崩溃日志解读

{
  "app_name": "MyApp",
  "timestamp": "2025-03-11 22:14:05.00 +0800",
  "app_version": "8.23.0",
  "slice_uuid": "c3e6b3a1-0f2a-4fb2-9c88-aaaa11112222",
  "build_version": "82300",
  "platform": 2,
  "bundleID": "com.example.MyApp",
  "share_with_app_devs": 1,
  "is_first_party": 0,
  "bug_type": "109",
  "os_version": "iPhone OS 17.4 (21E219)",
  "roots_installed": 0,
  "incident_id": "8D2E5A9B-...",
  "name": "MyApp"
}

{
  "uptime": 280000,
  "procLaunch": "2025-03-11 22:10:03.0000 +0800",
  "procRole": "Foreground",
  "version": 2,
  "userID": 501,
  "deployVersion": 210,
  "modelCode": "iPhone14,5",
  "coalitionID": 1572,
  "osVersion": { "train": "iPhone OS", "build": "21E219", "releaseType": "User" },
  "captureTime": "2025-03-11 22:14:05.123 +0800",
  "incident": "...",
  "pid": 871,
  "cpuType": "ARM-64",
  "procName": "MyApp",
  "procPath": "/private/var/containers/Bundle/Application/.../MyApp.app/MyApp",
  "bundleInfo": { "CFBundleShortVersionString": "8.23.0", "CFBundleVersion": "82300", "CFBundleIdentifier": "com.example.MyApp" },
  "storeInfo": { "deviceIdentifierForVendor": "...", "thirdParty": true },
  "parentProc": "launchd",
  "parentPid": 1,
  "coalitionName": "com.example.MyApp",
  "crashReporterKey": "xxxx",
  "responsiblePid": 871,
  "exception": { "codes": "0x0000000000000001, 0x0000000000000010", "rawCodes": [1, 16], "type": "EXC_BAD_ACCESS", "signal": "SIGSEGV", "subtype": "KERN_INVALID_ADDRESS at 0x0000000000000010" },
  "termination": { "flags": 0, "code": 11, "namespace": "SIGNAL", "indicator": "Segmentation fault: 11", "byProc": "exc handler", "byPid": 871 },
  "vmRegionInfo": "0x10 is not in any region. ...",
  "faultingThread": 0,
  "threads": [ ... ],
  "usedImages": [ ... ],
  "sharedCache": { "base": ..., "size": ..., "uuid": "..." },
  "vmSummary": "ReadOnly portion of Libraries: Total=...",
  "legacyInfo": { "threadTriggered": { "queue": "com.apple.main-thread" } },
  "logWritingSignature": "...",
  "trialInfo": { "rollouts": [...], "experiments": [...] },
  "asi": { "libsystem_c.dylib": ["abort() called"] },
  "lastExceptionBacktrace": [ ... ]
}

"exception": {
  "type": "EXC_BAD_ACCESS",
  "signal": "SIGSEGV",
  "subtype": "KERN_INVALID_ADDRESS at 0x0000000000000010",
  "codes": "0x0000000000000001, 0x0000000000000010",
  "rawCodes": [1, 16]
}

"termination": {
  "namespace": "SIGNAL",
  "code": 11,
  "indicator": "Segmentation fault: 11",
  "byProc": "exc handler",
  "byPid": 871
}

"threads": [
  {
    "triggered": true,
    "id": 42813,
    "name": "com.apple.main-thread",
    "queue": "com.apple.main-thread",
    "threadState": {
      "x": [ { "value": 0 }, { "value": 0x1000012d4 }, ... ],
      "pc": { "value": 0x00000001a4d238d0, "symbolLocation": 16, "symbol": "objc_msgSend" },
      "lr": { "value": 0x0000000100001240 },
      "sp": { "value": 0x000000016fdff000 },
      "fp": { "value": 0x000000016fdff010 },
      "cpsr": { "value": 0x60001000 },
      "far": { "value": 0x10 },
      "esr": { "value": 0x92000006, "description": "(Data Abort) byte read Translation fault" },
      "flavor": "ARM_THREAD_STATE64"
    },
    "frames": [
      { "imageOffset": 4816, "symbol": "objc_msgSend", "symbolLocation": 16, "imageIndex": 42 },
      { "imageOffset": 17460, "imageIndex": 0 },
      ...
    ]
  }
]

"usedImages": [
  {
    "source": "P",
    "arch": "arm64e",
    "base": 4370939904,
    "size": 1179648,
    "uuid": "c3e6b3a1-0f2a-4fb2-9c88-aaaa11112222",
    "path": "/private/var/containers/Bundle/Application/.../MyApp.app/MyApp",
    "name": "MyApp",
    "CFBundleShortVersionString": "8.23.0",
    "CFBundleVersion": "82300",
    "CFBundleIdentifier": "com.example.MyApp"
  },
  {
    "source": "S",
    "arch": "arm64e",
    "base": 7115022336,
    "size": 262144,
    "uuid": "...",
    "path": "/usr/lib/libobjc.A.dylib",
    "name": "libobjc.A.dylib"
  }
]

# 找 App 对应的 dSYM（按 slice_uuid 或 usedImages[0].uuid 查）
mdfind "com_apple_xcode_dsym_uuids == <UUID 大写>"

# 或者用 dwarfdump 确认 dSYM 与 .ips 的 UUID 一致
dwarfdump --uuid MyApp.app.dSYM
# UUID: C3E6B3A1-0F2A-4FB2-9C88-AAAA11112222 (arm64)  MyApp

# -o 指向二进制（App binary 或 dSYM 里的 DWARF 文件都行）
# -arch 与 usedImages.arch 对齐
# -l 0 是关键：imageOffset 已经是相对基址的偏移
atos -o MyApp.app.dSYM/Contents/Resources/DWARF/MyApp \
     -arch arm64 -l 0 0x0000000000004434

# 输出：-[MyViewController loadData] (in MyApp) (MyViewController.m:187)

# iOS 14+ .ips（双段 JSON）
# 1. 用 Xcode 命令行工具 CrashSymbolicator 渲染
/Applications/Xcode.app/Contents/SharedFrameworks/CoreSymbolicationDT.framework/Resources/CrashSymbolicator.py \
    -d MyApp.app.dSYM -o symbolicated.ips crash.ips

# 2. 或者先转成老格式，再用 symbolicatecrash
# 导入 Organizer → 选中 → Show in Finder → 得到 .crash
/Applications/Xcode.app/Contents/SharedFrameworks/DVTFoundation.framework/Versions/A/Resources/symbolicatecrash \
    crash.crash MyApp.app.dSYM > symbolicated.crash
# ⚠️ 需要设置 DEVELOPER_DIR 环境变量：export DEVELOPER_DIR=`xcode-select -p`

~/Library/Developer/Xcode/iOS DeviceSupport/<版本号 (build)>/Symbols/

"exception": { "type": "EXC_BAD_ACCESS", "signal": "SIGSEGV",
               "subtype": "KERN_INVALID_ADDRESS at 0x0000000000000010" },
"threads": [{
  "triggered": true,
  "threadState": {
    "x": [{"value": 0}, {"value": 0x1de8aabcd}, ...],
    "pc": { "value": 0x1a4d238d0, "symbol": "objc_msgSend" }
  },
  "frames": [
    { "imageOffset": 16, "imageIndex": 42 /* libobjc */ },
    { "imageOffset": 17460, "imageIndex": 0 /* MyApp */ }
  ]
}]

"exception": { "type": "EXC_CRASH", "signal": "SIGABRT", "codes": "0x0000000000000000, 0x0000000000000000" },
"termination": { "namespace": "SIGNAL", "code": 6, "indicator": "Abort trap: 6", "byProc": "exc handler" },
"asi": {
  "libc++abi.dylib": ["terminating with uncaught exception of type NSException"],
  "CoreFoundation": ["*** Terminating app due to uncaught exception 'NSRangeException', reason: '*** -[__NSArrayM objectAtIndex:]: index 5 beyond bounds [0 .. 2]'"]
},
"lastExceptionBacktrace": [
  { "imageOffset": 45320, "imageIndex": 18 /* CoreFoundation */ },
  { "imageOffset": 120384, "imageIndex": 22 /* libobjc */ },
  { "imageOffset": 9212, "imageIndex": 0 /* MyApp */ }
]

"exception": { "type": "EXC_BREAKPOINT", "signal": "SIGTRAP" },
"asi": {
  "libswiftCore.dylib": ["Fatal error: Unexpectedly found nil while unwrapping an Optional value: file MyApp/MyVC.swift, line 87"]
}

"bug_type": "309",
"exception": { "type": "EXC_CRASH", "signal": "SIGKILL",
               "codes": "0x0000000000000000, 0x0000000000000000",
               "subtype": "LAUNCH_HANG" },
"termination": { "namespace": "FRONTBOARD", "code": 2343432205,
                 "indicator": "<RBSTerminateContext ...>", "byProc": "frontboard", "byPid": 54 }

"termination": { "namespace": "SIGNAL", "code": 9, "byProc": "launchd", "byPid": 1 },
"exception":   { "type": "EXC_CRASH", "signal": "SIGKILL", "codes": "0x00000000deadfa11, ..." }

import json, re
from pathlib import Path

def parse_ips(path: Path):
    text = path.read_text(encoding='utf-8')
    lines = text.split('\n', 1)
    if len(lines) < 2:
        return None
    header = json.loads(lines[0])
    body = json.loads(lines[1])

    bug_type = header.get('bug_type')
    result = {
        'file': path.name,
        'incident_id': header.get('incident_id'),
        'bug_type': bug_type,
        'app': header.get('bundleID'),
        'version': header.get('app_version'),
        'build': header.get('build_version'),
        'os': header.get('os_version'),
        'model': body.get('modelCode'),
        'captureTime': body.get('captureTime'),
        'procRole': body.get('procRole'),
    }

    if bug_type == '298':
        result['category'] = 'JetsamEvent'
        result['reason'] = body.get('reason')
        return result

    exc = body.get('exception', {}) or {}
    term = body.get('termination', {}) or {}
    result.update({
        'exc_type': exc.get('type'),
        'signal': exc.get('signal'),
        'subtype': exc.get('subtype'),
        'term_namespace': term.get('namespace'),
        'term_code': term.get('code'),
        'term_indicator': term.get('indicator'),
    })

    # 分类
    result['category'] = classify(result, body)

    # 触发线程首帧
    for th in body.get('threads', []):
        if th.get('triggered'):
            result['faulting_thread'] = th.get('name') or th.get('queue')
            top = (th.get('frames') or [])[:3]
            result['top_frames'] = [
                f"imageIndex={f.get('imageIndex')},offset={hex(f.get('imageOffset', 0))}"
                + (f" {f.get('symbol')}" if f.get('symbol') else '')
                for f in top
            ]
            break

    # NSException
    asi = body.get('asi') or {}
    for lines_ in asi.values():
        for line in lines_:
            if 'uncaught exception' in line.lower() or 'Fatal error' in line:
                result['asi_reason'] = line
                break

    return result

MAGIC_CODES = {
    2343432205: 'Watchdog (0x8BADF00D)',
    12231262:   'Launch hang (0xBADA5E)',
    3735883980: 'Background resource (0xDEAD10CC)',
    3221229823: 'Thermal (0xC00010FF)',
    3131174417: 'PushKit (0xBAADCA11)',
    3735943697: 'User force quit (0xDEADFA11)',
}

def classify(r, body):
    if r['exc_type'] == 'EXC_RESOURCE' and 'MEMORY' in (r['subtype'] or ''):
        return 'OOM'
    if r['term_namespace'] in ('FRONTBOARD', 'RUNNINGBOARD'):
        return MAGIC_CODES.get(r['term_code'], f'SystemKill-{r["term_namespace"]}')
    codes = (body.get('exception') or {}).get('codes', '')
    if 'deadfa11' in codes.lower():
        return 'UserForceQuit'
    if r['exc_type'] == 'EXC_BAD_ACCESS':
        return 'BadAccess'
    if r['exc_type'] == 'EXC_CRASH' and r['signal'] == 'SIGABRT':
        return 'NSException' if r.get('asi_reason') else 'Abort'
    if r['exc_type'] == 'EXC_BREAKPOINT':
        return 'SwiftTrap'
    if r['exc_type'] == 'EXC_BAD_INSTRUCTION':
        return 'BadInstruction'
    return 'Other'

if __name__ == '__main__':
    from collections import Counter
    stats = Counter()
    for p in Path('./crashes').rglob('*.ips'):
        try:
            r = parse_ips(p)
            if r:
                stats[r['category']] += 1
        except Exception as e:
            print('skip', p, e)
    for cat, n in stats.most_common():
        print(f'{cat:24s} {n}')

BadAccess                523
NSException              310
UserForceQuit            201   <- 必须从崩溃率里剔除
SwiftTrap                187
Watchdog (0x8BADF00D)    86
OOM                      64
JetsamEvent              58
Thermal (0xC00010FF)     12