Skip to content

Instantly share code, notes, and snippets.

@thatsmydoing
Created July 26, 2023 15:08
Show Gist options
  • Save thatsmydoing/05750ff32b8e5b0f3d3fdbd6f813d1ad to your computer and use it in GitHub Desktop.
Save thatsmydoing/05750ff32b8e5b0f3d3fdbd6f813d1ad to your computer and use it in GitHub Desktop.
[6476801999755392] Updating existing session
[6476801999755392] Negotiation update, checking what changed...
[WARN] [8984257522276045] Unknown SSRC, dropping packet (SSRC 2904967481)...
[WARN] [1549538554501744] Didn't receive video for more than 1 second(s)...
[WARN] [1549538554501744] Didn't receive video (substream #1) for more than 1 second(s)...
[WARN] [8984257522276045] Didn't receive video (substream #1) for more than 1 second(s)...
[WARN] [5933014974019979] Didn't receive video (substream #1) for more than 1 second(s)...
[WARN] [6300977892941118] Didn't receive audio for more than 1 second(s)...
[WARN] [1154202130711680] Didn't receive video (substream #1) for more than 1 second(s)...
[WARN] [6300977892941118] Didn't receive video (substream #1) for more than 1 second(s)...
[WARN] [6300977892941118] Didn't receive video (substream #2) for more than 1 second(s)...
Detaching handle from JANUS VideoRoom plugin; 0x61200019bac0 0x604000176650 0x61200019bac0 0x607001ebeef0
[janus.plugin.videoroom-0x604000176650] No WebRTC media anymore; 0x61200019bac0 0x607001ebeef0
[1680362926711711] Updating existing session
[157305990620119] WebRTC resources freed; 0x61200019bac0 0x60700015d060
[157305990620119] Handle and related resources freed; 0x61200019bac0 0x60700015d060
Detaching handle from JANUS VideoRoom plugin; 0x612001778bc0 0x604000c993d0 0x612001778bc0 0x607000cfed00
Detaching handle from JANUS VideoRoom plugin; 0x612000b7a0c0 0x604000191890 0x612000b7a0c0 0x607000afe800
=================================================================
[janus.plugin.videoroom-0x604000c993d0] No WebRTC media anymore; 0x612001778bc0 0x607000cfed00
[janus.plugin.videoroom-0x604000191890] No WebRTC media anymore; 0x612000b7a0c0 0x607000afe800
==13==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000974410 at pc 0x7f7825be2db2 bp 0x7f77f5eb40b0 sp 0x7f77f5eb40a8
READ of size 8 at 0x602000974410 thread T2925
#0 0x7f7825be2db1 in janus_videoroom_hangup_media_internal plugins/janus_videoroom.c:8620
#1 0x7f7825be579c in janus_videoroom_hangup_media plugins/janus_videoroom.c:8483
#2 0x4a48e0 in janus_ice_outgoing_traffic_handle /build/source/src/ice.c:4477
#3 0x4aea50 in janus_ice_outgoing_traffic_dispatch /build/source/src/ice.c:511
#4 0x7f782affad7c in g_main_context_dispatch (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0x5dd7c)
#5 0x7f782affb027 in g_main_context_iterate.constprop.0 (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0x5e027)
#6 0x7f782affb2de in g_main_loop_run (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0x5e2de)
#7 0x47c62e in janus_ice_handle_thread /build/source/src/ice.c:1314
#8 0x7f782b02764c in g_thread_proxy (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0x8a64c)
#9 0x7f782a7dcdd3 in start_thread (/nix/store/3n58xw4373jp0ljirf06d8077j15pc4j-glibc-2.37-8/lib/libc.so.6+0x85dd3)
#10 0x7f782a85e9af in clone3 (/nix/store/3n58xw4373jp0ljirf06d8077j15pc4j-glibc-2.37-8/lib/libc.so.6+0x1079af)
0x602000974410 is located 0 bytes inside of 16-byte region [0x602000974410,0x602000974420)
freed by thread T2924 here:
#0 0x7f782b4550d8 in __interceptor_free.part.0 (/nix/store/v286z87irid5vn13y2z6fphfrzmgj0kf-gcc-12.3.0-lib/lib/libasan.so.8+0xbb0d8)
#1 0x7f782b01b7cf in g_slist_remove (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0x7e7cf)
#2 0x7f7825be1085 in janus_videoroom_hangup_media_internal plugins/janus_videoroom.c:8528
#3 0x7f7825be579c in janus_videoroom_hangup_media plugins/janus_videoroom.c:8483
#4 0x4a48e0 in janus_ice_outgoing_traffic_handle /build/source/src/ice.c:4477
#5 0x4aea50 in janus_ice_outgoing_traffic_dispatch /build/source/src/ice.c:511
#6 0x7f782affad7c in g_main_context_dispatch (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0x5dd7c)
previously allocated by thread T6 here:
#0 0x7f782b4563ff in __interceptor_malloc (/nix/store/v286z87irid5vn13y2z6fphfrzmgj0kf-gcc-12.3.0-lib/lib/libasan.so.8+0xbc3ff)
#1 0x7f782b001878 in g_malloc (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0x64878)
Thread T2925 created by T4 here:
#0 0x7f782b3e7136 in __interceptor_pthread_create (/nix/store/v286z87irid5vn13y2z6fphfrzmgj0kf-gcc-12.3.0-lib/lib/libasan.so.8+0x4d136)
#1 0x7f782b054555 in g_system_thread_new (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0xb7555)
Thread T4 created by T0 here:
#0 0x7f782b3e7136 in __interceptor_pthread_create (/nix/store/v286z87irid5vn13y2z6fphfrzmgj0kf-gcc-12.3.0-lib/lib/libasan.so.8+0x4d136)
#1 0x7f782b054555 in g_system_thread_new (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0xb7555)
Thread T2924 created by T4 here:
#0 0x7f782b3e7136 in __interceptor_pthread_create (/nix/store/v286z87irid5vn13y2z6fphfrzmgj0kf-gcc-12.3.0-lib/lib/libasan.so.8+0x4d136)
#1 0x7f782b054555 in g_system_thread_new (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0xb7555)
Thread T6 created by T0 here:
#0 0x7f782b3e7136 in __interceptor_pthread_create (/nix/store/v286z87irid5vn13y2z6fphfrzmgj0kf-gcc-12.3.0-lib/lib/libasan.so.8+0x4d136)
#1 0x7f782b054555 in g_system_thread_new (/nix/store/fr53rm643lg0rp4qmgzzpwsz5xxdqwk0-glib-2.76.3/lib/libglib-2.0.so.0+0xb7555)
SUMMARY: AddressSanitizer: heap-use-after-free plugins/janus_videoroom.c:8620 in janus_videoroom_hangup_media_internal
Shadow bytes around the buggy address:
0x0c0480126830: fa fa fd fd fa fa fd fd fa fa fd fd fa fa fa fa
0x0c0480126840: fa fa fd fd fa fa fd fa fa fa fd fd fa fa fa fa
0x0c0480126850: fa fa fd fd fa fa fd fd fa fa fd fd fa fa fa fa
0x0c0480126860: fa fa fd fd fa fa fd fd fa fa fd fd fa fa fd fd
0x0c0480126870: fa fa fd fd fa fa fa fa fa fa fd fa fa fa fd fd
=>0x0c0480126880: fa fa[fd]fd fa fa fa fa fa fa fd fd fa fa fd fd
0x0c0480126890: fa fa fd fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c04801268a0: fa fa fd fd fa fa 02 fa fa fa fa fa fa fa fd fd
0x0c04801268b0: fa fa fd fd fa fa fd fa fa fa fd fd fa fa fd fd
0x0c04801268c0: fa fa fd fd fa fa fa fa fa fa fa fa fa fa fd fd
0x0c04801268d0: fa fa fa fa fa fa fd fd fa fa fd fd fa fa fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==13==ABORTING
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment