Crash in raxLowWalk, raxGenericInsert in Nightly
For a lot of swift binaries (E.g. swift-format, too), I get a crash in raxLowWalk and other functions from rax.c:
(gdb) bt
#0 raxLowWalk (ts=0x0, splitpos=<synthetic pointer>, plink=<synthetic pointer>, stopnode=<synthetic pointer>, len=8, s=0x555558223f10 "\340r\272k\277U", rax=0x7fffec019730) at ../src/libsysprof/rax.c:465
#1 raxGenericInsert (rax=0x7fffec019730, s=0x555558223f10 "\340r\272k\277U", len=8, data=0x8030, old=0x0, overwrite=1) at ../src/libsysprof/rax.c:518
#2 0x00007ffff7f6d8ab in draw_alloc_worker (task=0x555558322970 [GTask], source_object=<optimized out>, task_data=0x555557f30f50, cancellable=<optimized out>) at ../src/libsysprof-ui/sysprof-memprof-visualizer.c:384
#3 0x00007ffff7df80d6 in g_task_thread_pool_thread (thread_data=0x555558322970, pool_data=<optimized out>) at ../gio/gtask.c:1531
#4 0x00007ffff7c163b2 in g_thread_pool_thread_proxy (data=<optimized out>) at ../glib/gthreadpool.c:350
#5 0x00007ffff7c15979 in g_thread_proxy (data=0x7ffff0001590) at ../glib/gthread.c:831
#6 0x00007ffff6e8f1da in start_thread (arg=<optimized out>) at pthread_create.c:442
#7 0x00007ffff6f17d84 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:100
(gdb) bt full
#0 raxLowWalk (ts=0x0, splitpos=<synthetic pointer>, plink=<synthetic pointer>, stopnode=<synthetic pointer>, len=8, s=0x555558223f10 "\340r\272k\277U", rax=0x7fffec019730) at ../src/libsysprof/rax.c:465
h = 0x0
parentlink = 0x7fffaf7fff20
i = 2
j = 0
i = <optimized out>
j = 0
h = <optimized out>
parentlink = <optimized out>
newh = <optimized out>
__PRETTY_FUNCTION__ = "raxGenericInsert"
#1 raxGenericInsert (rax=0x7fffec019730, s=0x555558223f10 "\340r\272k\277U", len=8, data=0x8030, old=0x0, overwrite=1) at ../src/libsysprof/rax.c:518
i = <optimized out>
j = 0
h = <optimized out>
parentlink = <optimized out>
newh = <optimized out>
__PRETTY_FUNCTION__ = "raxGenericInsert"
#2 0x00007ffff7f6d8ab in draw_alloc_worker (task=0x555558322970 [GTask], source_object=<optimized out>, task_data=0x555557f30f50, cancellable=<optimized out>) at ../src/libsysprof-ui/sysprof-memprof-visualizer.c:384
y = <optimized out>
ev = 0x555558223ef8
size = 32816
l = <optimized out>
x = <optimized out>
dashes = {1, 2}
draw = 0x555557f30f50
type = SYSPROF_CAPTURE_FRAME_ALLOCATION
last = 0x555557f30fa8
mid = {red = 0.964705884, green = 0.380392164, blue = 0.31764707, alpha = 0.400000006}
cr = 0x7fffc8003880
counter = 32
midpt = <optimized out>
log_max = 4.5160856430242911
__func__ = "draw_alloc_worker"
#3 0x00007ffff7df80d6 in g_task_thread_pool_thread (thread_data=0x555558322970, pool_data=<optimized out>) at ../gio/gtask.c:1531
task = 0x555558322970 [GTask]
#4 0x00007ffff7c163b2 in g_thread_pool_thread_proxy (data=<optimized out>) at ../glib/gthreadpool.c:350
task = 0x555558322970
pool = 0x55555559ef80
#5 0x00007ffff7c15979 in g_thread_proxy (data=0x7ffff0001590) at ../glib/gthread.c:831
thread = 0x7ffff0001590
__func__ = "g_thread_proxy"
#6 0x00007ffff6e8f1da in start_thread (arg=<optimized out>) at pthread_create.c:442
ret = <optimized out>
pd = <optimized out>
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140736123098688, 1399440698492067408, 140736123098688, -128, 0, 140737316383120, 1399440698510941776, 1399351785059393104}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
not_first_call = <optimized out>
#7 0x00007ffff6f17d84 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:100
How to reproduce:
git clone https://github.com/vapor/toolbox
cd toolbox
swift build -c release --static-swift-stdlib
# Change the path to vapor
flatpak run --command=/app/bin/sysprof-cli org.gnome.Sysprof.Devel --force --memprof -c "/var/run/host/usr/local/bin/vapor --help"
flatpak run --devel --command=gdb org.gnome.Sysprof.Devel --args /app/bin/sysprof capture.syscap
Other backtrace I gathered:
#0 raxGenericInsert (rax=0x7fffd0029270, s=0x55555818b080 "\340\022\016r\365U", len=8, data=0x8030, old=<optimized out>, overwrite=<optimized out>) at ../src/libsysprof/rax.c:687
#1 0x00007ffff7f6d570 in get_total_alloc (reader=0x555557fadc80) at ../src/libsysprof-ui/sysprof-memprof-visualizer.c:178
#2 draw_total_worker (task=0x555558281470 [GTask], source_object=<optimized out>, task_data=0x555557ee4830, cancellable=<optimized out>) at ../src/libsysprof-ui/sysprof-memprof-visualizer.c:237
#3 0x00007ffff7df80d6 in g_task_thread_pool_thread (thread_data=0x555558281470, pool_data=<optimized out>) at ../gio/gtask.c:1531
#4 0x00007ffff7c163b2 in g_thread_pool_thread_proxy (data=<optimized out>) at ../glib/gthreadpool.c:350
#5 0x00007ffff7c15979 in g_thread_proxy (data=0x5555556a1ad0) at ../glib/gthread.c:831
#6 0x00007ffff6e8f1da in start_thread (arg=<optimized out>) at pthread_create.c:442
#7 0x00007ffff6f17d84 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:100
__pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
44 return INTERNAL_SYSCALL_ERROR_P (ret) ? INTERNAL_SYSCALL_ERRNO (ret) : 0;
> bt
#0 __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
#1 0x00007ffff6e911f3 in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
#2 0x00007ffff6e3f00e in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
#3 0x00007ffff6e287fc in __GI_abort () at abort.c:79
#4 0x00007ffff6e84c1e in __libc_message (action=action@entry=do_abort, fmt=fmt@entry=0x7ffff6fc6854 "%s\n") at ../sysdeps/posix/libc_fatal.c:155
#5 0x00007ffff6e9b1fa in malloc_printerr (str=str@entry=0x7ffff6fc93e0 "free(): double free detected in tcache 2") at malloc.c:5659
#6 0x00007ffff6e9d500 in _int_free (av=0x7fffbc000030, p=0x7fffbc00b610, have_lock=1) at malloc.c:4468
#7 0x00007ffff6e9eee6 in _int_realloc (av=av@entry=0x7fffbc000030, oldp=oldp@entry=0x7fffbc00b610, oldsize=32, nb=nb@entry=1283120288) at malloc.c:4895
#8 0x00007ffff6e9fd4e in __GI___libc_realloc (oldmem=0x7fffbc00b620, bytes=1283120272) at malloc.c:3489
#9 0x00007ffff7f8b939 in raxReallocForData (n=<optimized out>, data=data@entry=0x10) at ../../../../../../../../../Projects/sysprof/src/libsysprof/rax.c:222
#10 0x00007ffff7f8ce30 in raxGenericInsert (rax=0x7ffff00029f0, s=0x5555586bc618 "\340b\313\261HV", len=8, data=0x10, old=0x0, overwrite=1) at ../../../../../../../../../Projects/sysprof/src/libsysprof/rax.c:529
#11 0x00007ffff7f7ff10 in get_total_alloc (reader=0x55555837c600) at ../../../../../../../../../Projects/sysprof/src/libsysprof-ui/sysprof-memprof-visualizer.c:178
#12 draw_total_worker (task=0x55555808b1d0 [GTask], source_object=<optimized out>, task_data=0x55555815ec80, cancellable=<optimized out>) at ../../../../../../../../../Projects/sysprof/src/libsysprof-ui/sysprof-memprof-visualizer.c:237
#13 0x00007ffff7e120d6 in g_task_thread_pool_thread (thread_data=0x55555808b1d0, pool_data=<optimized out>) at ../gio/gtask.c:1531
#14 0x00007ffff7c303b2 in g_thread_pool_thread_proxy (data=<optimized out>) at ../glib/gthreadpool.c:350
#15 0x00007ffff7c2f979 in g_thread_proxy (data=0x7ffff0001770) at ../glib/gthread.c:831
#16 0x00007ffff6e8f1da in start_thread (arg=<optimized out>) at pthread_create.c:442
#17 0x00007ffff6f17d84 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:100
And one here: https://gitlab.gnome.org/GNOME/sysprof/-/blob/master/src/libsysprof/rax.c#L479 But I sadly was not able to reproduce it and forgot to gather a backtrace
Valgrind
==2== Memcheck, a memory error detector
==2== Copyright (C) 2002-2022, and GNU GPL'd, by Julian Seward et al.
==2== Using Valgrind-3.20.0 and LibVEX; rerun with -h for copyright info
==2== Command: /app/bin/sysprof capture.syscap
==2==
==2== Conditional jump or move depends on uninitialised value(s)
==2== at 0x4DBBB4D: sequence_hash (gtkcomposetable.c:65)
==2== by 0x4B8F650: g_hash_table_lookup_node (ghash.c:474)
==2== by 0x4B8F650: g_hash_table_insert_internal (ghash.c:1628)
==2== by 0x4B8F650: g_hash_table_replace (ghash.c:1687)
==2== by 0x4DBE3CD: gtk_compose_table_new_with_data (gtkcomposetable.c:1233)
==2== by 0x4E299F5: add_compose_table_from_data (gtkimcontextsimple.c:244)
==2== by 0x4E299F5: gtk_im_context_simple_add_table (gtkimcontextsimple.c:1309)
==2== by 0x95E233B: ??? (in /usr/lib/x86_64-linux-gnu/gtk-4.0/4.0.0/immodules/libim-ibus.so)
==2== by 0x4B1CDBF: g_type_create_instance (gtype.c:1997)
==2== by 0x4AFF747: g_object_new_internal (gobject.c:2246)
==2== by 0x4B00E47: g_object_new_with_properties (gobject.c:2409)
==2== by 0x4B01CA0: g_object_new (gobject.c:2055)
==2== by 0x4E2A723: gtk_im_multicontext_get_delegate (gtkimmulticontext.c:291)
==2== by 0x4E2A85C: gtk_im_multicontext_reset (gtkimmulticontext.c:444)
==2== by 0x4DDDA05: gtk_event_controller_key_set_im_context (gtkeventcontrollerkey.c:307)
==2==
==2== Thread 15 pool-sysprof:
==2== Invalid read of size 4
==2== at 0x48BE60F: raxLowWalk (rax.c:465)
==2== by 0x48BE60F: raxGenericInsert (rax.c:518)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x6c842d0 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BE61A: raxLowWalk (rax.c:498)
==2== by 0x48BE61A: raxGenericInsert (rax.c:518)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x6c842d0 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BD6F9: raxReallocForData (rax.c:221)
==2== by 0x48BEBBB: raxGenericInsert (rax.c:529)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x6c842d0 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BD6FB: raxReallocForData (rax.c:221)
==2== by 0x48BEBBB: raxGenericInsert (rax.c:529)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x6c842d0 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid free() / delete / delete[] / realloc()
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BEBBB: raxGenericInsert (rax.c:529)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x6c842d0 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BE5A8: raxLowWalk (rax.c:478)
==2== by 0x48BE5A8: raxGenericInsert (rax.c:518)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BE5AB: raxLowWalk (rax.c:469)
==2== by 0x48BE5AB: raxGenericInsert (rax.c:518)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BE997: raxLowWalk (rax.c:471)
==2== by 0x48BE997: raxGenericInsert (rax.c:518)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd4 is 4 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 8
==2== at 0x48BE60C: memcpy (string_fortified.h:29)
==2== by 0x48BE60C: raxLowWalk (rax.c:488)
==2== by 0x48BE60C: raxGenericInsert (rax.c:518)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fe0 is 16 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BDD0D: raxLowWalk (rax.c:465)
==2== by 0x48BDD0D: raxFind (rax.c:923)
==2== by 0x48B1A70: draw_alloc_worker (sysprof-memprof-visualizer.c:394)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BDCB0: raxLowWalk (rax.c:478)
==2== by 0x48BDCB0: raxFind (rax.c:923)
==2== by 0x48B1A70: draw_alloc_worker (sysprof-memprof-visualizer.c:394)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BDCB3: raxLowWalk (rax.c:469)
==2== by 0x48BDCB3: raxFind (rax.c:923)
==2== by 0x48B1A70: draw_alloc_worker (sysprof-memprof-visualizer.c:394)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BDD87: raxLowWalk (rax.c:471)
==2== by 0x48BDD87: raxFind (rax.c:923)
==2== by 0x48B1A70: draw_alloc_worker (sysprof-memprof-visualizer.c:394)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd4 is 4 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 8
==2== at 0x48BDD9F: raxLowWalk (rax.c:487)
==2== by 0x48BDD9F: raxFind (rax.c:923)
==2== by 0x48B1A70: draw_alloc_worker (sysprof-memprof-visualizer.c:394)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fe0 is 16 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BDD18: raxLowWalk (rax.c:498)
==2== by 0x48BDD18: raxFind (rax.c:923)
==2== by 0x48B1A70: draw_alloc_worker (sysprof-memprof-visualizer.c:394)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c85d310 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BD3FB: raxLowWalk.constprop.0 (rax.c:465)
==2== by 0x48BE00B: raxRemove (rax.c:1029)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BD358: raxLowWalk.constprop.0 (rax.c:478)
==2== by 0x48BE00B: raxRemove (rax.c:1029)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BD35C: raxLowWalk.constprop.0 (rax.c:469)
==2== by 0x48BE00B: raxRemove (rax.c:1029)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BD45D: raxLowWalk.constprop.0 (rax.c:471)
==2== by 0x48BE00B: raxRemove (rax.c:1029)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fd4 is 4 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 8
==2== at 0x48BD3F8: memcpy (string_fortified.h:29)
==2== by 0x48BD3F8: raxLowWalk.constprop.0 (rax.c:488)
==2== by 0x48BE00B: raxRemove (rax.c:1029)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c862fe0 is 16 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BD40B: raxLowWalk.constprop.0 (rax.c:498)
==2== by 0x48BE00B: raxRemove (rax.c:1029)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c85d310 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BE01E: raxRemove (rax.c:1030)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c85d310 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BE644: raxGenericInsert (rax.c:685)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c8658f0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 8
==2== at 0x48BE696: memcpy (string_fortified.h:29)
==2== by 0x48BE696: raxGenericInsert (rax.c:687)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c865900 is 16 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BEAF5: raxGenericInsert (rax.c:730)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c8658f4 is 4 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x4850B50: memmove (vg_replace_strmem.c:1398)
==2== by 0x48BF062: memcpy (string_fortified.h:29)
==2== by 0x48BF062: raxGenericInsert (rax.c:765)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c8658f5 is 5 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x4850B5D: memmove (vg_replace_strmem.c:1398)
==2== by 0x48BF062: memcpy (string_fortified.h:29)
==2== by 0x48BF062: raxGenericInsert (rax.c:765)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c8658f7 is 7 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid free() / delete / delete[] / realloc()
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BEB8E: raxGenericInsert (rax.c:781)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Address 0x1c8658f0 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Thread 1:
==2== Invalid read of size 4
==2== at 0x48BF20E: raxRecursiveFree (rax.c:1226)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF349: raxFreeWithCallback (rax.c:1244)
==2== by 0x48BF349: raxFree (rax.c:1251)
==2== by 0x48B1B5F: draw_context_free (sysprof-memprof-visualizer.c:82)
==2== by 0x49B4B90: g_task_finalize (gtask.c:721)
==2== by 0x4AFEAE0: g_object_unref (gobject.c:3938)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1739)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1732)
==2== by 0x4B9FD2A: g_source_destroy_internal (gmain.c:1404)
==2== by 0x4BA3A10: g_main_dispatch (gmain.c:3484)
==2== by 0x4BA3A10: g_main_context_dispatch (gmain.c:4172)
==2== by 0x4BA3E27: g_main_context_iterate.constprop.0 (gmain.c:4248)
==2== by 0x4BA3EC2: g_main_context_iteration (gmain.c:4313)
==2== Address 0x26523a50 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BF210: raxRecursiveFree (rax.c:1226)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF349: raxFreeWithCallback (rax.c:1244)
==2== by 0x48BF349: raxFree (rax.c:1251)
==2== by 0x48B1B5F: draw_context_free (sysprof-memprof-visualizer.c:82)
==2== by 0x49B4B90: g_task_finalize (gtask.c:721)
==2== by 0x4AFEAE0: g_object_unref (gobject.c:3938)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1739)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1732)
==2== by 0x4B9FD2A: g_source_destroy_internal (gmain.c:1404)
==2== by 0x4BA3A10: g_main_dispatch (gmain.c:3484)
==2== by 0x4BA3A10: g_main_context_dispatch (gmain.c:4172)
==2== by 0x4BA3E27: g_main_context_iterate.constprop.0 (gmain.c:4248)
==2== by 0x4BA3EC2: g_main_context_iteration (gmain.c:4313)
==2== Address 0x26523a50 is 0 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 8
==2== at 0x48BF26A: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF349: raxFreeWithCallback (rax.c:1244)
==2== by 0x48BF349: raxFree (rax.c:1251)
==2== by 0x48B1B5F: draw_context_free (sysprof-memprof-visualizer.c:82)
==2== by 0x49B4B90: g_task_finalize (gtask.c:721)
==2== by 0x4AFEAE0: g_object_unref (gobject.c:3938)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1739)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1732)
==2== by 0x4B9FD2A: g_source_destroy_internal (gmain.c:1404)
==2== by 0x4BA3A10: g_main_dispatch (gmain.c:3484)
==2== by 0x4BA3A10: g_main_context_dispatch (gmain.c:4172)
==2== by 0x4BA3E27: g_main_context_iterate.constprop.0 (gmain.c:4248)
==2== by 0x4BA3EC2: g_main_context_iteration (gmain.c:4313)
==2== Address 0x26523a60 is 16 bytes inside a block of size 24 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BDB68: raxCompressNode (rax.c:414)
==2== by 0x48BE81B: raxGenericInsert (rax.c:859)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 4
==2== at 0x48BF20E: raxRecursiveFree (rax.c:1226)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF349: raxFreeWithCallback (rax.c:1244)
==2== by 0x48BF349: raxFree (rax.c:1251)
==2== by 0x48B1B5F: draw_context_free (sysprof-memprof-visualizer.c:82)
==2== by 0x49B4B90: g_task_finalize (gtask.c:721)
==2== by 0x4AFEAE0: g_object_unref (gobject.c:3938)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1739)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1732)
==2== by 0x4B9FD2A: g_source_destroy_internal (gmain.c:1404)
==2== by 0x4BA3A10: g_main_dispatch (gmain.c:3484)
==2== by 0x4BA3A10: g_main_context_dispatch (gmain.c:4172)
==2== by 0x4BA3E27: g_main_context_iterate.constprop.0 (gmain.c:4248)
==2== Address 0x26524740 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid read of size 1
==2== at 0x48BF210: raxRecursiveFree (rax.c:1226)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF349: raxFreeWithCallback (rax.c:1244)
==2== by 0x48BF349: raxFree (rax.c:1251)
==2== by 0x48B1B5F: draw_context_free (sysprof-memprof-visualizer.c:82)
==2== by 0x49B4B90: g_task_finalize (gtask.c:721)
==2== by 0x4AFEAE0: g_object_unref (gobject.c:3938)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1739)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1732)
==2== by 0x4B9FD2A: g_source_destroy_internal (gmain.c:1404)
==2== by 0x4BA3A10: g_main_dispatch (gmain.c:3484)
==2== by 0x4BA3A10: g_main_context_dispatch (gmain.c:4172)
==2== by 0x4BA3E27: g_main_context_iterate.constprop.0 (gmain.c:4248)
==2== Address 0x26524740 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
==2== Invalid free() / delete / delete[] / realloc()
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BF298: raxRecursiveFree (rax.c:1237)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF27B: raxRecursiveFree (rax.c:1231)
==2== by 0x48BF349: raxFreeWithCallback (rax.c:1244)
==2== by 0x48BF349: raxFree (rax.c:1251)
==2== by 0x48B1B5F: draw_context_free (sysprof-memprof-visualizer.c:82)
==2== by 0x49B4B90: g_task_finalize (gtask.c:721)
==2== by 0x4AFEAE0: g_object_unref (gobject.c:3938)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1739)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1732)
==2== by 0x4B9FD2A: g_source_destroy_internal (gmain.c:1404)
==2== by 0x4BA3A10: g_main_dispatch (gmain.c:3484)
==2== by 0x4BA3A10: g_main_context_dispatch (gmain.c:4172)
==2== Address 0x26524740 is 0 bytes inside a block of size 16 free'd
==2== at 0x484926F: free (vg_replace_malloc.c:884)
==2== by 0x48BE0B4: raxRemove (rax.c:1054)
==2== by 0x48B1A96: draw_alloc_worker (sysprof-memprof-visualizer.c:396)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2== Block was alloc'd at
==2== at 0x484BCC3: realloc (vg_replace_malloc.c:1451)
==2== by 0x48BE910: raxGenericInsert (rax.c:878)
==2== by 0x48B18AA: draw_alloc_worker (sysprof-memprof-visualizer.c:384)
==2== by 0x49B50D5: g_task_thread_pool_thread (gtask.c:1531)
==2== by 0x4BD33B1: g_thread_pool_thread_proxy (gthreadpool.c:350)
==2== by 0x4BD2978: g_thread_proxy (gthread.c:831)
==2== by 0x56DE1D9: start_thread (pthread_create.c:442)
==2== by 0x5766D83: clone (clone.S:100)
==2==
sysprof: ../src/libsysprof/rax.c:1245: raxFreeWithCallback: Assertion `rax->numnodes == 0' failed.
==2==
==2== Process terminating with default action of signal 6 (SIGABRT): dumping core
==2== at 0x56E0184: __pthread_kill_implementation (pthread_kill.c:44)
==2== by 0x568E00D: raise (raise.c:26)
==2== by 0x56777FB: abort (abort.c:79)
==2== by 0x567771A: __assert_fail_base.cold (assert.c:92)
==2== by 0x5686656: __assert_fail (assert.c:101)
==2== by 0x48BD2F2: raxFreeWithCallback.part.0 (rax.c:1245)
==2== by 0x48BF362: raxFreeWithCallback (rax.c:1246)
==2== by 0x48BF362: raxFree (rax.c:1251)
==2== by 0x48B1B5F: draw_context_free (sysprof-memprof-visualizer.c:82)
==2== by 0x49B4B90: g_task_finalize (gtask.c:721)
==2== by 0x4AFEAE0: g_object_unref (gobject.c:3938)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1739)
==2== by 0x4B9F804: g_source_callback_unref (gmain.c:1732)
==2== by 0x4B9FD2A: g_source_destroy_internal (gmain.c:1404)
==2==
==2== HEAP SUMMARY:
==2== in use at exit: 50,863,441 bytes in 253,886 blocks
==2== total heap usage: 2,292,195 allocs, 2,038,544 frees, 324,922,840 bytes allocated
==2==
==2== LEAK SUMMARY:
==2== definitely lost: 29,864 bytes in 57 blocks
==2== indirectly lost: 65,023 bytes in 2,591 blocks
==2== possibly lost: 27,350,296 bytes in 64,074 blocks
==2== still reachable: 21,161,090 bytes in 172,886 blocks
==2== suppressed: 0 bytes in 0 blocks
==2== Rerun with --leak-check=full to see details of leaked memory
==2==
==2== Use --track-origins=yes to see where uninitialised values come from
==2== For lists of detected and suppressed errors, rerun with: -s
==2== ERROR SUMMARY: 15296 errors from 35 contexts (suppressed: 0 from 0)
Additional information
Sometimes I get free(): double free detected in tcache 2
in addition to the crash. These crashes occur in nightly, but not in the sysprof shipped in Fedora 37 (Version according about window: GNOME 43.0 (3.46.0))
Did bisect it a bit:
commit 073d65abdda59762f7ac93c4e703d3b6dbd088f1 # Crash <-- HEAD
commit c65dc2fa4d6c208519b89d9ce4bb82e9754435f9
commit 377434cfccf11fd702b73fbc43e690450879628e # Crash
commit 2e2a190d861ebe729c8e0aa447a9931ea9338a1d # Works
commit bb83598b128de5ecd505b7f8edbccd450ef54dcf
commit 7286515a36245e4343fadd8892c435c70a9213f3
commit 2df6bd6fe002ae02308b091b2fcfd198162b68bb # Works
commit 4963a43abe299f0ed61d08f0b83258b748179f86
commit 5695a3afd54f10e5ef1462dd781ae09677e91383
commit 8967b2db336549e1967d0ccb8a82fb1748010f97
commit d49c50f42b0f2f68ad7407cef788756f5d2c7545
commit ee71fb58b1dcd4246d3b901cb42173659d9152dc
commit f26534a3f2389ad1cede5015efd6768ee19e0d8c
commit 0598d1925b52dfef8a65fc76ee1cd5ee5baf159b
commit ac20c45ed243fce68d48a7ca17318275e1cfbc06 # Works
commit 687be21a34ac296239fc003c8c41653159b29888
commit db198e9809881e25e7c411841abc615c4a4328e2
commit a306817a07a3651187a06928397f0d91dc2a84d0
commit 6d50f3ca7bccf8f9a1533372bc3f07826b9e2094
commit 82a32f70e893a8447afb9d3e846c9f7754410f77
commit 8d3838d3aa4a2c5a550d3b248de3dee3fe7af67e
commit 67797056ca73f68dcd025ee997cfe1d294152f12
commit 56a86d3ca4be95deb88e7bb9be53f46e4aed34b5
commit 86127608cc034de9d745139b09ee1bc116dc930e
commit c4163672f9a2663ea4fa3ce2a31dc38bb2dcb4c2
commit cf8aadbd27d8aad694054c600d0ef731ba3747c6
commit a54d724b498e1adf12556dff6e3106052c8a8e81
commit 921b0c0b679fdb7f616b981c8c27c99e2cab35de
commit 6212396483b6e74502736255d57f4dafdbc16cd3
commit 403e363670db73022117010e8fee9dc383f7fb24
commit ceab63f6941c4a8c131189b579387ccc9cd8a891
commit 4a21465037d40db22cdc68df61b8ad4f717881b0
commit fbd92eea0b9886bb14a988f5de1a2eb0201f272a
commit d2b678d1d558d4ea7ec3de72a79f5a17cf5c2c2f # Works <-- 3.46.0
If I revert 377434cf, it does not crash anymore
Edited by JCWasmx86