R Under development (unstable) (2026-07-04 r90207) -- "Unsuffered Consequences" Copyright (C) 2026 The R Foundation for Statistical Computing Platform: x86_64-pc-linux-gnu R is free software and comes with ABSOLUTELY NO WARRANTY. You are welcome to redistribute it under certain conditions. Type 'license()' or 'licence()' for distribution details. R is a collaborative project with many contributors. Type 'contributors()' for more information and 'citation()' on how to cite R or R packages in publications. Type 'demo()' for some demos, 'help()' for on-line help, or 'help.start()' for an HTML browser interface to help. Type 'q()' to quit R. > library(lme4) Loading required package: Matrix > > if (.Platform$OS.type != "windows") { + data(Orthodont, package="nlme") + fm1 <- lmer(distance ~ age + (age|Subject), data = Orthodont) + VarCorr(fm1) + + fm2ML <- lmer(diameter ~ 1 + (1|plate) + (1|sample), Penicillin, REML=0) + VarCorr(fm2ML) + + gm1 <- glmer(cbind(incidence,size-incidence) ~ period + (1|herd),data=cbpp, + family=binomial) + VarCorr(gm1) + + cbpp$obs <- factor(seq(nrow(cbpp))) + gm2 <- update(gm1,.~.+(1|obs)) + VarCorr(gm2) + + if (FALSE) { + ## testing lme4/lme4 incompatibility + ## library(lme4) + VarCorr(fm1) + lme4:::VarCorr.merMod(fm1) ## OK + } + } ## skip on windows (for speed) ================================================================= ==636957==ERROR: AddressSanitizer: heap-use-after-free on address 0x7cd1883a80b0 at pc 0x7b117411593c bp 0x7ffdad40be70 sp 0x7ffdad40be68 READ of size 16 at 0x7cd1883a80b0 thread T0 #0 0x7b117411593b in Eigen::internal::product_evaluator, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>, 8, Eigen::DiagonalShape, Eigen::DenseShape, double, double>::coeff(long, long) const /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/ProductEvaluators.h:925:46 #1 0x7b117411593b in Eigen::internal::generic_dense_assignment_kernel, 0, Eigen::Stride<0, 0>>>, Eigen::internal::evaluator, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>, Eigen::internal::assign_op, 0>::assignCoeff(long, long) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:654:58 #2 0x7b117411593b in Eigen::internal::generic_dense_assignment_kernel, 0, Eigen::Stride<0, 0>>>, Eigen::internal::evaluator, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>, Eigen::internal::assign_op, 0>::assignCoeffByOuterInner(long, long) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:668:5 #3 0x7b117411593b in Eigen::internal::dense_assignment_loop, 0, Eigen::Stride<0, 0>>>, Eigen::internal::evaluator, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>, Eigen::internal::assign_op, 0>, 0, 0>::run(Eigen::internal::generic_dense_assignment_kernel, 0, Eigen::Stride<0, 0>>>, Eigen::internal::evaluator, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>, Eigen::internal::assign_op, 0>&) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:347:16 #4 0x7b117411593b in void Eigen::internal::call_dense_assignment_loop, 0, Eigen::Stride<0, 0>>, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>, Eigen::internal::assign_op>(Eigen::Map, 0, Eigen::Stride<0, 0>>&, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1> const&, Eigen::internal::assign_op const&) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:785:3 #5 0x7b117411593b in Eigen::internal::Assignment, 0, Eigen::Stride<0, 0>>, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>, Eigen::internal::assign_op, Eigen::internal::Dense2Dense, void>::run(Eigen::Map, 0, Eigen::Stride<0, 0>>&, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1> const&, Eigen::internal::assign_op const&) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:954:5 #6 0x7b117411593b in void Eigen::internal::call_assignment_no_alias, 0, Eigen::Stride<0, 0>>, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>, Eigen::internal::assign_op>(Eigen::Map, 0, Eigen::Stride<0, 0>>&, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1> const&, Eigen::internal::assign_op const&) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:890:3 #7 0x7b117411593b in void Eigen::internal::call_assignment, 0, Eigen::Stride<0, 0>>, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>, Eigen::internal::assign_op>(Eigen::Map, 0, Eigen::Stride<0, 0>>&, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1> const&, Eigen::internal::assign_op const&, Eigen::internal::enable_if, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>::value, void*>::type) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:858:3 #8 0x7b117411593b in void Eigen::internal::call_assignment, 0, Eigen::Stride<0, 0>>, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>(Eigen::Map, 0, Eigen::Stride<0, 0>>&, Eigen::Product, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1> const&) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/AssignEvaluator.h:836:3 #9 0x7b117411593b in Eigen::Map, 0, Eigen::Stride<0, 0>>& Eigen::MatrixBase, 0, Eigen::Stride<0, 0>>>::operator=, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>(Eigen::DenseBase, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>> const&) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/Assign.h:66:3 #10 0x7b117411593b in Eigen::Map, 0, Eigen::Stride<0, 0>>& Eigen::Map, 0, Eigen::Stride<0, 0>>::operator=, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>>(Eigen::DenseBase, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>> const&) /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/Map.h:162:5 #11 0x7b117411593b in lme4::merPredD::updateXwts(Eigen::Array const&) /data/gannet/ripley/R/packages/tests-clang-ASAN/lme4/src/predModule.cpp:221:30 #12 0x7b11740a3cd2 in internal_glmerWrkIter(lme4::merPredD*, lme4::glmResp*, bool) /data/gannet/ripley/R/packages/tests-clang-ASAN/lme4/src/external.cpp:274:13 #13 0x7b11740a3cd2 in pwrssUpdate(lme4::glmResp*, lme4::merPredD*, bool, double, int, int) /data/gannet/ripley/R/packages/tests-clang-ASAN/lme4/src/external.cpp:330:20 #14 0x7b11740a2bc8 in glmerLaplace /data/gannet/ripley/R/packages/tests-clang-ASAN/lme4/src/external.cpp:386:9 #15 0x55b761624b06 in R_doDotCall /data/gannet/ripley/R/svn/R-devel/src/main/dotcode.c:770:11 #16 0x55b7616e8d2d in bcEval_loop /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:8700:21 #17 0x55b7616d0d74 in bcEval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:7533:16 #18 0x55b7616cf301 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1167:8 #19 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #20 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #21 0x55b7616d23be in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #22 0x55b7616cfd28 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1278:12 #23 0x55b761728bc5 in do_set /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3585:8 #24 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #25 0x55b761726269 in do_begin /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3001:10 #26 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #27 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #28 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #29 0x55b7616f0eba in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #30 0x55b7616f0eba in bcEval_loop /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:8121:16 #31 0x55b7616d0d74 in bcEval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:7533:16 #32 0x55b7616cf301 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1167:8 #33 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #34 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #35 0x55b7616d23be in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #36 0x55b7616cfd28 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1278:12 #37 0x55b761728bc5 in do_set /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3585:8 #38 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #39 0x55b761726269 in do_begin /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3001:10 #40 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #41 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #42 0x55b7617a0be1 in Rf_ReplIteration /data/gannet/ripley/R/svn/R-devel/src/main/main.c:264:23 #43 0x55b7617a3410 in R_ReplConsole /data/gannet/ripley/R/svn/R-devel/src/main/main.c:317:11 #44 0x55b7617a3410 in run_Rmainloop /data/gannet/ripley/R/svn/R-devel/src/main/main.c:1235:5 #45 0x55b7617a34a2 in Rf_mainloop /data/gannet/ripley/R/svn/R-devel/src/main/main.c:1242:5 #46 0x55b7614a4d3c in main /data/gannet/ripley/R/svn/R-devel/src/main/Rmain.c:29:5 #47 0x7f118b711574 in __libc_start_call_main (/lib64/libc.so.6+0x3574) (BuildId: 92b5376d35bb29c098175948cf3e7cbcae3aeae1) #48 0x7f118b711627 in __libc_start_main@GLIBC_2.2.5 (/lib64/libc.so.6+0x3627) (BuildId: 92b5376d35bb29c098175948cf3e7cbcae3aeae1) #49 0x55b7613bc7d4 in _start (/data/gannet/ripley/R/clang-ASAN/bin/exec/R+0x17d4) 0x7cd1883a80b0 is located 48 bytes inside of 1840-byte region [0x7cd1883a8080,0x7cd1883a87b0) freed by thread T0 here: #0 0x55b761461916 in free /home/runner/work/llvm-project/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:51:3 #1 0x55b7617be31b in ReleaseLargeFreeVectors /data/gannet/ripley/R/svn/R-devel/src/main/memory.c:1167:7 #2 0x55b7617be31b in RunGenCollect /data/gannet/ripley/R/svn/R-devel/src/main/memory.c:1951:5 #3 0x55b7617b118b in R_gc_internal /data/gannet/ripley/R/svn/R-devel/src/main/memory.c:3237:19 #4 0x55b7617ae195 in Rf_cons /data/gannet/ripley/R/svn/R-devel/src/main/memory.c:2488:2 #5 0x55b7617161b3 in promiseArgsEx /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3789:26 #6 0x55b76172fc4e in Rf_promiseArgs /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3854:12 #7 0x55b76172fc4e in Rf_DispatchOrEval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:4186:14 #8 0x55b761903a0a in R_DispatchOrEvalSP /data/gannet/ripley/R/svn/R-devel/src/main/subset.c:671:16 #9 0x55b761910b2f in do_subset3 /data/gannet/ripley/R/svn/R-devel/src/main/subset.c:1264:8 #10 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #11 0x55b7616cf541 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1219:19 #12 0x55b761726269 in do_begin /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3001:10 #13 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #14 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #15 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #16 0x55b7616f0eba in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #17 0x55b7616f0eba in bcEval_loop /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:8121:16 #18 0x55b7616d0d74 in bcEval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:7533:16 #19 0x55b7616cf301 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1167:8 #20 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #21 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #22 0x55b7616d23be in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #23 0x55b7616cfd28 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1278:12 #24 0x55b761728bc5 in do_set /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3585:8 #25 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #26 0x55b761726269 in do_begin /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3001:10 #27 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #28 0x55b7616cf840 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1230:12 #29 0x55b7617a0be1 in Rf_ReplIteration /data/gannet/ripley/R/svn/R-devel/src/main/main.c:264:23 #30 0x55b7617a3410 in R_ReplConsole /data/gannet/ripley/R/svn/R-devel/src/main/main.c:317:11 #31 0x55b7617a3410 in run_Rmainloop /data/gannet/ripley/R/svn/R-devel/src/main/main.c:1235:5 #32 0x55b7617a34a2 in Rf_mainloop /data/gannet/ripley/R/svn/R-devel/src/main/main.c:1242:5 #33 0x55b7614a4d3c in main /data/gannet/ripley/R/svn/R-devel/src/main/Rmain.c:29:5 previously allocated by thread T0 here: #0 0x55b761461bb4 in malloc /home/runner/work/llvm-project/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 #1 0x55b7617abc7c in Rf_allocVector3 /data/gannet/ripley/R/svn/R-devel/src/main/memory.c:2894:7 #2 0x55b76150432b in Rf_allocVector /data/gannet/ripley/R/svn/R-devel/src/include/Rinlinedfuns.h:609:12 #3 0x55b76150432b in Rf_allocMatrix /data/gannet/ripley/R/svn/R-devel/src/main/array.c:236:17 #4 0x7b117ac9c0ce in modelmatrix /data/gannet/ripley/R/svn/R-devel/src/library/stats/src/model.c:676:17 #5 0x55b761619365 in do_External /data/gannet/ripley/R/svn/R-devel/src/main/dotcode.c:573:11 #6 0x55b7616dd77a in bcEval_loop /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:8150:14 #7 0x55b7616d0d74 in bcEval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:7533:16 #8 0x55b7616cf301 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1167:8 #9 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #10 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #11 0x55b7616d23be in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #12 0x55b7617dde14 in dispatchMethod /data/gannet/ripley/R/svn/R-devel/src/main/objects.c:473:16 #13 0x55b7617dca98 in Rf_usemethod /data/gannet/ripley/R/svn/R-devel/src/main/objects.c:523:9 #14 0x55b7617df073 in do_usemethod /data/gannet/ripley/R/svn/R-devel/src/main/objects.c:579:9 #15 0x55b7616e2f93 in bcEval_loop /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:8170:15 #16 0x55b7616d0d74 in bcEval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:7533:16 #17 0x55b7616cf301 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1167:8 #18 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #19 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #20 0x55b7616d23be in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #21 0x55b7616cfd28 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1278:12 #22 0x55b76172d653 in do_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3975:13 #23 0x55b7616dd77a in bcEval_loop /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:8150:14 #24 0x55b7616d0d74 in bcEval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:7533:16 #25 0x55b7616cf301 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1167:8 #26 0x55b761717a9c in R_execClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2398:39 #27 0x55b761716c58 in applyClosure_core /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2314:16 #28 0x55b7616d23be in Rf_applyClosure /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:2333:16 #29 0x55b7616cfd28 in Rf_eval /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:1278:12 #30 0x55b761728bc5 in do_set /data/gannet/ripley/R/svn/R-devel/src/main/eval.c:3585:8 SUMMARY: AddressSanitizer: heap-use-after-free /data/gannet/ripley/R/test-clang/RcppEigen/include/Eigen/src/Core/ProductEvaluators.h:925:46 in Eigen::internal::product_evaluator, 0, Eigen::Stride<0, 0>> const>, Eigen::Map, 0, Eigen::Stride<0, 0>>, 1>, 8, Eigen::DiagonalShape, Eigen::DenseShape, double, double>::coeff(long, long) const Shadow bytes around the buggy address: 0x7cd1883a7e00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cd1883a7e80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cd1883a7f00: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa 0x7cd1883a7f80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cd1883a8000: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x7cd1883a8080: fd fd fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd 0x7cd1883a8100: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cd1883a8180: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cd1883a8200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cd1883a8280: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7cd1883a8300: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==636957==ABORTING