==8087== Memcheck, a memory error detector ==8087== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al. ==8087== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info ==8087== Command: ./test ==8087== Parent PID: 5561 ==8087== ==8087== Thread 4: ==8087== Invalid read of size 2 ==8087== at 0x122E72: tcp_split_unsent_seg (tcp_out.c:934) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x122E88: pbuf_clen (pbuf.c:816) ==8087== by 0x122E88: tcp_split_unsent_seg (tcp_out.c:941) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x1248B3: __bswap_32 (byteswap.h:47) ==8087== by 0x1248B3: tcp_output (tcp_out.c:1305) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x1249C1: __bswap_32 (byteswap.h:47) ==8087== by 0x1249C1: tcp_output (tcp_out.c:1333) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x1249D7: tcp_output (tcp_out.c:1334) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x124A2A: tcp_output (tcp_out.c:1357) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x124A34: tcp_output_segment_busy (tcp_out.c:1439) ==8087== by 0x124A34: tcp_output_segment (tcp_out.c:1468) ==8087== by 0x124A34: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc86 is 22 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 4 ==8087== at 0x124A47: tcp_output_segment (tcp_out.c:1477) ==8087== by 0x124A47: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc8 is 88 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124A52: tcp_output_segment (tcp_out.c:1488) ==8087== by 0x124A52: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcce is 94 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x124AB0: __bswap_32 (byteswap.h:47) ==8087== by 0x124AB0: tcp_output_segment (tcp_out.c:1540) ==8087== by 0x124AB0: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x124AC6: tcp_output_segment (tcp_out.c:1555) ==8087== by 0x124AC6: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x124ACD: tcp_output_segment (tcp_out.c:1548) ==8087== by 0x124ACD: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x124AD1: tcp_output_segment (tcp_out.c:1554) ==8087== by 0x124AD1: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 8 ==8087== at 0x124AD5: tcp_output_segment (tcp_out.c:1557) ==8087== by 0x124AD5: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124ADB: tcp_output_segment (tcp_out.c:1555) ==8087== by 0x124ADB: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124ADF: tcp_output_segment (tcp_out.c:1559) ==8087== by 0x124ADF: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcd0 is 96 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11A810: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x11A815: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11A770: lwip_standard_chksum(void const*, int) (inet_chksum.c:150) ==8087== by 0x11A81D: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc0 is 80 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11A77C: lwip_standard_chksum(void const*, int) (inet_chksum.c:149) ==8087== by 0x11A81D: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11A78F: lwip_standard_chksum(void const*, int) (inet_chksum.c:156) ==8087== by 0x11A81D: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027c25c is 1,516 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11A832: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:274) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x11A852: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:266) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124B49: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B49: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcd0 is 96 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11E25C: ip4_output_if_src (ip4.c:860) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc86 is 22 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11180C: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:483) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x111812: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:496) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc84 is 20 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x111848: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:498) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 8 ==8087== at 0x111828: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:522) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11182C: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:523) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x111832: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:524) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11E2AA: ip4_output_if_src (ip4.c:912) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x11E2AF: ip4_output_if_src (ip4.c:911) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2B9: ip4_output_if_src (ip4.c:915) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb4 is 68 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2BF: ip4_output_if_src (ip4.c:916) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb5 is 69 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2E8: ip4_output_if_src (ip4.c:929) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcad is 61 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2F0: ip4_output_if_src (ip4.c:928) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcac is 60 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11E2F3: ip4_output_if_src (ip4.c:933) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x11E2FB: ip4_output_if_src (ip4.c:937) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb2 is 66 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 4 ==8087== at 0x11E30E: ip4_output_if_src (ip4.c:922) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcbc is 76 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x11E31A: ip4_output_if_src (ip4.c:933) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcae is 62 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x11E31E: ip4_output_if_src (ip4.c:938) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb0 is 64 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 4 ==8087== at 0x11E345: ip4_output_if_src (ip4.c:948) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb8 is 72 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x11E372: ip4_output_if_src (ip4.c:958) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb6 is 70 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11E428: ip4_output_if_src (ip4.c:1009) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x1194C7: netif_output_callback(netif*, pbuf*) (tap.c:1116) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x1194DE: netif_output_callback(netif*, pbuf*) (tap.c:1117) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x119500: memcpy (string_fortified.h:34) ==8087== by 0x119500: netif_output_callback(netif*, pbuf*) (tap.c:1127) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x4C38750: memmove (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11950E: memcpy (string_fortified.h:34) ==8087== by 0x11950E: netif_output_callback(netif*, pbuf*) (tap.c:1127) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcac is 60 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x4C3875F: memmove (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11950E: memcpy (string_fortified.h:34) ==8087== by 0x11950E: netif_output_callback(netif*, pbuf*) (tap.c:1127) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb0 is 64 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x4C38788: memmove (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11950E: memcpy (string_fortified.h:34) ==8087== by 0x11950E: netif_output_callback(netif*, pbuf*) (tap.c:1127) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027c25c is 1,516 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11950F: netif_output_callback(netif*, pbuf*) (tap.c:1128) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x119513: netif_output_callback(netif*, pbuf*) (tap.c:1129) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x1194F0: netif_output_callback(netif*, pbuf*) (tap.c:1127) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027c8e2 is 18 bytes inside a block of size 40 free'd ==8087== at 0x4C32D3B: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11C7FE: mem_free (main.h:1479) ==8087== by 0x11C7FE: pbuf_free (pbuf.c:780) ==8087== by 0x11D357: pbuf_realloc (pbuf.c:454) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122A8E: tcp_write (tcp_out.c:540) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x4C38796: memmove (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11950E: memcpy (string_fortified.h:34) ==8087== by 0x11950E: netif_output_callback(netif*, pbuf*) (tap.c:1127) ==8087== by 0x11E39E: ip4_output_if_src (ip4.c:1015) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027c8ea is 26 bytes inside a block of size 40 free'd ==8087== at 0x4C32D3B: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11C7FE: mem_free (main.h:1479) ==8087== by 0x11C7FE: pbuf_free (pbuf.c:780) ==8087== by 0x11D357: pbuf_realloc (pbuf.c:454) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122A8E: tcp_write (tcp_out.c:540) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x124925: tcp_output (tcp_out.c:1373) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x124929: __bswap_32 (byteswap.h:47) ==8087== by 0x124929: tcp_output (tcp_out.c:1373) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x12495A: tcp_output (tcp_out.c:1375) ==8087== by 0x129205: tcp_slowtmr (tcp.c:1291) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x123376: tcp_rexmit_rto_prepare (tcp_out.c:1645) ==8087== by 0x128F34: tcp_slowtmr (tcp.c:1319) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc86 is 22 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x1233C0: __bswap_32 (byteswap.h:47) ==8087== by 0x1233C0: tcp_rexmit_rto_prepare (tcp_out.c:1671) ==8087== by 0x128F34: tcp_slowtmr (tcp.c:1319) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x1233C3: tcp_rexmit_rto_prepare (tcp_out.c:1671) ==8087== by 0x128F34: tcp_slowtmr (tcp.c:1319) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x1248B3: __bswap_32 (byteswap.h:47) ==8087== by 0x1248B3: tcp_output (tcp_out.c:1305) ==8087== by 0x129011: tcp_slowtmr (tcp.c:1345) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Thread 8: ==8087== Invalid read of size 4 ==8087== at 0x1248B3: __bswap_32 (byteswap.h:47) ==8087== by 0x1248B3: tcp_output (tcp_out.c:1305) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x1249C1: __bswap_32 (byteswap.h:47) ==8087== by 0x1249C1: tcp_output (tcp_out.c:1333) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x1249D7: tcp_output (tcp_out.c:1334) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x124A2A: tcp_output (tcp_out.c:1357) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x124A34: tcp_output_segment_busy (tcp_out.c:1439) ==8087== by 0x124A34: tcp_output_segment (tcp_out.c:1468) ==8087== by 0x124A34: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc86 is 22 