1. ==706==ERROR: AddressSanitizer: heap-use-after-free on address 0x61e0000c9080 at pc 0x7f68604cef7f bp 0x7f683d79e270 sp 0x7f683d79da20
2. READ of size 2256 at 0x61e0000c9080 thread T40
3. 2020-10-22 09:43:33.537249 99.70% [INFO] switch_time.c:1430 Timezone reloaded 1750 definitions
4.     #0 0x7f68604cef7e  (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x5cf7e)
5.     #1 0x7f685b6af3f1 in msg_mclass_clone (/usr/lib/libsofia-sip-ua.so.0+0x7d3f1)
6.     #2 0x7f685b727ccc in sip_extend_mclass (/usr/lib/libsofia-sip-ua.so.0+0xf5ccc)
7.     #3 0x7f6851cb0bdf in sofia_init /data/stack/src/mod/endpoints/mod_sofia/sofia.c:4336
8.     #4 0x7f6851c964ee in mod_sofia_load /data/stack/src/mod/endpoints/mod_sofia/mod_sofia.c:6253
9.     #5 0x7f685f48f26f in switch_loadable_module_load_file src/switch_loadable_module.c:1751
10.     #6 0x7f685f48f26f in switch_loadable_module_load_module_ex src/switch_loadable_module.c:1858
11.     #7 0x7f685f493fa9 in switch_loadable_module_load_module src/switch_loadable_module.c:1812
12.     #8 0x7f684e5e2d3d in load_function /data/stack/src/mod/applications/mod_commands/mod_commands.c:2725
13.     #9 0x7f685f49b004 in switch_api_execute src/switch_loadable_module.c:3010
14.     #10 0x7f685f365c57 in switch_console_execute src/switch_console.c:393
15.     #11 0x7f685f365f07 in switch_console_process src/switch_console.c:321
16.     #12 0x7f685f366198 in console_thread src/switch_console.c:1077
17.     #13 0x7f685fad2f3a in dummy_worker threadproc/unix/thread.c:151
18.     #14 0x7f685e7a14a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)
19.     #15 0x7f685de13d0e in __clone (/lib/x86_64-linux-gnu/libc.so.6+0xe8d0e)
20.  
21. 0x61e0000c9080 is located 0 bytes inside of 2672-byte region [0x61e0000c9080,0x61e0000c9af0)
22. freed by thread T40 here:
23.     #0 0x7f6860533a10 in free (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1a10)
24.     #1 0x7f685b727c5c in sip_cloned_parser_destroy (/usr/lib/libsofia-sip-ua.so.0+0xf5c5c)
25.     #2 0x7f6851c95d8b in mod_sofia_shutdown_cleanup /data/stack/src/mod/endpoints/mod_sofia/mod_sofia.c:6483
26.     #3 0x7f6851c9720a in mod_sofia_shutdown /data/stack/src/mod/endpoints/mod_sofia/mod_sofia.c:6493
27.     #4 0x7f685f49327a in do_shutdown src/switch_loadable_module.c:2397
28.     #5 0x7f685f494194 in switch_loadable_module_unload_module src/switch_loadable_module.c:1942
29.     #6 0x7f684e5d2a97 in unload_function /data/stack/src/mod/applications/mod_commands/mod_commands.c:2774
30.     #7 0x7f685f49b004 in switch_api_execute src/switch_loadable_module.c:3010
31.     #8 0x7f685f365c57 in switch_console_execute src/switch_console.c:393
32.     #9 0x7f685f365f07 in switch_console_process src/switch_console.c:321
33.     #10 0x7f685f366198 in console_thread src/switch_console.c:1077
34.     #11 0x7f685fad2f3a in dummy_worker threadproc/unix/thread.c:151
35.     #12 0x7f685e7a14a3 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x74a3)
36.  
37. previously allocated by thread T0 here:
38.     #0 0x7f6860533d28 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.3+0xc1d28)
39.     #1 0x7f685b6af2df in msg_mclass_clone (/usr/lib/libsofia-sip-ua.so.0+0x7d2df)
40.     #2 0x7f685b727ccc in sip_extend_mclass (/usr/lib/libsofia-sip-ua.so.0+0xf5ccc)
41.     #3 0x7f6851cb0bdf in sofia_init /data/stack/src/mod/endpoints/mod_sofia/sofia.c:4336
42.     #4 0x7f6851c964ee in mod_sofia_load /data/stack/src/mod/endpoints/mod_sofia/mod_sofia.c:6253
43.     #5 0x7f685f48f26f in switch_loadable_module_load_file src/switch_loadable_module.c:1751
44.     #6 0x7f685f48f26f in switch_loadable_module_load_module_ex src/switch_loadable_module.c:1858
45.     #7 0x7f685f495904 in switch_loadable_module_init src/switch_loadable_module.c:2288
46.     #8 0x7f685f3d231a in switch_core_init_and_modload src/switch_core.c:2490
47.     #9 0x561a909dab9c in main src/switch.c:1200
48.     #10 0x7f685dd4b2e0 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x202e0)
49.  
50. Thread T40 created by T0 here:
51.     #0 0x7f68604a2f59 in __interceptor_pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x30f59)
52.     #1 0x7f685fad34a7 in apr_thread_create threadproc/unix/thread.c:194
53.     #2 0x7f685f36854e in switch_console_loop src/switch_console.c:1177
54.     #3 0x561a909dac45 in main src/switch.c:1227
55.     #4 0x7f685dd4b2e0 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x202e0)
56.  
57. SUMMARY: AddressSanitizer: heap-use-after-free (/usr/lib/x86_64-linux-gnu/libasan.so.3+0x5cf7e)
58. Shadow bytes around the buggy address:
59.   0x0c3c800111c0: fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
60.   0x0c3c800111d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
61.   0x0c3c800111e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
62.   0x0c3c800111f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
63.   0x0c3c80011200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
64. =>0x0c3c80011210:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
65.   0x0c3c80011220: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
66.   0x0c3c80011230: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
67.   0x0c3c80011240: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
68.   0x0c3c80011250: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
69.   0x0c3c80011260: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
70. Shadow byte legend (one shadow byte represents 8 application bytes):
71.   Addressable:           00
72.   Partially addressable: 01 02 03 04 05 06 07
73.   Heap left redzone:       fa
74.   Heap right redzone:      fb
75.   Freed heap region:       fd
76.   Stack left redzone:      f1
77.   Stack mid redzone:       f2
78.   Stack right redzone:     f3
79.   Stack partial redzone:   f4
80.   Stack after return:      f5
81.   Stack use after scope:   f8
82.   Global redzone:          f9
83.   Global init order:       f6
84.   Poisoned by user:        f7
85.   Container overflow:      fc
86.   Array cookie:            ac
87.   Intra object redzone:    bb
88.   ASan internal:           fe
89.   Left alloca redzone:     ca
90.   Right alloca redzone:    cb
91. ==706==ABORTING