================================================================= ==18424==ERROR: AddressSanitizer: heap-use-after-free on address 0x6070000c4734 at pc 0x000002c551d0 bp 0x7f29af04cf60 sp 0x7f29af04cf50 WRITE of size 4 at 0x6070000c4734 thread T3 Fluid: sf not found not file nor dir Zerberus::loadInstrument failed #0 0x2c551cf in FluidS::Sample::decompressOggVorbis(char*, int) /media/antonio/Mint0/MuseScore_22/fluid/sfont3.cpp:31 #1 0x2c2c7b0 in FluidS::Sample::load() /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:631 #2 0x2c25513 in FluidS::Preset::loadSamples() /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:154 #3 0x2c22049 in FluidS::Channel::setPreset(FluidS::Preset*) /media/antonio/Mint0/MuseScore_22/fluid/chan.cpp:224 #4 0x2c1fc09 in FluidS::Channel::init() /media/antonio/Mint0/MuseScore_22/fluid/chan.cpp:58 #5 0x2c1f920 in FluidS::Channel::reset() /media/antonio/Mint0/MuseScore_22/fluid/chan.cpp:47 #6 0x2c1f8e0 in FluidS::Channel::Channel(FluidS::Fluid*, int) /media/antonio/Mint0/MuseScore_22/fluid/chan.cpp:38 #7 0x2bea758 in FluidS::Fluid::play(Ms::PlayEvent const&) /media/antonio/Mint0/MuseScore_22/fluid/fluid.cpp:138 #8 0x2bbaef2 in Ms::MasterSynthesizer::play(Ms::NPlayEvent const&, unsigned int) /media/antonio/Mint0/MuseScore_22/synthesizer/msynthesizer.cpp:92 #9 0x15da576 in Ms::Seq::putEvent(Ms::NPlayEvent const&, unsigned int) /media/antonio/Mint0/MuseScore_22/mscore/seq.cpp:1430 #10 0x15bb989 in Ms::Seq::processMessages() /media/antonio/Mint0/MuseScore_22/mscore/seq.cpp:584 #11 0x15c2b09 in Ms::Seq::process(unsigned int, float*) /media/antonio/Mint0/MuseScore_22/mscore/seq.cpp:749 #12 0x26ad8dc in Ms::PulseAudio::paCallback(pa_stream*, unsigned long, void*) /media/antonio/Mint0/MuseScore_22/mscore/pulseaudio.cpp:64 #13 0x7f29e0d55fcd (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0x2bfcd) #14 0x7f29d8b2d441 in pa_pdispatch_run (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3a441) #15 0x7f29e0d38fcd (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0xefcd) #16 0x7f29d8b2fd5e (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3cd5e) #17 0x7f29d8b323da (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3f3da) #18 0x7f29d8b32788 (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x3f788) #19 0x7f29d8b33019 (/usr/lib/x86_64-linux-gnu/pulseaudio/libpulsecommon-8.0.so+0x40019) #20 0x7f29e0d4e0b6 in pa_mainloop_dispatch (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0x240b6) #21 0x7f29e0d4e4bb in pa_mainloop_iterate (/usr/lib/x86_64-linux-gnu/libpulse.so.0+0x244bb) #22 0x26afaa2 in Ms::PulseAudio::paLoop(void*) /media/antonio/Mint0/MuseScore_22/mscore/pulseaudio.cpp:177 #23 0x7f29e138c6b9 in start_thread (/lib/x86_64-linux-gnu/libpthread.so.0+0x76b9) #24 0x7f29da5d541c in clone (/lib/x86_64-linux-gnu/libc.so.6+0x10741c) 0x6070000c4734 is located 20 bytes inside of 72-byte region [0x6070000c4720,0x6070000c4768) freed by thread T0 here: #0 0x7f29e33e7b2a in operator delete(void*) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x99b2a) #1 0x2c23616 in FluidS::SFont::~SFont() /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:61 #2 0x2c23ca1 in FluidS::SFont::~SFont() /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:71 #3 0x2bf2e09 in FluidS::Fluid::sfunload(int) /media/antonio/Mint0/MuseScore_22/fluid/fluid.cpp:735 #4 0x2bf0c04 in FluidS::Fluid::loadSoundFonts(QStringList const&) /media/antonio/Mint0/MuseScore_22/fluid/fluid.cpp:622 #5 0x2bf4da3 in FluidS::Fluid::setState(Ms::SynthesizerGroup const&) /media/antonio/Mint0/MuseScore_22/fluid/fluid.cpp:864 #6 0x2bc134b in Ms::MasterSynthesizer::setState(Ms::SynthesizerState const&) /media/antonio/Mint0/MuseScore_22/synthesizer/msynthesizer.cpp:328 #7 0x17d22d7 in Ms::SynthControl::loadButtonClicked() /media/antonio/Mint0/MuseScore_22/mscore/synthcontrol.cpp:262 #8 0x27e619f in Ms::SynthControl::qt_static_metacall(QObject*, QMetaObject::Call, int, void**) /media/antonio/Mint0/MuseScore_22/build.debug/mscore/moc_synthcontrol.cpp:132 #9 0x7f29dbe46acd in QMetaObject::activate(QObject*, int, int, void**) (/home/antonio/Qt5.4.2/5.4/gcc_64/lib/libQt5Core.so.5+0x309acd) previously allocated by thread T0 here: #0 0x7f29e33e7532 in operator new(unsigned long) (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x99532) #1 0x2c3cbd4 in FluidS::SFont::load_shdr(int) /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:1599 #2 0x2c32d9f in FluidS::SFont::process_pdta(int) /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:971 #3 0x2c2e4b8 in FluidS::SFont::load() /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:754 #4 0x2c23fa4 in FluidS::SFont::read(QString const&) /media/antonio/Mint0/MuseScore_22/fluid/sfont.cpp:80 #5 0x2bf1fe3 in FluidS::Fluid::sfload(QString const&) /media/antonio/Mint0/MuseScore_22/fluid/fluid.cpp:696 #6 0x2bf1154 in FluidS::Fluid::loadSoundFonts(QStringList const&) /media/antonio/Mint0/MuseScore_22/fluid/fluid.cpp:646 #7 0x2bf4da3 in FluidS::Fluid::setState(Ms::SynthesizerGroup const&) /media/antonio/Mint0/MuseScore_22/fluid/fluid.cpp:864 #8 0x2bc134b in Ms::MasterSynthesizer::setState(Ms::SynthesizerState const&) /media/antonio/Mint0/MuseScore_22/synthesizer/msynthesizer.cpp:328 #9 0x2bb9bdd in Ms::MasterSynthesizer::init() /media/antonio/Mint0/MuseScore_22/synthesizer/msynthesizer.cpp:45 #10 0x12d96fc in main /media/antonio/Mint0/MuseScore_22/mscore/musescore.cpp:5775 #11 0x7f29da4ee82f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) Thread T3 created by T0 here: #0 0x7f29e3384253 in pthread_create (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x36253) #1 0x26afc53 in Ms::PulseAudio::start(bool) /media/antonio/Mint0/MuseScore_22/mscore/pulseaudio.cpp:190 #2 0x15ad930 in Ms::Seq::init(bool) /media/antonio/Mint0/MuseScore_22/mscore/seq.cpp:236 #3 0x12da859 in main /media/antonio/Mint0/MuseScore_22/mscore/musescore.cpp:5830 #4 0x7f29da4ee82f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f) SUMMARY: AddressSanitizer: heap-use-after-free /media/antonio/Mint0/MuseScore_22/fluid/sfont3.cpp:31 FluidS::Sample::decompressOggVorbis(char*, int) Shadow bytes around the buggy address: 0x0c0e80010890: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fd fd 0x0c0e800108a0: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd 0x0c0e800108b0: fd fd fd fd fd fa fa fa fa fa fd fd fd fd fd fd 0x0c0e800108c0: fd fd fd fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c0e800108d0: fd fa fa fa fa fa fd fd fd fd fd fd fd fd fd fa =>0x0c0e800108e0: fa fa fa fa fd fd[fd]fd fd fd fd fd fd fa fa fa 0x0c0e800108f0: fa fa fd fd fd fd fd fd fd fd fd fa fa fa fa fa 0x0c0e80010900: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fd fd 0x0c0e80010910: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd 0x0c0e80010920: fd fd fd fd fd fa fa fa fa fa fd fd fd fd fd fd 0x0c0e80010930: fd fd fd fa fa fa fa fa fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe ==18424==ABORTING