================================================================= ==90797==ERROR: AddressSanitizer: heap-use-after-free on address 0x60200002bef0 at pc 0x000108abc405 bp 0x00010ed86bc0 sp 0x00010ed86370 READ of size 1 at 0x60200002bef0 thread T6 #0 0x108abc404 in wrap_strcmp.part.6 (in libasan.2.dylib) + 740 #1 0x10991475e in gst_value_compare_string (in libgstreamer-1.0.0.dylib) + 361 #2 0x10991c51c in _gst_value_compare_nolist (in libgstreamer-1.0.0.dylib) + 165 #3 0x10991d423 in gst_value_intersect (in libgstreamer-1.0.0.dylib) + 330 #4 0x109919216 in gst_value_intersect_list (in libgstreamer-1.0.0.dylib) + 560 #5 0x10991d40b in gst_value_intersect (in libgstreamer-1.0.0.dylib) + 306 #6 0x109919216 in gst_value_intersect_list (in libgstreamer-1.0.0.dylib) + 560 #7 0x10991d3e2 in gst_value_intersect (in libgstreamer-1.0.0.dylib) + 265 #8 0x1098d8522 in gst_structure_intersect_field1 (in libgstreamer-1.0.0.dylib) + 389 #9 0x1098ce3eb in gst_structure_foreach (in libgstreamer-1.0.0.dylib) + 422 #10 0x1098d8836 in gst_structure_intersect (in libgstreamer-1.0.0.dylib) + 418 #11 0x109801c6a in gst_caps_intersect_first (in libgstreamer-1.0.0.dylib) + 1595 #12 0x109801ecd in gst_caps_intersect_full (in libgstreamer-1.0.0.dylib) + 254 #13 0x10c4640ff in gst_base_sink_query_caps (in libgstbase-1.0.0.dylib) + 354 #14 0x10c483740 in gst_base_sink_default_query (in libgstbase-1.0.0.dylib) + 566 #15 0x10c579aec in gst_audio_base_sink_query_pad (in libgstaudio-1.0.0.dylib) + 161 #16 0x10c653b85 in gst_osx_audio_sink_query (in libgstosxaudio.so) + 317 #17 0x10c483b78 in gst_base_sink_sink_query (in libgstbase-1.0.0.dylib) + 165 #18 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038 #19 0x109874fdc in gst_pad_peer_query (in libgstreamer-1.0.0.dylib) + 1955 #20 0x109900aa0 in query_caps_func (in libgstreamer-1.0.0.dylib) + 219 #21 0x10986e5ed in gst_pad_forward (in libgstreamer-1.0.0.dylib) + 932 #22 0x1099012e4 in gst_pad_proxy_query_caps (in libgstreamer-1.0.0.dylib) + 1311 #23 0x10986f7b4 in gst_pad_query_caps_default (in libgstreamer-1.0.0.dylib) + 454 #24 0x1098705a3 in gst_pad_query_default (in libgstreamer-1.0.0.dylib) + 538 #25 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038 #26 0x109874fdc in gst_pad_peer_query (in libgstreamer-1.0.0.dylib) + 1955 #27 0x109900aa0 in query_caps_func (in libgstreamer-1.0.0.dylib) + 219 #28 0x10986e5ed in gst_pad_forward (in libgstreamer-1.0.0.dylib) + 932 #29 0x1099012e4 in gst_pad_proxy_query_caps (in libgstreamer-1.0.0.dylib) + 1311 #30 0x10986f7b4 in gst_pad_query_caps_default (in libgstreamer-1.0.0.dylib) + 454 #31 0x1098705a3 in gst_pad_query_default (in libgstreamer-1.0.0.dylib) + 538 #32 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038 #33 0x109874fdc in gst_pad_peer_query (in libgstreamer-1.0.0.dylib) + 1955 #34 0x10990262d in gst_pad_peer_query_caps (in libgstreamer-1.0.0.dylib) + 826 #35 0x10c49e2b5 in gst_base_transform_query_caps (in libgstbase-1.0.0.dylib) + 1317 #36 0x10c4a2b46 in gst_base_transform_default_query (in libgstbase-1.0.0.dylib) + 2609 #37 0x10c4a2d25 in gst_base_transform_query (in libgstbase-1.0.0.dylib) + 235 #38 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038 #39 0x109902155 in gst_pad_query_caps (in libgstreamer-1.0.0.dylib) + 826 #40 0x10c4a1720 in gst_base_transform_acceptcaps_default (in libgstbase-1.0.0.dylib) + 324 #41 0x10c4a2ae4 in gst_base_transform_default_query (in libgstbase-1.0.0.dylib) + 2511 #42 0x10c4a2d25 in gst_base_transform_query (in libgstbase-1.0.0.dylib) + 235 #43 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038 #44 0x109902af7 in gst_pad_query_accept_caps (in libgstreamer-1.0.0.dylib) + 812 #45 0x10987dbf1 in pre_eventfunc_check (in libgstreamer-1.0.0.dylib) + 263 #46 0x10987eb2a in gst_pad_send_event_unchecked (in libgstreamer-1.0.0.dylib) + 3577 #47 0x10987c9c1 in gst_pad_push_event_unchecked (in libgstreamer-1.0.0.dylib) + 2648 #48 0x109872998 in push_sticky (in libgstreamer-1.0.0.dylib) + 881 #49 0x1098611f3 in events_foreach (in libgstreamer-1.0.0.dylib) + 788 #50 0x1098734c9 in check_sticky (in libgstreamer-1.0.0.dylib) + 497 #51 0x109876f3d in gst_pad_push_data (in libgstreamer-1.0.0.dylib) + 446 #52 0x109877fcb in gst_pad_push (in libgstreamer-1.0.0.dylib) + 509 #53 0x10c568af7 in gst_audio_decoder_push_forward (in libgstaudio-1.0.0.dylib) + 223 #54 0x10c5675dc in gst_audio_decoder_output (in libgstaudio-1.0.0.dylib) + 111 #55 0x10c566b06 in gst_audio_decoder_finish_frame (in libgstaudio-1.0.0.dylib) + 1198 #56 0x10c5533b2 in gst_mad_handle_frame (in libgstmad.so) + 707 #57 0x10c56b3c3 in gst_audio_decoder_push_buffers (in libgstaudio-1.0.0.dylib) + 828 #58 0x10c56afdf in gst_audio_decoder_drain (in libgstaudio-1.0.0.dylib) + 90 #59 0x10c56c30e in gst_audio_decoder_sink_eventfunc (in libgstaudio-1.0.0.dylib) + 1113 #60 0x10987eb76 in gst_pad_send_event_unchecked (in libgstreamer-1.0.0.dylib) + 3653 #61 0x10987c9c1 in gst_pad_push_event_unchecked (in libgstreamer-1.0.0.dylib) + 2648 #62 0x109872998 in push_sticky (in libgstreamer-1.0.0.dylib) + 881 #63 0x1098611f3 in events_foreach (in libgstreamer-1.0.0.dylib) + 788 #64 0x1098734c9 in check_sticky (in libgstreamer-1.0.0.dylib) + 497 #65 0x10987d553 in gst_pad_push_event (in libgstreamer-1.0.0.dylib) + 965 #66 0x10c496162 in gst_base_src_loop (in libgstbase-1.0.0.dylib) + 8951 #67 0x1098e8767 in gst_task_func (in libgstreamer-1.0.0.dylib) + 1329 #68 0x1098ea7e3 in default_func (in libgstreamer-1.0.0.dylib) + 150 #69 0x109b432bb in g_thread_pool_thread_proxy (in libglib-2.0.0.dylib) + 36 #70 0x109b42611 in g_thread_proxy (in libglib-2.0.0.dylib) + 89 #71 0x7fff97f86267 in _pthread_body (in libsystem_pthread.dylib) + 130 #72 0x7fff97f861e4 in _pthread_start (in libsystem_pthread.dylib) + 175 #73 0x7fff97f8441c in thread_start (in libsystem_pthread.dylib) + 12 0x60200002bef0 is located 0 bytes inside of 6-byte region [0x60200002bef0,0x60200002bef6) freed by thread T0 here: #0 0x108ad2419 in wrap_free (in libasan.2.dylib) + 217 #1 0x109acadd2 in g_value_unset (in libgobject-2.0.0.dylib) + 39 #2 0x109906737 in gst_value_free_list_or_array (in libgstreamer-1.0.0.dylib) + 290 #3 0x109acadd2 in g_value_unset (in libgobject-2.0.0.dylib) + 39 #4 0x1098c9a2b in gst_structure_free (in libgstreamer-1.0.0.dylib) + 409 #5 0x1097f9bd9 in _gst_caps_free (in libgstreamer-1.0.0.dylib) + 312 #6 0x10985e6de in gst_mini_object_unref (in libgstreamer-1.0.0.dylib) + 1460 #7 0x10c653d53 in gst_osx_audio_sink_stop (in libgstosxaudio.so) + 25 #8 0x10c485a19 in gst_base_sink_change_state (in libgstbase-1.0.0.dylib) + 7823 #9 0x10c5753b4 in gst_audio_base_sink_change_state (in libgstaudio-1.0.0.dylib) + 728 #10 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #11 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #12 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #13 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270 #14 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425 #15 0x10c6394c7 in gst_auto_detect_change_state (in libgstautodetect.so) + 1719 #16 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #17 0x10982e54d in gst_element_continue_state (in libgstreamer-1.0.0.dylib) + 1169 #18 0x10982fe1c in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 1206 #19 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #20 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #21 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270 #22 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425 #23 0x109885da1 in gst_pipeline_change_state (in libgstreamer-1.0.0.dylib) + 3678 #24 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #25 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #26 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #27 0x108a8f98d in main (in gst-launch-1.0) + 4226 #28 0x7fff972215c8 in start (in libdyld.dylib) + 0 #29 0xa () previously allocated by thread T0 here: #0 0x108ad226a in wrap_malloc (in libasan.2.dylib) + 202 #1 0x109b26244 in g_malloc (in libglib-2.0.0.dylib) + 24 #2 0x109b3a88a in g_strdup (in libglib-2.0.0.dylib) + 42 #3 0x109acdb30 in value_copy_string (in libgobject-2.0.0.dylib) + 17 #4 0x10991dffb in gst_value_init_and_copy (in libgstreamer-1.0.0.dylib) + 180 #5 0x10990657a in copy_garray_of_gstvalue (in libgstreamer-1.0.0.dylib) + 278 #6 0x1099065db in gst_value_copy_list_or_array (in libgstreamer-1.0.0.dylib) + 74 #7 0x10991dffb in gst_value_init_and_copy (in libgstreamer-1.0.0.dylib) + 180 #8 0x1098c96f1 in gst_structure_copy (in libgstreamer-1.0.0.dylib) + 663 #9 0x10c653f5f in gst_osx_audio_sink_create_ringbuffer (in libgstosxaudio.so) + 470 #10 0x10c574c21 in gst_audio_base_sink_create_ringbuffer (in libgstaudio-1.0.0.dylib) + 31 #11 0x10c575123 in gst_audio_base_sink_change_state (in libgstaudio-1.0.0.dylib) + 71 #12 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #13 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #14 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #15 0x10c639129 in gst_auto_detect_change_state (in libgstautodetect.so) + 793 #16 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #17 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #18 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #19 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270 #20 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425 #21 0x109885da1 in gst_pipeline_change_state (in libgstreamer-1.0.0.dylib) + 3678 #22 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #23 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #24 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #25 0x108a8f312 in main (in gst-launch-1.0) + 2567 #26 0x7fff972215c8 in start (in libdyld.dylib) + 0 #27 0xa () Thread T6 created by T0 here: #0 0x108aae0f0 in wrap_pthread_create (in libasan.2.dylib) + 96 #1 0x109b5d2dd in g_system_thread_new (in libglib-2.0.0.dylib) + 140 #2 0x109b426e2 in g_thread_new_internal (in libglib-2.0.0.dylib) + 63 #3 0x109b42aeb in g_thread_pool_start_thread (in libglib-2.0.0.dylib) + 95 #4 0x109b42b7b in g_thread_pool_push (in libglib-2.0.0.dylib) + 90 #5 0x1098eaa1c in default_push (in libgstreamer-1.0.0.dylib) + 241 #6 0x1098eb14a in gst_task_pool_push (in libgstreamer-1.0.0.dylib) + 426 #7 0x1098e9b52 in start_task (in libgstreamer-1.0.0.dylib) + 478 #8 0x1098e9f57 in gst_task_set_state (in libgstreamer-1.0.0.dylib) + 743 #9 0x109880a64 in gst_pad_start_task (in libgstreamer-1.0.0.dylib) + 1079 #10 0x10c48cf35 in gst_base_src_perform_seek (in libgstbase-1.0.0.dylib) + 3703 #11 0x10c49903c in gst_base_src_start_complete (in libgstbase-1.0.0.dylib) + 2181 #12 0x10c49856a in gst_base_src_start (in libgstbase-1.0.0.dylib) + 1257 #13 0x10c49ab3c in gst_base_src_activate_push (in libgstbase-1.0.0.dylib) + 279 #14 0x10c49b262 in gst_base_src_activate_mode (in libgstbase-1.0.0.dylib) + 481 #15 0x10986460c in gst_pad_activate_mode (in libgstreamer-1.0.0.dylib) + 1611 #16 0x109862e1c in gst_pad_activate_default (in libgstreamer-1.0.0.dylib) + 37 #17 0x109863949 in gst_pad_set_active (in libgstreamer-1.0.0.dylib) + 781 #18 0x1098301ac in activate_pads (in libgstreamer-1.0.0.dylib) + 123 #19 0x10984f562 in gst_iterator_fold (in libgstreamer-1.0.0.dylib) + 266 #20 0x1098302c2 in iterator_activate_fold_with_resync (in libgstreamer-1.0.0.dylib) + 246 #21 0x109830492 in gst_element_pads_activate (in libgstreamer-1.0.0.dylib) + 265 #22 0x109830a14 in gst_element_change_state_func (in libgstreamer-1.0.0.dylib) + 676 #23 0x10c49b455 in gst_base_src_change_state (in libgstbase-1.0.0.dylib) + 331 #24 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #25 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #26 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #27 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270 #28 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425 #29 0x109885da1 in gst_pipeline_change_state (in libgstreamer-1.0.0.dylib) + 3678 #30 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158 #31 0x10982e54d in gst_element_continue_state (in libgstreamer-1.0.0.dylib) + 1169 #32 0x10982fe1c in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 1206 #33 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363 #34 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375 #35 0x108a8f312 in main (in gst-launch-1.0) + 2567 #36 0x7fff972215c8 in start (in libdyld.dylib) + 0 #37 0xa () SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ?? Shadow bytes around the buggy address: 0x1c0400005780: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa 0x1c0400005790: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fd 0x1c04000057a0: fa fa fd fa fa fa 00 00 fa fa fd fd fa fa fd fa 0x1c04000057b0: fa fa fd fd fa fa 00 00 fa fa 00 00 fa fa fd fd 0x1c04000057c0: fa fa 00 00 fa fa 00 00 fa fa 00 fa fa fa fd fd =>0x1c04000057d0: fa fa fd fd fa fa fd fa fa fa fd fa fa fa[fd]fa 0x1c04000057e0: fa fa fd fa fa fa fd fa fa fa fd fd fa fa fd fa 0x1c04000057f0: fa fa 00 fa fa fa fd fd fa fa fd fd fa fa fd fa 0x1c0400005800: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1c0400005810: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1c0400005820: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe ==90797==ABORTING