Issue Station
Sign In
Tools hereToolbox

hermes - 💡(How to fix) Fix Terminal.app crash when opening a new tab while --tui is running (macOS 26.5)

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…

With hermes --tui running in one Terminal tab, opening a new tab (Cmd+T) can cause Terminal.app to crash entirely. This is not 100% reproducible — it depends on Terminal's internal state (session length, memory state, render cache).

Error Message

Translated Report (Full Report Below)

Process: Terminal [1467] Path: /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal Identifier: com.apple.Terminal Version: 2.15 (470.2) Build Info: Terminal-470002000000000~68 Code Type: ARM-64 (Native) Role: Foreground Parent Process: launchd [1] Coalition: com.apple.Terminal [771] User ID: 501

Date/Time: 2026-05-30 09:02:23.8006 +0800 Launch Time: 2026-05-30 08:45:59.1563 +0800 Hardware Model: Mac17,3 OS Version: macOS 26.5 (25F71) Release Type: User

Crash Reporter Key: E33CBBEF-4041-1B95-55A5-67FEDC52C426 Incident Identifier: DC742436-4F5D-4AD8-9638-2D227884D6C2

Time Awake Since Boot: 1100 seconds

System Integrity Protection: enabled

Triggered by Thread: 0, Dispatch Queue: com.apple.main-thread

Exception Type: EXC_BREAKPOINT (SIGTRAP) Exception Codes: 0x0000000000000001, 0x0000000181035990

Termination Reason: Namespace SIGNAL, Code 5, Trace/BPT trap: 5 Terminating Process: exc handler [1467]

Application Specific Information: BUG IN CLIENT OF LIBMALLOC: memory corruption of free block Abort Cause 36862318048

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 libsystem_malloc.dylib 0x181035990 _xzm_xzone_malloc_freelist_outlined + 856 1 libc++abi.dylib 0x1811c74dc operator_new_impl[abi:nqe210106](unsigned long, std::__type_descriptor_t) + 36 2 libc++abi.dylib 0x1811c74a8 $_0::operator()() const::'lambda0'(unsigned long, std::__type_descriptor_t)::__invoke(unsigned long, std::__type_descriptor_t) + 16 3 CoreGraphics 0x1883fb24c CG::DisplayListRecorder::DrawPath(CGRenderingState*, CGGState*, CGPathDrawingMode, CGPath const*, bool, CGRect const*) + 632 4 CoreGraphics 0x188009104 CGContextDrawPath + 372 5 Terminal 0x102f47b50 0x102ef8000 + 326480 6 Terminal 0x102f4773c 0x102ef8000 + 325436 7 Terminal 0x102f12f8c 0x102ef8000 + 110476 8 Terminal 0x102f121ec 0x102ef8000 + 106988 9 AppKit 0x185c27498 0x1856c3000 + 5653656 10 AppKit 0x185c274c0 0x1856c3000 + 5653696 11 AppKit 0x185bed398 0x1856c3000 + 5415832 12 AppKit 0x185bed9b4 0x1856c3000 + 5417396 13 AppKit 0x18580d354 _NSViewDrawRect + 132 14 AppKit 0x18642da6c -[NSView _recursive:displayRectIgnoringOpacity:inContext:stopAtLayerBackedViews:] + 1084 15 AppKit 0x18580cd64 -[NSView(NSLayerKitGlue) _drawViewBackingLayer:inContext:drawingHandler:] + 536 16 AppKit 0x1860de180 -[NSViewBackingLayer drawInContext:] + 56 17 AppKit 0x185c4a024 0x1856c3000 + 5795876 18 AppKit 0x185c4ac84 0x1856c3000 + 5799044 19 AppKit 0x185ce5f4c 0x1856c3000 + 6434636 20 AppKit 0x185ce63a0 0x1856c3000 + 6435744 21 AppKit 0x1860ddda0 -[NSViewBackingLayer display] + 1284 22 QuartzCore 0x18b31d970 CA::Layer::display_if_needed(CA::Transaction*) + 784 23 QuartzCore 0x18b4cb030 CA::Context::commit_transaction(CA::Transaction*, double, double*) + 620 24 QuartzCore 0x18b2fe51c CA::Transaction::commit() + 648 25 QuartzCore 0x18b4fc598 CA::Transaction::flush_as_runloop_observer(bool) + 140 26 AppKit 0x186036054 stepTransactionFlush + 220 27 UpdateCycle 0x2785042f4 UC::DriverCore::continueProcessing() + 84 28 CoreFoundation 0x1812cef30 CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION + 28 29 CoreFoundation 0x1812ceec4 __CFRunLoopDoSource0 + 172 30 CoreFoundation 0x1812cec30 __CFRunLoopDoSources0 + 232 31 CoreFoundation 0x1812cd854 __CFRunLoopRun + 820 32 CoreFoundation 0x1813a01c4 _CFRunLoopRunSpecificWithOptions + 532 33 HIToolbox 0x18e0b3560 RunCurrentEventLoopInMode + 320 34 HIToolbox 0x18e0b68bc ReceiveNextEventCommon + 488 35 HIToolbox 0x18e24014c _BlockUntilNextEventMatchingListInMode + 48 36 AppKit 0x185da835c _DPSBlockUntilNextEventMatchingListInMode + 228 37 AppKit 0x1856fc084 _DPSNextEvent + 576 38 AppKit 0x1862918b0 -[NSApplication(NSEventRouting) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 688 39 AppKit 0x1862915bc -[NSApplication(NSEventRouting) nextEventMatchingMask:untilDate:inMode:dequeue:] + 72 40 AppKit 0x1856ef13c -[NSApplication run] + 368 41 AppKit 0x1856c77b0 NSApplicationMain + 880 42 dyld 0x180e53e00 start + 6992

Thread 1:: com.apple.NSEventThread 0 libsystem_kernel.dylib 0x1811cdc34 mach_msg2_trap + 8 1 libsystem_kernel.dylib 0x1811e0574 mach_msg2_internal + 76 2 libsystem_kernel.dylib 0x1811d69c0 mach_msg_overwrite + 480 3 libsystem_kernel.dylib 0x1811cdfc0 mach_msg + 24 4 CoreFoundation 0x1812cf0d8 __CFRunLoopServiceMachPort + 160 5 CoreFoundation 0x1812cd9c4 __CFRunLoopRun + 1188 6 CoreFoundation 0x1813a01c4 _CFRunLoopRunSpecificWithOptions + 532 7 AppKit 0x18581dc7c _NSEventThread + 184 8 libsystem_pthread.dylib 0x181211c58 _pthread_start + 136 9 libsystem_pthread.dylib 0x18120cc1c thread_start + 8

