Thanks for reporting your issue. Please make sure these boxes are checked before submitting your issue - thank you!

- [x] I looked for a similar issue and couldn't find any.
- [x] I tried with the latest version of GPAC. Installers available at http://gpac.io/downloads/gpac-nightly-builds/
- [x] I give enough information for contributors to reproduce my issue (meaningful title, github labels, platform and compiler, command-line ...). I can share files anonymously with this dropbox: https://www.mediafire.com/filedrop/filedrop_hosted.php?drop=eec9e058a9486fe4e99c33021481d9e1826ca9dbc242a6cfaab0fe95da5e5d95

Detailed guidelines: http://gpac.io/2013/07/16/how-to-file-a-bug-properly/

Version:
```
./home/hankle/Testing/gpac/bin/gcc/MP4Box -version
MP4Box - GPAC version 1.1.0-DEV-rev1574-g8b22f0912-master
(c) 2000-2021 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io
        MINI build (encoders, decoders, audio and video output disabled)

Please cite our work in your research:
        GPAC Filters: https://doi.org/10.1145/3339825.3394929
        GPAC: https://doi.org/10.1145/1291233.1291452

GPAC Configuration: --static-mp4box
Features: GPAC_CONFIG_LINUX GPAC_64_BITS GPAC_HAS_SOCK_UN GPAC_MINIMAL_ODF GPAC_HAS_QJS GPAC_HAS_FREETYPE GPAC_HAS_JPEG GPAC_HAS_PNG  GPAC_DISABLE_3D
```

command:
```shell
./home/hankle/Testing/gpac/bin/gcc/MP4Box -disox -ttxt -2 -dump-chap-ogg -dump-cover -drtp -bt -out /dev/null poc
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[BIFS] name too long 1315 bytes but max size 1000, truncating
[2]    594826 segmentation fault  ../ASAN/gpac/bin/gcc/MP4Box -disox -ttxt -2 -dump-chap-ogg -dump-cove
```
[poc.zip](https://github.com/gpac/gpac/files/7792020/poc.zip)

bt 
```shell
gdb-peda$ r -disox -ttxt -2 -dump-chap-ogg -dump-cover -drtp -bt -out /dev/null poc
Starting program: /home/hankle/Testing/gpac/bin/gcc/MP4Box -disox -ttxt -2 -dump-chap-ogg -dump-cover -drtp -bt -out /dev/null poc
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[BIFS] name too long 1315 bytes but max size 1000, truncating

Program received signal SIGSEGV, Segmentation fault.
[----------------------------------registers-----------------------------------]
RAX: 0x555c7010 
RBX: 0x5555555f5bf0 --> 0x5555555f5ee0 --> 0x0 
RCX: 0x1 
RDX: 0x4 
RSI: 0x5555555f48c0 --> 0x5555555c7010 --> 0x3000500010004 
RDI: 0x5555555f5ee0 --> 0x0 
RBP: 0x5555555f48c0 --> 0x5555555c7010 --> 0x3000500010004 
RSP: 0x7fffffff6850 --> 0x5555555e51d0 --> 0x0 
RIP: 0x7ffff77738ed (<gf_list_add+45>:  mov    QWORD PTR [rdi+rax*8],rbp)
R8 : 0x5555555f4a30 --> 0x0 
R9 : 0x0 
R10: 0x7ffff76d72ce ("gf_sg_set_root_node")
R11: 0x7ffff77d7120 (<gf_sg_set_root_node>:     endbr64)
R12: 0x5555555e51d0 --> 0x0 
R13: 0x5555555f5bf0 --> 0x5555555f5ee0 --> 0x0 
R14: 0x5555555f2aa0 --> 0x0 
R15: 0x0
EFLAGS: 0x10202 (carry parity adjust zero sign trap INTERRUPT direction overflow)
[-------------------------------------code-------------------------------------]
   0x7ffff77738e5 <gf_list_add+37>:     test   rdi,rdi
   0x7ffff77738e8 <gf_list_add+40>:     je     0x7ffff7773934 <gf_list_add+116>
   0x7ffff77738ea <gf_list_add+42>:     mov    eax,DWORD PTR [rbx+0x8]
=> 0x7ffff77738ed <gf_list_add+45>:     mov    QWORD PTR [rdi+rax*8],rbp
   0x7ffff77738f1 <gf_list_add+49>:     xor    eax,eax
   0x7ffff77738f3 <gf_list_add+51>:     add    DWORD PTR [rbx+0x8],0x1
   0x7ffff77738f7 <gf_list_add+55>:     add    rsp,0x8
   0x7ffff77738fb <gf_list_add+59>:     pop    rbx
[------------------------------------stack-------------------------------------]
0000| 0x7fffffff6850 --> 0x5555555e51d0 --> 0x0 
0008| 0x7fffffff6858 --> 0x5555555f04f0 --> 0x0 
0016| 0x7fffffff6860 --> 0x5555555f48c0 --> 0x5555555c7010 --> 0x3000500010004 
0024| 0x7fffffff6868 --> 0x7ffff78a3225 (<BM_SceneReplace+149>: jmp    0x7ffff78a32be <BM_SceneReplace+302>)
0032| 0x7fffffff6870 --> 0x5555555f4960 --> 0x5555555f4930 --> 0x0 
0040| 0x7fffffff6878 --> 0x5555555e6b30 --> 0x0 
0048| 0x7fffffff6880 --> 0x5555555e51d0 --> 0x0 
0056| 0x7fffffff6888 --> 0x5555555e51d0 --> 0x0 
[------------------------------------------------------------------------------]
Legend: code, data, rodata, value
Stopped reason: SIGSEGV
0x00007ffff77738ed in gf_list_add () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
gdb-peda$ bt
#0  0x00007ffff77738ed in gf_list_add () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#1  0x00007ffff78a3225 in BM_SceneReplace () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#2  0x00007ffff78a33c3 in BM_ParseCommand () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#3  0x00007ffff78a34a4 in gf_bifs_flush_command_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#4  0x00007ffff78946b4 in gf_bifs_dec_proto_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#5  0x00007ffff789466d in gf_bifs_dec_proto_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#6  0x00007ffff7894949 in BD_DecSceneReplace () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#7  0x00007ffff78a31fe in BM_SceneReplace () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#8  0x00007ffff78a33c3 in BM_ParseCommand () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#9  0x00007ffff78a36f3 in gf_bifs_decode_command_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#10 0x00007ffff7a30181 in gf_sm_load_run_isom () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#11 0x00005555555854a8 in dump_isom_scene ()
#12 0x000055555557c42c in mp4boxMain ()
#13 0x00007ffff74dc0b3 in __libc_start_main (main=0x55555556d420 <main>, argc=0xb, argv=0x7fffffffe2c8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe2b8)
    at ../csu/libc-start.c:308
#14 0x000055555556d45e in _start ()
```



Segmentation fault in  gf_list_add ()
This is a GitHub Issue
repo:gpac
owner:gpac
Title : Segmentation fault in  gf_list_add ()
Issue date:

--- start body ---
Thanks for reporting your issue. Please make sure these boxes are checked before submitting your issue - thank you!

- [x] I looked for a similar issue and couldn't find any.
- [x] I tried with the latest version of GPAC. Installers available at http://gpac.io/downloads/gpac-nightly-builds/
- [x] I give enough information for contributors to reproduce my issue (meaningful title, github labels, platform and compiler, command-line ...). I can share files anonymously with this dropbox: https://www.mediafire.com/filedrop/filedrop_hosted.php?drop=eec9e058a9486fe4e99c33021481d9e1826ca9dbc242a6cfaab0fe95da5e5d95

Detailed guidelines: http://gpac.io/2013/07/16/how-to-file-a-bug-properly/

Version:
```
./home/hankle/Testing/gpac/bin/gcc/MP4Box -version
MP4Box - GPAC version 1.1.0-DEV-rev1574-g8b22f0912-master
(c) 2000-2021 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io
        MINI build (encoders, decoders, audio and video output disabled)

Please cite our work in your research:
        GPAC Filters: https://doi.org/10.1145/3339825.3394929
        GPAC: https://doi.org/10.1145/1291233.1291452

GPAC Configuration: --static-mp4box
Features: GPAC_CONFIG_LINUX GPAC_64_BITS GPAC_HAS_SOCK_UN GPAC_MINIMAL_ODF GPAC_HAS_QJS GPAC_HAS_FREETYPE GPAC_HAS_JPEG GPAC_HAS_PNG  GPAC_DISABLE_3D
```

command:
```shell
./home/hankle/Testing/gpac/bin/gcc/MP4Box -disox -ttxt -2 -dump-chap-ogg -dump-cover -drtp -bt -out /dev/null poc
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[BIFS] name too long 1315 bytes but max size 1000, truncating
[2]    594826 segmentation fault  ../ASAN/gpac/bin/gcc/MP4Box -disox -ttxt -2 -dump-chap-ogg -dump-cove
```
[poc.zip](https://github.com/gpac/gpac/files/7792020/poc.zip)

