Just some further detail on this, connected a device and ran ADB logcat. I did not put any filter on so there is a bit of noise, but I have found the section in the log file that generates the crash. It is when the video closes and the return listener is being called: -
Seems to be the call: Java_com_ansca_corona_JavaToNativeShim_nativeVideoEndCallback
V/MediaPlayer( 7238): notify(7, 0, 0) callback on disconnected mediaplayer V/MediaPlayer( 7238): message received msg=8, ext1=0, ext2=0 V/MediaPlayer( 7238): notify(8, 0, 0) callback on disconnected mediaplayer D/CustomFrequencyManagerService( 580): acquireDVFSLockLocked : type : DVFS\_MIN\_LIMIT frequency : 1200000 uid : 1000 pid : 580 pkgName : ACTIVITY\_RESUME\_BOOSTER@3 V/MediaPlayer( 7238): destructor V/MediaPlayer( 7238): disconnect I/NuCachedSource2( 174): destructor W/ActivityManager( 580): mDVFSHelper.acquire() V/ChromiumHTTPDataSource( 174): ~ChromiumHTTPDataSource() V/ChromiumHTTPDataSource( 174): disconnect() V/ChromiumHTTPDataSource( 174): onDisconnectComplete() mState = 0 V/AudioSink( 174): +++ close V/AudioSink( 174): --- close V/WindowOrientationListener( 580): setCurrentAppOrientation :6 V/WindowOrientationListener( 580): setCurrentAppOrientation enable auto rotation V/WindowOrientationListener( 580): ScreenOrientationEventListenerImpl.getProposedRotationLocked, Rotation: -1 V/WindowOrientationListener( 580): ScreenOrientationEventListenerImpl.getProposedRotationLocked, Rotation: -1 V/WindowOrientationListener( 580): getProposedRotation : mEnabled = true, mUsedautorotioansensor =true V/WindowManager( 580): rotationForOrientationLw(orient=6, last=1); user=1 sensorRotation=-1 mLidState=-1 mDockMode=0 mHdmiPlugged=false mAccelerometerDefault=false V/WindowOrientationListener( 580): getProposedRotation : mEnabled = true, mUsedautorotioansensor =true D/StatusBarManagerService( 580): semi p:7238,o:f D/PhoneStatusBar( 757): setSemiTransparentMode=false, mTransparentMode=false, mSemiTransparentMode=false, mMultiWindowMode= D/PhoneStatusBar( 757): setTransGradationMode=false, mTransparentMode=false, mSemiTransparentMode=false, mMultiWindowMode= I/SensorManagerA( 7238): getReportingMode :: sensor.mType = 1 D/Sensors ( 580): poll\_\_setDelay: handle:0 , ns:66000000 D/StatusBarManagerService( 580): tr p:7238,o:f D/SensorManager( 7238): registerListener :: 0, K2HH Accelerometer Sensor, 200000, 0, D/PowerManagerService( 580): [api] [s] userActivity : event: 0 flags: 0 (uid: 1000 pid: 580) eventTime = 33684476 D/PowerManagerService( 580): [api] release WakeLock flags=0x2000000a tag=WindowManager uid=1000 pid=580 (0x0) D/PowerManagerService( 580): [api] applyWakeLockFlagsOnReleaseLocked : userActivityNoUpdateLocked is called : SCREEN\_BRIGHT\_WAKE\_LOCK 'WindowManager' ON\_AFTER\_RELEASE (uid=1000, pid=580, ws=WorkSource{10159}) (elapsedTime=18906) I/SurfaceFlinger( 171): id=783 createSurf (1280x800),1 flag=4, TurfaceView D/ENGPC ( 195): parse\_event: event { 'change', '/devices/sec-battery.27/power\_supply/battery', 'power\_supply', '' } D/BatteryService( 580): !@BatteryListener : batteryPropertiesChanged! D/BatteryService( 580): level:49, scale:100, status:3, health:2, present:true, voltage: 3802, temperature: 308, technology: Li-ion, AC powered:false, USB powered:true, Wireless powered:false, icon:17303068, invalid charger:0, online:4, current avg:-175, charge type:2, power sharing:false, high voltage charger:false D/KeyguardUpdateMonitor( 757): received broadcast android.intent.action.BATTERY\_CHANGED D/KeyguardUpdateMonitor( 757): handleBatteryUpdate F/libc ( 7238): Fatal signal 11 (SIGSEGV) at 0x00000000 (code=1), thread 7252 (Thread-1130) D/AudioFlinger( 174): start(4097), calling pid 7238 session 99 D/AudioFlinger( 174): ? =\> ACTIVE (4097) on thread 0xb7b003d0 V/AudioPolicyManagerBase( 174): startOutput() output 2, stream 3, session 99 V/AudioPolicyManagerBase( 174): changeRefCount() stream 3, count 2 I/SurfaceFlinger( 171): id=784 createSurf (1280x800),1 flag=4, DoronaActiv D/BatteryService( 580): Sending ACTION\_BATTERY\_CHANGED. D/AudioFlinger( 174): start(4097), calling pid 7238 session 99 D/AudioFlinger( 174): ? =\> ACTIVE (4097) on thread 0xb7b003d0 D/STATUSBAR-PhoneStatusBar( 757): mBrightnessEnablebySettings = true mBrightnessEnablebyBattery = true mBrightnessEnablebyDisableFlag = true mPmsBrightnessEnablebySettings = true D/STATUSBAR-StatusBarManagerService( 580): manageDisableList what=0x0 pkg=WindowManager.LayoutParams D/BatteryMeterView( 757): ACTION\_BATTERY\_CHANGED : level:49 status:3 health:2 D/SamsungIME( 1272): onStartInput: No inputType, No imeOption, isInputViewShown = false, isExtractViewShown = false, isShowInputRequested = false, isConfigChanged = false I/Timeline( 7238): Timeline: Activity\_idle id: android.os.BinderProxy@41c9a330 time:33684554 V/AudioPolicyManagerBase( 174): stopOutput() output 2, stream 3, session 100 V/AudioPolicyManagerBase( 174): changeRefCount() stream 3, count 1 V/AudioPolicyManagerBase( 174): releaseOutput() 2 D/CustomFrequencyManagerService( 580): releaseDVFSLockLocked : Getting Lock type frm List : DVFS\_MIN\_LIMIT frequency : 1200000 uid : 1000 pid : 580 tag : ACTIVITY\_RESUME\_BOOSTER@3 I/Timeline( 580): Timeline: Activity\_windows\_visible id: ActivityRecord{42af1f60 u0 uk.co.carecontrol.carecontrolstudent/com.ansca.corona.CoronaActivity t71} time:33684571 W/ActivityManager( 580): mDVFSHelper.release() I/SurfaceFlinger( 171): id=780 Removed TurfaceView (9/12) I/SurfaceFlinger( 171): id=780 Removed TurfaceView (-2/12) I/SurfaceFlinger( 171): id=779 Removed WideoActivi (9/11) I/SurfaceFlinger( 171): id=779 Removed WideoActivi (-2/11) D/CustomFrequencyManagerService( 580): acquireDVFSLockLocked : type : DVFS\_MIN\_LIMIT frequency : 1200000 uid : 1000 pid : 580 pkgName : ACTIVITY\_RESUME\_BOOSTER@7 I/DEBUG ( 169): \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* \*\*\* I/DEBUG ( 169): Build fingerprint: 'samsung/gtelwifixx/gtelwifi:4.4.4/KTU84P/T560XXU0APL1:user/release-keys' I/DEBUG ( 169): Revision: '10' I/DEBUG ( 169): pid: 7238, tid: 7252, name: Thread-1130 \>\>\> uk.co.carecontrol.carecontrolstudent \<\<\< I/DEBUG ( 169): signal 11 (SIGSEGV), code 1 (SEGV\_MAPERR), fault addr 00000000 I/DEBUG ( 169): r0 00000000 r1 00000000 r2 673dc898 r3 00000000 I/DEBUG ( 169): r4 629b2b08 r5 673dc238 r6 00000000 r7 673f5e94 I/DEBUG ( 169): r8 6baa2ae8 r9 673f5e84 sl 673dc248 fp 6baa2afc I/DEBUG ( 169): ip 6b7ba509 sp 6baa2ae0 lr 41665d90 pc 6b80ec70 cpsr 200e0030 I/DEBUG ( 169): d0 6c6143646e456f6c d1 6974614e6f546162 I/DEBUG ( 169): d2 614a5f616e6f7261 d3 6974614e6f546163 I/DEBUG ( 169): d4 6d2797406cb9ce60 d5 000000ab6cb9d380 I/DEBUG ( 169): d6 0000000000000005 d7 a8e47bc600000000 I/DEBUG ( 169): d8 0000000000000000 d9 0000000000000000 I/DEBUG ( 169): d10 0000000000000000 d11 0000000000000000 I/DEBUG ( 169): d12 0000000000000000 d13 0000000000000000 I/DEBUG ( 169): d14 0000000000000000 d15 0000000000000000 I/DEBUG ( 169): d16 0000000000000001 d17 0000000000000000 I/DEBUG ( 169): d18 0000000000000000 d19 3fe62e42fee00000 I/DEBUG ( 169): d20 ffffffffffffffff d21 4024000000000000 I/DEBUG ( 169): d22 ffffffffffffffff d23 3dea39ef35793c76 I/DEBUG ( 169): d24 ffffffffffffffff d25 0000000000000000 I/DEBUG ( 169): d26 401bb9d3beb8c86b d27 ffffffffffffffff I/DEBUG ( 169): d28 ffffffffffffffff d29 ffffffffffffffff I/DEBUG ( 169): d30 ffffffffffffffff d31 0000000000000000 I/DEBUG ( 169): scr 28000010 I/DEBUG ( 169): I/DEBUG ( 169): backtrace: I/DEBUG ( 169): #00 pc 00073c70 /data/app-lib/uk.co.carecontrol.carecontrolstudent-1/libcorona.so I/DEBUG ( 169): #01 pc 0001dd8c /system/lib/libdvm.so (dvmPlatformInvoke+112) I/DEBUG ( 169): #02 pc 0004e283 /system/lib/libdvm.so (dvmCallJNIMethod(unsigned int const\*, JValue\*, Method const\*, Thread\*)+398) I/DEBUG ( 169): #03 pc 0004fc51 /system/lib/libdvm.so (dvmResolveNativeMethod(unsigned int const\*, JValue\*, Method const\*, Thread\*)+184) I/DEBUG ( 169): #04 pc 000271a0 /system/lib/libdvm.so I/DEBUG ( 169): #05 pc 0002e17c /system/lib/libdvm.so (dvmMterpStd(Thread\*)+76) I/DEBUG ( 169): #06 pc 0002b828 /system/lib/libdvm.so (dvmInterpret(Thread\*, Method const\*, JValue\*)+184) I/DEBUG ( 169): #07 pc 00060873 /system/lib/libdvm.so (dvmCallMethodV(Thread\*, Method const\*, Object\*, bool, JValue\*, std::\_\_va\_list)+338) I/DEBUG ( 169): #08 pc 00060897 /system/lib/libdvm.so (dvmCallMethod(Thread\*, Method const\*, Object\*, JValue\*, ...)+20) I/DEBUG ( 169): #09 pc 00055577 /system/lib/libdvm.so I/DEBUG ( 169): #10 pc 0000d280 /system/lib/libc.so (\_\_thread\_entry+72) I/DEBUG ( 169): #11 pc 0000d41c /system/lib/libc.so (pthread\_create+240) I/DEBUG ( 169): I/DEBUG ( 169): stack: I/DEBUG ( 169): 6baa2aa0 00000000 I/DEBUG ( 169): 6baa2aa4 00000000 I/DEBUG ( 169): 6baa2aa8 00000000 I/DEBUG ( 169): 6baa2aac 00000000 I/DEBUG ( 169): 6baa2ab0 629b2b08 /dev/ashmem/dalvik-LinearAlloc (deleted) I/DEBUG ( 169): 6baa2ab4 6e5cb4c0 I/DEBUG ( 169): 6baa2ab8 673ba469 /data/dalvik-cache/data@app@uk.co.carecontrol.carecontrolstudent-1.apk@classes.dex I/DEBUG ( 169): 6baa2abc 673a3726 /data/dalvik-cache/data@app@uk.co.carecontrol.carecontrolstudent-1.apk@classes.dex I/DEBUG ( 169): 6baa2ac0 673fc0f0 I/DEBUG ( 169): 6baa2ac4 4008b388 I/DEBUG ( 169): 6baa2ac8 00000044 I/DEBUG ( 169): 6baa2acc 40063707 /system/lib/libc.so (sprintf+64) I/DEBUG ( 169): 6baa2ad0 41cbdbf0 /dev/ashmem/dalvik-heap (deleted) I/DEBUG ( 169): 6baa2ad4 673dc238 I/DEBUG ( 169): 6baa2ad8 416f3c7c /system/lib/libdvm.so I/DEBUG ( 169): 6baa2adc 0000010a I/DEBUG ( 169): #00 6baa2ae0 00000000 I/DEBUG ( 169): ........ ........ I/DEBUG ( 169): #01 6baa2ae0 00000000 I/DEBUG ( 169): 6baa2ae4 00000000 I/DEBUG ( 169): 6baa2ae8 673f5e84 I/DEBUG ( 169): 6baa2aec 00000001 I/DEBUG ( 169): 6baa2af0 00000008 I/DEBUG ( 169): 6baa2af4 41cbdbf0 /dev/ashmem/dalvik-heap (deleted) I/DEBUG ( 169): 6baa2af8 00000044 I/DEBUG ( 169): 6baa2afc 41696287 /system/lib/libdvm.so (\_Z16dvmCallJNIMethodPKjP6JValuePK6MethodP6Thread+402) I/DEBUG ( 169): #02 6baa2b00 673f5e84 I/DEBUG ( 169): 6baa2b04 673ad306 /data/dalvik-cache/data@app@uk.co.carecontrol.carecontrolstudent-1.apk@classes.dex I/DEBUG ( 169): 6baa2b08 6b7ba509 /data/app-lib/uk.co.carecontrol.carecontrolstudent-1/libcorona.so (Java\_com\_ansca\_corona\_JavaToNativeShim\_nativeVideoEndCallback) I/DEBUG ( 169): 6baa2b0c 673dc248 I/DEBUG ( 169): 6baa2b10 6e5cb1c5 I/DEBUG ( 169): 6baa2b14 6e5ad1f0 I/DEBUG ( 169): 6baa2b18 61400001 /dev/ashmem/dalvik-mark-stack (deleted) I/DEBUG ( 169): 6baa2b1c 00000000 I/DEBUG ( 169): 6baa2b20 6e5cb4c0 I/DEBUG ( 169): 6baa2b24 4008b388 I/DEBUG ( 169): 6baa2b28 6b7ba509 /data/app-lib/uk.co.carecontrol.carecontrolstudent-1/libcorona.so (Java\_com\_ansca\_corona\_JavaToNativeShim\_nativeVideoEndCallback) I/DEBUG ( 169): 6baa2b2c 4004e357 /system/lib/libc.so (dlfree+50) I/DEBUG ( 169): 6baa2b30 40087000 /system/lib/libc.so I/DEBUG ( 169): 6baa2b34 6e5cb188 I/DEBUG ( 169): 6baa2b38 00000000 I/DEBUG ( 169): 6baa2b3c 6e5cb4c0 I/DEBUG ( 169): ........ ........