WHIP: buffer_size: AddressSanitizer: heap-use-after-free
Closed this issue · 1 comments
thegobot commented
SRS/6.0.177
!!! buffer_size=1024 !!!
ffmpeg -i kill-bill-720.mp4 -acodec libopus -ar 48000 -ac 2 -b:a 64k -vcodec libx264 -b:v 500k -profile:v baseline -bf 0 -bufsize 2M -threads 12 -g 50 -flags +global_header -tune zerolatency -map 0:v -map 0:a -f tee [onfail=ignore:f=whip:handshake_timeout=55000:buffer_size=1024]https://example.com/whip]
Oct 18 12:12:37 Schrodinger srs[791847]: ==791847==ERROR: AddressSanitizer: heap-use-after-free on address 0x50300000dd60 at pc 0x5d4d7ceb6e4f bp 0x7446f29d8f40 sp 0x7446f29d8f30
Oct 18 12:12:37 Schrodinger srs[791847]: READ of size 8 at 0x50300000dd60 thread T0
Oct 18 12:12:37 Schrodinger srs[791847]: #0 0x5d4d7ceb6e4e in __gnu_cxx::__normal_iterator<ISrsStreamBridge**, std::vector<ISrsStreamBridge*, std::allocator<ISrsStreamBridge*> > >::__normal_iterator(ISrsStreamBridge** const&) (/usr/local/srs-dev/objs/srs+0x8e6e4e) (BuildId: 3be92b7a0d5076f9236cc63003ad4302b8e29407)
Oct 18 12:12:37 Schrodinger srs[791847]: #1 0x5d4d7ceb64b5 in std::vector<ISrsStreamBridge*, std::allocator<ISrsStreamBridge*> >::end() (/usr/local/srs-dev/objs/srs+0x8e64b5) (BuildId: 3be92b7a0d5076f9236cc63003ad4302b8e29407)
Oct 18 12:12:37 Schrodinger srs[791847]: #2 0x5d4d7ceb4fd2 in SrsCompositeBridge::on_publish() src/app/srs_app_stream_bridge.cpp:190
Oct 18 12:12:37 Schrodinger srs[791847]: #3 0x5d4d7d0f9252 in SrsRtcSource::on_publish() src/app/srs_app_rtc_source.cpp:638
Oct 18 12:12:37 Schrodinger srs[791847]: #4 0x5d4d7d04de90 in SrsRtcPublishStream::start() src/app/srs_app_rtc_conn.cpp:1283
Oct 18 12:12:37 Schrodinger srs[791847]: #5 0x5d4d7d0596e2 in SrsRtcConnection::on_dtls_handshake_done() src/app/srs_app_rtc_conn.cpp:2265
Oct 18 12:12:37 Schrodinger srs[791847]: #6 0x5d4d7d0cd382 in SrsRtcUdpNetwork::on_dtls_handshake_done() src/app/srs_app_rtc_network.cpp:218
Oct 18 12:12:37 Schrodinger srs[791847]: #7 0x5d4d7d03c908 in SrsSecurityTransport::on_dtls_handshake_done() src/app/srs_app_rtc_conn.cpp:153
Oct 18 12:12:37 Schrodinger srs[791847]: #8 0x5d4d7d0b3bab in SrsDtlsClientImpl::on_handshake_done() src/app/srs_app_rtc_dtls.cpp:731
Oct 18 12:12:37 Schrodinger srs[791847]: #9 0x5d4d7d0b1e66 in SrsDtlsImpl::do_on_dtls(char*, int) src/app/srs_app_rtc_dtls.cpp:613
Oct 18 12:12:37 Schrodinger srs[791847]: #10 0x5d4d7d0b1303 in SrsDtlsImpl::on_dtls(char*, int) src/app/srs_app_rtc_dtls.cpp:562
Oct 18 12:12:37 Schrodinger srs[791847]: #11 0x5d4d7d0b55cb in SrsDtls::on_dtls(char*, int) src/app/srs_app_rtc_dtls.cpp:941
Oct 18 12:12:37 Schrodinger srs[791847]: #12 0x5d4d7d03c441 in SrsSecurityTransport::on_dtls(char*, int) src/app/srs_app_rtc_conn.cpp:129
Oct 18 12:12:37 Schrodinger srs[791847]: #13 0x5d4d7d0cd097 in SrsRtcUdpNetwork::on_dtls(char*, int) src/app/srs_app_rtc_network.cpp:201
Oct 18 12:12:37 Schrodinger srs[791847]: #14 0x5d4d7d0e68a5 in SrsRtcServer::on_udp_packet(SrsUdpMuxSocket*) src/app/srs_app_rtc_server.cpp:453
Oct 18 12:12:37 Schrodinger srs[791847]: #15 0x5d4d7cf985a1 in SrsUdpMuxListener::cycle() src/app/srs_app_listener.cpp:731
Oct 18 12:12:37 Schrodinger srs[791847]: #16 0x5d4d7cdb72a0 in SrsFastCoroutine::cycle() src/app/srs_app_st.cpp:309
Oct 18 12:12:37 Schrodinger srs[791847]: #17 0x5d4d7cdb73eb in SrsFastCoroutine::pfn(void*) src/app/srs_app_st.cpp:324
Oct 18 12:12:37 Schrodinger srs[791847]: #18 0x5d4d7d14aa62 in _st_thread_main /root/srs6-dev/trunk/objs/Platform-SRS6-Linux-6.14.0-GCC13.3.0-x86_64/st-srs/sched.c:380
Oct 18 12:12:37 Schrodinger srs[791847]: #19 0x5d4d7d14b397 in st_thread_create /root/srs6-dev/trunk/objs/Platform-SRS6-Linux-6.14.0-GCC13.3.0-x86_64/st-srs/sched.c:666
Oct 18 12:12:37 Schrodinger srs[791847]: #20 0x5d4d7cdb5e02 in SrsFastCoroutine::SrsFastCoroutine(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, ISrsCoroutineHandler*, _```