bt 
```shell
gdb-peda$ r -disox -ttxt -2 -dump-chap-ogg -dump-cover -drtp -bt -out /dev/null poc
Starting program: /home/hankle/Testing/gpac/bin/gcc/MP4Box -disox -ttxt -2 -dump-chap-ogg -dump-cover -drtp -bt -out /dev/null poc
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] extra box maxr found in hinf, deleting
[iso file] Box "stsz" (start 5582) has 3936 extra bytes
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853028
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[BIFS] name too long 1315 bytes but max size 1000, truncating

Program received signal SIGSEGV, Segmentation fault.
[----------------------------------registers-----------------------------------]
RAX: 0x555c7010 
RBX: 0x5555555f5bf0 --> 0x5555555f5ee0 --> 0x0 
RCX: 0x1 
RDX: 0x4 
RSI: 0x5555555f48c0 --> 0x5555555c7010 --> 0x3000500010004 
RDI: 0x5555555f5ee0 --> 0x0 
RBP: 0x5555555f48c0 --> 0x5555555c7010 --> 0x3000500010004 
RSP: 0x7fffffff6850 --> 0x5555555e51d0 --> 0x0 
RIP: 0x7ffff77738ed (<gf_list_add+45>:  mov    QWORD PTR [rdi+rax*8],rbp)
R8 : 0x5555555f4a30 --> 0x0 
R9 : 0x0 
R10: 0x7ffff76d72ce ("gf_sg_set_root_node")
R11: 0x7ffff77d7120 (<gf_sg_set_root_node>:     endbr64)
R12: 0x5555555e51d0 --> 0x0 
R13: 0x5555555f5bf0 --> 0x5555555f5ee0 --> 0x0 
R14: 0x5555555f2aa0 --> 0x0 
R15: 0x0
EFLAGS: 0x10202 (carry parity adjust zero sign trap INTERRUPT direction overflow)
[-------------------------------------code-------------------------------------]
   0x7ffff77738e5 <gf_list_add+37>:     test   rdi,rdi
   0x7ffff77738e8 <gf_list_add+40>:     je     0x7ffff7773934 <gf_list_add+116>
   0x7ffff77738ea <gf_list_add+42>:     mov    eax,DWORD PTR [rbx+0x8]
=> 0x7ffff77738ed <gf_list_add+45>:     mov    QWORD PTR [rdi+rax*8],rbp
   0x7ffff77738f1 <gf_list_add+49>:     xor    eax,eax
   0x7ffff77738f3 <gf_list_add+51>:     add    DWORD PTR [rbx+0x8],0x1
   0x7ffff77738f7 <gf_list_add+55>:     add    rsp,0x8
   0x7ffff77738fb <gf_list_add+59>:     pop    rbx
[------------------------------------stack-------------------------------------]
0000| 0x7fffffff6850 --> 0x5555555e51d0 --> 0x0 
0008| 0x7fffffff6858 --> 0x5555555f04f0 --> 0x0 
0016| 0x7fffffff6860 --> 0x5555555f48c0 --> 0x5555555c7010 --> 0x3000500010004 
0024| 0x7fffffff6868 --> 0x7ffff78a3225 (<BM_SceneReplace+149>: jmp    0x7ffff78a32be <BM_SceneReplace+302>)
0032| 0x7fffffff6870 --> 0x5555555f4960 --> 0x5555555f4930 --> 0x0 
0040| 0x7fffffff6878 --> 0x5555555e6b30 --> 0x0 
0048| 0x7fffffff6880 --> 0x5555555e51d0 --> 0x0 
0056| 0x7fffffff6888 --> 0x5555555e51d0 --> 0x0 
[------------------------------------------------------------------------------]
Legend: code, data, rodata, value
Stopped reason: SIGSEGV
0x00007ffff77738ed in gf_list_add () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
gdb-peda$ bt
#0  0x00007ffff77738ed in gf_list_add () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#1  0x00007ffff78a3225 in BM_SceneReplace () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#2  0x00007ffff78a33c3 in BM_ParseCommand () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#3  0x00007ffff78a34a4 in gf_bifs_flush_command_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#4  0x00007ffff78946b4 in gf_bifs_dec_proto_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#5  0x00007ffff789466d in gf_bifs_dec_proto_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#6  0x00007ffff7894949 in BD_DecSceneReplace () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#7  0x00007ffff78a31fe in BM_SceneReplace () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#8  0x00007ffff78a33c3 in BM_ParseCommand () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#9  0x00007ffff78a36f3 in gf_bifs_decode_command_list () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#10 0x00007ffff7a30181 in gf_sm_load_run_isom () from /home/hankle/Testing/gpac/bin/gcc/libgpac.so.10
#11 0x00005555555854a8 in dump_isom_scene ()
#12 0x000055555557c42c in mp4boxMain ()
#13 0x00007ffff74dc0b3 in __libc_start_main (main=0x55555556d420 <main>, argc=0xb, argv=0x7fffffffe2c8, init=<optimized out>, fini=<optimized out>, rtld_fini=<optimized out>, stack_end=0x7fffffffe2b8)
    at ../csu/libc-start.c:308
#14 0x000055555556d45e in _start ()
```



--- end body ---
