memory corruption heap-use-after-free in getPwrContInterface() (/usr/lib/libplayerfbinterface.so)

[npoltorapavlo]

when running wpeframework with ASAN memory check tool the following issue was seen in log indicating use of freed memory in PowerController when called from getPwrContInterface() in library libplayerfbinterface.so:

2026-04-28T12:14:12.081Z sky-jspp[6919]:  =================================================================
2026-04-28T12:14:12.082Z sky-jspp[6919]:  ==6946==ERROR: AddressSanitizer: heap-use-after-free on address 0x9f117050 at pc 0xb6a485a9 bp 0x9bafd4c8 sp 0x9bafd4d0
2026-04-28T12:14:12.083Z sky-jspp[6919]:  WRITE of size 20 at 0x9f117050 thread T24
2026-04-28T12:14:14.530Z sky-jspp[6919]:      #0 0xb6a485a6 in __interceptor_memcpy (/usr/lib/libasan.so.6+0x285a6)
2026-04-28T12:14:14.643Z sky-jspp[6919]:      #1 0xb41fd8f6 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_assign(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) (/usr/lib/libstdc++.so.6+0xbd8f6)
2026-04-28T12:14:14.643Z sky-jspp[6919]:      #2 0xaf24b2f8  (/usr/lib/libWPEFrameworkPowerController.so.4+0xb2f8)
2026-04-28T12:14:14.644Z sky-jspp[6919]:      #3 0xaf24902c  (/usr/lib/libWPEFrameworkPowerController.so.4+0x902c)
2026-04-28T12:14:14.644Z sky-jspp[6919]:      #4 0xaf4c7060 in getPwrContInterface() (/usr/lib/libplayerfbinterface.so+0x17060)
2026-04-28T12:14:14.644Z sky-jspp[6919]:      #5 0xb41d6488  (/usr/lib/libstdc++.so.6+0x96488)
2026-04-28T12:14:14.645Z sky-jspp[6919]:      #6 0xb6a465e4  (/usr/lib/libasan.so.6+0x265e4)
2026-04-28T12:14:14.645Z sky-jspp[6919]:  0x9f117050 is located 0 bytes inside of 31-byte region [0x9f117050,0x9f11706f)
2026-04-28T12:14:14.645Z sky-jspp[6919]:  freed by thread T0 (JSPPWebProcess) here:
2026-04-28T12:14:14.645Z sky-jspp[6919]:      #0 0xb6a906e0 in operator delete(void*) (/usr/lib/libasan.so.6+0x706e0)
2026-04-28T12:14:14.647Z sky-jspp[6919]:      #1 0xaf24ab76  (/usr/lib/libWPEFrameworkPowerController.so.4+0xab76)
2026-04-28T12:14:14.647Z sky-jspp[6919]:  previously allocated by thread T24 here:
2026-04-28T12:14:14.655Z sky-jspp[6919]:      #0 0xb6a901f8 in operator new(unsigned int) (/usr/lib/libasan.so.6+0x701f8)
2026-04-28T12:14:14.655Z sky-jspp[6919]:      #1 0xb41fd8de in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::_M_assign(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) (/usr/lib/libstdc++.so.6+0xbd8de)
2026-04-28T12:14:14.655Z sky-jspp[6919]:  Thread T24 created by T0 (JSPPWebProcess) here:
2026-04-28T12:14:14.655Z sky-jspp[6919]:      #0 0xb6a700f2 in pthread_create (/usr/lib/libasan.so.6+0x500f2)
2026-04-28T12:14:14.725Z sky-jspp[6919]:      #1 0xbee90e8c  ([stack]+0x1ee8c)
2026-04-28T12:14:14.726Z sky-jspp[6919]:  SUMMARY: AddressSanitizer: heap-use-after-free (/usr/lib/libasan.so.6+0x285a6) in __interceptor_memcpy
2026-04-28T12:14:14.727Z sky-jspp[6919]:  Shadow bytes around the buggy address:
2026-04-28T12:14:14.727Z sky-jspp[6919]:    0x33e22db0: 00 00 00 07 fa fa 00 00 00 04 fa fa 00 00 00 04
2026-04-28T12:14:14.727Z sky-jspp[6919]:    0x33e22dc0: fa fa 00 00 00 fa fa fa 00 00 00 fa fa fa 00 00
2026-04-28T12:14:14.727Z sky-jspp[6919]:    0x33e22dd0: 00 00 fa fa 00 00 00 07 fa fa fd fd fd fd fa fa
2026-04-28T12:14:14.727Z sky-jspp[6919]:    0x33e22de0: 00 00 05 fa fa fa 00 00 02 fa fa fa fd fd fd fa
2026-04-28T12:14:14.728Z sky-jspp[6919]:    0x33e22df0: fa fa fd fd fd fd fa fa fd fd fd fa fa fa fd fd
2026-04-28T12:14:14.728Z sky-jspp[6919]:  =>0x33e22e00: fd fa fa fa fd fd fd fa fa fa[fd]fd fd fd fa fa
2026-04-28T12:14:14.728Z sky-jspp[6919]:    0x33e22e10: fd fd fd fa fa fa fd fd fd fd fa fa fd fd fd fd
2026-04-28T12:14:14.728Z sky-jspp[6919]:    0x33e22e20: fa fa fd fd fd fd fa fa fd fd fd fa fa fa fd fd
2026-04-28T12:14:14.728Z sky-jspp[6919]:    0x33e22e30: fd fa fa fa fd fd fd fd fa fa fd fd fd fd fa fa
2026-04-28T12:14:14.728Z sky-jspp[6919]:    0x33e22e40: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fa
2026-04-28T12:14:14.728Z sky-jspp[6919]:    0x33e22e50: fa fa fd fd fd fa fa fa fd fd fd fa fa fa fd fd
2026-04-28T12:14:14.728Z sky-jspp[6919]:  Shadow byte legend (one shadow byte represents 8 application bytes):
2026-04-28T12:14:14.728Z sky-jspp[6919]:    Addressable:           00
2026-04-28T12:14:14.728Z sky-jspp[6919]:    Partially addressable: 01 02 03 04 05 06 07
2026-04-28T12:14:14.728Z sky-jspp[6919]:    Heap left redzone:       fa
2026-04-28T12:14:14.728Z sky-jspp[6919]:    Freed heap region:       fd
2026-04-28T12:14:14.728Z sky-jspp[6919]:    Stack left redzone:      f1
2026-04-28T12:14:14.728Z sky-jspp[6919]:    Stack mid redzone:       f2
2026-04-28T12:14:14.728Z sky-jspp[6919]:    Stack right redzone:     f3
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Stack after return:      f5
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Stack use after scope:   f8
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Global redzone:          f9
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Global init order:       f6
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Poisoned by user:        f7
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Container overflow:      fc
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Array cookie:            ac
2026-04-28T12:14:14.729Z sky-jspp[6919]:    Intra object redzone:    bb
2026-04-28T12:14:14.729Z sky-jspp[6919]:    ASan internal:           fe
2026-04-28T12:14:14.730Z sky-jspp[6919]:    Left alloca redzone:     ca
2026-04-28T12:14:14.730Z sky-jspp[6919]:    Right alloca redzone:    cb
2026-04-28T12:14:14.730Z sky-jspp[6919]:    Shadow gap:              cc