=================================================================
==90797==ERROR: AddressSanitizer: heap-use-after-free on address 0x60200002bef0 at pc 0x000108abc405 bp 0x00010ed86bc0 sp 0x00010ed86370
READ of size 1 at 0x60200002bef0 thread T6
    #0 0x108abc404 in wrap_strcmp.part.6 (in libasan.2.dylib) + 740
    #1 0x10991475e in gst_value_compare_string (in libgstreamer-1.0.0.dylib) + 361
    #2 0x10991c51c in _gst_value_compare_nolist (in libgstreamer-1.0.0.dylib) + 165
    #3 0x10991d423 in gst_value_intersect (in libgstreamer-1.0.0.dylib) + 330
    #4 0x109919216 in gst_value_intersect_list (in libgstreamer-1.0.0.dylib) + 560
    #5 0x10991d40b in gst_value_intersect (in libgstreamer-1.0.0.dylib) + 306
    #6 0x109919216 in gst_value_intersect_list (in libgstreamer-1.0.0.dylib) + 560
    #7 0x10991d3e2 in gst_value_intersect (in libgstreamer-1.0.0.dylib) + 265
    #8 0x1098d8522 in gst_structure_intersect_field1 (in libgstreamer-1.0.0.dylib) + 389
    #9 0x1098ce3eb in gst_structure_foreach (in libgstreamer-1.0.0.dylib) + 422
    #10 0x1098d8836 in gst_structure_intersect (in libgstreamer-1.0.0.dylib) + 418
    #11 0x109801c6a in gst_caps_intersect_first (in libgstreamer-1.0.0.dylib) + 1595
    #12 0x109801ecd in gst_caps_intersect_full (in libgstreamer-1.0.0.dylib) + 254
    #13 0x10c4640ff in gst_base_sink_query_caps (in libgstbase-1.0.0.dylib) + 354
    #14 0x10c483740 in gst_base_sink_default_query (in libgstbase-1.0.0.dylib) + 566
    #15 0x10c579aec in gst_audio_base_sink_query_pad (in libgstaudio-1.0.0.dylib) + 161
    #16 0x10c653b85 in gst_osx_audio_sink_query (in libgstosxaudio.so) + 317
    #17 0x10c483b78 in gst_base_sink_sink_query (in libgstbase-1.0.0.dylib) + 165
    #18 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038
    #19 0x109874fdc in gst_pad_peer_query (in libgstreamer-1.0.0.dylib) + 1955
    #20 0x109900aa0 in query_caps_func (in libgstreamer-1.0.0.dylib) + 219
    #21 0x10986e5ed in gst_pad_forward (in libgstreamer-1.0.0.dylib) + 932
    #22 0x1099012e4 in gst_pad_proxy_query_caps (in libgstreamer-1.0.0.dylib) + 1311
    #23 0x10986f7b4 in gst_pad_query_caps_default (in libgstreamer-1.0.0.dylib) + 454
    #24 0x1098705a3 in gst_pad_query_default (in libgstreamer-1.0.0.dylib) + 538
    #25 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038
    #26 0x109874fdc in gst_pad_peer_query (in libgstreamer-1.0.0.dylib) + 1955
    #27 0x109900aa0 in query_caps_func (in libgstreamer-1.0.0.dylib) + 219
    #28 0x10986e5ed in gst_pad_forward (in libgstreamer-1.0.0.dylib) + 932
    #29 0x1099012e4 in gst_pad_proxy_query_caps (in libgstreamer-1.0.0.dylib) + 1311
    #30 0x10986f7b4 in gst_pad_query_caps_default (in libgstreamer-1.0.0.dylib) + 454
    #31 0x1098705a3 in gst_pad_query_default (in libgstreamer-1.0.0.dylib) + 538
    #32 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038
    #33 0x109874fdc in gst_pad_peer_query (in libgstreamer-1.0.0.dylib) + 1955
    #34 0x10990262d in gst_pad_peer_query_caps (in libgstreamer-1.0.0.dylib) + 826
    #35 0x10c49e2b5 in gst_base_transform_query_caps (in libgstbase-1.0.0.dylib) + 1317
    #36 0x10c4a2b46 in gst_base_transform_default_query (in libgstbase-1.0.0.dylib) + 2609
    #37 0x10c4a2d25 in gst_base_transform_query (in libgstbase-1.0.0.dylib) + 235
    #38 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038
    #39 0x109902155 in gst_pad_query_caps (in libgstreamer-1.0.0.dylib) + 826
    #40 0x10c4a1720 in gst_base_transform_acceptcaps_default (in libgstbase-1.0.0.dylib) + 324
    #41 0x10c4a2ae4 in gst_base_transform_default_query (in libgstbase-1.0.0.dylib) + 2511
    #42 0x10c4a2d25 in gst_base_transform_query (in libgstbase-1.0.0.dylib) + 235
    #43 0x109873e22 in gst_pad_query (in libgstreamer-1.0.0.dylib) + 2038
    #44 0x109902af7 in gst_pad_query_accept_caps (in libgstreamer-1.0.0.dylib) + 812
    #45 0x10987dbf1 in pre_eventfunc_check (in libgstreamer-1.0.0.dylib) + 263
    #46 0x10987eb2a in gst_pad_send_event_unchecked (in libgstreamer-1.0.0.dylib) + 3577
    #47 0x10987c9c1 in gst_pad_push_event_unchecked (in libgstreamer-1.0.0.dylib) + 2648
    #48 0x109872998 in push_sticky (in libgstreamer-1.0.0.dylib) + 881
    #49 0x1098611f3 in events_foreach (in libgstreamer-1.0.0.dylib) + 788
    #50 0x1098734c9 in check_sticky (in libgstreamer-1.0.0.dylib) + 497
    #51 0x109876f3d in gst_pad_push_data (in libgstreamer-1.0.0.dylib) + 446
    #52 0x109877fcb in gst_pad_push (in libgstreamer-1.0.0.dylib) + 509
    #53 0x10c568af7 in gst_audio_decoder_push_forward (in libgstaudio-1.0.0.dylib) + 223
    #54 0x10c5675dc in gst_audio_decoder_output (in libgstaudio-1.0.0.dylib) + 111
    #55 0x10c566b06 in gst_audio_decoder_finish_frame (in libgstaudio-1.0.0.dylib) + 1198
    #56 0x10c5533b2 in gst_mad_handle_frame (in libgstmad.so) + 707
    #57 0x10c56b3c3 in gst_audio_decoder_push_buffers (in libgstaudio-1.0.0.dylib) + 828
    #58 0x10c56afdf in gst_audio_decoder_drain (in libgstaudio-1.0.0.dylib) + 90
    #59 0x10c56c30e in gst_audio_decoder_sink_eventfunc (in libgstaudio-1.0.0.dylib) + 1113
    #60 0x10987eb76 in gst_pad_send_event_unchecked (in libgstreamer-1.0.0.dylib) + 3653
    #61 0x10987c9c1 in gst_pad_push_event_unchecked (in libgstreamer-1.0.0.dylib) + 2648
    #62 0x109872998 in push_sticky (in libgstreamer-1.0.0.dylib) + 881
    #63 0x1098611f3 in events_foreach (in libgstreamer-1.0.0.dylib) + 788
    #64 0x1098734c9 in check_sticky (in libgstreamer-1.0.0.dylib) + 497
    #65 0x10987d553 in gst_pad_push_event (in libgstreamer-1.0.0.dylib) + 965
    #66 0x10c496162 in gst_base_src_loop (in libgstbase-1.0.0.dylib) + 8951
    #67 0x1098e8767 in gst_task_func (in libgstreamer-1.0.0.dylib) + 1329
    #68 0x1098ea7e3 in default_func (in libgstreamer-1.0.0.dylib) + 150
    #69 0x109b432bb in g_thread_pool_thread_proxy (in libglib-2.0.0.dylib) + 36
    #70 0x109b42611 in g_thread_proxy (in libglib-2.0.0.dylib) + 89
    #71 0x7fff97f86267 in _pthread_body (in libsystem_pthread.dylib) + 130
    #72 0x7fff97f861e4 in _pthread_start (in libsystem_pthread.dylib) + 175
    #73 0x7fff97f8441c in thread_start (in libsystem_pthread.dylib) + 12

0x60200002bef0 is located 0 bytes inside of 6-byte region [0x60200002bef0,0x60200002bef6)
freed by thread T0 here:
    #0 0x108ad2419 in wrap_free (in libasan.2.dylib) + 217
    #1 0x109acadd2 in g_value_unset (in libgobject-2.0.0.dylib) + 39
    #2 0x109906737 in gst_value_free_list_or_array (in libgstreamer-1.0.0.dylib) + 290
    #3 0x109acadd2 in g_value_unset (in libgobject-2.0.0.dylib) + 39
    #4 0x1098c9a2b in gst_structure_free (in libgstreamer-1.0.0.dylib) + 409
    #5 0x1097f9bd9 in _gst_caps_free (in libgstreamer-1.0.0.dylib) + 312
    #6 0x10985e6de in gst_mini_object_unref (in libgstreamer-1.0.0.dylib) + 1460
    #7 0x10c653d53 in gst_osx_audio_sink_stop (in libgstosxaudio.so) + 25
    #8 0x10c485a19 in gst_base_sink_change_state (in libgstbase-1.0.0.dylib) + 7823
    #9 0x10c5753b4 in gst_audio_base_sink_change_state (in libgstaudio-1.0.0.dylib) + 728
    #10 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #11 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #12 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #13 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270
    #14 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425
    #15 0x10c6394c7 in gst_auto_detect_change_state (in libgstautodetect.so) + 1719
    #16 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #17 0x10982e54d in gst_element_continue_state (in libgstreamer-1.0.0.dylib) + 1169
    #18 0x10982fe1c in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 1206
    #19 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #20 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #21 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270
    #22 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425
    #23 0x109885da1 in gst_pipeline_change_state (in libgstreamer-1.0.0.dylib) + 3678
    #24 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #25 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #26 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #27 0x108a8f98d in main (in gst-launch-1.0) + 4226
    #28 0x7fff972215c8 in start (in libdyld.dylib) + 0
    #29 0xa  (<unknown module>)

previously allocated by thread T0 here:
    #0 0x108ad226a in wrap_malloc (in libasan.2.dylib) + 202
    #1 0x109b26244 in g_malloc (in libglib-2.0.0.dylib) + 24
    #2 0x109b3a88a in g_strdup (in libglib-2.0.0.dylib) + 42
    #3 0x109acdb30 in value_copy_string (in libgobject-2.0.0.dylib) + 17
    #4 0x10991dffb in gst_value_init_and_copy (in libgstreamer-1.0.0.dylib) + 180
    #5 0x10990657a in copy_garray_of_gstvalue (in libgstreamer-1.0.0.dylib) + 278
    #6 0x1099065db in gst_value_copy_list_or_array (in libgstreamer-1.0.0.dylib) + 74
    #7 0x10991dffb in gst_value_init_and_copy (in libgstreamer-1.0.0.dylib) + 180
    #8 0x1098c96f1 in gst_structure_copy (in libgstreamer-1.0.0.dylib) + 663
    #9 0x10c653f5f in gst_osx_audio_sink_create_ringbuffer (in libgstosxaudio.so) + 470
    #10 0x10c574c21 in gst_audio_base_sink_create_ringbuffer (in libgstaudio-1.0.0.dylib) + 31
    #11 0x10c575123 in gst_audio_base_sink_change_state (in libgstaudio-1.0.0.dylib) + 71
    #12 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #13 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #14 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #15 0x10c639129 in gst_auto_detect_change_state (in libgstautodetect.so) + 793
    #16 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #17 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #18 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #19 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270
    #20 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425
    #21 0x109885da1 in gst_pipeline_change_state (in libgstreamer-1.0.0.dylib) + 3678
    #22 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #23 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #24 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #25 0x108a8f312 in main (in gst-launch-1.0) + 2567
    #26 0x7fff972215c8 in start (in libdyld.dylib) + 0
    #27 0xa  (<unknown module>)

Thread T6 created by T0 here:
    #0 0x108aae0f0 in wrap_pthread_create (in libasan.2.dylib) + 96
    #1 0x109b5d2dd in g_system_thread_new (in libglib-2.0.0.dylib) + 140
    #2 0x109b426e2 in g_thread_new_internal (in libglib-2.0.0.dylib) + 63
    #3 0x109b42aeb in g_thread_pool_start_thread (in libglib-2.0.0.dylib) + 95
    #4 0x109b42b7b in g_thread_pool_push (in libglib-2.0.0.dylib) + 90
    #5 0x1098eaa1c in default_push (in libgstreamer-1.0.0.dylib) + 241
    #6 0x1098eb14a in gst_task_pool_push (in libgstreamer-1.0.0.dylib) + 426
    #7 0x1098e9b52 in start_task (in libgstreamer-1.0.0.dylib) + 478
    #8 0x1098e9f57 in gst_task_set_state (in libgstreamer-1.0.0.dylib) + 743
    #9 0x109880a64 in gst_pad_start_task (in libgstreamer-1.0.0.dylib) + 1079
    #10 0x10c48cf35 in gst_base_src_perform_seek (in libgstbase-1.0.0.dylib) + 3703
    #11 0x10c49903c in gst_base_src_start_complete (in libgstbase-1.0.0.dylib) + 2181
    #12 0x10c49856a in gst_base_src_start (in libgstbase-1.0.0.dylib) + 1257
    #13 0x10c49ab3c in gst_base_src_activate_push (in libgstbase-1.0.0.dylib) + 279
    #14 0x10c49b262 in gst_base_src_activate_mode (in libgstbase-1.0.0.dylib) + 481
    #15 0x10986460c in gst_pad_activate_mode (in libgstreamer-1.0.0.dylib) + 1611
    #16 0x109862e1c in gst_pad_activate_default (in libgstreamer-1.0.0.dylib) + 37
    #17 0x109863949 in gst_pad_set_active (in libgstreamer-1.0.0.dylib) + 781
    #18 0x1098301ac in activate_pads (in libgstreamer-1.0.0.dylib) + 123
    #19 0x10984f562 in gst_iterator_fold (in libgstreamer-1.0.0.dylib) + 266
    #20 0x1098302c2 in iterator_activate_fold_with_resync (in libgstreamer-1.0.0.dylib) + 246
    #21 0x109830492 in gst_element_pads_activate (in libgstreamer-1.0.0.dylib) + 265
    #22 0x109830a14 in gst_element_change_state_func (in libgstreamer-1.0.0.dylib) + 676
    #23 0x10c49b455 in gst_base_src_change_state (in libgstbase-1.0.0.dylib) + 331
    #24 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #25 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #26 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #27 0x1097d7d6d in gst_bin_element_set_state (in libgstreamer-1.0.0.dylib) + 2270
    #28 0x1097da2ba in gst_bin_change_state_func (in libgstreamer-1.0.0.dylib) + 2425
    #29 0x109885da1 in gst_pipeline_change_state (in libgstreamer-1.0.0.dylib) + 3678
    #30 0x10982fa04 in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 158
    #31 0x10982e54d in gst_element_continue_state (in libgstreamer-1.0.0.dylib) + 1169
    #32 0x10982fe1c in gst_element_change_state (in libgstreamer-1.0.0.dylib) + 1206
    #33 0x10982f73d in gst_element_set_state_func (in libgstreamer-1.0.0.dylib) + 2363
    #34 0x10982edf9 in gst_element_set_state (in libgstreamer-1.0.0.dylib) + 375
    #35 0x108a8f312 in main (in gst-launch-1.0) + 2567
    #36 0x7fff972215c8 in start (in libdyld.dylib) + 0
    #37 0xa  (<unknown module>)

SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ??
Shadow bytes around the buggy address:
  0x1c0400005780: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fa
  0x1c0400005790: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fd
  0x1c04000057a0: fa fa fd fa fa fa 00 00 fa fa fd fd fa fa fd fa
  0x1c04000057b0: fa fa fd fd fa fa 00 00 fa fa 00 00 fa fa fd fd
  0x1c04000057c0: fa fa 00 00 fa fa 00 00 fa fa 00 fa fa fa fd fd
=>0x1c04000057d0: fa fa fd fd fa fa fd fa fa fa fd fa fa fa[fd]fa
  0x1c04000057e0: fa fa fd fa fa fa fd fa fa fa fd fd fa fa fd fa
  0x1c04000057f0: fa fa 00 fa fa fa fd fd fa fa fd fd fa fa fd fa
  0x1c0400005800: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x1c0400005810: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x1c0400005820: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Heap right redzone:      fb
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack partial redzone:   f4
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
==90797==ABORTING