# SCTP DataChannel Use-After-Free via AllocateSctpSids Raw Pointer

## Reproduce

Tested at commit `bb43679d94d13`.

Build with ASAN:

```
autoninja -C ~/chromium/src/out/asan-release chrome
```

Launch:

```
ASAN_OPTIONS=detect_odr_violation=0 ~/chromium/src/out/asan-release/chrome \
  --no-sandbox --disable-gpu \
  --js-flags="--expose-gc" \
  --user-data-dir=/tmp/poc-$(date +%s) \
  ~/chromium/src/issue_webrtc032/poc.html
```

The renderer process crashes with a heap-use-after-free within seconds of the SCTP association establishing. No user interaction is required.

ASAN log: `asan.log`