{"action":"created","issue":{"url":"https://api.github.com/repos/OneSignal/OneSignal-iOS-SDK/issues/281","repository_url":"https://api.github.com/repos/OneSignal/OneSignal-iOS-SDK","labels_url":"https://api.github.com/repos/OneSignal/OneSignal-iOS-SDK/issues/281/labels{/name}","comments_url":"https://api.github.com/repos/OneSignal/OneSignal-iOS-SDK/issues/281/comments","events_url":"https://api.github.com/repos/OneSignal/OneSignal-iOS-SDK/issues/281/events","html_url":"https://github.com/OneSignal/OneSignal-iOS-SDK/issues/281","id":260594529,"number":281,"title":"Heap use after free crash","user":{"login":"revolter","id":5748627,"avatar_url":"https://avatars0.githubusercontent.com/u/5748627?v=4","gravatar_id":"","url":"https://api.github.com/users/revolter","html_url":"https://github.com/revolter","followers_url":"https://api.github.com/users/revolter/followers","following_url":"https://api.github.com/users/revolter/following{/other_user}","gists_url":"https://api.github.com/users/revolter/gists{/gist_id}","starred_url":"https://api.github.com/users/revolter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/revolter/subscriptions","organizations_url":"https://api.github.com/users/revolter/orgs","repos_url":"https://api.github.com/users/revolter/repos","events_url":"https://api.github.com/users/revolter/events{/privacy}","received_events_url":"https://api.github.com/users/revolter/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-09-26T11:48:33Z","updated_at":"2018-02-03T22:19:39Z","closed_at":"2018-02-03T22:19:39Z","author_association":"CONTRIBUTOR","body":"I receive a lot of crashes in Fabric and today it happened locally with Address Sanitizer enabled. It crashed when trying to start speech recognition using Nuance, so even though it makes no sense, it looks like `-[OneSignalTrackIAP productsRequest:didReceiveResponse:]` was called by it.\r\n\r\nHere is the report:\r\n\r\n```\r\n=================================================================\r\n==3482==ERROR: AddressSanitizer: heap-use-after-free on address 0x000175b41990 at pc 0x000103eaaff8 bp 0x00016f3959e0 sp 0x00016f395178\r\nREAD of size 3 at 0x000175b41990 thread T0\r\n    #0 0x103eaaff7 in wrap_strlen (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x16ff7)\r\n    #1 0x18716b433 in CFStringCreateWithCString (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x9433)\r\n    #2 0x10265f8fb in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101bf78fb)\r\n    #3 0x1025c9dbf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b61dbf)\r\n    #4 0x1025c956b in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6156b)\r\n    #5 0x1025cd80f in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6580f)\r\n    #6 0x1025cd673 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b65673)\r\n    #7 0x10106980b in -[NuanceSpeechRecognizer start] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x10060180b)\r\n    #8 0x100c35fab in __39-[LessonRViewController startRecording]_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x1001cdfab)\r\n    #9 0x103ee20eb in __wrap_dispatch_after_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4e0eb)\r\n    #10 0x10516945b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)\r\n    #11 0x1051767ff in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe7ff)\r\n    #12 0x10516b24b in _dispatch_source_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x324b)\r\n    #13 0x10516de8b in _dispatch_main_queue_callback_4CF (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x5e8b)\r\n    #14 0x18724bf1f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe9f1f)\r\n    #15 0x187249afb in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe7afb)\r\n    #16 0x18716a2d7 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x82d7)\r\n    #17 0x188ffbf83 in GSEventRunModal (/System/Library/PrivateFrameworks/GraphicsServices.framework/GraphicsServices:arm64+0xaf83)\r\n    #18 0x19071687f in UIApplicationMain (/System/Library/Frameworks/UIKit.framework/UIKit:arm64+0x7387f)\r\n    #19 0x100ea0e3f in main (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x100438e3f)\r\n    #20 0x186c8e56b in <redacted> (/usr/lib/system/libdyld.dylib:arm64+0x156b)\r\n\r\n0x000175b41990 is located 0 bytes inside of 48-byte region [0x000175b41990,0x000175b419c0)\r\nfreed by thread T0 here:\r\n    #0 0x103ee2de7 in wrap_free (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7)\r\n    #1 0x186772787 in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >::~basic_string() (/usr/lib/libc++.1.dylib:arm64+0x3e787)\r\n    #2 0x102669dcb in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101c01dcb)\r\n    #3 0x10265f8cf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101bf78cf)\r\n    #4 0x1025c9dbf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b61dbf)\r\n    #5 0x1025c956b in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6156b)\r\n    #6 0x1025cd80f in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6580f)\r\n    #7 0x1025cd673 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b65673)\r\n    #8 0x10106980b in -[NuanceSpeechRecognizer start] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x10060180b)\r\n    #9 0x100c35fab in __39-[LessonRViewController startRecording]_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x1001cdfab)\r\n    #10 0x103ee20eb in __wrap_dispatch_after_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4e0eb)\r\n    #11 0x10516945b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)\r\n    #12 0x1051767ff in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe7ff)\r\n    #13 0x10516b24b in _dispatch_source_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x324b)\r\n    #14 0x10516de8b in _dispatch_main_queue_callback_4CF (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x5e8b)\r\n    #15 0x18724bf1f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe9f1f)\r\n    #16 0x187249afb in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe7afb)\r\n    #17 0x18716a2d7 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x82d7)\r\n    #18 0x188ffbf83 in GSEventRunModal (/System/Library/PrivateFrameworks/GraphicsServices.framework/GraphicsServices:arm64+0xaf83)\r\n    #19 0x19071687f in UIApplicationMain (/System/Library/Frameworks/UIKit.framework/UIKit:arm64+0x7387f)\r\n    #20 0x100ea0e3f in main (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x100438e3f)\r\n    #21 0x186c8e56b in <redacted> (/usr/lib/system/libdyld.dylib:arm64+0x156b)\r\n\r\npreviously allocated by thread T0 here:\r\n    #0 0x103ee2c47 in wrap_malloc (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ec47)\r\n    #1 0x104f655d3 in operator new(unsigned long) (/Developer/Library/PrivateFrameworks/GPUTools.framework/libglInterpose.dylib:arm64+0x2315d3)\r\n    #2 0x186771593 in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >::basic_string(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) (/usr/lib/libc++.1.dylib:arm64+0x3d593)\r\n    #3 0x102669db3 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101c01db3)\r\n    #4 0x10265f8cf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101bf78cf)\r\n    #5 0x1025c9dbf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b61dbf)\r\n    #6 0x1025c956b in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6156b)\r\n    #7 0x1025cd80f in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6580f)\r\n    #8 0x1025cd673 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b65673)\r\n    #9 0x10106980b in -[NuanceSpeechRecognizer start] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x10060180b)\r\n    #10 0x100c35fab in __39-[LessonRViewController startRecording]_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x1001cdfab)\r\n    #11 0x103ee20eb in __wrap_dispatch_after_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4e0eb)\r\n    #12 0x10516945b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)\r\n    #13 0x1051767ff in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe7ff)\r\n    #14 0x10516b24b in _dispatch_source_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x324b)\r\n    #15 0x10516de8b in _dispatch_main_queue_callback_4CF (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x5e8b)\r\n    #16 0x18724bf1f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe9f1f)\r\n    #17 0x187249afb in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe7afb)\r\n    #18 0x18716a2d7 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x82d7)\r\n    #19 0x188ffbf83 in GSEventRunModal (/System/Library/PrivateFrameworks/GraphicsServices.framework/GraphicsServices:arm64+0xaf83)\r\n    #20 0x19071687f in UIApplicationMain (/System/Library/Frameworks/UIKit.framework/UIKit:arm64+0x7387f)\r\n    #21 0x100ea0e3f in main (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x100438e3f)\r\n    #22 0x186c8e56b in <redacted> (/usr/lib/system/libdyld.dylib:arm64+0x156b)\r\n\r\nSUMMARY: AddressSanitizer: heap-use-after-free (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x16ff7) in wrap_strlen\r\nShadow bytes around the buggy address:\r\n  0x0001345c82e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\r\n  0x0001345c82f0: fa fa fa fa fa fa fa fa fa fa fd fd fd fd fd fd\r\n  0x0001345c8300: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n  0x0001345c8310: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n  0x0001345c8320: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n=>0x0001345c8330: fa fa[fd]fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n  0x0001345c8340: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 fa\r\n  0x0001345c8350: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 00\r\n  0x0001345c8360: fa fa 00 00 00 00 00 fa fa fa 00 00 00 00 00 00\r\n  0x0001345c8370: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 fa\r\n  0x0001345c8380: fa fa fd fd fd fd fd fd fa fa 00 00 00 00 00 00\r\nShadow byte legend (one shadow byte represents 8 application bytes):\r\n  Addressable:           00\r\n  Partially addressable: 01 02 03 04 05 06 07 \r\n  Heap left redzone:       fa\r\n  Freed heap region:       fd\r\n  Stack left redzone:      f1\r\n  Stack mid redzone:       f2\r\n  Stack right redzone:     f3\r\n  Stack after return:      f5\r\n  Stack use after scope:   f8\r\n  Global redzone:          f9\r\n  Global init order:       f6\r\n  Poisoned by user:        f7\r\n  Container overflow:      fc\r\n  Array cookie:            ac\r\n  Intra object redzone:    bb\r\n  ASan internal:           fe\r\n  Left alloca redzone:     ca\r\n  Right alloca redzone:    cb\r\n2017-09-26 13:53:46.991814+0300 MyAppName[3482:1761365] =================================================================\r\n2017-09-26 13:53:46.991887+0300 MyAppName[3482:1761365] ==3482==ERROR: AddressSanitizer: heap-use-after-free on address 0x000175b41990 at pc 0x000103eaaff8 bp 0x00016f3959e0 sp 0x00016f395178\r\n2017-09-26 13:53:46.991940+0300 MyAppName[3482:1761365] READ of size 3 at 0x000175b41990 thread T0\r\n2017-09-26 13:53:46.992009+0300 MyAppName[3482:1761365]     #0 0x103eaaff7 in wrap_strlen (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x16ff7)\r\n2017-09-26 13:53:46.992036+0300 MyAppName[3482:1761365]     #1 0x18716b433 in CFStringCreateWithCString (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x9433)\r\n2017-09-26 13:53:46.992059+0300 MyAppName[3482:1761365]     #2 0x10265f8fb in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101bf78fb)\r\n2017-09-26 13:53:46.992124+0300 MyAppName[3482:1761365]     #3 0x1025c9dbf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b61dbf)\r\n2017-09-26 13:53:46.992152+0300 MyAppName[3482:1761365]     #4 0x1025c956b in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6156b)\r\n2017-09-26 13:53:46.992267+0300 MyAppName[3482:1761365]     #5 0x1025cd80f in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6580f)\r\n2017-09-26 13:53:46.992292+0300 MyAppName[3482:1761365]     #6 0x1025cd673 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b65673)\r\n2017-09-26 13:53:46.992316+0300 MyAppName[3482:1761365]     #7 0x10106980b in -[NuanceSpeechRecognizer start] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x10060180b)\r\n2017-09-26 13:53:46.992432+0300 MyAppName[3482:1761365]     #8 0x100c35fab in __39-[LessonRViewController startRecording]_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x1001cdfab)\r\n2017-09-26 13:53:46.992459+0300 MyAppName[3482:1761365]     #9 0x103ee20eb in __wrap_dispatch_after_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4e0eb)\r\n2017-09-26 13:53:46.992482+0300 MyAppName[3482:1761365]     #10 0x10516945b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)\r\n2017-09-26 13:53:46.992559+0300 MyAppName[3482:1761365]     #11 0x1051767ff in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe7ff)\r\n2017-09-26 13:53:46.992584+0300 MyAppName[3482:1761365]     #12 0x10516b24b in _dispatch_source_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x324b)\r\n2017-09-26 13:53:46.993034+0300 MyAppName[3482:1761365]     #13 0x10516de8b in _dispatch_main_queue_callback_4CF (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x5e8b)\r\n2017-09-26 13:53:46.993059+0300 MyAppName[3482:1761365]     #14 0x18724bf1f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe9f1f)\r\n2017-09-26 13:53:46.993081+0300 MyAppName[3482:1761365]     #15 0x187249afb in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe7afb)\r\n2017-09-26 13:53:46.993128+0300 MyAppName[3482:1761365]     #16 0x18716a2d7 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x82d7)\r\n2017-09-26 13:53:46.993152+0300 MyAppName[3482:1761365]     #17 0x188ffbf83 in GSEventRunModal (/System/Library/PrivateFrameworks/GraphicsServices.framework/GraphicsServices:arm64+0xaf83)\r\n2017-09-26 13:53:46.993213+0300 MyAppName[3482:1761365]     #18 0x19071687f in UIApplicationMain (/System/Library/Frameworks/UIKit.framework/UIKit:arm64+0x7387f)\r\n2017-09-26 13:53:46.993237+0300 MyAppName[3482:1761365]     #19 0x100ea0e3f in main (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x100438e3f)\r\n2017-09-26 13:53:46.993294+0300 MyAppName[3482:1761365]     #20 0x186c8e56b in <redacted> (/usr/lib/system/libdyld.dylib:arm64+0x156b)\r\n2017-09-26 13:53:46.993318+0300 MyAppName[3482:1761365] \r\n2017-09-26 13:53:46.993337+0300 MyAppName[3482:1761365] 0x000175b41990 is located 0 bytes inside of 48-byte region [0x000175b41990,0x000175b419c0)\r\n2017-09-26 13:53:46.993360+0300 MyAppName[3482:1761365] freed by thread T0 here:\r\n2017-09-26 13:53:46.993399+0300 MyAppName[3482:1761365]     #0 0x103ee2de7 in wrap_free (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ede7)\r\n2017-09-26 13:53:46.993462+0300 MyAppName[3482:1761365]     #1 0x186772787 in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >::~basic_string() (/usr/lib/libc++.1.dylib:arm64+0x3e787)\r\n2017-09-26 13:53:46.993488+0300 MyAppName[3482:1761365]     #2 0x102669dcb in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101c01dcb)\r\n2017-09-26 13:53:46.993510+0300 MyAppName[3482:1761365]     #3 0x10265f8cf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101bf78cf)\r\n2017-09-26 13:53:46.993533+0300 MyAppName[3482:1761365]     #4 0x1025c9dbf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b61dbf)\r\n2017-09-26 13:53:46.993782+0300 MyAppName[3482:1761365]     #5 0x1025c956b in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6156b)\r\n2017-09-26 13:53:46.993814+0300 MyAppName[3482:1761365]     #6 0x1025cd80f in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6580f)\r\n2017-09-26 13:53:46.993854+0300 MyAppName[3482:1761365]     #7 0x1025cd673 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b65673)\r\n2017-09-26 13:53:46.993879+0300 MyAppName[3482:1761365]     #8 0x10106980b in -[NuanceSpeechRecognizer start] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x10060180b)\r\n2017-09-26 13:53:46.994143+0300 MyAppName[3482:1761365]     #9 0x100c35fab in __39-[LessonRViewController startRecording]_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x1001cdfab)\r\n2017-09-26 13:53:46.994168+0300 MyAppName[3482:1761365]     #10 0x103ee20eb in __wrap_dispatch_after_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4e0eb)\r\n2017-09-26 13:53:46.994191+0300 MyAppName[3482:1761365]     #11 0x10516945b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)\r\n2017-09-26 13:53:46.994228+0300 MyAppName[3482:1761365]     #12 0x1051767ff in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe7ff)\r\n2017-09-26 13:53:46.994315+0300 MyAppName[3482:1761365]     #13 0x10516b24b in _dispatch_source_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x324b)\r\n2017-09-26 13:53:46.994339+0300 MyAppName[3482:1761365]     #14 0x10516de8b in _dispatch_main_queue_callback_4CF (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x5e8b)\r\n2017-09-26 13:53:46.994396+0300 MyAppName[3482:1761365]     #15 0x18724bf1f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe9f1f)\r\n2017-09-26 13:53:46.994585+0300 MyAppName[3482:1761365]     #16 0x187249afb in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe7afb)\r\n2017-09-26 13:53:46.994627+0300 MyAppName[3482:1761365]     #17 0x18716a2d7 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x82d7)\r\n2017-09-26 13:53:46.994651+0300 MyAppName[3482:1761365]     #18 0x188ffbf83 in GSEventRunModal (/System/Library/PrivateFrameworks/GraphicsServices.framework/GraphicsServices:arm64+0xaf83)\r\n2017-09-26 13:53:46.995177+0300 MyAppName[3482:1761365]     #19 0x19071687f in UIApplicationMain (/System/Library/Frameworks/UIKit.framework/UIKit:arm64+0x7387f)\r\n2017-09-26 13:53:46.995202+0300 MyAppName[3482:1761365]     #20 0x100ea0e3f in main (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x100438e3f)\r\n2017-09-26 13:53:46.995225+0300 MyAppName[3482:1761365]     #21 0x186c8e56b in <redacted> (/usr/lib/system/libdyld.dylib:arm64+0x156b)\r\n2017-09-26 13:53:46.995288+0300 MyAppName[3482:1761365] \r\n2017-09-26 13:53:46.995326+0300 MyAppName[3482:1761365] previously allocated by thread T0 here:\r\n2017-09-26 13:53:46.995351+0300 MyAppName[3482:1761365]     #0 0x103ee2c47 in wrap_malloc (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4ec47)\r\n2017-09-26 13:53:46.995439+0300 