Created
July 28, 2020 02:58
-
-
Save 648540858/09962bf5974111c5f67c060ceba2d366 to your computer and use it in GitHub Desktop.
janus.crash
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ================================================================= | |
| [Tue Jul 28 10:53:55 2020] [janus.plugin.videocall-0x604000006050] No WebRTC media anymore | |
| ==25767==ERROR: AddressSanitizer: heap-use-after-free on address 0x614000010040 at pc 0x7fc27780381b bp 0x7fc273e6ff20 sp 0x7fc273e6ff10 | |
| READ of size 8 at 0x614000010040 thread T30 (hloop 312140780) | |
| [Tue Jul 28 10:53:55 2020] Destroying session 5150101640793024; 0x607000007480 | |
| [Tue Jul 28 10:53:55 2020] Detaching handle from JANUS VideoCall plugin; 0x61200005c140 0x604000006050 0x61200005c140 0x614000010640 | |
| [Tue Jul 28 10:53:55 2020] [ERR] [janus.c:janus_process_incoming_request:1089] Couldn't find any session 5150101640793024... | |
| [Tue Jul 28 10:53:55 2020] [WSS-0x617000080000] Destroying WebSocket client | |
| [Tue Jul 28 10:53:55 2020] [ERR] [janus.c:janus_process_incoming_request:1089] Couldn't find any session 5150101640793024... | |
| [Tue Jul 28 10:53:55 2020] [WSS-0x617000080380] Destroying WebSocket client | |
| #0 0x7fc27780381a in janus_videocall_hangup_media_internal plugins/janus_videocall.c:1008 | |
| #1 0x7fc277804194 in janus_videocall_hangup_media plugins/janus_videocall.c:976 | |
| #2 0x559298cbdf19 in janus_ice_outgoing_traffic_handle /home/zc/janus/janus-gateway/ice.c:4117 | |
| #3 0x559298cc77ed in janus_ice_outgoing_traffic_dispatch /home/zc/janus/janus-gateway/ice.c:376 | |
| #4 0x7fc287dfb8bc in g_main_context_dispatch (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x518bc) | |
| #5 0x7fc287dfbb3f (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x51b3f) | |
| #6 0x7fc287dfbe32 in g_main_loop_run (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x51e32) | |
| #7 0x559298c8ee24 in janus_ice_handle_thread /home/zc/janus/janus-gateway/ice.c:1165 | |
| #8 0x7fc287e25180 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x7b180) | |
| #9 0x7fc28787b668 in start_thread /build/glibc-5mDdLG/glibc-2.30/nptl/pthread_create.c:479 | |
| #10 0x7fc2877a32b2 in clone (/lib/x86_64-linux-gnu/libc.so.6+0x1222b2) | |
| 0x614000010040 is located 0 bytes inside of 432-byte region [0x614000010040,0x6140000101f0) | |
| freed by thread T28 (hloop 258513789) here: | |
| #0 0x7fc2884746ef in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.5+0x10d6ef) | |
| #1 0x7fc2777f8155 in janus_videocall_session_free plugins/janus_videocall.c:414 | |
| #2 0x7fc2777f83cd in janus_videocall_session_destroy plugins/janus_videocall.c:401 | |
| #3 0x7fc287de8ec3 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x3eec3) | |
| previously allocated by thread T9 here: | |
| #0 0x7fc288474ce6 in calloc (/lib/x86_64-linux-gnu/libasan.so.5+0x10dce6) | |
| #1 0x7fc287e015b0 in g_malloc0 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x575b0) | |
| #2 0x559298c89af1 in janus_ice_handle_attach_plugin /home/zc/janus/janus-gateway/ice.c:1227 | |
| #3 0x559298cd99d3 in janus_process_incoming_request /home/zc/janus/janus-gateway/janus.c:1158 | |
| #4 0x559298ced66e in janus_transport_requests /home/zc/janus/janus-gateway/janus.c:3229 | |
| #5 0x7fc287e25180 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x7b180) | |
| Thread T30 (hloop 312140780) created by T9 here: | |
| #0 0x7fc2883a1805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805) | |
| #1 0x7fc287e47a16 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x9da16) | |
| Thread T9 created by T0 here: | |
| #0 0x7fc2883a1805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805) | |
| #1 0x7fc287e47a16 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x9da16) | |
| Thread T28 (hloop 258513789) created by T9 here: | |
| #0 0x7fc2883a1805 in pthread_create (/lib/x86_64-linux-gnu/libasan.so.5+0x3a805) | |
| #1 0x7fc287e47a16 (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x9da16) | |
| SUMMARY: AddressSanitizer: heap-use-after-free plugins/janus_videocall.c:1008 in janus_videocall_hangup_media_internal | |
| Shadow bytes around the buggy address: | |
| 0x0c287fff9fb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa | |
| 0x0c287fff9fc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa | |
| 0x0c287fff9fd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa | |
| 0x0c287fff9fe0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa | |
| 0x0c287fff9ff0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa | |
| =>0x0c287fffa000: fa fa fa fa fa fa fa fa[fd]fd fd fd fd fd fd fd | |
| 0x0c287fffa010: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd | |
| 0x0c287fffa020: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd | |
| 0x0c287fffa030: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa | |
| 0x0c287fffa040: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 | |
| 0x0c287fffa050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
| Shadow byte legend (one shadow byte represents 8 application bytes): | |
| Addressable: 00 | |
| Partially addressable: 01 02 03 04 05 06 07 | |
| Heap left redzone: fa | |
| Freed heap region: fd | |
| Stack left redzone: f1 | |
| Stack mid redzone: f2 | |
| Stack right redzone: f3 | |
| Stack after return: f5 | |
| Stack use after scope: f8 | |
| Global redzone: f9 | |
| Global init order: f6 | |
| Poisoned by user: f7 | |
| Container overflow: fc | |
| Array cookie: ac | |
| Intra object redzone: bb | |
| ASan internal: fe | |
| Left alloca redzone: ca | |
| Right alloca redzone: cb | |
| Shadow gap: cc | |
| ==25767==ABORTING | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment