Swift应用启动偶现EXC_BAD_ACCESS(KERN_INVALID_ADDRESS)崩溃求助

我的Swift应用在启动时偶尔会崩溃，堆栈跟踪显示是原生代码触发的EXC_BAD_ACCESS错误。Swift或Objective-C应用中存在许多类似的KERN_INVALID_ADDRESS异常，但我的错误具体由"lookUpImpOrForward + 100"引发。堆栈信息起始于AppDelegate但不在某个方法内，说明原生iOS代码有时无法正常启动应用，且该问题并非必现。5年前有类似问题但无解答，且其触发行与系统版本均不同。

附AppDelegate代码 #

import UIKit
import GoogleMaps
import UserNotifications
import Firebase
import FirebaseMessaging
import GoogleMobileAds

@UIApplicationMain
class AppDelegate: UIResponder, UIApplicationDelegate, UNUserNotificationCenterDelegate, MessagingDelegate
{
    var window: UIWindow?
    func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool
    {
        GMSServices.provideAPIKey(google_maps_key)
        FirebaseApp.configure()
        GADMobileAds.sharedInstance().start(completionHandler: nil)
        set_strings()
        Messaging.messaging().delegate = self
        if #available(iOS 10.0, *)
        {
            UNUserNotificationCenter.current().delegate = self
            let authOptions: UNAuthorizationOptions = [.alert, .badge, .sound]
            UNUserNotificationCenter.current().requestAuthorization(options: authOptions, completionHandler: {_, _ in })
        }
        else
        {
            let settings: UIUserNotificationSettings = UIUserNotificationSettings(types: [.alert, .badge, .sound], categories: nil)
            application.registerUserNotificationSettings(settings)
        }
        application.registerForRemoteNotifications()
        return true
    }

    func applicationWillResignActive(_ application: UIApplication)
    {
    }

    func applicationDidEnterBackground(_ application: UIApplication)
    {
    }

    func applicationWillEnterForeground(_ application: UIApplication)
    {
    }

    func applicationDidBecomeActive(_ application: UIApplication)
    {
    }

    func applicationWillTerminate(_ application: UIApplication)
    {
    }
}

堆栈跟踪 #

Crashed: com.apple.main-thread
0  libobjc.A.dylib                0x4e3c lookUpImpOrForward + 100
1  libobjc.A.dylib                0x34c4 _objc_msgSend_uncached + 68
2  UIKitCore                      0x67e8 -[UIView(Hierarchy) subviews] + 104
3  UIKitCore                      0x660c -[UIView(MultiLayer) _allSubviews] + 112
4  UIKitCore                      0x65d20 -[UIView(AdditionalLayoutSupport) _updateConstraintsIfNeededCollectingViews:forSecondPass:] + 440
5  UIKitCore                      0x65d80 -[UIView(AdditionalLayoutSupport) _updateConstraintsIfNeededCollectingViews:forSecondPass:] + 536
6  UIKitCore                      0x65d80 -[UIView(AdditionalLayoutSupport) _updateConstraintsIfNeededCollectingViews:forSecondPass:] + 536
7  UIKitCore                      0x65d80 -[UIView(AdditionalLayoutSupport) _updateConstraintsIfNeededCollectingViews:forSecondPass:] + 536
8  CoreAutoLayout                 0x11f14 -[NSISEngine withBehaviors:performModifications:] + 84
9  UIKitCore                      0x9c164 __100-[UIView(AdditionalLayoutSupport) _updateConstraintsIfNeededWithViewForVariableChangeNotifications:]_block_invoke + 124
10 UIKitCore                      0x9aa9c -[UIView(AdditionalLayoutSupport) _withUnsatisfiableConstraintsLoggingSuspendedIfEngineDelegateExists:] + 112
11 UIKitCore                      0x99ad0 -[UIView(AdditionalLayoutSupport) _updateConstraintsIfNeededWithViewForVariableChangeNotifications:] + 172
12 UIKitCore                      0x5bab4 -[UIView _updateConstraintsAtEngineLevelIfNeededWithViewForVariableChangeNotifications:] + 388
13 UIKitCore                      0x5b648 -[UIView _updateConstraintsAsNecessaryAndApplyLayoutFromEngine] + 324
14 UIKitCore                      0x5b3d0 -[UIView(Hierarchy) layoutSubviews] + 192
15 UIKitCore                      0xe9f044 -[UIPickerView layoutSubviews] + 236
16 UIKitCore                      0xea0738 -[UIPickerView selectedRowInComponent:] + 64
17 UIKitCore                      0xe9dcc4 -[UIPickerView _updateSelectedRows] + 100
18 UIKitCore                      0xe9dd54 -[UIPickerView didMoveToWindow] + 84
19 UIKitCore                      0x29aa0 -[UIView(Internal) _didMoveFromWindow:toWindow:] + 1716
20 UIKitCore                      0x29698 -[UIView(Internal) _didMoveFromWindow:toWindow:] + 684
21 UIKitCore                      0x29698 -[UIView(Internal) _didMoveFromWindow:toWindow:] + 684
22 UIKitCore                      0x29698 -[UIView(Internal) _didMoveFromWindow:toWindow:] + 684
23 UIKitCore                      0x29698 -[UIView(Internal) _didMoveFromWindow:toWindow:] + 684
24 UIKitCore                      0x29698 -[UIView(Internal) _didMoveFromWindow:toWindow:] + 684
25 UIKitCore                      0x29698 -[UIView(Internal) _didMoveFromWindow:toWindow:] + 684
26 UIKitCore                      0x1aa70 __45-[UIView(Hierarchy) _postMovedFromSuperview:]_block_invoke + 124
27 CoreAutoLayout                 0x11f14 -[NSISEngine withBehaviors:performModifications:] + 84
28 UIKitCore                      0x1d914 -[UIView _postMovedFromSuperview:] + 504
29 UIKitCore                      0x1c3d0 -[UIView(Internal) _addSubview:positioned:relativeTo:] + 2200
30 UIKitCore                      0x3b50ec -[UITransitionView transition:fromView:toView:removeFromView:] + 868
31 UIKitCore                      0x313a80 -[UIViewControllerBuiltinTransitionViewAnimator animateTransition:] + 1300
32 UIKitCore                      0x46c6f0 ___UIViewControllerTransitioningRunCustomTransition_block_invoke_3 + 52
33 UIKitCore                      0x46c564 +[UIKeyboardSceneDelegate _pinInputViewsForKeyboardSceneDelegate:onBehalfOfResponder:duringBlock:] + 96
34 UIKitCore                      0x46c4c8 ___UIViewControllerTransitioningRunCustomTransition_block_invoke_2 + 196
35 UIKitCore                      0x46c26c +[UIView(Animation) _setAlongsideAnimations:toRunByEndOfBlock:] + 180
36 UIKitCore                      0x3134d0 _UIViewControllerTransitioningRunCustomTransition + 484
37 UIKitCore                      0x310b38 __56-[UIPresentationController runTransitionForCurrentState]_block_invoke_3 + 1584
38 UIKitCore                      0xba6e4 -[_UIAfterCACommitBlock run] + 72
39 UIKitCore                      0xba5a8 -[_UIAfterCACommitQueue flush] + 164
40 UIKitCore                      0xba4c0 _runAfterCACommitDeferredBlocks + 496
41 UIKitCore                      0xba0f8 _cleanUpAfterCAFlushAndRunDeferredBlocks + 80
42 UIKitCore                      0xba008 _UIApplicationFlushCATransaction + 72
43 UIKitCore                      0xb776c _UIUpdateSequenceRun + 84
44 UIKitCore                      0xb73b0 schedulerStepScheduledMainSection + 172
45 UIKitCore                      0xb8254 runloopSourceCallback + 92
46 CoreFoundation                 0x56834 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 28
47 CoreFoundation                 0x567c8 __CFRunLoopDoSource0 + 176
48 CoreFoundation                 0x54298 __CFRunLoopDoSources0 + 244
49 CoreFoundation                 0x53484 __CFRunLoopRun + 828
50 CoreFoundation                 0x52cd8 CFRunLoopRunSpecific + 608
51 GraphicsServices               0x11a8 GSEventRunModal + 164
52 UIKitCore                      0x40a90c -[UIApplication _run] + 888
53 UIKitCore                      0x4be9d0 UIApplicationMain + 340
54 WhoShares                      0x6f544 main + 9 (AppDelegate.swift:9)

可能的原因及排查方向 #

• 野指针/对象提前释放：lookUpImpOrForward触发的崩溃通常是向已释放的对象发送消息导致的。从堆栈看，崩溃发生在UIPickerView布局过程中，可能是某个UIPickerView的子视图或关联对象被提前释放，而UIKit仍尝试访问它。检查是否有代码手动释放了视图对象，或者在ARC环境下存在循环引用导致对象释放时机异常。
• 第三方库初始化时机冲突：你在didFinishLaunchingWithOptions中初始化了多个第三方库（GoogleMaps、Firebase、GoogleMobileAds），这些库可能在后台线程做了UI相关操作，或者修改了UIKit的内部状态，导致启动时UI布局出现竞态条件。尝试调整这些库的初始化顺序，或者将非必要的初始化延迟到应用启动完成后（比如applicationDidBecomeActive中）。
• Auto Layout约束问题：堆栈中多次出现约束更新的调用，可能存在无效的约束，或者约束引用了已释放的视图。检查UIPickerView及其父视图的约束配置，确保所有约束关联的视图都存在且未被意外释放。
• 系统UI组件的竞态条件：崩溃发生在UIPickerView的didMoveToWindow流程中，可能是应用启动时系统UI组件的加载和你的代码逻辑存在竞态。比如远程通知注册、第三方库初始化触发了UI更新，和UIPickerView的布局操作冲突。尝试将远程通知注册的代码延迟执行，避免在启动初期和UI布局并行。
• 内存 corruption：偶尔出现的崩溃也可能是内存 corruption 导致的，比如越界访问数组、写入已释放的内存区域。可以启用Xcode的Zombie Objects检测，在调试时捕获对象被释放后仍被访问的情况；同时使用Address Sanitizer排查内存越界问题。

内容的提问来源于stack exchange，提问作者Numan Karaaslan