创建 JSArray 时，有一定几率失败

[adoutlove]

Cause: null pointer dereference
x0 0000000000000000 x1 00000073317dc4b0 x2 ffffffffffffffff x3 ffffffffffffffff
x4 00000000317dc4b0 x5 00000073317dc4b0 x6 00000073317040b0 x7 00000072c3509020
x8 0000000000000000 x9 0000000000000000 x10 fffffffffff4c700 x11 0000000000000002
x12 00000072c3506320 x13 00000072c3506388 x14 0000000000000000 x15 000000000000000c
x16 00000072c57beac8 x17 00000072c56db6c4 x18 00000072c34f7940 x19 0000007331704000
x20 0000000000000000 x21 0000007331704000 x22 00000072c3506620 x23 00000072d5a72a0b
x24 0000000000000028 x25 00000072c3509020 x26 00000073317040b0 x27 000000000000000a
x28 00000072c3506390 x29 00000072c3506250
sp 00000072c35061d0 lr 00000072c56db788 pc 00000072c56d51a8

backtrace:
#1 pc 000000000003d784 (__JS_FreeValueRT+192)
#2 pc 000000000003dbdc (__JS_FreeValue+40)
#4 pc 000000000000e3b4 (Java_com_quickjs_QuickJSNativeImpl__1releasePtr+124)
#5 pc 0000000000140350 /apex/com.android.runtime/lib64/libart.so (art_quick_generic_jni_trampoline+144) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#6 pc 0000000000137334 /apex/com.android.runtime/lib64/libart.so (art_quick_invoke_stub+548) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#7 pc 0000000000169eac /apex/com.android.runtime/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+244) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#8 pc 00000000003084f8 /apex/com.android.runtime/lib64/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+384) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#9 pc 0000000000304808 /apex/com.android.runtime/lib64/libart.so (bool art::interpreter::DoCall<true, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+692) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#10 pc 00000000005a77cc /apex/com.android.runtime/lib64/libart.so (MterpInvokeInterfaceRange+472) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#11 pc 0000000000131d14 /apex/com.android.runtime/lib64/libart.so (mterp_op_invoke_interface_range+20) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#16 pc 00000000002d980c /apex/com.android.runtime/lib64/libart.so (_ZN3art11interpreterL7ExecuteEPNS_6ThreadERKNS_20CodeItemDataAccessorERNS_11ShadowFrameENS_6JValueEbb.llvm.8069993068248362486+240) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#17 pc 0000000000594720 /apex/com.android.runtime/lib64/libart.so (artQuickToInterpreterBridge+1032) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#18 pc 0000000000140468 /apex/com.android.runtime/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#19 pc 00000000020176b8 /memfd:/jit-cache (deleted) (com.quickjs.EventQueue.postVoid+184)
#20 pc 0000000000137334 /apex/com.android.runtime/lib64/libart.so (art_quick_invoke_stub+548) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#21 pc 0000000000169eac /apex/com.android.runtime/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+244) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#22 pc 00000000003084f8 /apex/com.android.runtime/lib64/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+384) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#23 pc 0000000000303758 /apex/com.android.runtime/lib64/libart.so (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+892) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#24 pc 00000000005a3054 /apex/com.android.runtime/lib64/libart.so (MterpInvokeVirtual+648) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#25 pc 0000000000131814 /apex/com.android.runtime/lib64/libart.so (mterp_op_invoke_virtual+20) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#27 pc 00000000005a3314 /apex/com.android.runtime/lib64/libart.so (MterpInvokeVirtual+1352) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#28 pc 0000000000131814 /apex/com.android.runtime/lib64/libart.so (mterp_op_invoke_virtual+20) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#32 pc 0000000000140468 /apex/com.android.runtime/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 7c5a82c0fd7f1b2054e72522432e1034)
#33 pc 0000000002011bd0 /memfd:/jit-cache (deleted) (com.quickjs.JSContext.checkReleaseObjPtrPool+496)
#34 pc 000000000200c4a8 /memfd:/jit-cache (deleted) (com.quickjs.JSContext.checkReleased+40)
#35 pc 000000000201b2ac /memfd:/jit-cache (deleted) (com.quickjs.JSValue.+220)

[taoweiji]

我找个时间优化一下，你可以提供一下重现代码吗？