Thread 2:: com.apple.terminal.low-disk-space-handler 0 libsystem_kernel.dylib 0x1811d3fc4 kevent + 8 1 Terminal 0x102efa6ac 0x102ef8000 + 9900 2 Foundation 0x182b11a90 NSThread__start + 732 3 libsystem_pthread.dylib 0x181211c58 _pthread_start + 136 4 libsystem_pthread.dylib 0x18120cc1c thread_start + 8

Thread 3:: com.apple.terminal.sigchld-handler 0 libsystem_kernel.dylib 0x1811ce91c read + 8 1 Terminal 0x102f01f6c 0x102ef8000 + 40812 2 Foundation 0x182b11a90 NSThread__start + 732 3 libsystem_pthread.dylib 0x181211c58 _pthread_start + 136 4 libsystem_pthread.dylib 0x18120cc1c thread_start + 8

Thread 4:: com.apple.terminal.tty-io 0 libsystem_kernel.dylib 0x1811d8e80 __select + 8 1 Terminal 0x102f030ac 0x102ef8000 + 45228 2 Foundation 0x182b11a90 NSThread__start + 732 3 libsystem_pthread.dylib 0x181211c58 _pthread_start + 136 4 libsystem_pthread.dylib 0x18120cc1c thread_start + 8

Thread 5:: caulk.messenger.shared:17 0 libsystem_kernel.dylib 0x1811cdbb0 semaphore_wait_trap + 8 1 caulk 0x18db5be00 caulk::semaphore::timed_wait(double) + 224 2 caulk 0x18db5bcac caulk::concurrent::details::worker_thread::run() + 32 3 caulk 0x18db5b94c void* caulk::thread_proxy<std::__1::tuple<caulk::thread::attributes, void (caulk::concurrent::details::worker_thread::)(), std::__1::tuplecaulk::concurrent::details::worker_thread*>>(void) + 96 4 libsystem_pthread.dylib 0x181211c58 _pthread_start + 136 5 libsystem_pthread.dylib 0x18120cc1c thread_start + 8

Thread 6:: caulk.messenger.shared:high 0 libsystem_kernel.dylib 0x1811cdbb0 semaphore_wait_trap + 8 1 caulk 0x18db5be00 caulk::semaphore::timed_wait(double) + 224 2 caulk 0x18db5bcac caulk::concurrent::details::worker_thread::run() + 32 3 caulk 0x18db5b94c void* caulk::thread_proxy<std::__1::tuple<caulk::thread::attributes, void (caulk::concurrent::details::worker_thread::)(), std::__1::tuplecaulk::concurrent::details::worker_thread*>>(void) + 96 4 libsystem_pthread.dylib 0x181211c58 _pthread_start + 136 5 libsystem_pthread.dylib 0x18120cc1c thread_start + 8

Thread 0 crashed with ARM Thread State (64-bit): x0: 0x0000000103680000 x1: 0x0000000103681580 x2: 0x0000000000000000 x3: 0x0000000103686320 x4: 0x00000008952a55e0 x5: 0x0000000000000000 x6: 0xffffffffbfc007ff x7: 0xfffff0003ffff800 x8: 0x00000008952a55e0 x9: 0x0000000000000000 x10: 0x046dc36d8040f15e x11: 0x61702f73656d7265 x12: 0x682e2f6f61646162 x13: 0xb23247df2bbbd8c0 x14: 0x00000001036ce530 x15: 0x00000008952a4000 x16: 0x0000000283249d64 x17: 0xffffffffb00007ff x18: 0x0000000000000000 x19: 0x010e1c4052ced7dc x20: 0x0000000000000090 x21: 0x0000000891d13000 x22: 0x0000000000000000 x23: 0x0000000000000002 x24: 0x0000000000000000 x25: 0x0000000891cb4680 x26: 0x0000000000001200 x27: 0x0000000000000000 x28: 0x00000008960d2bc0 fp: 0x000000016cf026e0 lr: 0x78060001811c74dc sp: 0x000000016cf02680 pc: 0x0000000181035990 cpsr: 0x30000000 far: 0x0000000000000000 esr: 0xf2000001 (Breakpoint) brk 1

Binary Images: 0x102ef8000 - 0x102fcbfff com.apple.Terminal (2.15) <8f2252c1-a9b3-31fd-8b7b-4543c6dfd130> /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal 0x1152ec000 - 0x1152f7fff libobjc-trampolines.dylib () <ca58aa96-b997-3a6d-9132-19d49be4b3e9> /usr/lib/libobjc-trampolines.dylib 0x11c3c0000 - 0x11cd77fff com.apple.AGXMetalG17G (351.2) <441ba161-fbf2-3cde-8b43-73dc52ca1fb5> /System/Library/Extensions/AGXMetalG17G.bundle/Contents/MacOS/AGXMetalG17G 0x181004000 - 0x1810541d7 libsystem_malloc.dylib () <5fae4807-4d2b-3a95-a63a-dd96d3da11b4> /usr/lib/system/libsystem_malloc.dylib 0x1811b2000 - 0x1811cc75f libc++abi.dylib () <e482d257-e5a0-3816-bd97-7b39342958da> /usr/lib/libc++abi.dylib 0x187fb0000 - 0x18870503f com.apple.CoreGraphics (2.0) <3b96eadf-571c-3690-b5ce-7672b45ce859> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics 0x1856c3000 - 0x186de5f9f com.apple.AppKit (6.9) <cf57a4fc-4be3-3d95-b543-d744e8718b26> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit 0x18b2fc000 - 0x18b711cdf com.apple.QuartzCore (1195.14.4) <c57b87a6-283c-3588-87ef-145bbee8e257> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore 0x278503000 - 0x2785051ff com.apple.UpdateCycle (1) <0efce417-7412-3251-aeb9-1a80b071fd2f> /System/Library/PrivateFrameworks/UpdateCycle.framework/Versions/A/UpdateCycle 0x181251000 - 0x1817af31f com.apple.CoreFoundation (6.9) <04e3598b-f226-3250-b3b2-ce938dd4db7e> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation 0x18dff6000 - 0x18e2f111f com.apple.HIToolbox (2.1.1) <8716490e-acc2-3688-8c2f-5ca42b4c9da9> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox 0x180e34000 - 0x180eda217 dyld () <a237ef81-b68b-37ba-a165-92c965529534> /usr/lib/dyld 0x0 - 0xffffffffffffffff ??? () <00000000-0000-0000-0000-000000000000> ??? 0x1811cd000 - 0x18120a2af libsystem_kernel.dylib () <cc1cf985-bc65-3725-809f-4c1e36b8f4ba> /usr/lib/system/libsystem_kernel.dylib 0x18120b000 - 0x181217b3b libsystem_pthread.dylib (*) <4f33683c-18c8-39a1-800b-2e3bd43bcc13> /usr/lib/system/libsystem_pthread.dylib 0x182abe000 - 0x183aa041f com.apple.Foundation (6.9) <49dd529f-1708-3767-997b-1a4639a07536> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation 0x18db5a000 - 0x18db8305f com.apple.audio.caulk (1.0) <47e71130-9608-3d99-aceb-df5638bc08df> /System/Library/PrivateFrameworks/caulk.framework/Versions/A/caulk

