Skip to content

Instantly share code, notes, and snippets.

@wrl

wrl/airwave use after free

Created February 20, 2016 15:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save wrl/589ac4160111e40107ff to your computer and use it in GitHub Desktop.
Save wrl/589ac4160111e40107ff to your computer and use it in GitHub Desktop.
Download ZIP
Raw
airwave use after free
==10629== Invalid read of size 4
==10629== at 0x54880E3: __pthread_mutex_unlock_usercnt (in /usr/lib/libpthread-2.22.so)
==10629== by 0x242BD8B6: __gthread_mutex_unlock (gthr-default.h:778)
==10629== by 0x242BD8B6: __gthread_recursive_mutex_unlock (gthr-default.h:831)
==10629== by 0x242BD8B6: unlock (mutex:194)
==10629== by 0x242BD8B6: ~lock_guard (mutex:392)
==10629== by 0x242BD8B6: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:734)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7F6A88: ??? (in /usr/bin/renoise-3.1.0)
==10629== Address 0x262deb60 is 96 bytes inside a block of size 264 free'd
==10629== at 0x4C2A144: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BD584: Airwave::Plugin::dispatch(Airwave::DataPort*, int, int, long, void*, float) (plugin.cpp:305)
==10629== by 0x242BD8A1: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:735)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== Block was alloc'd at
==10629== at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BC36E: VSTPluginMain (main.cpp:146)
==10629== by 0xAA5FD0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA639C9: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA74925: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA751C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8F669: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC941A0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7D7503: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8D2C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7C7758: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xB15569: ??? (in /usr/bin/renoise-3.1.0)
==10629==
==10629== Invalid read of size 4
==10629== at 0x5488179: __pthread_mutex_unlock_usercnt (in /usr/lib/libpthread-2.22.so)
==10629== by 0x242BD8B6: __gthread_mutex_unlock (gthr-default.h:778)
==10629== by 0x242BD8B6: __gthread_recursive_mutex_unlock (gthr-default.h:831)
==10629== by 0x242BD8B6: unlock (mutex:194)
==10629== by 0x242BD8B6: ~lock_guard (mutex:392)
==10629== by 0x242BD8B6: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:734)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7F6A88: ??? (in /usr/bin/renoise-3.1.0)
==10629== Address 0x262deb58 is 88 bytes inside a block of size 264 free'd
==10629== at 0x4C2A144: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BD584: Airwave::Plugin::dispatch(Airwave::DataPort*, int, int, long, void*, float) (plugin.cpp:305)
==10629== by 0x242BD8A1: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:735)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== Block was alloc'd at
==10629== at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BC36E: VSTPluginMain (main.cpp:146)
==10629== by 0xAA5FD0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA639C9: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA74925: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA751C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8F669: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC941A0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7D7503: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8D2C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7C7758: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xB15569: ??? (in /usr/bin/renoise-3.1.0)
==10629==
==10629== Invalid read of size 4
==10629== at 0x5488186: __pthread_mutex_unlock_usercnt (in /usr/lib/libpthread-2.22.so)
==10629== by 0x242BD8B6: __gthread_mutex_unlock (gthr-default.h:778)
==10629== by 0x242BD8B6: __gthread_recursive_mutex_unlock (gthr-default.h:831)
==10629== by 0x242BD8B6: unlock (mutex:194)
==10629== by 0x242BD8B6: ~lock_guard (mutex:392)
==10629== by 0x242BD8B6: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:734)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7F6A88: ??? (in /usr/bin/renoise-3.1.0)
==10629== Address 0x262deb54 is 84 bytes inside a block of size 264 free'd
==10629== at 0x4C2A144: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BD584: Airwave::Plugin::dispatch(Airwave::DataPort*, int, int, long, void*, float) (plugin.cpp:305)
==10629== by 0x242BD8A1: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:735)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== Block was alloc'd at
==10629== at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BC36E: VSTPluginMain (main.cpp:146)
==10629== by 0xAA5FD0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA639C9: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA74925: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA751C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8F669: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC941A0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7D7503: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8D2C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7C7758: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xB15569: ??? (in /usr/bin/renoise-3.1.0)
==10629==
==10629== Invalid write of size 4
==10629== at 0x5488102: __pthread_mutex_unlock_usercnt (in /usr/lib/libpthread-2.22.so)
==10629== by 0x242BD8B6: __gthread_mutex_unlock (gthr-default.h:778)
==10629== by 0x242BD8B6: __gthread_recursive_mutex_unlock (gthr-default.h:831)
==10629== by 0x242BD8B6: unlock (mutex:194)
==10629== by 0x242BD8B6: ~lock_guard (mutex:392)
==10629== by 0x242BD8B6: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:734)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7F6A88: ??? (in /usr/bin/renoise-3.1.0)
==10629== Address 0x262deb58 is 88 bytes inside a block of size 264 free'd
==10629== at 0x4C2A144: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BD584: Airwave::Plugin::dispatch(Airwave::DataPort*, int, int, long, void*, float) (plugin.cpp:305)
==10629== by 0x242BD8A1: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:735)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== Block was alloc'd at
==10629== at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BC36E: VSTPluginMain (main.cpp:146)
==10629== by 0xAA5FD0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA639C9: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA74925: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA751C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8F669: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC941A0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7D7503: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8D2C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7C7758: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xB15569: ??? (in /usr/bin/renoise-3.1.0)
==10629==
==10629== Invalid read of size 4
==10629== at 0x5488130: __pthread_mutex_unlock_usercnt (in /usr/lib/libpthread-2.22.so)
==10629== by 0x242BD8B6: __gthread_mutex_unlock (gthr-default.h:778)
==10629== by 0x242BD8B6: __gthread_recursive_mutex_unlock (gthr-default.h:831)
==10629== by 0x242BD8B6: unlock (mutex:194)
==10629== by 0x242BD8B6: ~lock_guard (mutex:392)
==10629== by 0x242BD8B6: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:734)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7F6A88: ??? (in /usr/bin/renoise-3.1.0)
==10629== Address 0x262deb5c is 92 bytes inside a block of size 264 free'd
==10629== at 0x4C2A144: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BD584: Airwave::Plugin::dispatch(Airwave::DataPort*, int, int, long, void*, float) (plugin.cpp:305)
==10629== by 0x242BD8A1: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:735)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== Block was alloc'd at
==10629== at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BC36E: VSTPluginMain (main.cpp:146)
==10629== by 0xAA5FD0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA639C9: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA74925: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA751C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8F669: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC941A0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7D7503: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8D2C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7C7758: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xB15569: ??? (in /usr/bin/renoise-3.1.0)
==10629==
==10629== Invalid read of size 4
==10629== at 0x548810D: __pthread_mutex_unlock_usercnt (in /usr/lib/libpthread-2.22.so)
==10629== by 0x242BD8B6: __gthread_mutex_unlock (gthr-default.h:778)
==10629== by 0x242BD8B6: __gthread_recursive_mutex_unlock (gthr-default.h:831)
==10629== by 0x242BD8B6: unlock (mutex:194)
==10629== by 0x242BD8B6: ~lock_guard (mutex:392)
==10629== by 0x242BD8B6: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:734)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7F6A88: ??? (in /usr/bin/renoise-3.1.0)
==10629== Address 0x262deb50 is 80 bytes inside a block of size 264 free'd
==10629== at 0x4C2A144: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BD584: Airwave::Plugin::dispatch(Airwave::DataPort*, int, int, long, void*, float) (plugin.cpp:305)
==10629== by 0x242BD8A1: Airwave::Plugin::dispatchProc(AEffect*, int, int, long, void*, float) (plugin.cpp:735)
==10629== by 0xA9CCD8: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA5CBA: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA63A7B: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1517: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xAA1692: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E000: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8E028: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8FB14: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8D7D0: ??? (in /usr/bin/renoise-3.1.0)
==10629== Block was alloc'd at
==10629== at 0x4C29118: operator new(unsigned long) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==10629== by 0x242BC36E: VSTPluginMain (main.cpp:146)
==10629== by 0xAA5FD0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA639C9: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA74925: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xA751C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC8F669: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xC941A0: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7D7503: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xD8D2C2: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0x7C7758: ??? (in /usr/bin/renoise-3.1.0)
==10629== by 0xB15569: ??? (in /usr/bin/renoise-3.1.0)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment