==25464== Memcheck, a memory error detector ==25464== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al. ==25464== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info ==25464== Command: /home/tvheadend/tvheadend/build.linux/tvheadend -u root -g video ==25464== Parent PID: 25450 ==25464== --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 --25464-- Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 ==25464== Warning: noted but unhandled ioctl 0x6f43 with no size/direction hints. ==25464== This could cause spurious value errors to appear. ==25464== See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper. ==25464== Warning: noted but unhandled ioctl 0x6f42 with no size/direction hints. ==25464== This could cause spurious value errors to appear. ==25464== See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper. ==25464== Thread 7 tvh:mtimer: ==25464== Syscall param ioctl(generic) points to uninitialised byte(s) ==25464== at 0x6A33F07: ioctl (syscall-template.S:78) ==25464== by 0x4404D1: linuxdvb_diseqc_send (linuxdvb_satconf.c:1796) ==25464== by 0x4411A5: linuxdvb_switch_tune (linuxdvb_switch.c:206) ==25464== by 0x43E2B6: linuxdvb_satconf_ele_tune (linuxdvb_satconf.c:983) ==25464== by 0x43E79C: linuxdvb_satconf_start_mux (linuxdvb_satconf.c:1103) ==25464== by 0x4382AF: linuxdvb_frontend_start_mux (linuxdvb_frontend.c:783) ==25464== by 0x3FCE9F: mpegts_mux_instance_start (mpegts_mux.c:264) ==25464== by 0x40281C: mpegts_service_start (mpegts_service.c:403) ==25464== by 0x330281: service_start (service.c:342) ==25464== by 0x330BD8: service_find_instance (service.c:542) ==25464== by 0x32CBB5: subscription_start_instance (subscriptions.c:351) ==25464== by 0x32CECC: subscription_reschedule (subscriptions.c:424) ==25464== Address 0x8b4241d is on thread 7's stack ==25464== in frame #1, created by linuxdvb_diseqc_send (linuxdvb_satconf.c:1771) ==25464== { Memcheck:Param ioctl(generic) fun:ioctl fun:linuxdvb_diseqc_send fun:linuxdvb_switch_tune fun:linuxdvb_satconf_ele_tune fun:linuxdvb_satconf_start_mux fun:linuxdvb_frontend_start_mux fun:mpegts_mux_instance_start fun:mpegts_service_start fun:service_start fun:service_find_instance fun:subscription_start_instance fun:subscription_reschedule } ==25464== Warning: noted but unhandled ioctl 0x6f41 with no size/direction hints. ==25464== This could cause spurious value errors to appear. ==25464== See README_MISSING_SYSCALL_OR_IOCTL for guidance on writing a proper wrapper. ==25464== Thread 34 tvh:mi-main: ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28568: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285F1: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28853: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288C4: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2852A: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28548: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28568: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285AE: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285CE: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285F1: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28518: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2858E: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2881B: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28836: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28853: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2888D: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288AA: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288C4: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2880C: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28870: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28836: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2888D: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288AA: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Invalid read of size 1 ==25464== at 0x4A2F271: dvbcsa_bs_stream_transpose_out (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A2C8BA: dvbcsa_bs_stream_cipher_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28335: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== Address 0x9d7d5ec is 0 bytes after a block of size 12,220 alloc'd ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x475B90: tvhcsa_set_type (tvhcsa.c:177) ==25464== by 0x3E60ED: descrambler_keys (descrambler.c:690) ==25464== by 0x483C49: capmt_process_key (capmt.c:1214) ==25464== by 0x483E13: capmt_send_key (capmt.c:1254) ==25464== by 0x4848CC: capmt_analyze_cmd (capmt.c:1426) ==25464== by 0x485EFA: handle_single (capmt.c:1769) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Addr1 fun:dvbcsa_bs_stream_transpose_out fun:dvbcsa_bs_stream_cipher_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Invalid read of size 8 ==25464== at 0x4A2875B: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== Address 0x9d7d5e9 is 12,217 bytes inside a block of size 12,220 alloc'd ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x475B90: tvhcsa_set_type (tvhcsa.c:177) ==25464== by 0x3E60ED: descrambler_keys (descrambler.c:690) ==25464== by 0x483C49: capmt_process_key (capmt.c:1214) ==25464== by 0x483E13: capmt_send_key (capmt.c:1254) ==25464== by 0x4848CC: capmt_analyze_cmd (capmt.c:1426) ==25464== by 0x485EFA: handle_single (capmt.c:1769) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Addr8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Invalid read of size 4 ==25464== at 0x4A2E232: dvbcsa_bs_block_transpose_in (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28796: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== Address 0x9d7d5e9 is 12,217 bytes inside a block of size 12,220 alloc'd ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x475B90: tvhcsa_set_type (tvhcsa.c:177) ==25464== by 0x3E60ED: descrambler_keys (descrambler.c:690) ==25464== by 0x483C49: capmt_process_key (capmt.c:1214) ==25464== by 0x483E13: capmt_send_key (capmt.c:1254) ==25464== by 0x4848CC: capmt_analyze_cmd (capmt.c:1426) ==25464== by 0x485EFA: handle_single (capmt.c:1769) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Addr4 fun:dvbcsa_bs_block_transpose_in fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Invalid read of size 4 ==25464== at 0x4A2E23A: dvbcsa_bs_block_transpose_in (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28796: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== Address 0x9d7d5ed is 1 bytes after a block of size 12,220 alloc'd ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x475B90: tvhcsa_set_type (tvhcsa.c:177) ==25464== by 0x3E60ED: descrambler_keys (descrambler.c:690) ==25464== by 0x483C49: capmt_process_key (capmt.c:1214) ==25464== by 0x483E13: capmt_send_key (capmt.c:1254) ==25464== by 0x4848CC: capmt_analyze_cmd (capmt.c:1426) ==25464== by 0x485EFA: handle_single (capmt.c:1769) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Addr4 fun:dvbcsa_bs_block_transpose_in fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Invalid write of size 4 ==25464== at 0x4A2E45E: dvbcsa_bs_block_transpose_out (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A289BE: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== Address 0x9d7d5e9 is 12,217 bytes inside a block of size 12,220 alloc'd ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x475B90: tvhcsa_set_type (tvhcsa.c:177) ==25464== by 0x3E60ED: descrambler_keys (descrambler.c:690) ==25464== by 0x483C49: capmt_process_key (capmt.c:1214) ==25464== by 0x483E13: capmt_send_key (capmt.c:1254) ==25464== by 0x4848CC: capmt_analyze_cmd (capmt.c:1426) ==25464== by 0x485EFA: handle_single (capmt.c:1769) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Addr4 fun:dvbcsa_bs_block_transpose_out fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Invalid write of size 4 ==25464== at 0x4A2E468: dvbcsa_bs_block_transpose_out (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A289BE: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== Address 0x9d7d5ed is 1 bytes after a block of size 12,220 alloc'd ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x475B90: tvhcsa_set_type (tvhcsa.c:177) ==25464== by 0x3E60ED: descrambler_keys (descrambler.c:690) ==25464== by 0x483C49: capmt_process_key (capmt.c:1214) ==25464== by 0x483E13: capmt_send_key (capmt.c:1254) ==25464== by 0x4848CC: capmt_analyze_cmd (capmt.c:1426) ==25464== by 0x485EFA: handle_single (capmt.c:1769) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Addr4 fun:dvbcsa_bs_block_transpose_out fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Invalid read of size 8 ==25464== at 0x4A2875F: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== Address 0x9d7d5e9 is 12,217 bytes inside a block of size 12,220 alloc'd ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x475B90: tvhcsa_set_type (tvhcsa.c:177) ==25464== by 0x3E60ED: descrambler_keys (descrambler.c:690) ==25464== by 0x483C49: capmt_process_key (capmt.c:1214) ==25464== by 0x483E13: capmt_send_key (capmt.c:1254) ==25464== by 0x4848CC: capmt_analyze_cmd (capmt.c:1426) ==25464== by 0x485EFA: handle_single (capmt.c:1769) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Addr8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2881B: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28870: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x475AB9: tvhcsa_csa_cbc_descramble (tvhcsa.c:149) ==25464== by 0x3E7DD4: descrambler_descramble (descrambler.c:1164) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:tvhcsa_csa_cbc_descramble fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28568: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285F1: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285CE: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28548: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288AA: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288C4: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28836: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28853: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475804: tvhcsa_csa_cbc_flush (tvhcsa.c:79) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2852A: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28548: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28568: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285AE: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285CE: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A285F1: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28518: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2858E: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2881B: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28836: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28853: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2888D: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288AA: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A288C4: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A2880C: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } ==25464== Use of uninitialised value of size 8 ==25464== at 0x4A28870: dvbcsa_bs_block_decrypt_batch (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x4A28342: dvbcsa_bs_decrypt (in /usr/lib/x86_64-linux-gnu/libdvbcsa.so.1.0.1) ==25464== by 0x475859: tvhcsa_csa_cbc_flush (tvhcsa.c:84) ==25464== by 0x3E72F8: key_flush (descrambler.c:920) ==25464== by 0x3E77BA: descrambler_descramble (descrambler.c:1047) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) ==25464== { Memcheck:Value8 fun:dvbcsa_bs_block_decrypt_batch fun:dvbcsa_bs_decrypt fun:tvhcsa_csa_cbc_flush fun:key_flush fun:descrambler_descramble fun:ts_recv_packet1 fun:mpegts_input_process fun:mpegts_input_thread fun:thread_wrapper fun:start_thread fun:clone } valgrind: m_mallocfree.c:307 (get_bszB_as_is): Assertion 'bszB_lo == bszB_hi' failed. valgrind: Heap block lo/hi size mismatch: lo = 18906, hi = 5323254759551926272. This is probably caused by your program erroneously writing past the end of a heap block and corrupting heap metadata. If you fix any invalid writes reported by Memcheck, this assertion failure will probably go away. Please try that before reporting this as a bug. host stacktrace: ==25464== at 0x5804503A: show_sched_status_wrk (m_libcassert.c:355) ==25464== by 0x58045154: report_and_quit (m_libcassert.c:426) ==25464== by 0x580452D9: vgPlain_assert_fail (m_libcassert.c:492) ==25464== by 0x58054ADA: get_bszB_as_is (m_mallocfree.c:305) ==25464== by 0x58054ADA: get_bszB (m_mallocfree.c:315) ==25464== by 0x58054ADA: vgPlain_arena_free (m_mallocfree.c:2109) ==25464== by 0x5800C74C: release_oldest_block (mc_malloc_wrappers.c:169) ==25464== by 0x5800C74C: create_MC_Chunk (mc_malloc_wrappers.c:212) ==25464== by 0x5800C957: vgMemCheck_new_block (mc_malloc_wrappers.c:388) ==25464== by 0x5800CAE6: vgMemCheck_malloc (mc_malloc_wrappers.c:407) ==25464== by 0x580A0675: do_client_request (scheduler.c:1866) ==25464== by 0x580A0675: vgPlain_scheduler (scheduler.c:1433) ==25464== by 0x580AFC40: thread_wrapper (syswrap-linux.c:103) ==25464== by 0x580AFC40: run_a_thread_NORETURN (syswrap-linux.c:156) ==25464== by 0x580AFF2A: vgModuleLocal_start_thread_NORETURN (syswrap-linux.c:320) ==25464== by 0x580DB78D: ??? (in /usr/lib/valgrind/memcheck-amd64-linux) ==25464== by 0xDEADBEEFDEADBEEE: ??? ==25464== by 0xDEADBEEFDEADBEEE: ??? ==25464== by 0xDEADBEEFDEADBEEE: ??? sched status: running_tid=34 Thread 1: status = VgTs_WaitSys (lwpid 25464) ==25464== at 0x59D78AA: futex_abstimed_wait_cancelable (futex-internal.h:205) ==25464== by 0x59D78AA: __pthread_cond_wait_common (pthread_cond_wait.c:539) ==25464== by 0x59D78AA: pthread_cond_timedwait@@GLIBC_2.3.2 (pthread_cond_wait.c:667) ==25464== by 0x2E7FE5: mainloop (main.c:715) ==25464== by 0x2EB40C: main (main.c:1288) Thread 2: status = VgTs_WaitSys (lwpid 25468) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x2ED6B7: tvhlog_thread (tvhlog.c:348) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 3: status = VgTs_WaitSys (lwpid 25471) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x31032D: notify_thread (notify.c:95) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 4: status = VgTs_WaitSys (lwpid 25472) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x31F67C: spawn_pipe_thread (spawn.c:133) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 5: status = VgTs_WaitSys (lwpid 25473) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x2F7525: save_thread (idnode.c:1963) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 6: status = VgTs_WaitSys (lwpid 25474) ==25464== at 0x6A4A7B3: clock_nanosleep (clock_nanosleep.c:48) ==25464== by 0x2FDA3D: tvh_usleep (wrappers.c:359) ==25464== by 0x2FD94F: tvh_safe_usleep (wrappers.c:336) ==25464== by 0x2E7D37: mtimer_tick_thread (main.c:596) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 7: status = VgTs_WaitSys (lwpid 25475) ==25464== at 0x6A33F07: ioctl (syscall-template.S:78) ==25464== by 0x438824: linuxdvb_frontend_monitor (linuxdvb_frontend.c:897) ==25464== by 0x2E7E64: mtimer_thread (main.c:644) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 8: status = VgTs_WaitSys (lwpid 25476) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x2E77E1: tasklet_thread (main.c:462) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 9: status = VgTs_WaitSys (lwpid 25477) ==25464== at 0x59DAA04: read (read.c:27) ==25464== by 0x36B306: fsmonitor_thread (fsmonitor.c:63) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 10: status = VgTs_WaitSys (lwpid 25478) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x35E11D: imagecache_thread (imagecache.c:351) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 11: status = VgTs_WaitSys (lwpid 25479) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x3685AE: http_client_thread (httpc.c:1406) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 12: status = VgTs_WaitSys (lwpid 25481) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x332439: service_saver (service.c:1155) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 13: status = VgTs_WaitSys (lwpid 25482) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x485ABD: handle_single (capmt.c:1684) ==25464== by 0x48636A: capmt_thread (capmt.c:1919) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 14: status = VgTs_WaitSys (lwpid 25544) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x454D34: iptv_input_thread (iptv.c:534) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 15: status = VgTs_WaitSys (lwpid 25545) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x454D34: iptv_input_thread (iptv.c:534) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 16: status = VgTs_WaitSys (lwpid 25554) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x130C9A7: thread_cond_wait (in /home/tvheadend/tvheadend/build.linux/tvheadend) ==25464== by 0x130919B: hdhomerun_debug_thread_execute (in /home/tvheadend/tvheadend/build.linux/tvheadend) ==25464== by 0x130C649: thread_task_execute (in /home/tvheadend/tvheadend/build.linux/tvheadend) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 17: status = VgTs_WaitSys (lwpid 25555) ==25464== at 0x59D781A: futex_reltimed_wait_cancelable (futex-internal.h:142) ==25464== by 0x59D781A: __pthread_cond_wait_common (pthread_cond_wait.c:533) ==25464== by 0x59D781A: pthread_cond_timedwait@@GLIBC_2.3.2 (pthread_cond_wait.c:667) ==25464== by 0x2FD92E: tvh_cond_timedwait (wrappers.c:321) ==25464== by 0x4509A6: tvhdhomerun_device_discovery_thread (tvhdhomerun.c:435) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 18: status = VgTs_WaitSys (lwpid 25564) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x45EE35: timeshift_reaper_callback (timeshift_filemgr.c:61) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 19: status = VgTs_WaitSys (lwpid 25565) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x304D58: tcp_server_loop (tcp.c:744) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 20: status = VgTs_WaitSys (lwpid 25566) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x3D85A6: upnp_thread (upnp.c:162) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 21: status = VgTs_WaitSys (lwpid 25567) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x362EA8: service_mapper_thread (service_mapper.c:385) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 22: status = VgTs_WaitSys (lwpid 25569) ==25464== at 0x59D78AA: futex_abstimed_wait_cancelable (futex-internal.h:205) ==25464== by 0x59D78AA: __pthread_cond_wait_common (pthread_cond_wait.c:539) ==25464== by 0x59D78AA: pthread_cond_timedwait@@GLIBC_2.3.2 (pthread_cond_wait.c:667) ==25464== by 0x31E510: _epggrab_internal_thread (epggrab.c:109) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 23: status = VgTs_WaitSys (lwpid 25570) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x31E7AC: _epggrab_data_thread (epggrab.c:175) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 24: status = VgTs_WaitSys (lwpid 25572) ==25464== at 0x59DAA04: read (read.c:27) ==25464== by 0x465FBE: _dvr_inotify_thread (dvr_inotify.c:396) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 25: status = VgTs_WaitSys (lwpid 25585) ==25464== at 0x6A4A7B3: clock_nanosleep (clock_nanosleep.c:48) ==25464== by 0x2FDA3D: tvh_usleep (wrappers.c:359) ==25464== by 0x3E3D67: satip_rtcp_thread (rtp.c:920) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 26: status = VgTs_WaitSys (lwpid 25618) ==25464== at 0x59D781A: futex_reltimed_wait_cancelable (futex-internal.h:142) ==25464== by 0x59D781A: __pthread_cond_wait_common (pthread_cond_wait.c:533) ==25464== by 0x59D781A: pthread_cond_timedwait@@GLIBC_2.3.2 (pthread_cond_wait.c:667) ==25464== by 0x2FD92E: tvh_cond_timedwait (wrappers.c:321) ==25464== by 0x3C2AB7: http_stream_run (webui.c:358) ==25464== by 0x3C50D9: http_stream_service (webui.c:1079) ==25464== by 0x3C5A78: http_stream (webui.c:1290) ==25464== by 0x30CE28: http_exec (http.c:1183) ==25464== by 0x30D24D: http_cmd_get (http.c:1258) ==25464== by 0x30D4B5: http_process_request (http.c:1337) ==25464== by 0x30DF47: process_request (http.c:1475) ==25464== by 0x30F19C: http_serve_requests (http.c:1960) ==25464== by 0x30F38D: http_serve (http.c:2011) ==25464== by 0x304C2E: tcp_server_start (tcp.c:717) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 27: status = VgTs_WaitSys (lwpid 25587) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3E12: mpegts_input_table_thread (mpegts_input.c:1748) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 28: status = VgTs_WaitSys (lwpid 25588) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3A53: mpegts_input_thread (mpegts_input.c:1674) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 29: status = VgTs_WaitSys (lwpid 25589) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3E12: mpegts_input_table_thread (mpegts_input.c:1748) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 30: status = VgTs_WaitSys (lwpid 25590) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3A53: mpegts_input_thread (mpegts_input.c:1674) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 31: status = VgTs_WaitSys (lwpid 25591) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3E12: mpegts_input_table_thread (mpegts_input.c:1748) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 32: status = VgTs_WaitSys (lwpid 25592) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3A53: mpegts_input_thread (mpegts_input.c:1674) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 33: status = VgTs_WaitSys (lwpid 25593) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3E12: mpegts_input_table_thread (mpegts_input.c:1748) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 34: status = VgTs_Runnable (lwpid 25594) ==25464== at 0x40307BF: malloc (vg_replace_malloc.c:299) ==25464== by 0x322375: pktbuf_alloc (packet.c:377) ==25464== by 0x3F6116: ts_flush (tsdemux.c:299) ==25464== by 0x3F632C: ts_skip (tsdemux.c:355) ==25464== by 0x3F5ABB: ts_recv_skipped0 (tsdemux.c:129) ==25464== by 0x3F5F77: ts_skip_packet2 (tsdemux.c:253) ==25464== by 0x3E45DF: descrambler_data_destroy (descrambler.c:96) ==25464== by 0x3E4A63: descrambler_data_cut (descrambler.c:179) ==25464== by 0x3E8121: descrambler_descramble (descrambler.c:1213) ==25464== by 0x3F5D9B: ts_recv_packet1 (tsdemux.c:201) ==25464== by 0x3F30B3: mpegts_input_process (mpegts_input.c:1463) ==25464== by 0x3F3BA6: mpegts_input_thread (mpegts_input.c:1693) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 35: status = VgTs_WaitSys (lwpid 25595) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3E12: mpegts_input_table_thread (mpegts_input.c:1748) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 36: status = VgTs_WaitSys (lwpid 25596) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3A53: mpegts_input_thread (mpegts_input.c:1674) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 37: status = VgTs_WaitSys (lwpid 25622) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x43A3DF: linuxdvb_frontend_input_thread (linuxdvb_frontend.c:1414) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 38: status = VgTs_WaitSys (lwpid 25601) ==25464== at 0x59DAA04: read (read.c:27) ==25464== by 0x303FB7: tcp_fill_htsbuf_from_fd (tcp.c:319) ==25464== by 0x3040AC: tcp_read_line (tcp.c:347) ==25464== by 0x30ED94: http_serve_requests (http.c:1875) ==25464== by 0x30F38D: http_serve (http.c:2011) ==25464== by 0x304C2E: tcp_server_start (tcp.c:717) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 39: status = VgTs_WaitSys (lwpid 25603) ==25464== at 0x6A3CFE7: epoll_wait (epoll_wait.c:30) ==25464== by 0x34D58A: tvhpoll_wait (tvhpoll.c:336) ==25464== by 0x44A966: satip_frontend_input_thread (satip_frontend.c:1611) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 40: status = VgTs_WaitSys (lwpid 25604) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3E12: mpegts_input_table_thread (mpegts_input.c:1748) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Thread 41: status = VgTs_WaitSys (lwpid 25605) ==25464== at 0x59D74EC: futex_wait_cancelable (futex-internal.h:88) ==25464== by 0x59D74EC: __pthread_cond_wait_common (pthread_cond_wait.c:502) ==25464== by 0x59D74EC: pthread_cond_wait@@GLIBC_2.3.2 (pthread_cond_wait.c:655) ==25464== by 0x2FD89B: tvh_cond_wait (wrappers.c:298) ==25464== by 0x3F3A53: mpegts_input_thread (mpegts_input.c:1674) ==25464== by 0x2FD637: thread_wrapper (wrappers.c:181) ==25464== by 0x59D15A9: start_thread (pthread_create.c:463) ==25464== by 0x6A3CCBE: clone (clone.S:95) Note: see also the FAQ in the source distribution. It contains workarounds to several common problems. In particular, if Valgrind aborted or crashed after identifying problems in your program, there's a good chance that fixing those problems will prevent Valgrind aborting or crashing, especially if it happened in m_mallocfree.c. If that doesn't help, please report this bug to: www.valgrind.org In the bug report, send all the above text, the valgrind version, and what OS and version you are using. Thanks.