External Modification Summary: Calls made by other processes targeting this process: task_for_pid: 0 thread_create: 0 thread_set_state: 0 Calls made by this process: task_for_pid: 0 thread_create: 0 thread_set_state: 0 Calls made by all processes on this machine: task_for_pid: 0 thread_create: 0 thread_set_state: 0

VM Region Summary: ReadOnly portion of Libraries: Total=1.8G resident=0K(0%) swapped_out_or_unallocated=1.8G(100%) Writable regions: Total=194.9M written=977K(0%) resident=865K(0%) swapped_out=112K(0%) unallocated=194.0M(100%)

                            VIRTUAL   REGION

REGION TYPE SIZE COUNT (non-coalesced) =========== ======= ======= Accelerate framework 128K 1 Activity Tracing 256K 1 AttributeGraph Data 1024K 1 CG image 784K 13 ColorSync 64K 4 CoreAnimation 1360K 49 CoreGraphics 48K 3 CoreImage 16K 1 CoreServices 624K 2 CoreUI image data 1168K 10 Foundation 48K 2 Image IO 1216K 22 Kernel Alloc Once 592K 3 MALLOC 112.1M 38 MALLOC guard page 3456K 4 Memory Tag 22 64.0M 1 STACK GUARD 56.2M 11 Stack 13.3M 11 VM_ALLOCATE 848K 19 __AUTH 6078K 641 __AUTH_CONST 90.2M 1029 __CTF 824 1 __DATA 34.5M 978 __DATA_CONST 34.7M 1036 __DATA_DIRTY 8413K 885 __FONT_DATA 2352 1 __LINKEDIT 575.8M 4 __OBJC_RO 79.1M 1 __OBJC_RW 2599K 1 __TEXT 1.2G 1058 __TPRO_CONST 128K 2 dyld private memory 160K 4 mapped file 856.7M 106 page table in kernel 865K 1 shared memory 864K 13 =========== =======
TOTAL 3.1G 5957

Root Cause

The crash happens during Terminal's NSView drawing cycle when a new tab/view is created. The BUG IN CLIENT OF LIBMALLOC error means some code wrote to memory that had already been freed, and the corruption was only detected when malloc tried to use that block again.

The crash occurs while Terminal is rendering its view hierarchy after creating a new tab — the call chain goes through NSView drawRect -> CoreGraphics CGContextDrawPath -> operator_new -> malloc detects corrupted free block.

It is unclear at this point whether this is caused by:

  • Hermes TUI (Ink) leaving Terminal in an inconsistent rendering state
  • A macOS 26.5 Terminal.app bug
  • An interaction between the two

More investigation is needed.

Fix Action

Fix / Workaround

Triggered by Thread: 0, Dispatch Queue: com.apple.main-thread

Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 libsystem_malloc.dylib 0x181035990 _xzm_xzone_malloc_freelist_outlined + 856 1 libc++abi.dylib 0x1811c74dc operator_new_impl[abi:nqe210106](unsigned long, std::__type_descriptor_t) + 36 2 libc++abi.dylib 0x1811c74a8 $_0::operator()() const::'lambda0'(unsigned long, std::__type_descriptor_t)::__invoke(unsigned long, std::__type_descriptor_t) + 16 3 CoreGraphics 0x1883fb24c CG::DisplayListRecorder::DrawPath(CGRenderingState*, CGGState*, CGPathDrawingMode, CGPath const*, bool, CGRect const*) + 632 4 CoreGraphics 0x188009104 CGContextDrawPath + 372 5 Terminal 0x102f47b50 0x102ef8000 + 326480 6 Terminal 0x102f4773c 0x102ef8000 + 325436 7 Terminal 0x102f12f8c 0x102ef8000 + 110476 8 Terminal 0x102f121ec 0x102ef8000 + 106988 9 AppKit 0x185c27498 0x1856c3000 + 5653656 10 AppKit 0x185c274c0 0x1856c3000 + 5653696 11 AppKit 0x185bed398 0x1856c3000 + 5415832 12 AppKit 0x185bed9b4 0x1856c3000 + 5417396 13 AppKit 0x18580d354 _NSViewDrawRect + 132 14 AppKit 0x18642da6c -[NSView _recursive:displayRectIgnoringOpacity:inContext:stopAtLayerBackedViews:] + 1084 15 AppKit 0x18580cd64 -[NSView(NSLayerKitGlue) _drawViewBackingLayer:inContext:drawingHandler:] + 536 16 AppKit 0x1860de180 -[NSViewBackingLayer drawInContext:] + 56 17 AppKit 0x185c4a024 0x1856c3000 + 5795876 18 AppKit 0x185c4ac84 0x1856c3000 + 5799044 19 AppKit 0x185ce5f4c 0x1856c3000 + 6434636 20 AppKit 0x185ce63a0 0x1856c3000 + 6435744 21 AppKit 0x1860ddda0 -[NSViewBackingLayer display] + 1284 22 QuartzCore 0x18b31d970 CA::Layer::display_if_needed(CA::Transaction*) + 784 23 QuartzCore 0x18b4cb030 CA::Context::commit_transaction(CA::Transaction*, double, double*) + 620 24 QuartzCore 0x18b2fe51c CA::Transaction::commit() + 648 25 QuartzCore 0x18b4fc598 CA::Transaction::flush_as_runloop_observer(bool) + 140 26 AppKit 0x186036054 stepTransactionFlush + 220 27 UpdateCycle 0x2785042f4 UC::DriverCore::continueProcessing() + 84 28 CoreFoundation 0x1812cef30 CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION + 28 29 CoreFoundation 0x1812ceec4 __CFRunLoopDoSource0 + 172 30 CoreFoundation 0x1812cec30 __CFRunLoopDoSources0 + 232 31 CoreFoundation 0x1812cd854 __CFRunLoopRun + 820 32 CoreFoundation 0x1813a01c4 _CFRunLoopRunSpecificWithOptions + 532 33 HIToolbox 0x18e0b3560 RunCurrentEventLoopInMode + 320 34 HIToolbox 0x18e0b68bc ReceiveNextEventCommon + 488 35 HIToolbox 0x18e24014c _BlockUntilNextEventMatchingListInMode + 48 36 AppKit 0x185da835c _DPSBlockUntilNextEventMatchingListInMode + 228 37 AppKit 0x1856fc084 _DPSNextEvent + 576 38 AppKit 0x1862918b0 -[NSApplication(NSEventRouting) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 688 39 AppKit 0x1862915bc -[NSApplication(NSEventRouting) nextEventMatchingMask:untilDate:inMode:dequeue:] + 72 40 AppKit 0x1856ef13c -[NSApplication run] + 368 41 AppKit 0x1856c77b0 NSApplicationMain + 880 42 dyld 0x180e53e00 start + 6992

Code Example

-------------------------------------
Translated Report (Full Report Below)
-------------------------------------
Process:             Terminal [1467]
Path:                /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
Identifier:          com.apple.Terminal
Version:             2.15 (470.2)
Build Info:          Terminal-470002000000000~68
Code Type:           ARM-64 (Native)
Role:                Foreground
Parent Process:      launchd [1]
Coalition:           com.apple.Terminal [771]
User ID:             501

Date/Time:           2026-05-30 09:02:23.8006 +0800
Launch Time:         2026-05-30 08:45:59.1563 +0800
Hardware Model:      Mac17,3
OS Version:          macOS 26.5 (25F71)
Release Type:        User

Crash Reporter Key:  E33CBBEF-4041-1B95-55A5-67FEDC52C426
Incident Identifier: DC742436-4F5D-4AD8-9638-2D227884D6C2

Time Awake Since Boot: 1100 seconds

System Integrity Protection: enabled

Triggered by Thread: 0, Dispatch Queue: com.apple.main-thread

Exception Type:    EXC_BREAKPOINT (SIGTRAP)
Exception Codes:   0x0000000000000001, 0x0000000181035990

Termination Reason:  Namespace SIGNAL, Code 5, Trace/BPT trap: 5
Terminating Process: exc handler [1467]


Application Specific Information:
BUG IN CLIENT OF LIBMALLOC: memory corruption of free block
Abort Cause 36862318048


Thread 0 Crashed::  Dispatch queue: com.apple.main-thread
0   libsystem_malloc.dylib        	       0x181035990 _xzm_xzone_malloc_freelist_outlined + 856
1   libc++abi.dylib               	       0x1811c74dc operator_new_impl[abi:nqe210106](unsigned long, std::__type_descriptor_t) + 36
2   libc++abi.dylib               	       0x1811c74a8 $_0::operator()() const::'lambda0'(unsigned long, std::__type_descriptor_t)::__invoke(unsigned long, std::__type_descriptor_t) + 16
3   CoreGraphics                  	       0x1883fb24c CG::DisplayListRecorder::DrawPath(CGRenderingState*, CGGState*, CGPathDrawingMode, CGPath const*, bool, CGRect const*) + 632
4   CoreGraphics                  	       0x188009104 CGContextDrawPath + 372
5   Terminal                      	       0x102f47b50 0x102ef8000 + 326480
6   Terminal                      	       0x102f4773c 0x102ef8000 + 325436
7   Terminal                      	       0x102f12f8c 0x102ef8000 + 110476
8   Terminal                      	       0x102f121ec 0x102ef8000 + 106988
9   AppKit                        	       0x185c27498 0x1856c3000 + 5653656
10  AppKit                        	       0x185c274c0 0x1856c3000 + 5653696
11  AppKit                        	       0x185bed398 0x1856c3000 + 5415832
12  AppKit                        	       0x185bed9b4 0x1856c3000 + 5417396
13  AppKit                        	       0x18580d354 _NSViewDrawRect + 132
14  AppKit                        	       0x18642da6c -[NSView _recursive:displayRectIgnoringOpacity:inContext:stopAtLayerBackedViews:] + 1084
15  AppKit                        	       0x18580cd64 -[NSView(NSLayerKitGlue) _drawViewBackingLayer:inContext:drawingHandler:] + 536
16  AppKit                        	       0x1860de180 -[NSViewBackingLayer drawInContext:] + 56
17  AppKit                        	       0x185c4a024 0x1856c3000 + 5795876
18  AppKit                        	       0x185c4ac84 0x1856c3000 + 5799044
19  AppKit                        	       0x185ce5f4c 0x1856c3000 + 6434636
20  AppKit                        	       0x185ce63a0 0x1856c3000 + 6435744
21  AppKit                        	       0x1860ddda0 -[NSViewBackingLayer display] + 1284
22  QuartzCore                    	       0x18b31d970 CA::Layer::display_if_needed(CA::Transaction*) + 784
23  QuartzCore                    	       0x18b4cb030 CA::Context::commit_transaction(CA::Transaction*, double, double*) + 620
24  QuartzCore                    	       0x18b2fe51c CA::Transaction::commit() + 648
25  QuartzCore                    	       0x18b4fc598 CA::Transaction::flush_as_runloop_observer(bool) + 140
26  AppKit                        	       0x186036054 stepTransactionFlush + 220
27  UpdateCycle                   	       0x2785042f4 UC::DriverCore::continueProcessing() + 84
28  CoreFoundation                	       0x1812cef30 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 28
29  CoreFoundation                	       0x1812ceec4 __CFRunLoopDoSource0 + 172
30  CoreFoundation                	       0x1812cec30 __CFRunLoopDoSources0 + 232
31  CoreFoundation                	       0x1812cd854 __CFRunLoopRun + 820
32  CoreFoundation                	       0x1813a01c4 _CFRunLoopRunSpecificWithOptions + 532
33  HIToolbox                     	       0x18e0b3560 RunCurrentEventLoopInMode + 320
34  HIToolbox                     	       0x18e0b68bc ReceiveNextEventCommon + 488
35  HIToolbox                     	       0x18e24014c _BlockUntilNextEventMatchingListInMode + 48
36  AppKit                        	       0x185da835c _DPSBlockUntilNextEventMatchingListInMode + 228
37  AppKit                        	       0x1856fc084 _DPSNextEvent + 576
38  AppKit                        	       0x1862918b0 -[NSApplication(NSEventRouting) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 688
39  AppKit                        	       0x1862915bc -[NSApplication(NSEventRouting) nextEventMatchingMask:untilDate:inMode:dequeue:] + 72
40  AppKit                        	       0x1856ef13c -[NSApplication run] + 368
41  AppKit                        	       0x1856c77b0 NSApplicationMain + 880
42  dyld                          	       0x180e53e00 start + 6992

Thread 1:: com.apple.NSEventThread
0   libsystem_kernel.dylib        	       0x1811cdc34 mach_msg2_trap + 8
1   libsystem_kernel.dylib        	       0x1811e0574 mach_msg2_internal + 76
2   libsystem_kernel.dylib        	       0x1811d69c0 mach_msg_overwrite + 480
3   libsystem_kernel.dylib        	       0x1811cdfc0 mach_msg + 24
4   CoreFoundation                	       0x1812cf0d8 __CFRunLoopServiceMachPort + 160
5   CoreFoundation                	       0x1812cd9c4 __CFRunLoopRun + 1188
6   CoreFoundation                	       0x1813a01c4 _CFRunLoopRunSpecificWithOptions + 532
7   AppKit                        	       0x18581dc7c _NSEventThread + 184
8   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
9   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 2:: com.apple.terminal.low-disk-space-handler
0   libsystem_kernel.dylib        	       0x1811d3fc4 kevent + 8
1   Terminal                      	       0x102efa6ac 0x102ef8000 + 9900
2   Foundation                    	       0x182b11a90 __NSThread__start__ + 732
3   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
4   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 3:: com.apple.terminal.sigchld-handler
0   libsystem_kernel.dylib        	       0x1811ce91c read + 8
1   Terminal                      	       0x102f01f6c 0x102ef8000 + 40812
2   Foundation                    	       0x182b11a90 __NSThread__start__ + 732
3   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
4   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 4:: com.apple.terminal.tty-io
0   libsystem_kernel.dylib        	       0x1811d8e80 __select + 8
1   Terminal                      	       0x102f030ac 0x102ef8000 + 45228
2   Foundation                    	       0x182b11a90 __NSThread__start__ + 732
3   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
4   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 5:: caulk.messenger.shared:17
0   libsystem_kernel.dylib        	       0x1811cdbb0 semaphore_wait_trap + 8
1   caulk                         	       0x18db5be00 caulk::semaphore::timed_wait(double) + 224
2   caulk                         	       0x18db5bcac caulk::concurrent::details::worker_thread::run() + 32
3   caulk                         	       0x18db5b94c void* caulk::thread_proxy<std::__1::tuple<caulk::thread::attributes, void (caulk::concurrent::details::worker_thread::*)(), std::__1::tuple<caulk::concurrent::details::worker_thread*>>>(void*) + 96
4   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
5   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 6:: caulk.messenger.shared:high
0   libsystem_kernel.dylib        	       0x1811cdbb0 semaphore_wait_trap + 8
1   caulk                         	       0x18db5be00 caulk::semaphore::timed_wait(double) + 224
2   caulk                         	       0x18db5bcac caulk::concurrent::details::worker_thread::run() + 32
3   caulk                         	       0x18db5b94c void* caulk::thread_proxy<std::__1::tuple<caulk::thread::attributes, void (caulk::concurrent::details::worker_thread::*)(), std::__1::tuple<caulk::concurrent::details::worker_thread*>>>(void*) + 96
4   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
5   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8


Thread 0 crashed with ARM Thread State (64-bit):
    x0: 0x0000000103680000   x1: 0x0000000103681580   x2: 0x0000000000000000   x3: 0x0000000103686320
    x4: 0x00000008952a55e0   x5: 0x0000000000000000   x6: 0xffffffffbfc007ff   x7: 0xfffff0003ffff800
    x8: 0x00000008952a55e0   x9: 0x0000000000000000  x10: 0x046dc36d8040f15e  x11: 0x61702f73656d7265
   x12: 0x682e2f6f61646162  x13: 0xb23247df2bbbd8c0  x14: 0x00000001036ce530  x15: 0x00000008952a4000
   x16: 0x0000000283249d64  x17: 0xffffffffb00007ff  x18: 0x0000000000000000  x19: 0x010e1c4052ced7dc
   x20: 0x0000000000000090  x21: 0x0000000891d13000  x22: 0x0000000000000000  x23: 0x0000000000000002
   x24: 0x0000000000000000  x25: 0x0000000891cb4680  x26: 0x0000000000001200  x27: 0x0000000000000000
   x28: 0x00000008960d2bc0   fp: 0x000000016cf026e0   lr: 0x78060001811c74dc
    sp: 0x000000016cf02680   pc: 0x0000000181035990 cpsr: 0x30000000
   far: 0x0000000000000000  esr: 0xf2000001 (Breakpoint) brk 1

Binary Images:
       0x102ef8000 -        0x102fcbfff com.apple.Terminal (2.15) <8f2252c1-a9b3-31fd-8b7b-4543c6dfd130> /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
       0x1152ec000 -        0x1152f7fff libobjc-trampolines.dylib (*) <ca58aa96-b997-3a6d-9132-19d49be4b3e9> /usr/lib/libobjc-trampolines.dylib
       0x11c3c0000 -        0x11cd77fff com.apple.AGXMetalG17G (351.2) <441ba161-fbf2-3cde-8b43-73dc52ca1fb5> /System/Library/Extensions/AGXMetalG17G.bundle/Contents/MacOS/AGXMetalG17G
       0x181004000 -        0x1810541d7 libsystem_malloc.dylib (*) <5fae4807-4d2b-3a95-a63a-dd96d3da11b4> /usr/lib/system/libsystem_malloc.dylib
       0x1811b2000 -        0x1811cc75f libc++abi.dylib (*) <e482d257-e5a0-3816-bd97-7b39342958da> /usr/lib/libc++abi.dylib
       0x187fb0000 -        0x18870503f com.apple.CoreGraphics (2.0) <3b96eadf-571c-3690-b5ce-7672b45ce859> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
       0x1856c3000 -        0x186de5f9f com.apple.AppKit (6.9) <cf57a4fc-4be3-3d95-b543-d744e8718b26> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
       0x18b2fc000 -        0x18b711cdf com.apple.QuartzCore (1195.14.4) <c57b87a6-283c-3588-87ef-145bbee8e257> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
       0x278503000 -        0x2785051ff com.apple.UpdateCycle (1) <0efce417-7412-3251-aeb9-1a80b071fd2f> /System/Library/PrivateFrameworks/UpdateCycle.framework/Versions/A/UpdateCycle
       0x181251000 -        0x1817af31f com.apple.CoreFoundation (6.9) <04e3598b-f226-3250-b3b2-ce938dd4db7e> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
       0x18dff6000 -        0x18e2f111f com.apple.HIToolbox (2.1.1) <8716490e-acc2-3688-8c2f-5ca42b4c9da9> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
       0x180e34000 -        0x180eda217 dyld (*) <a237ef81-b68b-37ba-a165-92c965529534> /usr/lib/dyld
               0x0 - 0xffffffffffffffff ??? (*) <00000000-0000-0000-0000-000000000000> ???
       0x1811cd000 -        0x18120a2af libsystem_kernel.dylib (*) <cc1cf985-bc65-3725-809f-4c1e36b8f4ba> /usr/lib/system/libsystem_kernel.dylib
       0x18120b000 -        0x181217b3b libsystem_pthread.dylib (*) <4f33683c-18c8-39a1-800b-2e3bd43bcc13> /usr/lib/system/libsystem_pthread.dylib
       0x182abe000 -        0x183aa041f com.apple.Foundation (6.9) <49dd529f-1708-3767-997b-1a4639a07536> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
       0x18db5a000 -        0x18db8305f com.apple.audio.caulk (1.0) <47e71130-9608-3d99-aceb-df5638bc08df> /System/Library/PrivateFrameworks/caulk.framework/Versions/A/caulk

External Modification Summary:
  Calls made by other processes targeting this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by all processes on this machine:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0

VM Region Summary:
ReadOnly portion of Libraries: Total=1.8G resident=0K(0%) swapped_out_or_unallocated=1.8G(100%)
Writable regions: Total=194.9M written=977K(0%) resident=865K(0%) swapped_out=112K(0%) unallocated=194.0M(100%)

                                VIRTUAL   REGION 
REGION TYPE                        SIZE    COUNT (non-coalesced) 
===========                     =======  ======= 
Accelerate framework               128K        1 
Activity Tracing                   256K        1 
AttributeGraph Data               1024K        1 
CG image                           784K       13 
ColorSync                           64K        4 
CoreAnimation                     1360K       49 
CoreGraphics                        48K        3 
CoreImage                           16K        1 
CoreServices                       624K        2 
CoreUI image data                 1168K       10 
Foundation                          48K        2 
Image IO                          1216K       22 
Kernel Alloc Once                  592K        3 
MALLOC                           112.1M       38 
MALLOC guard page                 3456K        4 
Memory Tag 22                     64.0M        1 
STACK GUARD                       56.2M       11 
Stack                             13.3M       11 
VM_ALLOCATE                        848K       19 
__AUTH                            6078K      641 
__AUTH_CONST                      90.2M     1029 
__CTF                               824        1 
__DATA                            34.5M      978 
__DATA_CONST                      34.7M     1036 
__DATA_DIRTY                      8413K      885 
__FONT_DATA                        2352        1 
__LINKEDIT                       575.8M        4 
__OBJC_RO                         79.1M        1 
__OBJC_RW                         2599K        1 
__TEXT                             1.2G     1058 
__TPRO_CONST                       128K        2 
dyld private memory                160K        4 
mapped file                      856.7M      106 
page table in kernel               865K        1 
shared memory                      864K       13 
===========                     =======  
TOTAL                              3.1G     5957
RAW_BUFFERClick to expand / collapse

Environment

  • Hermes Version: v0.15.2 (2026.5.29.2)
  • Mode: --tui (Ink-based React TUI)
  • Terminal: macOS Terminal.app (2.15, build 470.2)
  • OS: macOS 26.5 (25F71)
  • Hardware: Mac17,3 (Apple Silicon)

Description

With hermes --tui running in one Terminal tab, opening a new tab (Cmd+T) can cause Terminal.app to crash entirely. This is not 100% reproducible — it depends on Terminal's internal state (session length, memory state, render cache).

Full Crash Report

-------------------------------------
Translated Report (Full Report Below)
-------------------------------------
Process:             Terminal [1467]
Path:                /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
Identifier:          com.apple.Terminal
Version:             2.15 (470.2)
Build Info:          Terminal-470002000000000~68
Code Type:           ARM-64 (Native)
Role:                Foreground
Parent Process:      launchd [1]
Coalition:           com.apple.Terminal [771]
User ID:             501

Date/Time:           2026-05-30 09:02:23.8006 +0800
Launch Time:         2026-05-30 08:45:59.1563 +0800
Hardware Model:      Mac17,3
OS Version:          macOS 26.5 (25F71)
Release Type:        User

Crash Reporter Key:  E33CBBEF-4041-1B95-55A5-67FEDC52C426
Incident Identifier: DC742436-4F5D-4AD8-9638-2D227884D6C2

Time Awake Since Boot: 1100 seconds

System Integrity Protection: enabled

Triggered by Thread: 0, Dispatch Queue: com.apple.main-thread

Exception Type:    EXC_BREAKPOINT (SIGTRAP)
Exception Codes:   0x0000000000000001, 0x0000000181035990

Termination Reason:  Namespace SIGNAL, Code 5, Trace/BPT trap: 5
Terminating Process: exc handler [1467]


Application Specific Information:
BUG IN CLIENT OF LIBMALLOC: memory corruption of free block
Abort Cause 36862318048


Thread 0 Crashed::  Dispatch queue: com.apple.main-thread
0   libsystem_malloc.dylib        	       0x181035990 _xzm_xzone_malloc_freelist_outlined + 856
1   libc++abi.dylib               	       0x1811c74dc operator_new_impl[abi:nqe210106](unsigned long, std::__type_descriptor_t) + 36
2   libc++abi.dylib               	       0x1811c74a8 $_0::operator()() const::'lambda0'(unsigned long, std::__type_descriptor_t)::__invoke(unsigned long, std::__type_descriptor_t) + 16
3   CoreGraphics                  	       0x1883fb24c CG::DisplayListRecorder::DrawPath(CGRenderingState*, CGGState*, CGPathDrawingMode, CGPath const*, bool, CGRect const*) + 632
4   CoreGraphics                  	       0x188009104 CGContextDrawPath + 372
5   Terminal                      	       0x102f47b50 0x102ef8000 + 326480
6   Terminal                      	       0x102f4773c 0x102ef8000 + 325436
7   Terminal                      	       0x102f12f8c 0x102ef8000 + 110476
8   Terminal                      	       0x102f121ec 0x102ef8000 + 106988
9   AppKit                        	       0x185c27498 0x1856c3000 + 5653656
10  AppKit                        	       0x185c274c0 0x1856c3000 + 5653696
11  AppKit                        	       0x185bed398 0x1856c3000 + 5415832
12  AppKit                        	       0x185bed9b4 0x1856c3000 + 5417396
13  AppKit                        	       0x18580d354 _NSViewDrawRect + 132
14  AppKit                        	       0x18642da6c -[NSView _recursive:displayRectIgnoringOpacity:inContext:stopAtLayerBackedViews:] + 1084
15  AppKit                        	       0x18580cd64 -[NSView(NSLayerKitGlue) _drawViewBackingLayer:inContext:drawingHandler:] + 536
16  AppKit                        	       0x1860de180 -[NSViewBackingLayer drawInContext:] + 56
17  AppKit                        	       0x185c4a024 0x1856c3000 + 5795876
18  AppKit                        	       0x185c4ac84 0x1856c3000 + 5799044
19  AppKit                        	       0x185ce5f4c 0x1856c3000 + 6434636
20  AppKit                        	       0x185ce63a0 0x1856c3000 + 6435744
21  AppKit                        	       0x1860ddda0 -[NSViewBackingLayer display] + 1284
22  QuartzCore                    	       0x18b31d970 CA::Layer::display_if_needed(CA::Transaction*) + 784
23  QuartzCore                    	       0x18b4cb030 CA::Context::commit_transaction(CA::Transaction*, double, double*) + 620
24  QuartzCore                    	       0x18b2fe51c CA::Transaction::commit() + 648
25  QuartzCore                    	       0x18b4fc598 CA::Transaction::flush_as_runloop_observer(bool) + 140
26  AppKit                        	       0x186036054 stepTransactionFlush + 220
27  UpdateCycle                   	       0x2785042f4 UC::DriverCore::continueProcessing() + 84
28  CoreFoundation                	       0x1812cef30 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 28
29  CoreFoundation                	       0x1812ceec4 __CFRunLoopDoSource0 + 172
30  CoreFoundation                	       0x1812cec30 __CFRunLoopDoSources0 + 232
31  CoreFoundation                	       0x1812cd854 __CFRunLoopRun + 820
32  CoreFoundation                	       0x1813a01c4 _CFRunLoopRunSpecificWithOptions + 532
33  HIToolbox                     	       0x18e0b3560 RunCurrentEventLoopInMode + 320
34  HIToolbox                     	       0x18e0b68bc ReceiveNextEventCommon + 488
35  HIToolbox                     	       0x18e24014c _BlockUntilNextEventMatchingListInMode + 48
36  AppKit                        	       0x185da835c _DPSBlockUntilNextEventMatchingListInMode + 228
37  AppKit                        	       0x1856fc084 _DPSNextEvent + 576
38  AppKit                        	       0x1862918b0 -[NSApplication(NSEventRouting) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 688
39  AppKit                        	       0x1862915bc -[NSApplication(NSEventRouting) nextEventMatchingMask:untilDate:inMode:dequeue:] + 72
40  AppKit                        	       0x1856ef13c -[NSApplication run] + 368
41  AppKit                        	       0x1856c77b0 NSApplicationMain + 880
42  dyld                          	       0x180e53e00 start + 6992

Thread 1:: com.apple.NSEventThread
0   libsystem_kernel.dylib        	       0x1811cdc34 mach_msg2_trap + 8
1   libsystem_kernel.dylib        	       0x1811e0574 mach_msg2_internal + 76
2   libsystem_kernel.dylib        	       0x1811d69c0 mach_msg_overwrite + 480
3   libsystem_kernel.dylib        	       0x1811cdfc0 mach_msg + 24
4   CoreFoundation                	       0x1812cf0d8 __CFRunLoopServiceMachPort + 160
5   CoreFoundation                	       0x1812cd9c4 __CFRunLoopRun + 1188
6   CoreFoundation                	       0x1813a01c4 _CFRunLoopRunSpecificWithOptions + 532
7   AppKit                        	       0x18581dc7c _NSEventThread + 184
8   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
9   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 2:: com.apple.terminal.low-disk-space-handler
0   libsystem_kernel.dylib        	       0x1811d3fc4 kevent + 8
1   Terminal                      	       0x102efa6ac 0x102ef8000 + 9900
2   Foundation                    	       0x182b11a90 __NSThread__start__ + 732
3   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
4   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 3:: com.apple.terminal.sigchld-handler
0   libsystem_kernel.dylib        	       0x1811ce91c read + 8
1   Terminal                      	       0x102f01f6c 0x102ef8000 + 40812
2   Foundation                    	       0x182b11a90 __NSThread__start__ + 732
3   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
4   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 4:: com.apple.terminal.tty-io
0   libsystem_kernel.dylib        	       0x1811d8e80 __select + 8
1   Terminal                      	       0x102f030ac 0x102ef8000 + 45228
2   Foundation                    	       0x182b11a90 __NSThread__start__ + 732
3   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
4   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 5:: caulk.messenger.shared:17
0   libsystem_kernel.dylib        	       0x1811cdbb0 semaphore_wait_trap + 8
1   caulk                         	       0x18db5be00 caulk::semaphore::timed_wait(double) + 224
2   caulk                         	       0x18db5bcac caulk::concurrent::details::worker_thread::run() + 32
3   caulk                         	       0x18db5b94c void* caulk::thread_proxy<std::__1::tuple<caulk::thread::attributes, void (caulk::concurrent::details::worker_thread::*)(), std::__1::tuple<caulk::concurrent::details::worker_thread*>>>(void*) + 96
4   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
5   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8

Thread 6:: caulk.messenger.shared:high
0   libsystem_kernel.dylib        	       0x1811cdbb0 semaphore_wait_trap + 8
1   caulk                         	       0x18db5be00 caulk::semaphore::timed_wait(double) + 224
2   caulk                         	       0x18db5bcac caulk::concurrent::details::worker_thread::run() + 32
3   caulk                         	       0x18db5b94c void* caulk::thread_proxy<std::__1::tuple<caulk::thread::attributes, void (caulk::concurrent::details::worker_thread::*)(), std::__1::tuple<caulk::concurrent::details::worker_thread*>>>(void*) + 96
4   libsystem_pthread.dylib       	       0x181211c58 _pthread_start + 136
5   libsystem_pthread.dylib       	       0x18120cc1c thread_start + 8


Thread 0 crashed with ARM Thread State (64-bit):
    x0: 0x0000000103680000   x1: 0x0000000103681580   x2: 0x0000000000000000   x3: 0x0000000103686320
    x4: 0x00000008952a55e0   x5: 0x0000000000000000   x6: 0xffffffffbfc007ff   x7: 0xfffff0003ffff800
    x8: 0x00000008952a55e0   x9: 0x0000000000000000  x10: 0x046dc36d8040f15e  x11: 0x61702f73656d7265
   x12: 0x682e2f6f61646162  x13: 0xb23247df2bbbd8c0  x14: 0x00000001036ce530  x15: 0x00000008952a4000
   x16: 0x0000000283249d64  x17: 0xffffffffb00007ff  x18: 0x0000000000000000  x19: 0x010e1c4052ced7dc
   x20: 0x0000000000000090  x21: 0x0000000891d13000  x22: 0x0000000000000000  x23: 0x0000000000000002
   x24: 0x0000000000000000  x25: 0x0000000891cb4680  x26: 0x0000000000001200  x27: 0x0000000000000000
   x28: 0x00000008960d2bc0   fp: 0x000000016cf026e0   lr: 0x78060001811c74dc
    sp: 0x000000016cf02680   pc: 0x0000000181035990 cpsr: 0x30000000
   far: 0x0000000000000000  esr: 0xf2000001 (Breakpoint) brk 1

Binary Images:
       0x102ef8000 -        0x102fcbfff com.apple.Terminal (2.15) <8f2252c1-a9b3-31fd-8b7b-4543c6dfd130> /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal
       0x1152ec000 -        0x1152f7fff libobjc-trampolines.dylib (*) <ca58aa96-b997-3a6d-9132-19d49be4b3e9> /usr/lib/libobjc-trampolines.dylib
       0x11c3c0000 -        0x11cd77fff com.apple.AGXMetalG17G (351.2) <441ba161-fbf2-3cde-8b43-73dc52ca1fb5> /System/Library/Extensions/AGXMetalG17G.bundle/Contents/MacOS/AGXMetalG17G
       0x181004000 -        0x1810541d7 libsystem_malloc.dylib (*) <5fae4807-4d2b-3a95-a63a-dd96d3da11b4> /usr/lib/system/libsystem_malloc.dylib
       0x1811b2000 -        0x1811cc75f libc++abi.dylib (*) <e482d257-e5a0-3816-bd97-7b39342958da> /usr/lib/libc++abi.dylib
       0x187fb0000 -        0x18870503f com.apple.CoreGraphics (2.0) <3b96eadf-571c-3690-b5ce-7672b45ce859> /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics
       0x1856c3000 -        0x186de5f9f com.apple.AppKit (6.9) <cf57a4fc-4be3-3d95-b543-d744e8718b26> /System/Library/Frameworks/AppKit.framework/Versions/C/AppKit
       0x18b2fc000 -        0x18b711cdf com.apple.QuartzCore (1195.14.4) <c57b87a6-283c-3588-87ef-145bbee8e257> /System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore
       0x278503000 -        0x2785051ff com.apple.UpdateCycle (1) <0efce417-7412-3251-aeb9-1a80b071fd2f> /System/Library/PrivateFrameworks/UpdateCycle.framework/Versions/A/UpdateCycle
       0x181251000 -        0x1817af31f com.apple.CoreFoundation (6.9) <04e3598b-f226-3250-b3b2-ce938dd4db7e> /System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation
       0x18dff6000 -        0x18e2f111f com.apple.HIToolbox (2.1.1) <8716490e-acc2-3688-8c2f-5ca42b4c9da9> /System/Library/Frameworks/Carbon.framework/Versions/A/Frameworks/HIToolbox.framework/Versions/A/HIToolbox
       0x180e34000 -        0x180eda217 dyld (*) <a237ef81-b68b-37ba-a165-92c965529534> /usr/lib/dyld
               0x0 - 0xffffffffffffffff ??? (*) <00000000-0000-0000-0000-000000000000> ???
       0x1811cd000 -        0x18120a2af libsystem_kernel.dylib (*) <cc1cf985-bc65-3725-809f-4c1e36b8f4ba> /usr/lib/system/libsystem_kernel.dylib
       0x18120b000 -        0x181217b3b libsystem_pthread.dylib (*) <4f33683c-18c8-39a1-800b-2e3bd43bcc13> /usr/lib/system/libsystem_pthread.dylib
       0x182abe000 -        0x183aa041f com.apple.Foundation (6.9) <49dd529f-1708-3767-997b-1a4639a07536> /System/Library/Frameworks/Foundation.framework/Versions/C/Foundation
       0x18db5a000 -        0x18db8305f com.apple.audio.caulk (1.0) <47e71130-9608-3d99-aceb-df5638bc08df> /System/Library/PrivateFrameworks/caulk.framework/Versions/A/caulk

External Modification Summary:
  Calls made by other processes targeting this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
  Calls made by all processes on this machine:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0

VM Region Summary:
ReadOnly portion of Libraries: Total=1.8G resident=0K(0%) swapped_out_or_unallocated=1.8G(100%)
Writable regions: Total=194.9M written=977K(0%) resident=865K(0%) swapped_out=112K(0%) unallocated=194.0M(100%)

                                VIRTUAL   REGION 
REGION TYPE                        SIZE    COUNT (non-coalesced) 
===========                     =======  ======= 
Accelerate framework               128K        1 
Activity Tracing                   256K        1 
AttributeGraph Data               1024K        1 
CG image                           784K       13 
ColorSync                           64K        4 
CoreAnimation                     1360K       49 
CoreGraphics                        48K        3 
CoreImage                           16K        1 
CoreServices                       624K        2 
CoreUI image data                 1168K       10 
Foundation                          48K        2 
Image IO                          1216K       22 
Kernel Alloc Once                  592K        3 
MALLOC                           112.1M       38 
MALLOC guard page                 3456K        4 
Memory Tag 22                     64.0M        1 
STACK GUARD                       56.2M       11 
Stack                             13.3M       11 
VM_ALLOCATE                        848K       19 
__AUTH                            6078K      641 
__AUTH_CONST                      90.2M     1029 
__CTF                               824        1 
__DATA                            34.5M      978 
__DATA_CONST                      34.7M     1036 
__DATA_DIRTY                      8413K      885 
__FONT_DATA                        2352        1 
__LINKEDIT                       575.8M        4 
__OBJC_RO                         79.1M        1 
__OBJC_RW                         2599K        1 
__TEXT                             1.2G     1058 
__TPRO_CONST                       128K        2 
dyld private memory                160K        4 
mapped file                      856.7M      106 
page table in kernel               865K        1 
shared memory                      864K       13 
===========                     =======  
TOTAL                              3.1G     5957

Analysis

The crash happens during Terminal's NSView drawing cycle when a new tab/view is created. The BUG IN CLIENT OF LIBMALLOC error means some code wrote to memory that had already been freed, and the corruption was only detected when malloc tried to use that block again.

The crash occurs while Terminal is rendering its view hierarchy after creating a new tab — the call chain goes through NSView drawRect -> CoreGraphics CGContextDrawPath -> operator_new -> malloc detects corrupted free block.

It is unclear at this point whether this is caused by:

  • Hermes TUI (Ink) leaving Terminal in an inconsistent rendering state
  • A macOS 26.5 Terminal.app bug
  • An interaction between the two

More investigation is needed.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING

hermes - 💡(How to fix) Fix Terminal.app crash when opening a new tab while --tui is running (macOS 26.5)