000000199958ba8 thread_start + 8
Please file a bug report against lldb reporting this failure log, and as many details as possibleerror: Assertion failed: (false && "LLDBMemoryReader module to address map ran into pointer " "authentication mask!"), function addModuleToAddressMap, file LLDBMemoryReader.cpp, line 536
Stack dump without symbol names (ensure you have llvm-symbolizer in your PATH or set the environment var `LLVM_SYMBOLIZER_PATH` to point to it):
0 LLDB 0x000000011ae89120 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) + 56
1 LLDB 0x000000011acdede8 lldb_private::_lldb_assert(bool, char const*, char const*, char const*, unsigned int) + 204
2 LLDB 0x0000000115f0c88c lldb_private::LLDBMemoryReader::addModuleToAddressMap(std::__1::shared_ptr<lldb_private::Module>, bool) + 508
3 LLDB 0x0000000115f6b00c lldb_private::SwiftLanguageRuntime::AddObjectFileToReflectionContext(std::__1::shared_ptr<lldb_private::Module>, llvm::SmallVector<llvm::StringRef, 1u>) + 1088
4 LLDB 0x0000000115f6be04 lldb_private::SwiftLanguageRuntime::AddModuleToReflectionContext(std::__1::shared_ptr<lldb_private::Module> const&) + 2452
5 LLDB 0x0000000115f75108 std::__1::__function::__func<lldb_private::SwiftLanguageRuntime::ProcessModulesToAdd()::$_0, std::__1::allocator<lldb_private::SwiftLanguageRuntime::ProcessModulesToAdd()::$_0>, bool (std::__1::shared_ptr<lldb_private::Module> const&)>::operator()(std::__1::shared_ptr<lldb_private::Module> const&) + 52
6 LLDB 0x0000000115c7d06c lldb_private::ModuleList::ForEach(std::__1::function<bool (std::__1::shared_ptr<lldb_private::Module> const&)> const&) const + 68
7 LLDB 0x0000000115f69a74 lldb_private::SwiftLanguageRuntime::ProcessModulesToAdd() + 300
8 LLDB 0x0000000115f69484 lldb_private::SwiftLanguageRuntime::GetReflectionContext() + 64
Please file a bug report against lldb reporting this failure log, and as many details as possible