| 1 | =================================================================
|
|---|
| 2 | ==15934==ERROR: AddressSanitizer: heap-use-after-free on address 0x611000001950 at pc 0x00000852e3ef bp 0x7fff798c0620 sp 0x7fff798c0618
|
|---|
| 3 | READ of size 8 at 0x611000001950 thread T0
|
|---|
| 4 | #0 0x852e3ee in av_freep ffmpeg/libavutil/mem.c:231:5
|
|---|
| 5 | #1 0x50af33b in codec_parameters_reset ffmpeg/libavcodec/utils.c:1985:5
|
|---|
| 6 | #2 0x50afcc1 in avcodec_parameters_free ffmpeg/libavcodec/utils.c:2019:5
|
|---|
| 7 | #3 0x27f77e9 in free_stream ffmpeg/libavformat/utils.c:4374:5
|
|---|
| 8 | #4 0x27893d3 in avformat_free_context ffmpeg/libavformat/utils.c:4417:9
|
|---|
| 9 | #5 0x5de9a8 in ffmpeg_cleanup ffmpeg/fftools/ffmpeg.c:542:9
|
|---|
| 10 | #6 0x5afb94 in exit_program ffmpeg/fftools/cmdutils.c:139:9
|
|---|
| 11 | #7 0x5db972 in main ffmpeg/fftools/ffmpeg.c:4911:5
|
|---|
| 12 | #8 0x7f6911473b96 in __libc_start_main /build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
|
|---|
| 13 | #9 0x41df89 in _start (ffmpeg_g+0x41df89)
|
|---|
| 14 |
|
|---|
| 15 | 0x611000001950 is located 16 bytes inside of 144-byte region [0x611000001940,0x6110000019d0)
|
|---|
| 16 | freed by thread T0 here:
|
|---|
| 17 | #0 0x4ddc70 in __interceptor_free.localalias.0 (ffmpeg_g+0x4ddc70)
|
|---|
| 18 | #1 0x2201c50 in ff_mov_close_hinting ffmpeg/libavformat/movenchint.c:463:5
|
|---|
| 19 |
|
|---|
| 20 | previously allocated by thread T0 here:
|
|---|
| 21 | #0 0x4dea78 in posix_memalign (ffmpeg_g+0x4dea78)
|
|---|
| 22 | #1 0x852ed48 in av_malloc ffmpeg/libavutil/mem.c:87:9
|
|---|
| 23 | #2 0x852ed48 in av_mallocz ffmpeg/libavutil/mem.c:238
|
|---|
| 24 | #3 0x50af2a4 in avcodec_parameters_alloc ffmpeg/libavcodec/utils.c:2005:30
|
|---|
| 25 | #4 0x5724e5 in new_output_stream ffmpeg/fftools/ffmpeg_opt.c:1355:20
|
|---|
| 26 | #5 0x5719d9 in new_data_stream ffmpeg/fftools/ffmpeg_opt.c:1932:11
|
|---|
| 27 | #6 0x7fffffffffffffff (<unknown module>)
|
|---|
| 28 |
|
|---|
| 29 | SUMMARY: AddressSanitizer: heap-use-after-free ffmpeg/libavutil/mem.c:231:5 in av_freep
|
|---|
| 30 | Shadow bytes around the buggy address:
|
|---|
| 31 | 0x0c227fff82d0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
|
|---|
| 32 | 0x0c227fff82e0: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
|
|---|
| 33 | 0x0c227fff82f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
|---|
| 34 | 0x0c227fff8300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
|---|
| 35 | 0x0c227fff8310: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
|---|
| 36 | =>0x0c227fff8320: fa fa fa fa fa fa fa fa fd fd[fd]fd fd fd fd fd
|
|---|
| 37 | 0x0c227fff8330: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
|
|---|
| 38 | 0x0c227fff8340: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
|---|
| 39 | 0x0c227fff8350: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
|---|
| 40 | 0x0c227fff8360: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
|---|
| 41 | 0x0c227fff8370: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
|---|
| 42 | Shadow byte legend (one shadow byte represents 8 application bytes):
|
|---|
| 43 | Addressable: 00
|
|---|
| 44 | Partially addressable: 01 02 03 04 05 06 07
|
|---|
| 45 | Heap left redzone: fa
|
|---|
| 46 | Freed heap region: fd
|
|---|
| 47 | Stack left redzone: f1
|
|---|
| 48 | Stack mid redzone: f2
|
|---|
| 49 | Stack right redzone: f3
|
|---|
| 50 | Stack after return: f5
|
|---|
| 51 | Stack use after scope: f8
|
|---|
| 52 | Global redzone: f9
|
|---|
| 53 | Global init order: f6
|
|---|
| 54 | Poisoned by user: f7
|
|---|
| 55 | Container overflow: fc
|
|---|
| 56 | Array cookie: ac
|
|---|
| 57 | Intra object redzone: bb
|
|---|
| 58 | ASan internal: fe
|
|---|
| 59 | Left alloca redzone: ca
|
|---|
| 60 | Right alloca redzone: cb
|
|---|
| 61 | ==15934==ABORTING
|
|---|
| 62 |
|
|---|
