================================================================= ==406==ERROR: AddressSanitizer: heap-use-after-free on address 0x607000004d20 at pc 0x7f67626fa643 bp 0x7f67547e6b70 sp 0x7f67547e6b68 READ of size 4 at 0x607000004d20 thread T327 #0 0x7f67626fa642 in onion_poller_poll /home/zack/contribute/onion/src/onion/poller.c:472:32 #1 0x7f67626ab93f in onion_poller_poll_start /home/zack/contribute/onion/src/onion/onion.c:401:3 #2 0x7f6761421609 in start_thread /usr/src/debug/glibc-2.22/nptl/pthread_create.c:334 #3 0x7f676033ca4c in __clone (/lib64/libc.so.6+0x102a4c) 0x607000004d20 is located 0 bytes inside of 72-byte region [0x607000004d20,0x607000004d68) freed by thread T322 here: #0 0x4ba4c0 in __interceptor_cfree.localalias.0 /home/zack/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:45 #1 0x7f67626f7db5 in onion_poller_remove /home/zack/contribute/onion/src/onion/poller.c:310:4 #2 0x7f67626f9fe0 in onion_poller_poll /home/zack/contribute/onion/src/onion/poller.c:472:5 #3 0x7f67626ab93f in onion_poller_poll_start /home/zack/contribute/onion/src/onion/onion.c:401:3 #4 0x7f6761421609 in start_thread /usr/src/debug/glibc-2.22/nptl/pthread_create.c:334 previously allocated by thread T321 here: #0 0x4ba7d0 in calloc /home/zack/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:66 #1 0x7f67626ba276 in onion_low_calloc /home/zack/contribute/onion/src/onion/low.c:122:11 #2 0x7f67626f5ad2 in onion_poller_slot_new /home/zack/contribute/onion/src/onion/poller.c:108:44 #3 0x7f67626ce445 in onion_listen_point_accept /home/zack/contribute/onion/src/onion/listen_point.c:107:28 #4 0x7f67626f9d11 in onion_poller_poll /home/zack/contribute/onion/src/onion/poller.c:463:10 #5 0x7f67626aa7a8 in onion_listen /home/zack/contribute/onion/src/onion/onion.c:501:4 #6 0x7f67626ab05f in onion_listen_start /home/zack/contribute/onion/src/onion/onion.c:366:3 #7 0x7f6761421609 in start_thread /usr/src/debug/glibc-2.22/nptl/pthread_create.c:334 Thread T327 created by T321 here: #0 0x42c259 in pthread_create /home/zack/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:239 #1 0x7f67626aa6bb in onion_listen /home/zack/contribute/onion/src/onion/onion.c:497:5 #2 0x7f67626ab05f in onion_listen_start /home/zack/contribute/onion/src/onion/onion.c:366:3 #3 0x7f6761421609 in start_thread /usr/src/debug/glibc-2.22/nptl/pthread_create.c:334 Thread T321 created by T0 here: #0 0x42c259 in pthread_create /home/zack/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:239 #1 0x4f40f8 in t06_timeouts /home/zack/contribute/onion/tests/01-internal/06-onion.c:385:3 #2 0x4f4856 in main /home/zack/contribute/onion/tests/01-internal/06-onion.c:416:3 #3 0x7f676025a57f in __libc_start_main (/lib64/libc.so.6+0x2057f) Thread T322 created by T321 here: #0 0x42c259 in pthread_create /home/zack/llvm/projects/compiler-rt/lib/asan/asan_interceptors.cc:239 #1 0x7f67626aa6bb in onion_listen /home/zack/contribute/onion/src/onion/onion.c:497:5 #2 0x7f67626ab05f in onion_listen_start /home/zack/contribute/onion/src/onion/onion.c:366:3 #3 0x7f6761421609 in start_thread /usr/src/debug/glibc-2.22/nptl/pthread_create.c:334 SUMMARY: AddressSanitizer: heap-use-after-free /home/zack/contribute/onion/src/onion/poller.c:472:32 in onion_poller_poll Shadow bytes around the buggy address: 0x0c0e7fff8950: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c0e7fff8960: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c0e7fff8970: fa fa fa fa fa fa fa fa fa fa 00 00 00 00 00 00 0x0c0e7fff8980: 00 00 00 fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c0e7fff8990: 00 fa fa fa fa fa 00 00 00 00 00 00 00 00 00 fa =>0x0c0e7fff89a0: fa fa fa fa[fd]fd fd fd fd fd fd fd fd fa fa fa 0x0c0e7fff89b0: fa fa 00 00 00 00 00 00 00 00 00 fa fa fa fa fa 0x0c0e7fff89c0: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa 00 00 0x0c0e7fff89d0: 00 00 00 00 00 00 00 fa fa fa fa fa 00 00 00 00 0x0c0e7fff89e0: 00 00 00 00 00 fa fa fa fa fa 00 00 00 00 00 00 0x0c0e7fff89f0: 00 00 00 fa fa fa fa fa 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==406==ABORTING