1Password 7.8 crashes upon start-up of MacBook Pro

SASouth
SASouth
Community Member
in Mac

When my MacBook Pro 9 is turned on 9 times out of 10 1Password Mini will crash on start-up of the computer.

Startup items are:
Canon IJ Network Scanner
SpeechSynthesisServer
Sophos Home Premium v10.0.2a1
ScreenSharing Menulet v2.9.0 (270)
1Password Mini 7.8

Here is the dump:
Process: 1Password 7 [602]
Path: /Applications/1Password 7.app/Contents/MacOS/1Password 7
Identifier: 1Password 7
Version: ???
Code Type: X86-64 (Native)
Parent Process: ??? [1]
Responsible: 1Password 7 [602]
User ID: 501

Date/Time: 2021-03-21 15:14:28.878 -0400
OS Version: macOS 11.3 (20E5210c)
Report Version: 12
Bridge OS Version: 3.0 (14Y908)
Anonymous UUID: 60B3F47C-ECC1-2351-65DE-3F3F2D9FC9E2

Time Awake Since Boot: 93 seconds

System Integrity Protection: enabled

Crashed Thread: Unknown

Exception Type: EXC_CRASH (Code Signature Invalid)
Exception Codes: 0x0000000000000000, 0x0000000000000000
Exception Note: EXC_CORPSE_NOTIFY

Termination Reason: Namespace CODESIGNING, Code 0x1

kernel messages:

VM Regions Near 0 (cr2):
-->
mapped file 10d5b1000-10d949000 [ 3680K] r-x/r-x SM=COW Object_id=17372bb1

Backtrace not available

Unknown thread crashed with X86 Thread State (64-bit):
rax: 0x0000000000000000 rbx: 0x0000000000000000 rcx: 0x0000000000000000 rdx: 0x0000000000000000
rdi: 0x0000000000000000 rsi: 0x0000000000000000 rbp: 0x0000000000000000 rsp: 0x00007ffee264eb28
r8: 0x0000000000000000 r9: 0x0000000000000000 r10: 0x0000000000000000 r11: 0x0000000000000000
r12: 0x0000000000000000 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000000
rip: 0x00000001160ca000 rfl: 0x0000000000000200 cr2: 0x0000000000000000

Logical CPU: 0
Error Code: 0x00000000
Trap Number: 0

Unknown thread instruction stream not available.

Unknown thread last branch register state not available.

Binary images description not available

External Modification Summary:
Calls made by other processes targeting this process:
task_for_pid: 0
thread_create: 0
thread_set_state: 0
Calls made by this process:
task_for_pid: 0
thread_create: 0
thread_set_state: 0
Calls made by all processes on this machine:
task_for_pid: 26
thread_create: 0
thread_set_state: 0

VM Region Summary:
Writable regions: Total=8416K written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=8416K(100%)

                            VIRTUAL   REGION

REGION TYPE SIZE COUNT (non-coalesced)
=========== ======= =======
STACK GUARD 56.0M 1
Stack 8192K 1
VM_ALLOCATE 8K 2
VM_ALLOCATE (reserved) 252K 4 reserved VM address space (unallocated)
mapped file 5956K 7
=========== ======= =======
TOTAL 70.1M 15
TOTAL, minus reserved VM space 69.8M 15

Model: MacBookPro14,3, BootROM 429.100.7.0.0, 4 processors, Quad-Core Intel Core i7, 2.9 GHz, 16 GB, SMC 2.45f5
Graphics: kHW_IntelHDGraphics630Item, Intel HD Graphics 630, spdisplays_builtin
Graphics: kHW_AMDRadeonPro560Item, Radeon Pro 560, spdisplays_pcie_device, 4 GB
Memory Module: BANK 0/DIMM0, 8 GB, LPDDR3, 2133 MHz, 0x802C, 0x4D5435324C31473332443450472D30393320
Memory Module: BANK 1/DIMM0, 8 GB, LPDDR3, 2133 MHz, 0x802C, 0x4D5435324C31473332443450472D30393320
AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x173), Broadcom BCM43xx 1.0 (7.77.111.1 AirPortDriverBrcmNIC-1680.7)
Bluetooth: Version 8.0.4d18, 3 services, 27 devices, 1 incoming serial ports
Network Service: AirPort, AirPort, en0
USB Device: USB 3.0 Bus
USB Device: Apple T1 Controller
Thunderbolt Bus: MacBook Pro, Apple Inc., 41.4
Thunderbolt Bus: MacBook Pro, Apple Inc., 41.4

1Password Version: 7.8
Extension Version: 7.8
OS Version: MacOS 11.2 and MacOS 11.3 Beta
Sync Type: 1Password.com

Comments

  • ag_ana
    ag_ana
    1Password Alumni

    Hi @SASouth!

    Can you try replacing this 1Password app with a fresh copy downloaded from our website?

  • SASouth
    SASouth
    Community Member

    I forgot to mention that I’ve already done that before I sent the crash data to you. It didn’t help.

  • ag_ana
    ag_ana
    1Password Alumni

    @SASouth:

    I wonder if this is one of those cases where Sophos is interfering with this. Can you try the suggestions in this article and see if they help?

  • SASouth
    SASouth
    Community Member

    I made the change that you suggested. I've powered on and off several times without 1Password crashing on startup.

    However, more than a couple times I've thought that I've solved the problem only to have it show itself a few days later. I'm hopeful your solution is the answer.

    I'll report back in a few days to let you know the status. So far, so good.

    Thanks for your help.

  • ag_ana
    ag_ana
    1Password Alumni

    @SASouth:

    I made the change that you suggested. I've powered on and off several times without 1Password crashing on startup.

    This is good to hear!

    I'll report back in a few days to let you know the status. So far, so good.

    Sounds good! Let me know what you discover :)

  • SASouth
    SASouth
    Community Member

    Will do.

  • ag_ana
    ag_ana
    1Password Alumni

    :+1:

  • SASouth
    SASouth
    Community Member

    Ana,

    So far so good. The problem has not occurred since I applied the fix you suggested. I'll post here if that changes.

  • ag_tommy
    ag_tommy

    :+1:

  • SASouth
    SASouth
    Community Member

    Unfortunately, it just happened again today. I made no changes to Sophos setup since my last message. However, 1Password did update itself to
    Version 7.8.1.BETA-0 (70801000)
    1Password Beta

    Here's the dump:

    Process: 1Password 7 [592]
    Path: /Applications/1Password 7.app/Contents/MacOS/1Password 7
    Identifier: 1Password 7
    Version: ???
    Code Type: X86-64 (Native)
    Parent Process: ??? [1]
    Responsible: 1Password 7 [592]
    User ID: 501

    Date/Time: 2021-03-29 14:44:14.759 -0400
    OS Version: macOS 11.3 (20E5217a)
    Report Version: 12
    Bridge OS Version: 3.0 (14Y908)
    Anonymous UUID: 60B3F47C-ECC1-2351-65DE-3F3F2D9FC9E2

    Time Awake Since Boot: 94 seconds

    System Integrity Protection: enabled

    Crashed Thread: Unknown

    Exception Type: EXC_CRASH (Code Signature Invalid)
    Exception Codes: 0x0000000000000000, 0x0000000000000000
    Exception Note: EXC_CORPSE_NOTIFY

    Termination Reason: Namespace CODESIGNING, Code 0x1

    kernel messages:

    VM Regions Near 0 (cr2):
    -->
    mapped file 105197000-10586f000 [ 7008K] r-x/r-x SM=COW Object_id=6c3f1629

    Backtrace not available

    Unknown thread crashed with X86 Thread State (64-bit):
    rax: 0x0000000000000000 rbx: 0x0000000000000000 rcx: 0x0000000000000000 rdx: 0x0000000000000000
    rdi: 0x0000000000000000 rsi: 0x0000000000000000 rbp: 0x0000000000000000 rsp: 0x00007ffeeaa68b28
    r8: 0x0000000000000000 r9: 0x0000000000000000 r10: 0x0000000000000000 r11: 0x0000000000000000
    r12: 0x0000000000000000 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000000
    rip: 0x00000001147e6000 rfl: 0x0000000000000200 cr2: 0x0000000000000000

    Logical CPU: 0
    Error Code: 0x00000000
    Trap Number: 0

    Unknown thread instruction stream not available.

    Unknown thread last branch register state not available.

    Binary images description not available

    External Modification Summary:
    Calls made by other processes targeting this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
    Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
    Calls made by all processes on this machine:
    task_for_pid: 26
    thread_create: 0
    thread_set_state: 0

    VM Region Summary:
    Writable regions: Total=8448K written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=8448K(100%)

                                VIRTUAL   REGION

    REGION TYPE SIZE COUNT (non-coalesced)
    =========== ======= =======
    STACK GUARD 56.0M 1
    Stack 8192K 1
    VM_ALLOCATE 8K 2
    VM_ALLOCATE (reserved) 284K 4 reserved VM address space (unallocated)
    mapped file 9668K 7
    =========== ======= =======
    TOTAL 73.7M 15
    TOTAL, minus reserved VM space 73.4M 15

    Model: MacBookPro14,3, BootROM 429.100.7.0.0, 4 processors, Quad-Core Intel Core i7, 2.9 GHz, 16 GB, SMC 2.45f5
    Graphics: kHW_IntelHDGraphics630Item, Intel HD Graphics 630, spdisplays_builtin
    Graphics: kHW_AMDRadeonPro560Item, Radeon Pro 560, spdisplays_pcie_device, 4 GB
    Memory Module: BANK 0/DIMM0, 8 GB, LPDDR3, 2133 MHz, 0x802C, 0x4D5435324C31473332443450472D30393320
    Memory Module: BANK 1/DIMM0, 8 GB, LPDDR3, 2133 MHz, 0x802C, 0x4D5435324C31473332443450472D30393320
    AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x173), Broadcom BCM43xx 1.0 (7.77.111.1 AirPortDriverBrcmNIC-1680.7)
    Bluetooth: Version 8.0.4d18, 3 services, 27 devices, 1 incoming serial ports
    Network Service: AirPort, AirPort, en0
    USB Device: USB 3.0 Bus
    USB Device: Apple T1 Controller
    Thunderbolt Bus: MacBook Pro, Apple Inc., 41.4
    Thunderbolt Bus: MacBook Pro, Apple Inc., 41.4

  • ag_ana
    ag_ana
    1Password Alumni

    @SASouth:

    I wonder if Sophos is seeing the new beta as a different app. Is 1Password still whitelisted in your Sophos settings?

  • SASouth
    SASouth
    Community Member

    The instructions you sent to me were not to whitelist 1Password app but to set Sophos to exclude the local host, 127.0.0.1 from being blocked. This should not be dependent upon the version of 1Password.

  • ag_tommy
    ag_tommy

    @SASouth

    Replacing the app should help. If Sophos has a whitelist feature please add it to that list.

    1. Quit all open web browsers especially Safari.
    2. Look for our helper in the menu bar near the WiFi indicator and the clock. Right-click on the helper and select quit 1Password completely.
    3. Drag 1Password from the Applications folder to the Trash. Do not use an "app cleaner" or "uninstaller" tool to remove the app or additional files. If prompted, enter the password you use to sign in to your Mac.
    4. Restart the Mac.
    5. Download the latest version of 1Password from the 1Password website.
    6. Quit any open web browsers and then install 1Password.
    7. Open and unlock 1Password before opening your web browser.
  • SASouth
    SASouth
    Community Member

    I’ve replaced both 1Password and Sophos once already as part of the troubleshooting I conducted prior to contacting 1Password support. I will try it again, but I will admit that I’m skeptical that this will solve anything.

  • ag_tommy
    ag_tommy

    The crash report indicates that it's a Code Signature Invalid. Something has tampered with the app breaking the signature that is used to validate the app. Most likely, it is Antivirus software. That's the most common reason I see. The only way to resolve that is to replace the app with an unaltered version. If it happens again, the best course of action is to look at your system for whatever could be causing the situation.

  • SASouth
    SASouth
    Community Member

    I followed your instructions to the letter and once again I got the dump on boot of the machine when it tried to start up 1Password Mini. Please note that this only fails on boot up. If I run 1Password after a crash it starts and runs fine, including 1Password Mini.

    I'd like to add that I have used 1Password and Sophos together on this machine and all of my other Macs -- 2 Minis, 2 MacBook Airs, 1 other MacBook Pro 13", without any problems at all until recently. As it stands only the MacBook Pro 15" is the only one presenting this issue. I've installed no new software other than updates to the usual periodic updates to MacOS, Sophos, and 1Password, etc.

    Here is the dump. Again.

    Process: 1Password 7 [593]
    Path: /Applications/1Password 7.app/Contents/MacOS/1Password 7
    Identifier: 1Password 7
    Version: ???
    Code Type: X86-64 (Native)
    Parent Process: ??? [1]
    Responsible: 1Password 7 [593]
    User ID: 501

    Date/Time: 2021-03-31 11:01:33.265 -0400
    OS Version: macOS 11.3 (20E5217a)
    Report Version: 12
    Bridge OS Version: 3.0 (14Y908)
    Anonymous UUID: 60B3F47C-ECC1-2351-65DE-3F3F2D9FC9E2

    Time Awake Since Boot: 130 seconds

    System Integrity Protection: enabled

    Crashed Thread: Unknown

    Exception Type: EXC_CRASH (Code Signature Invalid)
    Exception Codes: 0x0000000000000000, 0x0000000000000000
    Exception Note: EXC_CORPSE_NOTIFY

    Termination Reason: Namespace CODESIGNING, Code 0x1

    kernel messages:

    VM Regions Near 0 (cr2):
    -->
    mapped file 10ee6f000-10f207000 [ 3680K] r-x/r-x SM=COW Object_id=c04b904b

    Backtrace not available

    Unknown thread crashed with X86 Thread State (64-bit):
    rax: 0x0000000000000000 rbx: 0x0000000000000000 rcx: 0x0000000000000000 rdx: 0x0000000000000000
    rdi: 0x0000000000000000 rsi: 0x0000000000000000 rbp: 0x0000000000000000 rsp: 0x00007ffee0d90b28
    r8: 0x0000000000000000 r9: 0x0000000000000000 r10: 0x0000000000000000 r11: 0x0000000000000000
    r12: 0x0000000000000000 r13: 0x0000000000000000 r14: 0x0000000000000000 r15: 0x0000000000000000
    rip: 0x000000011d130000 rfl: 0x0000000000000200 cr2: 0x0000000000000000

    Logical CPU: 0
    Error Code: 0x00000000
    Trap Number: 0

    Unknown thread instruction stream not available.

