Advertisement
Guest User

tvh bug

a guest
Jul 8th, 2016
72
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.47 KB | None | 0 0
  1. =================================================================
  2. 28339ERROR: AddressSanitizer: heap-use-after-free on address 0x61900094a488 at pc 0x564a68fecd73 bp 0x7f406431d1f0 sp 0x7f406431d1e8
  3. READ of size 4 at 0x61900094a488 thread T51 (tvh:mi-main)
  4. 28339WARNING: Trying to symbolize code, but external symbolizer is not initialized!
  5. #0 0x564a68fecd72 in service_set_streaming_status_flags /root/tvheadend_debug/src/service.h:570
  6. #1 0x564a68fecd72 in ?? ??:0
  7. #2 0x564a68ff2747 in ts_recv_raw /root/tvheadend_debug/src/input/mpegts/tsdemux.c:297
  8. #3 0x564a68ff2747 in ?? ??:0
  9. #4 0x564a68fe4f0c in mpegts_input_process /root/tvheadend_debug/src/input/mpegts/mpegts_input.c:1357
  10. #5 0x564a68fe4f0c in ?? ??:0
  11. #6 0x564a68fe0c4b in mpegts_input_thread /root/tvheadend_debug/src/input/mpegts/mpegts_input.c:1507
  12. #7 0x564a68fe0c4b in ?? ??:0
  13. #8 0x564a6882a4c7 in thread_wrapper /root/tvheadend_debug/src/wrappers.c:159
  14. #9 0x564a6882a4c7 in ?? ??:0
  15. #10 0x7f408f0136f9 in __reclaim_stacks ??:?
  16. #11 0x7f408f0136f9 in ?? ??:0
  17. #12 0x7f408e090b5c in argp_error ??:?
  18. #13 0x7f408e090b5c in ?? ??:0
  19.  
  20. 0x61900094a488 is located 520 bytes inside of 984-byte region [0x61900094a280,0x61900094a658)
  21. freed by thread T20 (tvh:mtimer) here:
  22. #0 0x564a6875ba79 in free ??:?
  23. #1 0x564a6875ba79 in ?? ??:0
  24. #2 0x564a689d8806 in service_unref /root/tvheadend_debug/src/service.c:882
  25. #3 0x564a689d8806 in ?? ??:0
  26. #4 0x564a689da20e in service_destroy /root/tvheadend_debug/src/service.c:946
  27. #5 0x564a689da20e in ?? ??:0
  28. #6 0x564a689dab99 in service_remove_raw_timer_cb /root/tvheadend_debug/src/service.c:954
  29. #7 0x564a689dab99 in ?? ??:0
  30. #8 0x564a6878d1f4 in mtimer_thread /root/tvheadend_debug/src/main.c:618
  31. #9 0x564a6878d1f4 in ?? ??:0
  32. #10 0x564a6882a4c7 in thread_wrapper /root/tvheadend_debug/src/wrappers.c:159
  33. #11 0x564a6882a4c7 in ?? ??:0
  34. #12 0x7f408f0136f9 in __reclaim_stacks ??:?
  35. #13 0x7f408f0136f9 in ?? ??:0
  36.  
  37. previously allocated by thread T116 (tvh:tcp-start) here:
  38. #0 0x564a6875bcc9 in calloc ??:?
  39. #1 0x564a6875bcc9 in ?? ??:0
  40. #2 0x564a6906c6a5 in mpegts_service_create_raw /root/tvheadend_debug/src/input/mpegts/mpegts_service.c:1021
  41. #3 0x564a6906c6a5 in ?? ??:0
  42. #4 0x564a689b9a19 in subscription_create_from_mux /root/tvheadend_debug/src/subscriptions.c:871
  43. #5 0x564a689b9a19 in ?? ??:0
  44. #6 0x564a68f3c79a in rtsp_start /root/tvheadend_debug/src/satip/rtsp.c:575
  45. #7 0x564a68f3c79a in ?? ??:0
  46. #8 0x564a68f2d47f in rtsp_process_play /root/tvheadend_debug/src/satip/rtsp.c:1384
  47. #9 0x564a68f2d47f in ?? ??:0
  48. #10 0x564a68f28f7c in rtsp_process_request /root/tvheadend_debug/src/satip/rtsp.c:1480
  49. #11 0x564a68f28f7c in ?? ??:0
  50. #12 0x564a688a316e in process_request /root/tvheadend_debug/src/http.c:1178
  51. #13 0x564a688a316e in ?? ??:0
  52. #14 0x564a6889f299 in http_serve_requests /root/tvheadend_debug/src/http.c:1476
  53. #15 0x564a6889f299 in ?? ??:0
  54. #16 0x564a68f262a4 in rtsp_serve /root/tvheadend_debug/src/satip/rtsp.c:1554
  55. #17 0x564a68f262a4 in ?? ??:0
  56. #18 0x564a688704e7 in tcp_server_start /root/tvheadend_debug/src/tcp.c:645
  57. #19 0x564a688704e7 in ?? ??:0
  58. #20 0x564a6882a4c7 in thread_wrapper /root/tvheadend_debug/src/wrappers.c:159
  59. #21 0x564a6882a4c7 in ?? ??:0
  60. #22 0x7f408f0136f9 in __reclaim_stacks ??:?
  61. #23 0x7f408f0136f9 in ?? ??:0
  62.  
  63. Thread T51 (tvh:mi-main) created by T20 (tvh:mtimer) here:
  64. #0 0x564a6874b0b2 in pthread_create ??:?
  65. #1 0x564a6874b0b2 in ?? ??:0
  66. #2 0x564a68829edb in tvhthread_create /root/tvheadend_debug/src/wrappers.c:177
  67. #3 0x564a68829edb in ?? ??:0
  68. #4 0x564a68fdb18f in mpegts_input_thread_start /root/tvheadend_debug/src/input/mpegts/mpegts_input.c:1750
  69. #5 0x564a68fdb18f in ?? ??:0
  70. #6 0x564a6878d1f4 in mtimer_thread /root/tvheadend_debug/src/main.c:618
  71. #7 0x564a6878d1f4 in ?? ??:0
  72. #8 0x564a6882a4c7 in thread_wrapper /root/tvheadend_debug/src/wrappers.c:159
  73. #9 0x564a6882a4c7 in ?? ??:0
  74. #10 0x7f408f0136f9 in __reclaim_stacks ??:?
  75. #11 0x7f408f0136f9 in ?? ??:0
  76.  
  77. Thread T20 (tvh:mtimer) created by T0 here:
  78. #0 0x564a6874b0b2 in pthread_create ??:?
  79. #1 0x564a6874b0b2 in ?? ??:0
  80. #2 0x564a68829edb in tvhthread_create /root/tvheadend_debug/src/wrappers.c:177
  81. #3 0x564a68829edb in ?? ??:0
  82. #4 0x564a68786051 in main /root/tvheadend_debug/src/main.c:1261
  83. #5 0x564a68786051 in ?? ??:0
  84. #6 0x7f408dfaa82f in ?? ??:0
  85. #7 0x7f408dfaa82f in ?? ??:0
  86.  
  87. Thread T116 (tvh:tcp-start) created by T13 (tvh:tcp-loop) here:
  88. #0 0x564a6874b0b2 in pthread_create ??:?
  89. #1 0x564a6874b0b2 in ?? ??:0
  90. #2 0x564a68829edb in tvhthread_create /root/tvheadend_debug/src/wrappers.c:177
  91. #3 0x564a68829edb in ?? ??:0
  92. #4 0x564a6886e48e in tcp_server_loop /root/tvheadend_debug/src/tcp.c:738
  93. #5 0x564a6886e48e in ?? ??:0
  94. #6 0x564a6882a4c7 in thread_wrapper /root/tvheadend_debug/src/wrappers.c:159
  95. #7 0x564a6882a4c7 in ?? ??:0
  96. #8 0x7f408f0136f9 in __reclaim_stacks ??:?
  97. #9 0x7f408f0136f9 in ?? ??:0
  98.  
  99. Thread T13 (tvh:tcp-loop) created by T0 here:
  100. #0 0x564a6874b0b2 in pthread_create ??:?
  101. #1 0x564a6874b0b2 in ?? ??:0
  102. #2 0x564a68829edb in tvhthread_create /root/tvheadend_debug/src/wrappers.c:177
  103. #3 0x564a68829edb in ?? ??:0
  104. #4 0x564a6886c87e in tcp_server_init /root/tvheadend_debug/src/tcp.c:1112
  105. #5 0x564a6886c87e in ?? ??:0
  106. #6 0x564a68785cbd in main /root/tvheadend_debug/src/main.c:1207
  107. #7 0x564a68785cbd in ?? ??:0
  108. #8 0x7f408dfaa82f in ?? ??:0
  109. #9 0x7f408dfaa82f in ?? ??:0
  110.  
  111. SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ??
  112. Shadow bytes around the buggy address:
  113. 0x0c3280121440: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  114. 0x0c3280121450: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  115. 0x0c3280121460: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  116. 0x0c3280121470: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  117. 0x0c3280121480: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  118. =>0x0c3280121490: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  119. 0x0c32801214a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  120. 0x0c32801214b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  121. 0x0c32801214c0: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa
  122. 0x0c32801214d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  123. 0x0c32801214e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  124. Shadow byte legend (one shadow byte represents 8 application bytes):
  125. Addressable: 00
  126. Partially addressable: 01 02 03 04 05 06 07
  127. Heap left redzone: fa
  128. Heap right redzone: fb
  129. Freed heap region: fd
  130. Stack left redzone: f1
  131. Stack mid redzone: f2
  132. Stack right redzone: f3
  133. Stack partial redzone: f4
  134. Stack after return: f5
  135. Stack use after scope: f8
  136. Global redzone: f9
  137. Global init order: f6
  138. Poisoned by user: f7
  139. ASan internal: fe
  140. 28339ABORTING
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement