Skip to content

Heap-Use-After-Free Crash in SRS HTTP-FLV Streaming #4429

@maplelover

Description

@maplelover

Describe the bug
Crash

Version
SRS 7, develop branch

To Reproduce
Steps to reproduce the behavior:

  1. push RTMP stream
  2. play stream via flv

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context

[2025-08-11 08:05:34.915][INFO][1][0l4ejl79] -> HTS http: got 12 msgs, age=304447263, min=8, mw=100
[2025-08-11 08:05:35.092][INFO][1][xin4ma89] Hybrid cpu=1.00%,797MB, cid=1,0, timer=62,0,0, clock=0,48,1,0,0,0,0,0,0, objs=(pkt:140,raw:44,fua:96,msg:339,oth:1,buf:43)
[2025-08-11 08:05:38.793][INFO][1][8152949u] -> PLA time=313266976, msgs=8, okbps=0,815,811, ikbps=0,0,0, mw=100/0
[2025-08-11 08:05:40.093][INFO][1][xin4ma89] Hybrid cpu=1.00%,798MB, cid=1,0, timer=62,0,0, clock=0,48,1,0,0,0,0,0,0, objs=(pkt:140,raw:44,fua:96,msg:339,oth:1,buf:43)
[2025-08-11 08:05:44.963][INFO][1][0l4ejl79] -> HTS http: got 6 msgs, age=314480482, min=8, mw=100
[2025-08-11 08:05:45.094][INFO][1][xin4ma89] Hybrid cpu=2.00%,799MB, cid=1,0, timer=62,0,0, clock=0,48,1,0,0,0,0,0,0, objs=(pkt:161,raw:45,fua:115,msg:366,oth:1,buf:44)
[2025-08-11 08:05:45.438][INFO][1][71jeh4k5] <- CPB time=320030855, okbps=0,0,0, ikbps=0,727,819, mr=0/350, p1stpt=20000, pnt=5000
[2025-08-11 08:05:48.715][INFO][1][8152949u] -> PLA time=323312389, msgs=10, okbps=0,815,811, ikbps=0,0,0, mw=100/0
[2025-08-11 08:05:50.147][INFO][1][xin4ma89] Hybrid cpu=1.00%,798MB, cid=1,0, timer=62,0,0, clock=0,48,1,0,0,0,0,0,0, objs=(pkt:161,raw:45,fua:115,msg:366,oth:1,buf:44)
[2025-08-11 08:05:50.224][INFO][1][0l4ejl79] http: on_stop ok, client_id=0l4ejl79, url=http://example.com/api/misc/srs/callback, request={"server_id":"vid-3c4862s","service_id":"35gce4mw","action":"on_stop","client_id":"0l4ejl79","ip":"112.96.212.112","vhost":"__defaultVhost__","app":"demo","tcUrl":"rtmp://__defaultVhost__/demo","stream":"link","param":"","stream_url":"/demo/link","stream_id":"vid-98c9339"}, response=0
[2025-08-11 08:05:50.224][INFO][1][0l4ejl79] TCP: before dispose resource(HttpConn)(0x60d000189c60), conns=3, zombies=0, ign=0, inz=0, ind=0
[2025-08-11 08:05:50.224][WARN][1][0l4ejl79][11] client disconnect peer. ret=1007
[2025-08-11 08:05:50.224][INFO][1][6q017621] TCP: clear zombies=1 resources, conns=3, removing=0, unsubs=0
[2025-08-11 08:05:50.224][INFO][1][0l4ejl79] TCP: disposing #0 resource(HttpConn)(0x60d000189c60), conns=3, disposing=1, zombies=0
[2025-08-11 08:05:55.148][INFO][1][xin4ma89] Hybrid cpu=1.00%,798MB, cid=2,1, timer=62,0,0, clock=0,48,1,1,0,0,1,0,0, free=1, objs=(pkt:173,raw:44,fua:128,msg:343,oth:1,buf:43)
[2025-08-11 08:05:55.194][INFO][1][43c2t756] HTTP #0 172.17.0.1:41566 GET http://live.example.com/demo/link.flv, content-length=-1
[2025-08-11 08:05:55.263][INFO][1][71jeh4k5] cleanup when unpublish
[2025-08-11 08:05:55.263][INFO][1][71jeh4k5] cleanup when unpublish, created=1, deliver=1
[2025-08-11 08:05:55.263][WARN][1][71jeh4k5][4] 1 frames left in the queue on closing
[2025-08-11 08:05:55.264][INFO][1][4518q7e9] http: unmount flv stream for sid=/demo/link, i=0
[2025-08-11 08:05:55.283][INFO][1][43c2t756] http: on_play ok, client_id=43c2t756, url=http://example.com/api/misc/srs/callback, request={"server_id":"vid-3c4862s","service_id":"35gce4mw","action":"on_play","client_id":"43c2t756","ip":"112.96.212.112","vhost":"__defaultVhost__","app":"demo","stream":"link","tcUrl":"rtmp://__defaultVhost__/demo","param":"","pageUrl":"https://example.com/","stream_url":"/demo/link","stream_id":"vid-98c9339"}, response=0
=================================================================
==1==ERROR: AddressSanitizer: heap-use-after-free on address 0x607000616e30 at pc 0x55e77b72dbe6 bp 0x7f645cc0b2c0 sp 0x7f645cc0b2b0
READ of size 8 at 0x607000616e30 thread T0 (srs)
    #0 0x55e77b72dbe5 in SrsLiveStream::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/app/srs_app_http_stream.cpp:656
    #1 0x55e77b5f6cce in SrsHttpServeMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:792
    #2 0x55e77b887637 in SrsHttpServer::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/app/srs_app_http_conn.cpp:537
    #3 0x55e77b5fa353 in SrsHttpAuthMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:983
    #4 0x55e77b5f9773 in SrsHttpCorsMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:950
    #5 0x55e77b883478 in SrsHttpConn::process_request(ISrsHttpResponseWriter*, ISrsHttpMessage*, int) src/app/srs_app_http_conn.cpp:234
    #6 0x55e77b882bba in SrsHttpConn::process_requests(SrsRequest**) src/app/srs_app_http_conn.cpp:207
    #7 0x55e77b88201a in SrsHttpConn::do_cycle() src/app/srs_app_http_conn.cpp:160
    #8 0x55e77b8814ba in SrsHttpConn::cycle() src/app/srs_app_http_conn.cpp:107
    #9 0x55e77b744ef7 in SrsFastCoroutine::cycle() src/app/srs_app_st.cpp:309
    #10 0x55e77b745047 in SrsFastCoroutine::pfn(void*) src/app/srs_app_st.cpp:324
    #11 0x55e77bb18bb0 in _st_thread_main /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:385
    #12 0x55e77bb19f7a in st_thread_create /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:673
    #13 0x604000eb22cf  (<unknown module>)

0x607000616e30 is located 48 bytes inside of 80-byte region [0x607000616e00,0x607000616e50)
freed by thread T0 (srs) here:
    #0 0x55e77b3f6c1f in operator delete(void*) (/usr/local/srs/objs/srs+0x4f2c1f)
    #1 0x55e77b72cc89 in SrsLiveStream::~SrsLiveStream() src/app/srs_app_http_stream.cpp:608
    #2 0x55e77b73b550 in SrsUniquePtr<SrsLiveStream>::~SrsUniquePtr() src/core/srs_core_autofree.hpp:45
    #3 0x55e77b7396eb in SrsHttpStreamDestroy::call() src/app/srs_app_http_stream.cpp:1314
    #4 0x55e77b930b9f in SrsAsyncCallWorker::flush_tasks() src/app/srs_app_async_call.cpp:120
    #5 0x55e77b930854 in SrsAsyncCallWorker::cycle() src/app/srs_app_async_call.cpp:93
    #6 0x55e77b744ef7 in SrsFastCoroutine::cycle() src/app/srs_app_st.cpp:309
    #7 0x55e77b745047 in SrsFastCoroutine::pfn(void*) src/app/srs_app_st.cpp:324
    #8 0x55e77bb18bb0 in _st_thread_main /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:385
    #9 0x55e77bb19f7a in st_thread_create /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:673