MyAppName[3482:1761365]     #1 0x104f655d3 in operator new(unsigned long) (/Developer/Library/PrivateFrameworks/GPUTools.framework/libglInterpose.dylib:arm64+0x2315d3)\r\n2017-09-26 13:53:46.995465+0300 MyAppName[3482:1761365]     #2 0x186771593 in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >::basic_string(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) (/usr/lib/libc++.1.dylib:arm64+0x3d593)\r\n2017-09-26 13:53:46.995500+0300 MyAppName[3482:1761365]     #3 0x102669db3 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101c01db3)\r\n2017-09-26 13:53:46.995525+0300 MyAppName[3482:1761365]     #4 0x10265f8cf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101bf78cf)\r\n2017-09-26 13:53:46.995781+0300 MyAppName[3482:1761365]     #5 0x1025c9dbf in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b61dbf)\r\n2017-09-26 13:53:46.995807+0300 MyAppName[3482:1761365]     #6 0x1025c956b in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6156b)\r\n2017-09-26 13:53:46.995830+0300 MyAppName[3482:1761365]     #7 0x1025cd80f in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b6580f)\r\n2017-09-26 13:53:46.995872+0300 MyAppName[3482:1761365]     #8 0x1025cd673 in -[OneSignalTrackIAP productsRequest:didReceiveResponse:] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x101b65673)\r\n2017-09-26 13:53:46.995935+0300 MyAppName[3482:1761365]     #9 0x10106980b in -[NuanceSpeechRecognizer start] (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x10060180b)\r\n2017-09-26 13:53:46.995960+0300 MyAppName[3482:1761365]     #10 0x100c35fab in __39-[LessonRViewController startRecording]_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x1001cdfab)\r\n2017-09-26 13:53:46.995983+0300 MyAppName[3482:1761365]     #11 0x103ee20eb in __wrap_dispatch_after_block_invoke (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x4e0eb)\r\n2017-09-26 13:53:46.996006+0300 MyAppName[3482:1761365]     #12 0x10516945b in _dispatch_client_callout (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x145b)\r\n2017-09-26 13:53:46.996084+0300 MyAppName[3482:1761365]     #13 0x1051767ff in _dispatch_continuation_pop (/usr/lib/system/introspection/libdispatch.dylib:arm64+0xe7ff)\r\n2017-09-26 13:53:46.996108+0300 MyAppName[3482:1761365]     #14 0x10516b24b in _dispatch_source_invoke (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x324b)\r\n2017-09-26 13:53:46.996130+0300 MyAppName[3482:1761365]     #15 0x10516de8b in _dispatch_main_queue_callback_4CF (/usr/lib/system/introspection/libdispatch.dylib:arm64+0x5e8b)\r\n2017-09-26 13:53:46.996193+0300 MyAppName[3482:1761365]     #16 0x18724bf1f in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe9f1f)\r\n2017-09-26 13:53:46.996239+0300 MyAppName[3482:1761365]     #17 0x187249afb in <redacted> (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0xe7afb)\r\n2017-09-26 13:53:46.996262+0300 MyAppName[3482:1761365]     #18 0x18716a2d7 in CFRunLoopRunSpecific (/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation:arm64+0x82d7)\r\n2017-09-26 13:53:46.996356+0300 MyAppName[3482:1761365]     #19 0x188ffbf83 in GSEventRunModal (/System/Library/PrivateFrameworks/GraphicsServices.framework/GraphicsServices:arm64+0xaf83)\r\n2017-09-26 13:53:46.996392+0300 MyAppName[3482:1761365]     #20 0x19071687f in UIApplicationMain (/System/Library/Frameworks/UIKit.framework/UIKit:arm64+0x7387f)\r\n2017-09-26 13:53:46.996418+0300 MyAppName[3482:1761365]     #21 0x100ea0e3f in main (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/MyAppName:arm64+0x100438e3f)\r\n2017-09-26 13:53:46.996453+0300 MyAppName[3482:1761365]     #22 0x186c8e56b in <redacted> (/usr/lib/system/libdyld.dylib:arm64+0x156b)\r\n2017-09-26 13:53:46.996479+0300 MyAppName[3482:1761365] \r\n2017-09-26 13:53:46.996602+0300 MyAppName[3482:1761365] SUMMARY: AddressSanitizer: heap-use-after-free (/var/containers/Bundle/Application/246725EB-0BB5-474C-9538-CD6F6DD73B2A/MyAppName.app/Frameworks/libclang_rt.asan_ios_dynamic.dylib:arm64+0x16ff7) in wrap_strlen\r\n2017-09-26 13:53:46.996719+0300 MyAppName[3482:1761365] Shadow bytes around the buggy address:\r\n2017-09-26 13:53:46.996750+0300 MyAppName[3482:1761365]   0x0001345c82e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\r\n2017-09-26 13:53:46.996770+0300 MyAppName[3482:1761365]   0x0001345c82f0: fa fa fa fa fa fa fa fa fa fa fd fd fd fd fd fd\r\n2017-09-26 13:53:46.996787+0300 MyAppName[3482:1761365]   0x0001345c8300: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n2017-09-26 13:53:46.996804+0300 MyAppName[3482:1761365]   0x0001345c8310: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n2017-09-26 13:53:46.996820+0300 MyAppName[3482:1761365]   0x0001345c8320: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n2017-09-26 13:53:46.996836+0300 MyAppName[3482:1761365] =>0x0001345c8330: fa fa[fd]fd fd fd fd fd fa fa fd fd fd fd fd fd\r\n2017-09-26 13:53:46.996885+0300 MyAppName[3482:1761365]   0x0001345c8340: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 fa\r\n2017-09-26 13:53:46.996902+0300 MyAppName[3482:1761365]   0x0001345c8350: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 00\r\n2017-09-26 13:53:46.996919+0300 MyAppName[3482:1761365]   0x0001345c8360: fa fa 00 00 00 00 00 fa fa fa 00 00 00 00 00 00\r\n2017-09-26 13:53:46.996935+0300 MyAppName[3482:1761365]   0x0001345c8370: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 fa\r\n2017-09-26 13:53:46.996951+0300 MyAppName[3482:1761365]   0x0001345c8380: fa fa fd fd fd fd fd fd fa fa 00 00 00 00 00 00\r\n2017-09-26 13:53:46.996967+0300 MyAppName[3482:1761365] Shadow byte legend (one shadow byte represents 8 application bytes):\r\n2017-09-26 13:53:46.996983+0300 MyAppName[3482:1761365]   Addressable:           00\r\n2017-09-26 13:53:46.997001+0300 MyAppName[3482:1761365]   Partially addressable: 01 02 03 04 05 06 07\r\n2017-09-26 13:53:46.997097+0300 MyAppName[3482:1761365]   Heap left redzone:       fa\r\n2017-09-26 13:53:46.997116+0300 MyAppName[3482:1761365]   Freed heap region:       fd\r\n2017-09-26 13:53:46.997132+0300 MyAppName[3482:1761365]   Stack left redzone:      f1\r\n2017-09-26 13:53:46.997174+0300 MyAppName[3482:1761365]   Stack mid redzone:       f2\r\n2017-09-26 13:53:46.997192+0300 MyAppName[3482:1761365]   Stack right redzone:     f3\r\n2017-09-26 13:53:46.997209+0300 MyAppName[3482:1761365]   Stack after return:      f5\r\n2017-09-26 13:53:46.997225+0300 MyAppName[3482:1761365]   Stack use after scope:   f8\r\n2017-09-26 13:53:46.997240+0300 MyAppName[3482:1761365]   Global redzone:          f9\r\n2017-09-26 13:53:46.997271+0300 MyAppName[3482:1761365]   Global init order:       f6\r\n2017-09-26 13:53:46.997288+0300 MyAppName[3482:1761365]   Poisoned by user:        f7\r\n2017-09-26 13:53:46.997305+0300 MyAppName[3482:1761365]   Container overflow:      fc\r\n2017-09-26 13:53:46.997353+0300 MyAppName[3482:1761365]   Array cookie:            ac\r\n2017-09-26 13:53:46.997378+0300 MyAppName[3482:1761365]   Intra object redzone:    bb\r\n2017-09-26 13:53:46.997396+0300 MyAppName[3482:1761365]   ASan internal:           fe\r\n2017-09-26 13:53:46.997412+0300 MyAppName[3482:1761365]   Left alloca redzone:     ca\r\n2017-09-26 13:53:46.997428+0300 MyAppName[3482:1761365]   Right alloca redzone:    cb\r\n2017-09-26 13:53:46.997443+0300 MyAppName[3482:1761365] \r\n==3482==ABORTING\r\nAddressSanitizer report breakpoint hit. Use 'thread info -s' to get extended information about the report.\r\n```\r\n\r\nAnd some commands I ran:\r\n\r\n```\r\n(lldb) thread info -s\r\nthread #1: tid = 0x1ae055, 0x0000000103eeaf68 libclang_rt.asan_ios_dynamic.dylib`__asan::AsanDie(), queue = 'com.apple.main-thread', stop reason = Use of deallocated memory\r\n\r\n{\r\n  \"access_size\" : 3,\r\n  \"access_type\" : 0,\r\n  \"address\" : 6269704592,\r\n  \"description\" : \"heap-use-after-free\",\r\n  \"instrumentation_class\" : \"AddressSanitizer\",\r\n  \"pc\" : 4360679416,\r\n  \"stop_type\" : \"fatal_error\"\r\n}\r\n\r\n(lldb) po 0x000175b41990\r\n6269704592\r\n\r\n(lldb) po self.speechTransaction\r\n nil\r\n\r\n(lldb) po self.speechSession\r\n<SKSession: 0x169c73350>\r\n\r\n(lldb) po SKTransactionSpeechTypeDictation\r\ndictation\r\n\r\n(lldb) po self\r\n<NuanceSpeechRecognizer: 0x16a07a550>\r\n```\r\n\r\nThe actual line that crashed is:\r\n\r\n    self.speechTransaction = [self.speechSession recognizeWithType:SKTransactionSpeechTypeDictation detection:SKTransactionEndOfSpeechDetectionLong language:languageTagName delegate:self];\r\n\r\nwhere the properties are:\r\n\r\n    @property (strong, nonatomic) SKTransaction *speechTransaction;\r\n    @property (strong, nonatomic) SKSession *speechSession;\r\n    NSString *languageTagName = @\"spa-ESP\";\r\n\r\nHere is a screenshot of the Debug navigator:\r\n\r\n![screen shot 2017-09-26 at 14 50 38](https://user-images.githubusercontent.com/5748627/30859256-8dc331bc-a2cb-11e7-8bda-8bf539276507.jpg)\r\n\r\nwhere the long, truncated line is:\r\n\r\n    2\tstd::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >::basic_string(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) ()\r\n\r\nand I guess that the `___lldb_unnamed_symbol`s represent the `-[OneSignalTrackIAP productsRequest:didReceiveResponse:]` method.\r\n\r\nI'm using the `OneSignal` Cocoapod version `2.5.4`.\r\n"},"comment":{"url":"https://api.github.com/repos/OneSignal/OneSignal-iOS-SDK/issues/comments/362859293","html_url":"https://github.com/OneSignal/OneSignal-iOS-SDK/issues/281#issuecomment-362859293","issue_url":"https://api.github.com/repos/OneSignal/OneSignal-iOS-SDK/issues/281","id":362859293,"user":{"login":"Nightsd01","id":8186991,"avatar_url":"https://avatars0.githubusercontent.com/u/8186991?v=4","gravatar_id":"","url":"https://api.github.com/users/Nightsd01","html_url":"https://github.com/Nightsd01","followers_url":"https://api.github.com/users/Nightsd01/followers","following_url":"https://api.github.com/users/Nightsd01/following{/other_user}","gists_url":"https://api.github.com/users/Nightsd01/gists{/gist_id}","starred_url":"https://api.github.com/users/Nightsd01/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Nightsd01/subscriptions","organizations_url":"https://api.github.com/users/Nightsd01/orgs","repos_url":"https://api.github.com/users/Nightsd01/repos","events_url":"https://api.github.com/users/Nightsd01/events{/privacy}","received_events_url":"https://api.github.com/users/Nightsd01/received_events","type":"User","site_admin":false},"created_at":"2018-02-03T22:19:39Z","updated_at":"2018-02-03T22:19:39Z","author_association":"CONTRIBUTOR","body":"Hi @revolter , thank you so much for your very detailed bug report. We have been unable to reproduce this bug. \r\n\r\nAre you still encountering it in the latest version of the SDK?\r\n\r\nI'll be closing this issue due to inactivity, but if you are still encountering it in the latest version, please feel free to respond."}}
{"actor":{"display_login":"Nightsd01"}}