    Unknown thread last branch register state not available.

    Binary images description not available

    External Modification Summary:
    Calls made by other processes targeting this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
    Calls made by this process:
    task_for_pid: 0
    thread_create: 0
    thread_set_state: 0
    Calls made by all processes on this machine:
    task_for_pid: 22
    thread_create: 0
    thread_set_state: 0

    VM Region Summary:
    Writable regions: Total=8416K written=0K(0%) resident=0K(0%) swapped_out=0K(0%) unallocated=8416K(100%)

                                VIRTUAL   REGION

    REGION TYPE SIZE COUNT (non-coalesced)
    =========== ======= =======
    STACK GUARD 56.0M 1
    Stack 8192K 1
    VM_ALLOCATE 8K 2
    VM_ALLOCATE (reserved) 252K 4 reserved VM address space (unallocated)
    mapped file 5956K 7
    =========== ======= =======
    TOTAL 70.1M 15
    TOTAL, minus reserved VM space 69.8M 15

    Model: MacBookPro14,3, BootROM 429.100.7.0.0, 4 processors, Quad-Core Intel Core i7, 2.9 GHz, 16 GB, SMC 2.45f5
    Graphics: kHW_IntelHDGraphics630Item, Intel HD Graphics 630, spdisplays_builtin
    Graphics: kHW_AMDRadeonPro560Item, Radeon Pro 560, spdisplays_pcie_device, 4 GB
    Memory Module: BANK 0/DIMM0, 8 GB, LPDDR3, 2133 MHz, 0x802C, 0x4D5435324C31473332443450472D30393320
    Memory Module: BANK 1/DIMM0, 8 GB, LPDDR3, 2133 MHz, 0x802C, 0x4D5435324C31473332443450472D30393320
    AirPort: spairport_wireless_card_type_airport_extreme (0x14E4, 0x173), Broadcom BCM43xx 1.0 (7.77.111.1 AirPortDriverBrcmNIC-1680.7)
    Bluetooth: Version 8.0.4d18, 3 services, 27 devices, 1 incoming serial ports
    Network Service: AirPort, AirPort, en0
    USB Device: ASM1153E
    USB Device: USB 3.0 Bus
    USB Device: Apple T1 Controller
    Thunderbolt Bus: MacBook Pro, Apple Inc., 41.4
    Thunderbolt Bus: MacBook Pro, Apple Inc., 41.4
    ```

  • ag_tommy
    ag_tommy

    @SASouth

    You're welcome to send us a diagnostic report from your device, and we can give it a look. That said, it has to be something on your system, or we would be having widespread reports of problems, which is not the case. The crash reports further back that up with the Code Signature Invalid line. Something has altered the application signature that is used to verify it has not been tampered with. I would anticipate Sophos being the culprit as you most likely have a start-up scan enabled. If you also have something like Malwarebytes, I would recommend temporarily disabling both and see how things progress. This would only need to be done temporarily to verify if it is Sophos causing the issues. Does Sophos have a whitelist feature? If so, have you tried adding 1Password to that list?

    You could optionally try starting in safe mode, which should only allow the minimally needed items to open at start-up. Then see if you experience the same results. https://support.apple.com/HT201262

    A Google search returned this result. I do not know if it will be beneficial to you. https://www.sophos.com/en-us/threat-center/threat-analyses/controlled-applications/1Password.aspx

    --

    https://support.1password.com/diagnostics

    The diagnostic report doesn't include any private information like your logins, Master Password, or Secret Key:
    About 1Password diagnostics reports https://support.1password.com/diagnostics-privacy/
    Please send that report to support@1Password.com Be sure to include the following information with your submission.

    Your user name here in the forum. SASouth
    A link to this topic. https://1password.community/discussion/119942/1password-7-8-crashes-upon-start-up-of-macbook-pro#latest

    • Please do not post your diagnostic report to the forum. This is for your privacy and security.
      The report will be in zip format. Please send the entire file.

    You will receive an auto-reply from BitBot, our auto-responder. Please post the Ticket ID you receive back here.

This discussion has been closed.