previously allocated by thread T0 (srs) here:
    #0 0x55e77b3f5c87 in operator new(unsigned long) (/usr/local/srs/objs/srs+0x4f1c87)
    #1 0x55e77b7350e9 in SrsHttpStreamServer::http_mount(SrsRequest*) src/app/srs_app_http_stream.cpp:1072
    #2 0x55e77b737941 in SrsHttpStreamServer::hijack(ISrsHttpMessage*, ISrsHttpHandler**) src/app/srs_app_http_stream.cpp:1238
    #3 0x55e77b5f7337 in SrsHttpServeMux::find_handler(ISrsHttpMessage*, ISrsHttpHandler**) src/protocol/srs_protocol_http_stack.cpp:818
    #4 0x55e77b88751a in SrsHttpServer::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/app/srs_app_http_conn.cpp:533
    #5 0x55e77b5fa353 in SrsHttpAuthMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:983
    #6 0x55e77b5f9773 in SrsHttpCorsMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:950
    #7 0x55e77b883478 in SrsHttpConn::process_request(ISrsHttpResponseWriter*, ISrsHttpMessage*, int) src/app/srs_app_http_conn.cpp:234
    #8 0x55e77b882bba in SrsHttpConn::process_requests(SrsRequest**) src/app/srs_app_http_conn.cpp:207
    #9 0x55e77b88201a in SrsHttpConn::do_cycle() src/app/srs_app_http_conn.cpp:160
    #10 0x55e77b8814ba in SrsHttpConn::cycle() src/app/srs_app_http_conn.cpp:107
    #11 0x55e77b744ef7 in SrsFastCoroutine::cycle() src/app/srs_app_st.cpp:309
    #12 0x55e77b745047 in SrsFastCoroutine::pfn(void*) src/app/srs_app_st.cpp:324
    #13 0x55e77bb18bb0 in _st_thread_main /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:385
    #14 0x55e77bb19f7a in st_thread_create /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:673

SUMMARY: AddressSanitizer: heap-use-after-free src/app/srs_app_http_stream.cpp:656 in SrsLiveStream::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*)
Shadow bytes around the buggy address:
  0x0c0e800bad70: fa fa fa fa fa fa fa fa fa fa 00 00 00 00 00 00
  0x0c0e800bad80: 00 00 04 fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c0e800bad90: 00 fa fa fa fa fa 00 00 00 00 00 00 00 00 03 fa
  0x0c0e800bada0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e800badb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c0e800badc0: fd fd fd fd fd fd[fd]fd fd fd fa fa fa fa fa fa
  0x0c0e800badd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e800bade0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e800badf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e800bae00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c0e800bae10: fa fa fa fa 00 00 00 00 00 00 00 00 04 fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0] =================================================================
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0] ==1==ERROR: AddressSanitizer: heap-use-after-free on address 0x607000616e30 at pc 0x55e77b72dbe6 bp 0x7f645cc0b2c0 sp 0x7f645cc0b2b0
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0] READ of size 8 at 0x607000616e30 thread T0 (srs)
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #0 0x55e77b72dbe5 in SrsLiveStream::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/app/srs_app_http_stream.cpp:656, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #1 0x55e77b5f6cce in SrsHttpServeMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:792, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #2 0x55e77b887637 in SrsHttpServer::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/app/srs_app_http_conn.cpp:537, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #3 0x55e77b5fa353 in SrsHttpAuthMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:983, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #4 0x55e77b5f9773 in SrsHttpCorsMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:950, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #5 0x55e77b883478 in SrsHttpConn::process_request(ISrsHttpResponseWriter*, ISrsHttpMessage*, int) src/app/srs_app_http_conn.cpp:234, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #6 0x55e77b882bba in SrsHttpConn::process_requests(SrsRequest**) src/app/srs_app_http_conn.cpp:207, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #7 0x55e77b88201a in SrsHttpConn::do_cycle() src/app/srs_app_http_conn.cpp:160, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #8 0x55e77b8814ba in SrsHttpConn::cycle() src/app/srs_app_http_conn.cpp:107, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #9 0x55e77b744ef7 in SrsFastCoroutine::cycle() src/app/srs_app_st.cpp:309, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #10 0x55e77b745047 in SrsFastCoroutine::pfn(void*) src/app/srs_app_st.cpp:324, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #11 0x55e77bb18bb0 in _st_thread_main /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:385, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #12 0x55e77bb19f7a in st_thread_create /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:673, r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0]     #13 0x604000eb22cf  (<unknown module>), r0=1093
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0] 0x607000616e30 is located 48 bytes inside of 80-byte region [0x607000616e00,0x607000616e50)
[2025-08-11 08:05:55.327][ERROR][1][43c2t756][0] freed by thread T0 (srs) here:
sh: 1: addr2line: not found
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #0 0x55e77b3f6c1f in operator delete(void*) (/usr/local/srs/objs/srs+0x4f2c1f), r0=1094
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #1 0x55e77b72cc89 in SrsLiveStream::~SrsLiveStream() src/app/srs_app_http_stream.cpp:608, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #2 0x55e77b73b550 in SrsUniquePtr<SrsLiveStream>::~SrsUniquePtr() src/core/srs_core_autofree.hpp:45, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #3 0x55e77b7396eb in SrsHttpStreamDestroy::call() src/app/srs_app_http_stream.cpp:1314, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #4 0x55e77b930b9f in SrsAsyncCallWorker::flush_tasks() src/app/srs_app_async_call.cpp:120, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #5 0x55e77b930854 in SrsAsyncCallWorker::cycle() src/app/srs_app_async_call.cpp:93, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #6 0x55e77b744ef7 in SrsFastCoroutine::cycle() src/app/srs_app_st.cpp:309, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #7 0x55e77b745047 in SrsFastCoroutine::pfn(void*) src/app/srs_app_st.cpp:324, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #8 0x55e77bb18bb0 in _st_thread_main /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:385, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0]     #9 0x55e77bb19f7a in st_thread_create /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:673, r0=1093
[2025-08-11 08:05:55.330][ERROR][1][43c2t756][0] previously allocated by thread T0 (srs) here:
sh: 1: addr2line: not found
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #0 0x55e77b3f5c87 in operator new(unsigned long) (/usr/local/srs/objs/srs+0x4f1c87), r0=1094
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #1 0x55e77b7350e9 in SrsHttpStreamServer::http_mount(SrsRequest*) src/app/srs_app_http_stream.cpp:1072, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #2 0x55e77b737941 in SrsHttpStreamServer::hijack(ISrsHttpMessage*, ISrsHttpHandler**) src/app/srs_app_http_stream.cpp:1238, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #3 0x55e77b5f7337 in SrsHttpServeMux::find_handler(ISrsHttpMessage*, ISrsHttpHandler**) src/protocol/srs_protocol_http_stack.cpp:818, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #4 0x55e77b88751a in SrsHttpServer::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/app/srs_app_http_conn.cpp:533, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #5 0x55e77b5fa353 in SrsHttpAuthMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:983, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #6 0x55e77b5f9773 in SrsHttpCorsMux::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*) src/protocol/srs_protocol_http_stack.cpp:950, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #7 0x55e77b883478 in SrsHttpConn::process_request(ISrsHttpResponseWriter*, ISrsHttpMessage*, int) src/app/srs_app_http_conn.cpp:234, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #8 0x55e77b882bba in SrsHttpConn::process_requests(SrsRequest**) src/app/srs_app_http_conn.cpp:207, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #9 0x55e77b88201a in SrsHttpConn::do_cycle() src/app/srs_app_http_conn.cpp:160, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #10 0x55e77b8814ba in SrsHttpConn::cycle() src/app/srs_app_http_conn.cpp:107, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #11 0x55e77b744ef7 in SrsFastCoroutine::cycle() src/app/srs_app_st.cpp:309, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #12 0x55e77b745047 in SrsFastCoroutine::pfn(void*) src/app/srs_app_st.cpp:324, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #13 0x55e77bb18bb0 in _st_thread_main /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:385, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]     #14 0x55e77bb19f7a in st_thread_create /srs/trunk/objs/Platform-SRS7-Linux-5.15.0-GCC9.4.0-x86_64/st-srs/sched.c:673, r0=1093
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0] SUMMARY: AddressSanitizer: heap-use-after-free src/app/srs_app_http_stream.cpp:656 in SrsLiveStream::serve_http(ISrsHttpResponseWriter*, ISrsHttpMessage*)
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0] Shadow bytes around the buggy address:
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800bad70: fa fa fa fa fa fa fa fa fa fa 00 00 00 00 00 00
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800bad80: 00 00 04 fa fa fa fa fa 00 00 00 00 00 00 00 00
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800bad90: 00 fa fa fa fa fa 00 00 00 00 00 00 00 00 03 fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800bada0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800badb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0] =>0x0c0e800badc0: fd fd fd fd fd fd[fd]fd fd fd fa fa fa fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800badd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800bade0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800badf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800bae00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   0x0c0e800bae10: fa fa fa fa 00 00 00 00 00 00 00 00 04 fa fa fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0] Shadow byte legend (one shadow byte represents 8 application bytes):
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Addressable:           00
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Partially addressable: 01 02 03 04 05 06 07 
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Heap left redzone:       fa
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Freed heap region:       fd
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Stack left redzone:      f1
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Stack mid redzone:       f2
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Stack right redzone:     f3
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Stack after return:      f5
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Stack use after scope:   f8
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Global redzone:          f9
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Global init order:       f6
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Poisoned by user:        f7
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Container overflow:      fc
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Array cookie:            ac
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Intra object redzone:    bb
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   ASan internal:           fe
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Left alloca redzone:     ca
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Right alloca redzone:    cb
[2025-08-11 08:05:55.331][ERROR][1][43c2t756][0]   Shadow gap:              cc
==1==ABORTING

Metadata

Metadata

Assignees

Labels

EnglishNativeThis issue is conveyed exclusively in English.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions