Skip to content

Instantly share code, notes, and snippets.

@tespio
Created April 8, 2024 09:11
Show Gist options
  • Save tespio/1ffdc026c90bc2337b84492b656cf626 to your computer and use it in GitHub Desktop.
Save tespio/1ffdc026c90bc2337b84492b656cf626 to your computer and use it in GitHub Desktop.
janus 1.2.2 libasan log
Apr 8 00:26:40 janus4vm janus[1746]: ==1746==ERROR: AddressSanitizer: heap-use-after-free on address 0x60c00032cca8 at pc 0x7f7496bb94c9 bp 0x7f7496a782d0 sp 0x7f7496a782c0
Apr 8 00:26:40 janus4vm janus[1746]: READ of size 8 at 0x60c00032cca8 thread T5
Apr 8 00:26:40 janus4vm janus[1746]: #0 0x7f7496bb94c8 in janus_videoroom_handler plugins/janus_videoroom.c:11680
Apr 8 00:26:40 janus4vm janus[1746]: #1 0x7f749d729ae0 (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x7bae0)
Apr 8 00:26:40 janus4vm janus[1746]: #2 0x7f749d0f9608 in start_thread /build/glibc-wuryBv/glibc-2.31/nptl/pthread_create.c:477
Apr 8 00:26:40 janus4vm janus[1746]: #3 0x7f749d01e352 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x11f352)
Apr 8 00:26:40 janus4vm janus[1746]: 0x60c00032cca8 is located 40 bytes inside of 128-byte region [0x60c00032cc80,0x60c00032cd00)
Apr 8 00:26:40 janus4vm janus[1746]: freed by thread T1768999 (hloop 605150956) here:
Apr 8 00:26:40 janus4vm janus[1746]: #0 0x7f749db8d40f in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:122
Apr 8 00:26:40 janus4vm janus[1746]: #1 0x7f7496aaadaa in janus_videoroom_subscriber_free plugins/janus_videoroom.c:2338
Apr 8 00:26:40 janus4vm janus[1746]: #2 0x7f7496ae8a7f in janus_videoroom_destroy_session plugins/janus_videoroom.c:4039
Apr 8 00:26:40 janus4vm janus[1746]: #3 0x564b2cc9a0ab in janus_ice_outgoing_traffic_handle /root/build-master-asan/janus-gateway/src/ice.c:4621
Apr 8 00:26:40 janus4vm janus[1746]: #4 0x564b2cca41ae in janus_ice_outgoing_traffic_dispatch /root/build-master-asan/janus-gateway/src/ice.c:551
Apr 8 00:26:40 janus4vm janus[1746]: #5 0x7f749d70017c in g_main_context_dispatch (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x5217c)
Apr 8 00:26:40 janus4vm janus[1746]: previously allocated by thread T5 here:
Apr 8 00:26:40 janus4vm janus[1746]: #0 0x7f749db8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
Apr 8 00:26:40 janus4vm janus[1746]: #1 0x7f749d705ef0 in g_malloc0 (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x57ef0)
Apr 8 00:26:40 janus4vm janus[1746]: #2 0x7f749d729ae0 (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x7bae0)
Apr 8 00:26:40 janus4vm janus[1746]: Thread T5 created by T0 here:
Apr 8 00:26:40 janus4vm janus[1746]: #0 0x7f749daba815 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cc:208
Apr 8 00:26:40 janus4vm janus[1746]: #1 0x7f749d74e0ca (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xa00ca)
Apr 8 00:26:40 janus4vm janus[1746]: Thread T1768999 (hloop 605150956) created by T4 here:
Apr 8 00:26:40 janus4vm janus[1746]: #0 0x7f749daba815 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cc:208
Apr 8 00:26:40 janus4vm janus[1746]: #1 0x7f749d74e0ca (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xa00ca)
Apr 8 00:26:40 janus4vm janus[1746]: Thread T4 created by T0 here:
Apr 8 00:26:40 janus4vm janus[1746]: #0 0x7f749daba815 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cc:208
Apr 8 00:26:40 janus4vm janus[1746]: #1 0x7f749d74e0ca (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0+0xa00ca)
Apr 8 00:26:40 janus4vm janus[1746]: SUMMARY: AddressSanitizer: heap-use-after-free plugins/janus_videoroom.c:11680 in janus_videoroom_handler
Apr 8 00:26:40 janus4vm janus[1746]: Shadow bytes around the buggy address:
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d940: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d950: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d970: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d980: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
Apr 8 00:26:40 janus4vm janus[1746]: =>0x0c188005d990: fd fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d9a0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d9b0: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d9c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d9d0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
Apr 8 00:26:40 janus4vm janus[1746]: 0x0c188005d9e0: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa
Apr 8 00:26:40 janus4vm janus[1746]: Shadow byte legend (one shadow byte represents 8 application bytes):
Apr 8 00:26:40 janus4vm janus[1746]: Addressable: 00
Apr 8 00:26:40 janus4vm janus[1746]: Partially addressable: 01 02 03 04 05 06 07
Apr 8 00:26:40 janus4vm janus[1746]: Heap left redzone: fa
Apr 8 00:26:40 janus4vm janus[1746]: Freed heap region: fd
Apr 8 00:26:40 janus4vm janus[1746]: Stack left redzone: f1
Apr 8 00:26:40 janus4vm janus[1746]: Stack mid redzone: f2
Apr 8 00:26:40 janus4vm janus[1746]: Stack right redzone: f3
Apr 8 00:26:40 janus4vm janus[1746]: Stack after return: f5
Apr 8 00:26:40 janus4vm janus[1746]: Stack use after scope: f8
Apr 8 00:26:40 janus4vm janus[1746]: Global redzone: f9
Apr 8 00:26:40 janus4vm janus[1746]: Global init order: f6
Apr 8 00:26:40 janus4vm janus[1746]: Poisoned by user: f7
Apr 8 00:26:40 janus4vm janus[1746]: Container overflow: fc
Apr 8 00:26:40 janus4vm janus[1746]: Array cookie: ac
Apr 8 00:26:40 janus4vm janus[1746]: Intra object redzone: bb
Apr 8 00:26:40 janus4vm janus[1746]: ASan internal: fe
Apr 8 00:26:40 janus4vm janus[1746]: Left alloca redzone: ca
Apr 8 00:26:40 janus4vm janus[1746]: Right alloca redzone: cb
Apr 8 00:26:40 janus4vm janus[1746]: Shadow gap: cc
Apr 8 00:26:40 janus4vm janus[1746]: ==1746==ABORTING
Apr 8 00:26:40 janus4vm systemd[1]: janus.service: Main process exited, code=exited, status=1/FAILURE
Apr 8 00:26:40 janus4vm systemd[1]: janus.service: Failed with result 'exit-code'.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment