Ticket #788: use-after-free.log

File use-after-free.log, 18.9 KB (added by Sergey Kandaurov, 9 years ago)

use-after-free -- ngx_http_run_posted_requests from ngx_http_upstream_resolve_handler

Line 
12017/06/07 17:27:52 [debug] 41426#100490: worker cycle
22017/06/07 17:27:52 [debug] 41426#100490: kevent timer: 4996, changes: 0
32017/06/07 17:27:52 [debug] 41426#100490: kevent events: 1
42017/06/07 17:27:52 [debug] 41426#100490: kevent: 6: ft:-1 fl:0000 ff:00000000 d:1 ud:000062F000000400
52017/06/07 17:27:52 [debug] 41426#100490: accept on 127.0.0.1:8080, ready: 1
62017/06/07 17:27:52 [debug] 41426#100490: posix_memalign: 0000616000004E80:512 @16
72017/06/07 17:27:52 [debug] 41426#100490: malloc: 00006020000154D0:16
82017/06/07 17:27:52 [debug] 41426#100490: malloc: 0000607000013880:80
92017/06/07 17:27:52 [debug] 41426#100490: malloc: 00006020000154B0:15
102017/06/07 17:27:52 [debug] 41426#100490: *8 accept: 127.0.0.1:13655 fd:10
112017/06/07 17:27:52 [debug] 41426#100490: malloc: 0000606000015AA0:64
122017/06/07 17:27:52 [debug] 41426#100490: malloc: 000060300004D2C0:24
132017/06/07 17:27:52 [debug] 41426#100490: *8 event timer add: 10: 60000:1496856532582
142017/06/07 17:27:52 [debug] 41426#100490: *8 reusable connection: 1
152017/06/07 17:27:52 [debug] 41426#100490: *8 kevent set event: 10: ft:-1 fl:0025
162017/06/07 17:27:52 [debug] 41426#100490: timer delta: 0
172017/06/07 17:27:52 [debug] 41426#100490: worker cycle
182017/06/07 17:27:52 [debug] 41426#100490: kevent timer: 4996, changes: 1
192017/06/07 17:27:52 [debug] 41426#100490: kevent events: 1
202017/06/07 17:27:52 [debug] 41426#100490: kevent: 10: ft:-1 fl:0020 ff:00000000 d:45 ud:000062F000000608
212017/06/07 17:27:52 [debug] 41426#100490: *8 http wait request handler
222017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000607000013810:80
232017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000061900005B980:1024
242017/06/07 17:27:52 [debug] 41426#100490: *8 recv: eof:0, avail:45, err:0
252017/06/07 17:27:52 [debug] 41426#100490: *8 recv: fd:10 45 of 1024
262017/06/07 17:27:52 [debug] 41426#100490: *8 reusable connection: 0
272017/06/07 17:27:52 [debug] 41426#100490: *8 posix_memalign: 0000621000087100:4096 @16
282017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000061A000019E80:1376
292017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000061900005B480:960
302017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000061500001BD80:480
312017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000610000005D40:192
322017/06/07 17:27:52 [debug] 41426#100490: *8 http process request line
332017/06/07 17:27:52 [debug] 41426#100490: *8 http request line: "GET /case HTTP/1.0"
342017/06/07 17:27:52 [debug] 41426#100490: *8 http uri: "/case"
352017/06/07 17:27:52 [debug] 41426#100490: *8 http args: ""
362017/06/07 17:27:52 [debug] 41426#100490: *8 http exten: ""
372017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000061900005AF80:960
382017/06/07 17:27:52 [debug] 41426#100490: *8 http process request header line
392017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000602000015490:6
402017/06/07 17:27:52 [debug] 41426#100490: *8 http header: "X-Name: CASE.example.net"
412017/06/07 17:27:52 [debug] 41426#100490: *8 http header done
422017/06/07 17:27:52 [debug] 41426#100490: *8 event timer del: 10: 1496856532582
432017/06/07 17:27:52 [debug] 41426#100490: *8 generic phase: 0
442017/06/07 17:27:52 [debug] 41426#100490: *8 rewrite phase: 1
452017/06/07 17:27:52 [debug] 41426#100490: *8 test location: "/"
462017/06/07 17:27:52 [debug] 41426#100490: *8 test location: "long"
472017/06/07 17:27:52 [debug] 41426#100490: *8 test location: "bad"
482017/06/07 17:27:52 [debug] 41426#100490: *8 test location: "invalid"
492017/06/07 17:27:52 [debug] 41426#100490: *8 test location: "case"
502017/06/07 17:27:52 [debug] 41426#100490: *8 using configuration "/case"
512017/06/07 17:27:52 [debug] 41426#100490: *8 http cl:-1 max:1048576
522017/06/07 17:27:52 [debug] 41426#100490: *8 rewrite phase: 3
532017/06/07 17:27:52 [debug] 41426#100490: *8 post rewrite phase: 4
542017/06/07 17:27:52 [debug] 41426#100490: *8 generic phase: 5
552017/06/07 17:27:52 [debug] 41426#100490: *8 generic phase: 6
562017/06/07 17:27:52 [debug] 41426#100490: *8 generic phase: 7
572017/06/07 17:27:52 [debug] 41426#100490: *8 access phase: 8
582017/06/07 17:27:52 [debug] 41426#100490: *8 access phase: 9
592017/06/07 17:27:52 [debug] 41426#100490: *8 access phase: 10
602017/06/07 17:27:52 [debug] 41426#100490: *8 post access phase: 11
612017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000061900005AA80:1072
622017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000060F00000BCB0:176
632017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000604000020B50:36
642017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: "http://"
652017/06/07 17:27:52 [debug] 41426#100490: *8 http script var: "CASE.example.net"
662017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: ":8080/backend"
672017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000060800000E0A0:88
682017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000612000003940:304
692017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 00006070000137A0:72
702017/06/07 17:27:52 [debug] 41426#100490: *8 http init upstream, client timer: 0
712017/06/07 17:27:52 [debug] 41426#100490: *8 kevent set event: 10: ft:-2 fl:0025
722017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000607000013730:80
732017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000060D0000099D0:138
742017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000602000015470:16
752017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: "Host: "
762017/06/07 17:27:52 [debug] 41426#100490: *8 http script var: "CASE.example.net:8080"
772017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: "
78"
792017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: "Connection: close
80"
812017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: ""
822017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: ""
832017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: ""
842017/06/07 17:27:52 [debug] 41426#100490: *8 http script copy: ""
852017/06/07 17:27:52 [debug] 41426#100490: *8 http proxy header: "X-Name: CASE.example.net"
862017/06/07 17:27:52 [debug] 41426#100490: *8 http proxy header:
87"GET /backend HTTP/1.0
88Host: CASE.example.net:8080
89Connection: close
90X-Name: CASE.example.net
91
92"
932017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000604000020B10:40
942017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000606000015A40:56
952017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000060300004D290:24
962017/06/07 17:27:52 [debug] 41426#100490: *8 http cleanup add: 000060300004D290
972017/06/07 17:27:52 [debug] 41426#100490: malloc: 0000611000001080:224
982017/06/07 17:27:52 [debug] 41426#100490: resolve: "CASE.example.net"
992017/06/07 17:27:52 [debug] 41426#100490: resolve cached
1002017/06/07 17:27:52 [debug] 41426#100490: *8 http upstream resolve: "/case?"
1012017/06/07 17:27:52 [debug] 41426#100490: *8 name was resolved to 127.0.0.1
1022017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000604000020AD0:40
1032017/06/07 17:27:52 [debug] 41426#100490: *8 ngx_alloc fail: 72 src/http/ngx_http_upstream_round_robin.c:322
1042017/06/07 17:27:52 [debug] 41426#100490: *8 finalize http upstream request: 500
1052017/06/07 17:27:52 [debug] 41426#100490: resolve name done: 0
1062017/06/07 17:27:52 [debug] 41426#100490: resolver expire
1072017/06/07 17:27:52 [debug] 41426#100490: *8 finalize http proxy request
1082017/06/07 17:27:52 [debug] 41426#100490: *8 http finalize request: 500, "/case?" a:1, c:2
1092017/06/07 17:27:52 [debug] 41426#100490: *8 http special response: 500, "/case?"
1102017/06/07 17:27:52 [debug] 41426#100490: *8 xslt filter header
1112017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 00006070000136C0:80
1122017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000610000005C40:179
1132017/06/07 17:27:52 [debug] 41426#100490: *8 HTTP/1.1 500 Internal Server Error
114Server: nginx/1.13.2
115Date: Wed, 07 Jun 2017 17:27:52 GMT
116Content-Type: text/html
117Content-Length: 193
118Connection: close
119
1202017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000602000015450:16
1212017/06/07 17:27:52 [debug] 41426#100490: *8 write new buf t:1 f:0 0000610000005C40, pos 0000610000005C40, size: 162 file: 0, size: 0
1222017/06/07 17:27:52 [debug] 41426#100490: *8 http write filter: l:0 f:0 s:162
1232017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 0000607000013650:80
1242017/06/07 17:27:52 [debug] 41426#100490: *8 ngx_alloc fail: 80 src/http/ngx_http_special_response.c:738
1252017/06/07 17:27:52 [debug] 41426#100490: *8 http finalize request: -1, "/case?" a:1, c:2
1262017/06/07 17:27:52 [debug] 41426#100490: *8 http terminate request count:2
1272017/06/07 17:27:52 [debug] 41426#100490: *8 http terminate cleanup count:2 blk:0
1282017/06/07 17:27:52 [debug] 41426#100490: *8 http posted request: "/case?"
1292017/06/07 17:27:52 [debug] 41426#100490: *8 http terminate handler count:2
1302017/06/07 17:27:52 [debug] 41426#100490: *8 http request count:1 blk:0
1312017/06/07 17:27:52 [debug] 41426#100490: *8 http close request
1322017/06/07 17:27:52 [debug] 41426#100490: *8 http log handler
1332017/06/07 17:27:52 [debug] 41426#100490: *8 malloc: 000060C00000E200:114
1342017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000060C00000E200
1352017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000607000013650
1362017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000602000015450
1372017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000610000005C40
1382017/06/07 17:27:52 [debug] 41426#100490: *8 free: 00006070000136C0
1392017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000604000020AD0
1402017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000060300004D290
1412017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000606000015A40
1422017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000604000020B10
1432017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000602000015470
1442017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000060D0000099D0
1452017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000607000013730
1462017/06/07 17:27:52 [debug] 41426#100490: *8 free: 00006070000137A0
1472017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000612000003940
1482017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000060800000E0A0
1492017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000604000020B50
1502017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000060F00000BCB0
1512017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000061900005AA80
1522017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000602000015490
1532017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000061900005AF80
1542017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000610000005D40
1552017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000061500001BD80
1562017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000061900005B480
1572017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000061A000019E80
1582017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000621000087100, unused: 3632
1592017/06/07 17:27:52 [debug] 41426#100490: *8 close http connection: 10
1602017/06/07 17:27:52 [debug] 41426#100490: *8 kevent deleted: 10: ft:-2
1612017/06/07 17:27:52 [debug] 41426#100490: *8 reusable connection: 0
1622017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000061900005B980
1632017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000607000013810
1642017/06/07 17:27:52 [debug] 41426#100490: *8 free: 000060300004D2C0
1652017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000606000015AA0
1662017/06/07 17:27:52 [debug] 41426#100490: *8 free: 00006020000154B0
1672017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000607000013880
1682017/06/07 17:27:52 [debug] 41426#100490: *8 free: 00006020000154D0
1692017/06/07 17:27:52 [debug] 41426#100490: *8 free: 0000616000004E80, unused: 320
170=================================================================
171==41426==ERROR: AddressSanitizer: heap-use-after-free on address 0x61a000019e88 at pc 0x000000657845 bp 0x7fffffffbe80 sp 0x7fffffffbe78
172READ of size 8 at 0x61a000019e88 thread T0
173 #0 0x657844 in ngx_http_finalize_request /home/pluknet/nginx/src/http/ngx_http_request.c:2299:12
174 #1 0x620e07 in ngx_http_core_content_phase /home/pluknet/nginx/src/http/ngx_http_core_module.c:1388:9
175 #2 0x616049 in ngx_http_core_run_phases /home/pluknet/nginx/src/http/ngx_http_core_module.c:860:14
176 #3 0x615e22 in ngx_http_handler /home/pluknet/nginx/src/http/ngx_http_core_module.c:843:5
177 #4 0x65c8f8 in ngx_http_process_request /home/pluknet/nginx/src/http/ngx_http_request.c:1940:5
178 #5 0x66577d in ngx_http_process_request_headers /home/pluknet/nginx/src/http/ngx_http_request.c:1367:13
179 #6 0x662af3 in ngx_http_process_request_line /home/pluknet/nginx/src/http/ngx_http_request.c:1040:13
180 #7 0x64eda1 in ngx_http_wait_request_handler /home/pluknet/nginx/src/http/ngx_http_request.c:506:5
181 #8 0x5ccdec in ngx_kqueue_process_events /home/pluknet/nginx/src/event/modules/ngx_kqueue_module.c:669:9
182 #9 0x57c884 in ngx_process_events_and_timers /home/pluknet/nginx/src/event/ngx_event.c:242:12
183 #10 0x5c0322 in ngx_worker_process_cycle /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:749:9
184 #11 0x5b4f17 in ngx_spawn_process /home/pluknet/nginx/src/os/unix/ngx_process.c:198:9
185 #12 0x5bb281 in ngx_start_worker_processes /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:358:9
186 #13 0x5b97e3 in ngx_master_process_cycle /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:130:5
187 #14 0x49f931 in main /home/pluknet/nginx/src/core/nginx.c:375:9
188 #15 0x420fce in _start (/home/pluknet/nginx/objs/nginx+0x420fce)
189 #16 0x800cf9fff (<unknown module>)
190
1910x61a000019e88 is located 8 bytes inside of 1376-byte region [0x61a000019e80,0x61a00001a3e0)
192freed by thread T0 here:
193 #0 0x477d9b in free /wrkdirs/usr/ports/devel/llvm38/work/compiler-rt-3.8.1.src/lib/asan/asan_malloc_linux.cc:38:3
194 #1 0x4ad91f in ngx_destroy_pool /home/pluknet/nginx/src/core/ngx_palloc.c:85:13
195 #2 0x661844 in ngx_http_free_request /home/pluknet/nginx/src/http/ngx_http_request.c:3530:5
196 #3 0x6577e9 in ngx_http_close_request /home/pluknet/nginx/src/http/ngx_http_request.c:3441:5
197 #4 0x668bb4 in ngx_http_terminate_handler /home/pluknet/nginx/src/http/ngx_http_request.c:2553:5
198 #5 0x65d52b in ngx_http_run_posted_requests /home/pluknet/nginx/src/http/ngx_http_request.c:2264:9
199 #6 0x6e1429 in ngx_http_upstream_resolve_handler /home/pluknet/nginx/src/http/ngx_http_upstream.c:1214:5
200 #7 0x53dee7 in ngx_resolve_name_locked /home/pluknet/nginx/src/core/ngx_resolver.c:670:21
201 #8 0x53c7e3 in ngx_resolve_name /home/pluknet/nginx/src/core/ngx_resolver.c:465:14
202 #9 0x6c7191 in ngx_http_upstream_init_request /home/pluknet/nginx/src/http/ngx_http_upstream.c:750:13
203 #10 0x6c4c69 in ngx_http_upstream_init /home/pluknet/nginx/src/http/ngx_http_upstream.c:532:5
204 #11 0x68b24d in ngx_http_read_client_request_body /home/pluknet/nginx/src/http/ngx_http_request_body.c:77:9
205 #12 0x8736db in ngx_http_proxy_handler /home/pluknet/nginx/src/http/modules/ngx_http_proxy_module.c:930:10
206 #13 0x620df8 in ngx_http_core_content_phase /home/pluknet/nginx/src/http/ngx_http_core_module.c:1388:38
207 #14 0x616049 in ngx_http_core_run_phases /home/pluknet/nginx/src/http/ngx_http_core_module.c:860:14
208 #15 0x615e22 in ngx_http_handler /home/pluknet/nginx/src/http/ngx_http_core_module.c:843:5
209 #16 0x65c8f8 in ngx_http_process_request /home/pluknet/nginx/src/http/ngx_http_request.c:1940:5
210 #17 0x66577d in ngx_http_process_request_headers /home/pluknet/nginx/src/http/ngx_http_request.c:1367:13
211 #18 0x662af3 in ngx_http_process_request_line /home/pluknet/nginx/src/http/ngx_http_request.c:1040:13
212 #19 0x64eda1 in ngx_http_wait_request_handler /home/pluknet/nginx/src/http/ngx_http_request.c:506:5
213 #20 0x5ccdec in ngx_kqueue_process_events /home/pluknet/nginx/src/event/modules/ngx_kqueue_module.c:669:9
214 #21 0x57c884 in ngx_process_events_and_timers /home/pluknet/nginx/src/event/ngx_event.c:242:12
215 #22 0x5c0322 in ngx_worker_process_cycle /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:749:9
216 #23 0x5b4f17 in ngx_spawn_process /home/pluknet/nginx/src/os/unix/ngx_process.c:198:9
217 #24 0x5bb281 in ngx_start_worker_processes /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:358:9
218 #25 0x5b97e3 in ngx_master_process_cycle /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:130:5
219 #26 0x49f931 in main /home/pluknet/nginx/src/core/nginx.c:375:9
220 #27 0x420fce in _start (/home/pluknet/nginx/objs/nginx+0x420fce)
221 #28 0x800cf9fff (<unknown module>)
222
223previously allocated by thread T0 here:
224 #0 0x4780bb in __interceptor_malloc /wrkdirs/usr/ports/devel/llvm38/work/compiler-rt-3.8.1.src/lib/asan/asan_malloc_linux.cc:52:3
225 #1 0x59e6c8 in ngx_alloc /home/pluknet/nginx/src/os/unix/ngx_alloc.c:22:9
226 #2 0x4add8c in ngx_palloc_large /home/pluknet/nginx/src/core/ngx_palloc.c:220:9
227 #3 0x4add1c in ngx_palloc /home/pluknet/nginx/src/core/ngx_palloc.c:131:12
228 #4 0x4ae6dc in ngx_pcalloc /home/pluknet/nginx/src/core/ngx_palloc.c:302:9
229 #5 0x651177 in ngx_http_create_request /home/pluknet/nginx/src/http/ngx_http_request.c:533:9
230 #6 0x64ecad in ngx_http_wait_request_handler /home/pluknet/nginx/src/http/ngx_http_request.c:499:15
231 #7 0x5ccdec in ngx_kqueue_process_events /home/pluknet/nginx/src/event/modules/ngx_kqueue_module.c:669:9
232 #8 0x57c884 in ngx_process_events_and_timers /home/pluknet/nginx/src/event/ngx_event.c:242:12
233 #9 0x5c0322 in ngx_worker_process_cycle /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:749:9
234 #10 0x5b4f17 in ngx_spawn_process /home/pluknet/nginx/src/os/unix/ngx_process.c:198:9
235 #11 0x5bb281 in ngx_start_worker_processes /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:358:9
236 #12 0x5b97e3 in ngx_master_process_cycle /home/pluknet/nginx/src/os/unix/ngx_process_cycle.c:130:5
237 #13 0x49f931 in main /home/pluknet/nginx/src/core/nginx.c:375:9
238 #14 0x420fce in _start (/home/pluknet/nginx/objs/nginx+0x420fce)
239 #15 0x800cf9fff (<unknown module>)
240
241SUMMARY: AddressSanitizer: heap-use-after-free /home/pluknet/nginx/src/http/ngx_http_request.c:2299:12 in ngx_http_finalize_request
242Shadow bytes around the buggy address:
243 0x4c3400003380: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
244 0x4c3400003390: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
245 0x4c34000033a0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
246 0x4c34000033b0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
247 0x4c34000033c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
248=>0x4c34000033d0: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd
249 0x4c34000033e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
250 0x4c34000033f0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
251 0x4c3400003400: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
252 0x4c3400003410: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
253 0x4c3400003420: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
254Shadow byte legend (one shadow byte represents 8 application bytes):
255 Addressable: 00
256 Partially addressable: 01 02 03 04 05 06 07
257 Heap left redzone: fa
258 Heap right redzone: fb
259 Freed heap region: fd
260 Stack left redzone: f1
261 Stack mid redzone: f2
262 Stack right redzone: f3
263 Stack partial redzone: f4
264 Stack after return: f5
265 Stack use after scope: f8
266 Global redzone: f9
267 Global init order: f6
268 Poisoned by user: f7
269 Container overflow: fc
270 Array cookie: ac
271 Intra object redzone: bb
272 ASan internal: fe
273 Left alloca redzone: ca
274 Right alloca redzone: cb
275==41426==ABORTING