Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #0 0x7ff266267c33 in janus_videoroom_incoming_rtcp plugins/janus_videoroom.c:4507
- #1 0x469683 in janus_ice_cb_nice_recv /janus-gateway/ice.c:2839
- #2 0x7ff27958816f in nice_component_emit_io_callback /libnice/agent/component.c:928
- #3 0x7ff2795927f5 in component_io_cb /libnice/agent/agent.c:5385
- #4 0x7ff276ab8910 (/usr/lib/x86_64-linux-gnu/libgio-2.0.so.0+0x77910)
- #5 0x7ff279061049 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a049)
- #6 0x7ff2790613ef (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a3ef)
- #7 0x7ff279061711 in g_main_loop_run (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a711)
- #8 0x44bdf3 in janus_ice_handle_thread /janus-gateway/ice.c:1101
- #9 0x7ff279087c54 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x70c54)
- #10 0x7ff2778e86b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9)
- #11 0x7ff27761e41c in clone (/lib/x86_64-linux-gnu/libc.so.6+0x10741c)
- 0x613000069194 is located 340 bytes inside of 360-byte region [0x613000069040,0x6130000691a8)
- freed by thread T75 (hloop 115091008) here:
- #0 0x7ff279a6d2ca in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x982ca)
- #1 0x7ff26622ba97 in janus_videoroom_subscriber_free plugins/janus_videoroom.c:1553
- #2 0x7ff26626dbe7 in janus_videoroom_hangup_subscriber plugins/janus_videoroom.c:4775
- #3 0x7ff26626ea9e in janus_videoroom_hangup_media_internal plugins/janus_videoroom.c:4831
- #4 0x7ff26626d2da in janus_videoroom_hangup_media plugins/janus_videoroom.c:4745
- #5 0x47ae39 in janus_ice_outgoing_traffic_handle /janus-gateway/ice.c:3851
- #6 0x43eab1 in janus_ice_outgoing_traffic_dispatch /janus-gateway/ice.c:358
- #7 0x7ff279061196 in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4a196)
- previously allocated by thread T19 here:
- #0 0x7ff279a6d79a in __interceptor_calloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x9879a)
- #1 0x7ff279066810 in g_malloc0 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x4f810)
- #2 0x7ff279087c54 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x70c54)
- Thread T77 (hloop 873071106) created by T9 here:
- #0 0x7ff279a0b253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
- #1 0x7ff2790a58ff (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)
- Thread T9 created by T0 here:
- #0 0x7ff279a0b253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
- #1 0x7ff2790a58ff (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)
- Thread T75 (hloop 115091008) created by T9 here:
- #0 0x7ff279a0b253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
- #1 0x7ff2790a58ff (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)
- Thread T19 created by T0 here:
- #0 0x7ff279a0b253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253)
- #1 0x7ff2790a58ff (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x8e8ff)
- SUMMARY: AddressSanitizer: heap-use-after-free plugins/janus_videoroom.c:4507 janus_videoroom_incoming_rtcp
- Shadow bytes around the buggy address:
- 0x0c26800051e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- 0x0c26800051f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- 0x0c2680005200: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
- 0x0c2680005210: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
- 0x0c2680005220: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
- =>0x0c2680005230: fd fd[fd]fd fd fa fa fa fa fa fa fa fa fa fa fa
- 0x0c2680005240: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
- 0x0c2680005250: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
- 0x0c2680005260: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
- 0x0c2680005270: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- 0x0c2680005280: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
- Shadow byte legend (one shadow byte represents 8 application bytes):
- Addressable: 00
- Partially addressable: 01 02 03 04 05 06 07
- Heap left redzone: fa
- Heap right redzone: fb
- Freed heap region: fd
- Stack left redzone: f1
- Stack mid redzone: f2
- Stack right redzone: f3
- Stack partial redzone: f4
- Stack after return: f5
- Stack use after scope: f8
- Global redzone: f9
- Global init order: f6
- Poisoned by user: f7
- Container overflow: fc
- Array cookie: ac
- Intra object redzone: bb
- ASan internal: fe
Advertisement
Add Comment
Please, Sign In to add comment