Now-fixed Apple code crashed iOS devices when users typed 'Taiwan'

Patrick Wardle, chief research officer of Digita Security, discussed the issue that caused certain iOS devices to crash in a lengthy and somewhat technical post to his personal blog, Objective-See.

As Wardle explains, iOS 11.3 and below contained a bug that for some iPhone and iPad users resulted in constant crashes when the word "Taiwan" was entered in both first- and third-party app text fields.

The remote flaw would also trigger a crash event when attempting to display the Taiwanese flag emoji on certain devices. The process was repeatable in iMessage, Facebook and WhatsApp.

Apple patched the bug in iOS 11.4.1, citing a bug report filed by Wardle earlier this year.

Certain aspects of the bug are unclear, but Wardle narrowed the negative effect down to a "null" pointer dereference. In particular, the problem presented itself when a removeEmoji operation led to a system instruction that checked a device's region settings. An ensuing function crashed under certain conditions related to Chinese region settings.

As noted by Emojipedia, iOS hides the Taiwanese flag on devices set to the China region. This process includes expunging the emoji from both the keyboard and rendered data like incoming text messages.

While the code worked for Chinese iPhones, it caused trouble for some iOS devices set to other regions, or more accurately an "unsupported region-less state."

The ordeal underscores the lengths to which Apple and other companies will go to appease China's government. China and Taiwan have a long and contentious relationship that dates back to well before the Chinese Civil War. Taiwan views itself as a sovereign state called the Republic of China, while the People's Republic of China (mainland China) considers Taiwan part of its territory and sensitive to issues regarding the island's identity.

China (the People's Republic of China) is a vital market for Apple. Although the company publicly touts a strong stance on against censorship and government snooping, it has played nice with the Chinese government's oft-bemoaned laws.

Last year, for example, Apple caught flak for pulling the NYT app from the Chinese App Store, a move that was followed by the removal of certain VPN apps in compliance with Chinese regulations.

Most recently, the company transferred Chinese iCloud data and cryptographic keys to local servers run by Guizhou-Cloud Big Data Industry Co. Ltd., a decision decried by privacy advocates. For its part, Apple says it advocated against iCloud being subject to China's cyber laws, but chalked up compliance as a cost of doing business in the country.