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 4 ==8087== at 0x124A47: tcp_output_segment (tcp_out.c:1477) ==8087== by 0x124A47: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc8 is 88 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124A52: tcp_output_segment (tcp_out.c:1488) ==8087== by 0x124A52: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcce is 94 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x124AB0: __bswap_32 (byteswap.h:47) ==8087== by 0x124AB0: tcp_output_segment (tcp_out.c:1540) ==8087== by 0x124AB0: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x124AC6: tcp_output_segment (tcp_out.c:1555) ==8087== by 0x124AC6: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x124ACD: tcp_output_segment (tcp_out.c:1548) ==8087== by 0x124ACD: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x124AD1: tcp_output_segment (tcp_out.c:1554) ==8087== by 0x124AD1: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 8 ==8087== at 0x124AD5: tcp_output_segment (tcp_out.c:1557) ==8087== by 0x124AD5: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124ADB: tcp_output_segment (tcp_out.c:1555) ==8087== by 0x124ADB: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124ADF: tcp_output_segment (tcp_out.c:1559) ==8087== by 0x124ADF: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcd0 is 96 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11A810: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x11A815: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11A770: lwip_standard_chksum(void const*, int) (inet_chksum.c:150) ==8087== by 0x11A81D: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc0 is 80 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11A77C: lwip_standard_chksum(void const*, int) (inet_chksum.c:149) ==8087== by 0x11A81D: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11A78F: lwip_standard_chksum(void const*, int) (inet_chksum.c:156) ==8087== by 0x11A81D: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:269) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027c25c is 1,516 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11A832: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:274) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x11A852: inet_cksum_pseudo_base(pbuf*, unsigned char, unsigned short, unsigned int) (inet_chksum.c:266) ==8087== by 0x124B40: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B40: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x124B49: tcp_output_segment (tcp_out.c:1599) ==8087== by 0x124B49: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcd0 is 96 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11E25C: ip4_output_if_src (ip4.c:860) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc86 is 22 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11180C: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:483) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x111812: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:496) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc84 is 20 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x111848: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:498) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 8 ==8087== at 0x111828: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:522) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11182C: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:523) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 2 ==8087== at 0x111832: pbuf_add_header_impl(pbuf*, unsigned long, unsigned char) (pbuf.c:524) ==8087== by 0x11E29D: pbuf_add_header (pbuf.c:553) ==8087== by 0x11E29D: ip4_output_if_src (ip4.c:903) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11E2AA: ip4_output_if_src (ip4.c:912) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc82 is 18 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x11E2AF: ip4_output_if_src (ip4.c:911) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc78 is 8 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2B9: ip4_output_if_src (ip4.c:915) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb4 is 68 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2BF: ip4_output_if_src (ip4.c:916) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcb5 is 69 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2E8: ip4_output_if_src (ip4.c:929) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcad is 61 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11E2F0: ip4_output_if_src (ip4.c:928) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcac is 60 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x11E2F3: ip4_output_if_src (ip4.c:933) ==8087== by 0x124B89: ip4_output_if (ip4.c:826) ==8087== by 0x124B89: tcp_output_segment (tcp_out.c:1607) ==8087== by 0x124B89: tcp_output (tcp_out.c:1360) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc80 is 16 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== ==8087== More than 100 errors detected. Subsequent errors ==8087== will still be recorded, but in less detail than before. ==8087== Invalid read of size 2 ==8087== at 0x124925: tcp_output (tcp_out.c:1373) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x124929: __bswap_32 (byteswap.h:47) ==8087== by 0x124929: tcp_output (tcp_out.c:1373) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x124991: __bswap_32 (byteswap.h:47) ==8087== by 0x124991: tcp_output (tcp_out.c:1389) ==8087== by 0x12ACC2: tcp_input (tcp_in.c:569) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 4 ==8087== at 0x1215D9: __bswap_32 (byteswap.h:47) ==8087== by 0x1215D9: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1115) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bcc4 is 84 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 2 ==8087== at 0x1215DC: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1115) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bccc is 92 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x121618: pbuf_clen (pbuf.c:816) ==8087== by 0x121618: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1125) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11C7BB: pbuf_free (pbuf.c:753) ==8087== by 0x121546: tcp_seg_free (tcp.c:1663) ==8087== by 0x121656: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1132) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc86 is 22 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid write of size 1 ==8087== at 0x11C7C6: pbuf_free (pbuf.c:755) ==8087== by 0x121546: tcp_seg_free (tcp.c:1663) ==8087== by 0x121656: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1132) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc86 is 22 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11C7D4: pbuf_free (pbuf.c:765) ==8087== by 0x121546: tcp_seg_free (tcp.c:1663) ==8087== by 0x121656: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1132) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc85 is 21 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 8 ==8087== at 0x11C7D8: pbuf_free (pbuf.c:760) ==8087== by 0x121546: tcp_seg_free (tcp.c:1663) ==8087== by 0x121656: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1132) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11C7DD: pbuf_free (pbuf.c:762) ==8087== by 0x121546: tcp_seg_free (tcp.c:1663) ==8087== by 0x121656: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1132) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc84 is 20 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid free() / delete / delete[] / realloc() ==8087== at 0x4C32D3B: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11C7FE: mem_free (main.h:1479) ==8087== by 0x11C7FE: pbuf_free (pbuf.c:780) ==8087== by 0x121546: tcp_seg_free (tcp.c:1663) ==8087== by 0x121656: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1132) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027bc70 is 0 bytes inside a block of size 1,520 free'd ==8087== at 0x4C33D2F: realloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11D38A: mem_trim (main.h:1470) ==8087== by 0x11D38A: pbuf_realloc (pbuf.c:444) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122579: tcp_write (tcp_out.c:610) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== Invalid read of size 1 ==8087== at 0x11C827: pbuf_free (pbuf.c:753) ==8087== by 0x121546: tcp_seg_free (tcp.c:1663) ==8087== by 0x121656: tcp_free_acked_segments(tcp_pcb*, tcp_seg*, char const*, tcp_seg*) [clone .isra.58] (tcp_in.c:1132) ==8087== by 0x123B84: tcp_receive(tcp_pcb*) (tcp_in.c:1301) ==8087== by 0x12AAB1: tcp_process (tcp_in.c:999) ==8087== by 0x12AAB1: tcp_input (tcp_in.c:454) ==8087== by 0x12B645: ip4_input (ip4.c:717) ==8087== by 0x12096E: lwip_push_ip_packet(session*, void const*, int) (tap.c:1166) ==8087== by 0x132C8F: process_incoming_tap_packet(session*, unsigned char*, int) (tap.c:1968) ==8087== by 0x132E52: tap_process_thread(void*) (tap_linux.c:647) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Address 0x1027c8e6 is 22 bytes inside a block of size 40 free'd ==8087== at 0x4C32D3B: free (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11C7FE: mem_free (main.h:1479) ==8087== by 0x11C7FE: pbuf_free (pbuf.c:780) ==8087== by 0x11D357: pbuf_realloc (pbuf.c:454) ==8087== by 0x122E65: tcp_split_unsent_seg (tcp_out.c:932) ==8087== by 0x1290E4: tcp_slowtmr (tcp.c:1290) ==8087== by 0x12C118: tcpip_tcp_timer(void*) (timeouts.c:149) ==8087== by 0x12C6C4: sys_check_timeouts (timeouts.c:390) ==8087== by 0x12C703: lwip_timer(session*) (tap.c:1182) ==8087== by 0x12CA48: tap_thread(void*) (tap_linux.c:832) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== Block was alloc'd at ==8087== at 0x4C31B0F: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) ==8087== by 0x11CEEC: mem_malloc (main.h:1473) ==8087== by 0x11CEEC: pbuf_alloc (pbuf.c:284) ==8087== by 0x11D0B2: tcp_pbuf_prealloc(pbuf_layer, unsigned short, unsigned short, unsigned short*, tcp_pcb const*, unsigned char, unsigned char) (tcp_out.c:263) ==8087== by 0x122A8E: tcp_write (tcp_out.c:540) ==8087== by 0x124EA7: lwip_tcp_write(session*, tcp_pcb*, void const*, int) (tap.c:894) ==8087== by 0x125009: lwip_stream_process_app_buf(_stream*) (tap.c:705) ==8087== by 0x125C06: client_thread_lwip(void*) (tap.c:757) ==8087== by 0x654C6DA: start_thread (pthread_create.c:463) ==8087== by 0x688571E: clone (clone.S:95) ==8087== ==8087== ==8087== HEAP SUMMARY: ==8087== in use at exit: 417,613 bytes in 366 blocks ==8087== total heap usage: 77,733 allocs, 77,368 frees, 13,660,264 bytes allocated ==8087== ==8087== LEAK SUMMARY: ==8087== definitely lost: 160 bytes in 1 blocks ==8087== indirectly lost: 0 bytes in 0 blocks ==8087== possibly lost: 304 bytes in 1 blocks ==8087== still reachable: 417,149 bytes in 364 blocks ==8087== suppressed: 0 bytes in 0 blocks ==8087== Rerun with --leak-check=full to see details of leaked memory ==8087== ==8087== For counts of detected and suppressed errors, rerun with: -v ==8087== ERROR SUMMARY: 3108 errors from 113 contexts (suppressed: 0 from 0)