JanusCrashLibasan3

    #0 0x7fbee426edbe in janus_videoroom_hangup_media_internal plugins/janus_videoroom.c:4840
    #1 0x7fbee426d2da in janus_videoroom_hangup_media plugins/janus_videoroom.c:4745
    #2 0x47ae39 in janus_ice_outgoing_traffic_handle /janus-gateway/ice.c:3851
    #3 0x43eab1 in janus_ice_outgoing_traffic_dispatch /janus-gateway/ice.c:358
    #4 0x7fbef7031196 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a196)
    #5 0x7fbef70313ef  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a3ef)
    #6 0x7fbef7031711 in g_main_loop_run (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a711)
    #7 0x44bdf3 in janus_ice_handle_thread /janus-gateway/ice.c:1101
    #8 0x7fbef7057c54  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x70c54)
    #9 0x7fbef58b86b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
    #10 0x7fbef55ee41c in clone (/lib/x86_64-linux-gnu/libc.so.6+0x10741c)

0x61300022c97c is located 316 bytes inside of 360-byte region [0x61300022c840,0x61300022c9a8)
freed by thread T187 (hloop 119646311) here:
    #0 0x7fbef7a3d2ca in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x982ca)
    #1 0x7fbee422ba97 in janus_videoroom_subscriber_free plugins/janus_videoroom.c:1553
    #2 0x7fbee426dbe7 in janus_videoroom_hangup_subscriber plugins/janus_videoroom.c:4775
    #3 0x7fbee426ea9e in janus_videoroom_hangup_media_internal plugins/janus_videoroom.c:4831
    #4 0x7fbee426d2da in janus_videoroom_hangup_media plugins/janus_videoroom.c:4745
    #5 0x47ae39 in janus_ice_outgoing_traffic_handle /janus-gateway/ice.c:3851
    #6 0x43eab1 in janus_ice_outgoing_traffic_dispatch /janus-gateway/ice.c:358
    #7 0x7fbef7031196 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a196)

previously allocated by thread T19 here:
    #0 0x7fbef7a3d79a in __interceptor_calloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x9879a)
    #1 0x7fbef7036810 in g_malloc0 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4f810)
    #2 0x7fbef7057c54  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x70c54)

Thread T189 (hloop 105251533) created by T9 here:
    #0 0x7fbef79db253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
    #1 0x7fbef70758ff  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)

Thread T9 created by T0 here:
    #0 0x7fbef79db253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
    #1 0x7fbef70758ff  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)

Thread T187 (hloop 119646311) created by T9 here:
    #0 0x7fbef79db253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
    #1 0x7fbef70758ff  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)

Thread T19 created by T0 here:
    #0 0x7fbef79db253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
    #1 0x7fbef70758ff  (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)

SUMMARY: AddressSanitizer: heap-use-after-free plugins/janus_videoroom.c:4840 janus_videoroom_hangup_media_internal
Shadow bytes around the buggy address:
  0x0c268003d8d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c268003d8e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c268003d8f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
  0x0c268003d900: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x0c268003d910: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0c268003d920: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd[fd]
  0x0c268003d930: fd fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa
  0x0c268003d940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c268003d950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x0c268003d960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa
  0x0c268003d970: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Heap right redzone:      fb
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack partial redzone:   f4
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
==25==ABORTING