daala icon indicating copy to clipboard operation
daala copied to clipboard

heap-use-after-free in od_dec_clear

Open tysmith opened this issue 9 years ago • 0 comments

Found running commit 4633b8105 Built with AddressSanitizer

To reproduce run: ASAN_OPTIONS=allocator_may_return_null=true ./dump_video test_case.ogv

==47338==ERROR: AddressSanitizer: heap-use-after-free on address 0x7fbfac81f81f at pc 0x000000554378 bp 0x7ffcb2e065f0 sp 0x7ffcb2e065e8
READ of size 1 at 0x7fbfac81f81f thread T0
    #0 0x554377 in od_aligned_free src/state.c:83:12
    #1 0x554377 in od_state_clear src/state.c:514
    #2 0x4f25fc in od_dec_clear src/decode.c:77:3
    #3 0x4f25fc in daala_decode_create src/decode.c:87
    #4 0x4eba22 in main examples/dump_video.c:341:10
    #5 0x7fbfbdf7382f in __libc_start_main /build/glibc-GKVZIf/glibc-2.23/csu/../csu/libc-start.c:291
    #6 0x418f98 in _start (dump_video+0x418f98)

test_case.ogv.zip log.txt

tysmith avatar Oct 15 '16 01:10 tysmith