22:07:40.505769 (empathy:20820): libnice-DEBUG: Agent 0x61200027d6c0 : stream 1=================================================================
22:07:40.506685 ==20820==ERROR: AddressSanitizer: heap-use-after-free on address 0x607000555b80 at pc 0x7f9546400741 bp 0x7f94e97a6320 sp 0x7f94e97a6310
22:07:40.507051 READ of size 8 at 0x607000555b80 thread T1189
22:07:40.617386  component 1 STATE-CHANGE disconnected -> gathering.
22:07:40.791293     #0 0x7f9546400740 in g_object_unref /home/bellet/Development/glib-2-50/gobject/gobject.c:3096
22:07:40.794155     #1 0x7f95477190ea in g_dbus_connection_call_internal /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:5823
22:07:40.794246     #2 0x7f954771d0cf in g_dbus_connection_call /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:6066
22:07:40.795180     #3 0x7f954772c1a7 in async_init_call_get_name_owner /home/bellet/Development/glib-2-50/gio/gdbusproxy.c:1547
22:07:40.795276     #4 0x7f954772e1b8 in async_init_start_service_by_name_cb /home/bellet/Development/glib-2-50/gio/gdbusproxy.c:1641
22:07:40.795524     #5 0x7f95476ba200 in g_task_return_now /home/bellet/Development/glib-2-50/gio/gtask.c:1121
22:07:40.795594     #6 0x7f95476bafd1 in g_task_return /home/bellet/Development/glib-2-50/gio/gtask.c:1179
22:07:40.795637     #7 0x7f95476bb75d in g_task_return_pointer /home/bellet/Development/glib-2-50/gio/gtask.c:1574
22:07:40.795677     #8 0x7f9547719738 in g_dbus_connection_call_done /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:5708
22:07:40.795715     #9 0x7f95476ba200 in g_task_return_now /home/bellet/Development/glib-2-50/gio/gtask.c:1121
22:07:40.795808     #10 0x7f95476ba2ae in complete_in_idle_cb /home/bellet/Development/glib-2-50/gio/gtask.c:1135
22:07:40.797184     #11 0x7f954604fa13 in g_idle_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:5545
22:07:40.797268     #12 0x7f954605848b in g_main_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:3203
22:07:40.797338     #13 0x7f954605848b in g_main_context_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:3856
22:07:40.797408     #14 0x7f9546058bbe in g_main_context_iterate /home/bellet/Development/glib-2-50/glib/gmain.c:3929
22:07:40.797477     #15 0x7f95460591ff in g_main_loop_run /home/bellet/Development/glib-2-50/glib/gmain.c:4125
22:07:40.797592     #16 0x7f9500a069cd  (/lib64/libgupnp-igd-1.0.so.4+0x49cd)
22:07:40.797814     #17 0x7f95460a7192 in g_thread_proxy /home/bellet/Development/glib-2-50/glib/gthread.c:784
22:07:40.798211     #18 0x7f9546000df7 in g_deprecated_thread_proxy deprecated/gthread-deprecated.c:310
22:07:40.798313     #19 0x7f95447a86c9 in start_thread (/lib64/libpthread.so.0+0x76c9)
22:07:40.798828     #20 0x7f95444e2f7e in clone (/lib64/libc.so.6+0x107f7e)
22:07:40.798955 
22:07:40.799354 0x607000555b80 is located 0 bytes inside of 72-byte region [0x607000555b80,0x607000555bc8)
22:07:40.799454 freed by thread T2 (gdbus) here:
22:07:40.799711     #0 0x7f95535d7b00 in free (/usr/lib64/libasan.so.3+0xc6b00)
22:07:40.799808     #1 0x7f9546064168 in g_free /home/bellet/Development/glib-2-50/glib/gmem.c:189
22:07:40.800214     #2 0x7f9546096248 in g_slice_free1 /home/bellet/Development/glib-2-50/glib/gslice.c:1136
22:07:40.801881     #3 0x7f954643ff96 in g_type_free_instance /home/bellet/Development/glib-2-50/gobject/gtype.c:1943
22:07:40.801965     #4 0x7f9546400aa8 in g_object_unref /home/bellet/Development/glib-2-50/gobject/gobject.c:3196
22:07:40.802424     #5 0x7f9547732e1e in message_to_write_data_free /home/bellet/Development/glib-2-50/gio/gdbusprivate.c:870
22:07:40.802522     #6 0x7f9547736f13 in write_message_cb /home/bellet/Development/glib-2-50/gio/gdbusprivate.c:1317
22:07:40.802596     #7 0x7f95476ba200 in g_task_return_now /home/bellet/Development/glib-2-50/gio/gtask.c:1121
22:07:40.802669     #8 0x7f95476ba2ae in complete_in_idle_cb /home/bellet/Development/glib-2-50/gio/gtask.c:1135
22:07:40.802743     #9 0x7f954604fa13 in g_idle_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:5545
22:07:40.802813     #10 0x7f954605848b in g_main_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:3203
22:07:40.802879     #11 0x7f954605848b in g_main_context_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:3856
22:07:40.802944     #12 0x7f9546058bbe in g_main_context_iterate /home/bellet/Development/glib-2-50/glib/gmain.c:3929
22:07:40.803018     #13 0x7f95460591ff in g_main_loop_run /home/bellet/Development/glib-2-50/glib/gmain.c:4125
22:07:40.803226     #14 0x7f9547733bae in gdbus_shared_thread_func /home/bellet/Development/glib-2-50/gio/gdbusprivate.c:247
22:07:40.803301     #15 0x7f95460a7192 in g_thread_proxy /home/bellet/Development/glib-2-50/glib/gthread.c:784
22:07:40.803369     #16 0x7f95447a86c9 in start_thread (/lib64/libpthread.so.0+0x76c9)
22:07:40.803436 
22:07:40.803503 previously allocated by thread T1189 here:
22:07:40.803570     #0 0x7f95535d7e60 in malloc (/usr/lib64/libasan.so.3+0xc6e60)
22:07:40.803637     #1 0x7f954606406c in g_malloc /home/bellet/Development/glib-2-50/glib/gmem.c:94
22:07:40.803705     #2 0x7f954609586f in g_slice_alloc /home/bellet/Development/glib-2-50/glib/gslice.c:1025
22:07:40.803774     #3 0x7f9546095c76 in g_slice_alloc0 /home/bellet/Development/glib-2-50/glib/gslice.c:1051
22:07:40.803842     #4 0x7f954643f80f in g_type_create_instance /home/bellet/Development/glib-2-50/gobject/gtype.c:1848
22:07:40.803917     #5 0x7f954640129d in g_object_new_internal /home/bellet/Development/glib-2-50/gobject/gobject.c:1783
22:07:40.803995     #6 0x7f9546404bdd in g_object_newv /home/bellet/Development/glib-2-50/gobject/gobject.c:1930
22:07:40.804109     #7 0x7f9546405a65 in g_object_new /home/bellet/Development/glib-2-50/gobject/gobject.c:1623
22:07:40.804179     #8 0x7f9547720ed3 in g_dbus_message_new /home/bellet/Development/glib-2-50/gio/gdbusmessage.c:578
22:07:40.804244     #9 0x7f954772327e in g_dbus_message_new_method_call /home/bellet/Development/glib-2-50/gio/gdbusmessage.c:607
22:07:40.804312     #10 0x7f9547719366 in g_dbus_connection_call_internal /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:5747
22:07:40.804380     #11 0x7f954771d0cf in g_dbus_connection_call /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:6066
22:07:40.804454     #12 0x7f954772c1a7 in async_init_call_get_name_owner /home/bellet/Development/glib-2-50/gio/gdbusproxy.c:1547
22:07:40.804532     #13 0x7f954772e1b8 in async_init_start_service_by_name_cb /home/bellet/Development/glib-2-50/gio/gdbusproxy.c:1641
22:07:40.804610     #14 0x7f95476ba200 in g_task_return_now /home/bellet/Development/glib-2-50/gio/gtask.c:1121
22:07:40.804688     #15 0x7f95476bafd1 in g_task_return /home/bellet/Development/glib-2-50/gio/gtask.c:1179
22:07:40.804765     #16 0x7f95476bb75d in g_task_return_pointer /home/bellet/Development/glib-2-50/gio/gtask.c:1574
22:07:40.804833     #17 0x7f9547719738 in g_dbus_connection_call_done /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:5708
22:07:40.804901     #18 0x7f95476ba200 in g_task_return_now /home/bellet/Development/glib-2-50/gio/gtask.c:1121
22:07:40.804967     #19 0x7f95476ba2ae in complete_in_idle_cb /home/bellet/Development/glib-2-50/gio/gtask.c:1135
22:07:40.805042     #20 0x7f954604fa13 in g_idle_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:5545
22:07:40.805108     #21 0x7f954605848b in g_main_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:3203
22:07:40.805175     #22 0x7f954605848b in g_main_context_dispatch /home/bellet/Development/glib-2-50/glib/gmain.c:3856
22:07:40.805242     #23 0x7f9546058bbe in g_main_context_iterate /home/bellet/Development/glib-2-50/glib/gmain.c:3929
22:07:40.805319     #24 0x7f95460591ff in g_main_loop_run /home/bellet/Development/glib-2-50/glib/gmain.c:4125
22:07:40.805388     #25 0x7f9500a069cd  (/lib64/libgupnp-igd-1.0.so.4+0x49cd)
22:07:40.805459 
22:07:40.805528 Thread T1189 created by T0 here:
22:07:40.805595     #0 0x7f9553542488 in __interceptor_pthread_create (/usr/lib64/libasan.so.3+0x31488)
22:07:40.805662     #1 0x7f95460e2db0 in g_system_thread_new /home/bellet/Development/glib-2-50/glib/gthread-posix.c:1170
22:07:40.805727     #2 0x7f95460a7627 in g_thread_new_internal /home/bellet/Development/glib-2-50/glib/gthread.c:874
22:07:40.805792     #3 0x7f95460012b8 in g_thread_create_full deprecated/gthread-deprecated.c:374
22:07:40.805857     #4 0x7f954600131c in g_thread_create deprecated/gthread-deprecated.c:343
22:07:40.805923     #5 0x7f9500a068b7  (/lib64/libgupnp-igd-1.0.so.4+0x48b7)
22:07:40.805989 
22:07:40.806064 Thread T2 (gdbus) created by T0 here:
22:07:40.806131     #0 0x7f9553542488 in __interceptor_pthread_create (/usr/lib64/libasan.so.3+0x31488)
22:07:40.806198     #1 0x7f95460e2db0 in g_system_thread_new /home/bellet/Development/glib-2-50/glib/gthread-posix.c:1170
22:07:40.806263     #2 0x7f95460a7627 in g_thread_new_internal /home/bellet/Development/glib-2-50/glib/gthread.c:874
22:07:40.806338     #3 0x7f95460a781b in g_thread_new /home/bellet/Development/glib-2-50/glib/gthread.c:827
22:07:40.806379     #4 0x7f9547734d0f in _g_dbus_shared_thread_ref /home/bellet/Development/glib-2-50/gio/gdbusprivate.c:275
22:07:40.806419     #5 0x7f9547734d0f in _g_dbus_worker_new /home/bellet/Development/glib-2-50/gio/gdbusprivate.c:1651
22:07:40.806457     #6 0x7f954771d65c in initable_init /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:2577
22:07:40.806495     #7 0x7f954766bff5 in g_initable_init /home/bellet/Development/glib-2-50/gio/ginitable.c:112
22:07:40.806532     #8 0x7f954771e1aa in g_bus_get_sync /home/bellet/Development/glib-2-50/gio/gdbusconnection.c:7259
22:07:40.806571     #9 0x7f95476e3b2b in g_application_impl_register /home/bellet/Development/glib-2-50/gio/gapplicationimpl-dbus.c:537
22:07:40.806621     #10 0x7f95476dc970 in g_application_register /home/bellet/Development/glib-2-50/gio/gapplication.c:2033
22:07:40.806788     #11 0x7f95476dde93 in g_application_real_local_command_line /home/bellet/Development/glib-2-50/gio/gapplication.c:1012
22:07:40.806832     #12 0x7f95476decf4 in g_application_run /home/bellet/Development/glib-2-50/gio/gapplication.c:2350
22:07:40.807263     #13 0x410edb in main /home/bellet/Development/empathy/src/empathy-call.c:281
22:07:40.807582     #14 0x7f95443fb400 in __libc_start_main (/lib64/libc.so.6+0x20400)
22:07:40.807663 
22:07:40.807781 SUMMARY: AddressSanitizer: heap-use-after-free /home/bellet/Development/glib-2-50/gobject/gobject.c:3096 in g_object_unref
22:07:40.807990 Shadow bytes around the buggy address:
22:07:40.808085   0x0c0e800a2b20: 00 00 00 00 00 fa fa fa fa fa fa fa fa fa fa fa
22:07:40.808154   0x0c0e800a2b30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
22:07:40.808223   0x0c0e800a2b40: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
22:07:40.808289   0x0c0e800a2b50: fa fa fa fa 00 00 00 00 00 00 00 00 00 fa fa fa
22:07:40.808356   0x0c0e800a2b60: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
22:07:40.808422 =>0x0c0e800a2b70:[fd]fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa
22:07:40.808488   0x0c0e800a2b80: fa fa fa fa fa fa fa fa fa fa fa fa fd fd fd fd
22:07:40.808555   0x0c0e800a2b90: fd fd fd fd fd fa fa fa fa fa fd fd fd fd fd fd
22:07:40.808621   0x0c0e800a2ba0: fd fd fd fa fa fa fa fa fd fd fd fd fd fd fd fd
22:07:40.808688   0x0c0e800a2bb0: fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
22:07:40.808754   0x0c0e800a2bc0: fa fa fa fa fd fd fd fd fd fd fd fd fd fa fa fa
22:07:40.808821 Shadow byte legend (one shadow byte represents 8 application bytes):
22:07:40.808888   Addressable:           00
22:07:40.808955   Partially addressable: 01 02 03 04 05 06 07 
22:07:40.809030   Heap left redzone:       fa
22:07:40.809096   Heap right redzone:      fb
22:07:40.809173   Freed heap region:       fd
22:07:40.809240   Stack left redzone:      f1
22:07:40.809306   Stack mid redzone:       f2
22:07:40.809372   Stack right redzone:     f3
22:07:40.809439   Stack partial redzone:   f4
22:07:40.809510   Stack after return:      f5
22:07:40.809581   Stack use after scope:   f8
22:07:40.809649   Global redzone:          f9
22:07:40.809716   Global init order:       f6
22:07:40.809783   Poisoned by user:        f7
22:07:40.809850   Container overflow:      fc
22:07:40.809916   Array cookie:            ac
22:07:40.809982   Intra object redzone:    bb
22:07:40.810059   ASan internal:           fe
22:07:40.810126   Left alloca redzone:     ca
22:07:40.810193   Right alloca redzone:    cb
22:07:40.810293 ==20820==ABORTING
