crash in ble_template_app (from nRF5 SDK 15.0.0)

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

Martin Lesund — Wed, 18 Apr 2018 13:32:05 GMT

Another Thread describing this in more depth

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

Toyman — Wed, 18 Apr 2018 11:25:59 GMT

what does "debugging" means in this case? No -DEBUG in Keil? No RTT logging? No SWD connection?

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

Martin Lesund — Wed, 18 Apr 2018 09:19:02 GMT

Hi David,

Breakpoint 1, app_error_handler (error_code=8198, line_num=323, p_file_name=0x2f468 "../../../main.c")
    at C:\Users\male\Desktop\SDK\nRF5_SDK_15.0.0_a53641a\nRF5_SDK_15.0.0_CUSTOM/components/libraries/util/app_error_handler_gcc.c:49
49          __ASM volatile(
(gdb) bt

Which is:

This can be solved by not going to system-off when debugging. First, fix that by not going into system off then debug and see for future errors

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

david zuhn — Tue, 17 Apr 2018 14:33:26 GMT

I will note that this crash occurs even when the debugger is not active.

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

Martin Lesund — Tue, 17 Apr 2018 14:30:17 GMT

Hi David,

I am unfortunately not that familiar with GDB, but it looks that you are getting error: 0x2006 "NRF_ERROR_SOC_POWER_OFF_SHOULD_NOT_RETURN" on line 663 in ble_advertising.c.

You could check out this thread and this to see if they can be of help.

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

david zuhn — Fri, 13 Apr 2018 22:51:28 GMT

I removed -O3, added -DDEBUG. Here's the RTT log

<info> app: Debug logging for UART over RTT started.
<error> app: ERROR 8198 [Unknown error code] at ../../../main.c:323
PC at: 0x0002E7E5
<error> app: End of error report

and the results in the debugger:

Breakpoint 1, app_error_fault_handler (id=16385, pc=190437, info=536935544)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_weak.c:57
57	    __disable_irq();
(gdb) where
#0  app_error_fault_handler (id=16385, pc=190437, info=536935544)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_weak.c:57
#1  0x00027950 in app_error_handler (error_code=16385, line_num=190437, p_file_name=0x2000fc78 "C\001")
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_handler_gcc.c:49
Backtrace stopped: previous frame identical to this frame (corrupt stack?)
(gdb) list
52	 * Function is implemented as weak so that it can be overwritten by custom application error handler
53	 * when needed.
54	 */
55	__WEAK void app_error_fault_handler(uint32_t id, uint32_t pc, uint32_t info)
56	{
57	    __disable_irq();
58	    NRF_LOG_FINAL_FLUSH();
59	
60	#ifndef DEBUG
61	    NRF_LOG_ERROR("Fatal error");
(gdb) p/x id
$10 = 0x4001
(gdb) p/x pc
$11 = 0x2e7e5
(gdb) p/x info
$12 = 0x2000fc78
(gdb) up
#1  0x00027950 in app_error_handler (error_code=16385, line_num=190437, p_file_name=0x2000fc78 "C\001")
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_handler_gcc.c:49
49	    __ASM volatile(
(gdb) list
44	#if defined (__CORTEX_M) && (__CORTEX_M == 0x04)
45	void app_error_handler(ret_code_t error_code, uint32_t line_num, const uint8_t * p_file_name) __attribute__(( naked ));
46	
47	void app_error_handler(ret_code_t error_code, uint32_t line_num, const uint8_t * p_file_name)
48	{
49	    __ASM volatile(
50	
51	    "push {lr}                      \n"
52	
53	    /* reserve space on stack for error_info_t struct - preserve 8byte stack aligment */
(gdb) p error_code
$13 = 16385
(gdb) p line_num
$14 = 190437
(gdb) p *p_file_name
$15 = 67 'C'
(gdb) p p_file_name
$16 = (const uint8_t *) 0x2000fc78 "C\001"
(gdb) cont
Continuing.

Program received signal SIGTRAP, Trace/breakpoint trap.
0x00027a62 in app_error_fault_handler (id=16385, pc=190437, info=536935544)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_weak.c:99
99	    NRF_BREAKPOINT_COND;
(gdb)

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

Martin Lesund — Fri, 13 Apr 2018 13:44:05 GMT

Hi David,

Could you turn off Optimization and define DEBUG then post your RTT log. (also described here)

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

david zuhn — Wed, 11 Apr 2018 00:28:53 GMT

Here's the GDB session after a fresh reflash (make erase && make flash_softdevice && make flash)

GNU gdb (GNU Tools for ARM Embedded Processors) 7.8.0.20150604-cvs
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "--host=x86_64-apple-darwin10 --target=arm-none-eabi".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word".
0x0000baa4 in ?? ()
Select SWD as target interface
Target endianess set to "little endian"
Resets core & peripherals via SYSRESETREQ & VECTRESET bit.
Selecting device: nrf52832
Target interface speed set to 1000 kHz
Breakpoint 1 at 0x27194: file /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_weak.c, line 56.
Loading section .text, size 0x995c lma 0x26000
Loading section .sdh_soc_observers, size 0x18 lma 0x2f95c
Loading section .sdh_ble_observers, size 0x40 lma 0x2f974
Loading section .log_const_data, size 0x80 lma 0x2f9b4
Loading section .nrf_balloc, size 0x18 lma 0x2fa34
Loading section .sdh_state_observers, size 0x10 lma 0x2fa4c
Loading section .sdh_stack_observers, size 0x10 lma 0x2fa5c
Loading section .sdh_req_observers, size 0x8 lma 0x2fa6c
Loading section .ARM.exidx, size 0x8 lma 0x2fa74
Loading section .data, size 0xd8 lma 0x2fa7c
Loading section .log_dynamic_data, size 0x40 lma 0x2fb54
Start address 0x262d0, load size 39828
Transfer rate: 36 KB/sec, 1991 bytes/write.
Resetting target
(gdb) cont
Continuing.

Breakpoint 1, app_error_fault_handler (id=id@entry=16385, pc=pc@entry=0, info=info@entry=536935476)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_weak.c:56
56	{
(gdb) list
51	/**
52	 * Function is implemented as weak so that it can be overwritten by custom application error handler
53	 * when needed.
54	 */
55	__WEAK void app_error_fault_handler(uint32_t id, uint32_t pc, uint32_t info)
56	{
57	    __disable_irq();
58	    NRF_LOG_FINAL_FLUSH();
59	
60	#ifndef DEBUG
(gdb) print id
$1 = 16385
(gdb) print pc
$2 = 0
(gdb) p/x info
$4 = 0x2000fc34
(gdb) where
#0  app_error_fault_handler (id=id@entry=16385, pc=pc@entry=0, info=info@entry=536935476)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error_weak.c:56
#1  0x0002718c in app_error_handler_bare (error_code=<optimized out>)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error.c:73
#2  0x0002be6a in ble_advertising_start (p_advertising=0x2000362c <m_advertising>, 
    advertising_mode=<optimized out>)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/ble/ble_advertising/ble_advertising.c:663
#3  0x0002c07e in on_terminated (p_ble_evt=<optimized out>, p_ble_evt=<optimized out>, 
    p_advertising=0x2000362c <m_advertising>)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/ble/ble_advertising/ble_advertising.c:146
#4  ble_advertising_on_ble_evt (p_ble_evt=<optimized out>, p_context=0x2000362c <m_advertising>)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/ble/ble_advertising/ble_advertising.c:687
#5  0x0002d27c in nrf_sdh_ble_evts_poll (p_context=<optimized out>)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/softdevice/common/nrf_sdh_ble.c:307
#6  0x0002d22a in nrf_sdh_evts_poll ()
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/softdevice/common/nrf_sdh.c:386
#7  SWI2_EGU2_IRQHandler ()
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/softdevice/common/nrf_sdh.c:395
#8  0xffffffe8 in ?? ()
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

(gdb) up
#1  0x0002718c in app_error_handler_bare (error_code=<optimized out>)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/libraries/util/app_error.c:73
73	    app_error_fault_handler(NRF_FAULT_ID_SDK_ERROR, 0, (uint32_t)(&error_info));
(gdb) p error_info
$5 = {line_num = 0, p_file_name = 0x0, err_code = 8198}

(gdb) up
#2  0x0002be6a in ble_advertising_start (p_advertising=0x2000362c <m_advertising>, 
    advertising_mode=<optimized out>)
    at /Users/zoo/Programming/nordic/SDK/nRF5_SDK_15.0.0_a53641a/components/ble/ble_advertising/ble_advertising.c:663
663	        p_advertising->evt_handler(p_advertising->adv_evt);

and the console log (via RTT):

<info> app: Debug logging for UART over RTT started.
<error> app: Fatal error

I did not connect to the service or do anything with this device except sit and wait (~30 seconds or so) for the fatal error to occur.

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

david zuhn — Tue, 10 Apr 2018 14:38:11 GMT

The changes from the stock 15.0.0 SDK are shown in https://github.com/davidzuhn/nrf-test-b-a-u/commit/b25fc238fef784434be46075cd01dfa1fb7f0147. Nothing to the source of the program itself. Changes to the Makefile to allow me to specify a serial number to nrfjprog.

I have erased the chip and reflashed everything (via 'make erase && make flash_softdevice && make flash'). That didn't change anything.

I'll upload the details from app_error_handler and the RTT log tonight. Although the RTT log is basically just "app: Debug logging for UART over RTT started." shortly followed by "app: Fatal error".

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

Martin Lesund — Tue, 10 Apr 2018 13:27:50 GMT

What do you mean by "fewer changes needed"? What did you change from the unmodified application?

What error code do you get out of your app_error_handler``?

Could you try to erase your chip then try to flash the Softdevice and application again.

Send me your RTT log.

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

david zuhn — Fri, 06 Apr 2018 00:28:18 GMT

I have now tested the ble_app_uart application (see my source at https://github.com/davidzuhn/nrf-test-b-a-u). Fewer changes needed, as the RTT console was already enabled. I see the same results -- app: Fatal error -- although it seems to take a little longer for this to occurs (minutes rather than seconds). Stack traces from within gdb look very much like that shown for the ble_app_template. The calling point for the entry to app_error_handler is the

nRF5_SDK_15.0.0_a53641a/components/ble/ble_advertising/ble_advertising.c:663 file (again, shown above).

This happens on both the nrf52832 DK (pca10040) and the nrf52840 PDK (pca10056).

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

david zuhn — Wed, 04 Apr 2018 23:37:02 GMT

I will also note that the program still exhibits the same crash behavior if I disable optimization (remove -O3 from the Makefile OPT setting).

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

david zuhn — Wed, 04 Apr 2018 23:31:50 GMT

I have seen unusual issues with other programs (of my own). This is the only demo program I've tried using so far. I'll try ble_app_uart tomorrow.

I've put my application into github at github.com/.../nrf-test-app.git

The changes I made were:

set SDK_ROOT accordingly (points to an unmodified 15.0.0 directory)

set NRF_LOG_BACKEND_RTT_ENABLED to 1

setup the Makefiles to use a variable for NRFJPROG (since I have several boards attached at once, I set --snr XYZ appropriately).

That's it. NO changes to the code of the program.

I have done some debugging (see the original report, which includes the call trace of the crash). I don't understand how a call to p_advertising->evt_handler() ends up in the app_error_handler (since the stack trace doesn't show anything from within the evt_handler function).

I have no sniffer log available at this time.

RE: crash in ble_template_app (from nRF5 SDK 15.0.0)

Martin Lesund — Wed, 04 Apr 2018 13:59:31 GMT

Hello David,

I need a little more information from you:

Have you tested with other unmodified examples like "ble_app_uart"?

Could you include your code?

What have you added to the template project?

Have you tried debugging your code?

If you have a BLE connection between the devices, a sniffer log would be helpful to see what is going on over the air.