Can you make a simple reproducer?

Or run under ASAN (or valgrind as a last resort)

Or run under ASAN (or valgrind as a last resort)
.

@happybanban Do you make sure the argument of bufferevent_write is right?

1. the data and size argument is valid
2. don't make data point to inner memory of the bufferevent's output.

data_in=0x7fff1ffd63c0, datlen=6 seems wrong, as it's very closer to Thread 0x7fff1ffd7700.

@happybanban Do you make sure the argument of bufferevent_write is right?

1. the data and size argument is valid
2. don't make data point to inner memory of the bufferevent's output.

data_in=0x7fff1ffd63c0, datlen=6 seems wrong, as it's very closer to Thread 0x7fff1ffd7700.

Thanks! data and size should be valid. Below is my source code. Please give me some suggestion.Thanks!
BTW The problem doesn't happen every time, it happens occasionally.

void send_start(struct bufferevent* bev)
{
BYTE start[6] = { 0x68,0x04,0x07,0x00,0x00,0x00 };
bufferevent_write(bev, start, 6);
}

@happybanban Then, the possible case is use-after-free.
You can log it, free log, and write log.

@happybanban just use ASan to verify your code

You just need to compile your code with -fsanitize=address