feat(android): allow NDK preload for .NET/CoreCLR

[jpnurmi]

.NET 10.0 added support for CoreCLR on Android (experimental). Unlike with the Mono runtime, where we're stuck with CHAIN_AT_START (dotnet/runtime#125835), with CoreCLR we can already reorder the signal handlers to the preferred order:

┌───────────┐     ┌───────────────┐     ┌────────────────────┐
│ .NET/Mono │────>│ Sentry Native │────>│ System (debuggerd) │
└───────────┘     └───────────────┘     └────────────────────┘

This gives the .NET runtime a chance to process managed .NET exceptions without Sentry Native stepping on its toes. This is much safer than CHAIN_AT_START, and will be automatically enabled (io.sentry.ndk.preload=true) by Sentry.NET when targeting Android .NET 10.0 or later with CoreCLR.

Changes

Add sentry__backend_preload() for installing signal handlers before sentry_init(). For the inproc backend on Unix/Android, this allows establishing the correct signal handler chain order when another runtime (e.g. Mono/.NET) installs its own handlers later.

• Backend dispatch: sentry__backend_preload() (no-op for non-inproc)
• Extracted install_signal_handlers() with idempotency flag
• Preload fallthrough: if handler thread not ready, invoke previous handler
• NDK: SentryNdkPreloadProvider content provider with high init order for early signal handler installation before the CoreCLR runtime
• NDK: Java/JNI preload() method on SentryNdk

See also

• Original issue: Prevent Native/Cocoa SDKs from capturing errors that also get captured by .NET sentry-dotnet#3954
• Signal handler re-order for iOS: fix: AOT interop with managed .NET runtimes sentry-cocoa#6193
• Chain-at-start alternative for Android on Mono: fix(android): mask signal during CHAIN_AT_START to survive chained Mono handler re-raises #1572
• Mono fix for future reorder: [mono] Restore signal handlers during crash chaining dotnet/runtime#125835

[github-actions]

	Messages
📖	Do not forget to update Sentry-docs with your feature once the pull request gets approved.

Generated by 🚫 dangerJS against 1b73d81

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

[supervacuus]

This looks good to me in concept and essence, but I would add a few more clarifications. I know it is entirely clear to you now, but since there are a lot of implicit assumptions encoded, we can prose this up a bit.

Please also add a note in sentry.h for sentry_close() highlighting the intentional life-cycle change. Even if we do not consider this to be a public API, the header is the right place for other maintainers. Something like:

The Android preload mode of inproc is a special case: a lightweight signal-chain placeholder may remain installed across sentry_close() to preserve ordering relative to the managed runtime until a later re-init.

Appended to the paragraph that remarks on the crash-handler life-cycle.

[jpnurmi]

Big thanks for the suggestions! And sorry to make you spend so much time writing docs and comments for this change! 😵‍💫

[supervacuus]

Big thanks for the suggestions!

You're welcome!

And sorry to make you spend so much time writing docs and comments for this change! 😵‍💫

Not at all, I actually think that me writing the code-level docs as part of the review is the right choice here.