Skip to content
BSD syscall#529

svc · unix #529

os_fault_with_payload

Reports a non-fatal os_fault with a structured payload to ReportCrash.

Prototype

int os_fault_with_payload(uint32_t reason_namespace, uint64_t reason_code, void *payload, uint32_t payload_size, const char *reason_string, uint64_t reason_flags);

Returns: int

Arguments

NameTypeDirDescription
reason_namespaceuint32_t-
reason_codeuint64_t-
payloadvoid-
payload_sizeuint32_t-
reason_stringconst char-
reason_flagsuint64_t-

Version history

XNU tagmacOS#
xnu-4570.1.46macOS 10.13 High Sierra529
xnu-4903.221.2macOS 10.14 Mojave529
xnu-6153.11.26macOS 10.15 Catalina529
xnu-7195.50.7.100.1macOS 11.0 Big Sur529
xnu-8019.41.5macOS 12.0 Monterey529
xnu-8792.41.9macOS 13.0 Ventura529
xnu-10002.1.13macOS 14.0 Sonoma529
xnu-11215.1.10macOS 15.0 Sequoia529
xnu-11417.101.15macOS 15.4 Sequoia529
xnu-12377.1.9macOS 26.0 Tahoe529
xnu-10002.41.9—529
xnu-10002.61.3—529
xnu-10002.81.5—529
xnu-10063.101.15—529
xnu-10063.121.3—529
xnu-10063.141.1—529
xnu-11215.41.3—529
xnu-11215.61.5—529
xnu-11215.81.4—529
xnu-11417.121.6—529
xnu-11417.140.69—529
xnu-12377.101.15—529
xnu-12377.41.6—529
xnu-12377.61.12—529
xnu-12377.81.4—529
xnu-4570.20.62—529
xnu-4570.31.3—529
xnu-4570.41.2—529
xnu-4570.51.1—529
xnu-4570.61.1—529
xnu-4570.71.2—529
xnu-4903.231.4—529
xnu-4903.241.1—529
xnu-4903.270.47—529
xnu-6153.101.6—529
xnu-6153.121.1—529
xnu-6153.141.1—529
xnu-6153.41.3—529
xnu-6153.61.1—529
xnu-6153.81.5—529
xnu-7195.101.1—529
xnu-7195.121.3—529
xnu-7195.141.2—529
xnu-7195.60.75—529
xnu-7195.81.3—529
xnu-8019.61.5—529
xnu-8019.80.24—529
xnu-8020.101.4—529
xnu-8020.121.3—529
xnu-8020.140.41—529
xnu-8792.61.2—529
xnu-8792.81.2—529
xnu-8796.101.5—529
xnu-8796.121.2—529
xnu-8796.141.3—529

Notes

Backing syscall for os_fault_with_payload(3) and the os_log fault APIs. The kernel forwards the payload, source-position descriptor and reason string to ReportCrash via Mach exception, producing a .ips report without terminating the process. Used liberally throughout system frameworks to flag assertions that should be investigated but are not crash-worthy.

Detection

Resulting .ips files are routinely shipped to Apple via crash-reporting; on a corp endpoint, watching DiagnosticReports for non-Apple senders that emit floods of os_faults is a useful anomaly signal.

Related APIs

os_log_faultabort_with_payloadproc_trace_logsys_panic_with_data