An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.
System info:  
Ubuntu 16.04.6 LTS, X64, gcc 5.4.0, gpac (latest master 00dfc93)  
Compile Command:
```
$ CC="gcc -fsanitize=address -g" CXX="g++ -fsanitize=address -g" ./configure --static-mp4box
$ make
```
Run Command:
```
$ MP4Box -diso -out /dev/null $POC-new-memory-leak
```
POC file:  
https://github.com/Clingto/POC/blob/master/gpac-MP4Box/gpac-00dfc93-crashes/POC-new-memory-leak

gdb info:
```C
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[iso file] Box "metx" size 15 (start 89) invalid (read 25)
[iso file] Box "abst" size 24 (start 0) invalid (read 104)
[iso file] Incomplete box abst - start 0 size 24
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] Box "metx" size 15 (start 89) invalid (read 25)
[iso file] Box "abst" size 24 (start 0) invalid (read 104)
Truncated file - missing 24 bytes
[Inferior 1 (process 6276) exited with code 01]
```
ASAN info:
```C
==26041==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 224 byte(s) in 2 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0xaefada in metx_New isomedia/box_code_base.c:8367

Direct leak of 8 byte(s) in 2 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0x792106 in abst_Read isomedia/box_code_adobe.c:95
    #2 0xb62c63  (/bin/MP4Box+0xb62c63)

Indirect leak of 32 byte(s) in 2 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0x46c27d in gf_list_new utils/list.c:602

Indirect leak of 16 byte(s) in 4 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0x7ffff63eb489 in __strdup (/lib/x86_64-linux-gnu/libc.so.6+0x8b489)
```


SUMMARY: AddressSanitizer: 280 byte(s) leaked in 10 allocation(s).

---

Addition: This bug was found with our fuzzer, which is based on AFL. Our fuzzer is developed by Yuanpingyu(cfenicey@gmail.com) 、Yanhao and Marsman1996(lqliuyuwei@outlook.com)
AddressSanitizer: 2 memory leaks of metx_New(), abst_Read()
This is a GitHub Issue
repo:gpac
owner:gpac
Title : AddressSanitizer: 2 memory leaks of metx_New(), abst_Read()
Issue date:

--- start body ---
System info:  
Ubuntu 16.04.6 LTS, X64, gcc 5.4.0, gpac (latest master 00dfc93)  
Compile Command:
```
$ CC="gcc -fsanitize=address -g" CXX="g++ -fsanitize=address -g" ./configure --static-mp4box
$ make
```
Run Command:
```
$ MP4Box -diso -out /dev/null $POC-new-memory-leak
```
POC file:  
https://github.com/Clingto/POC/blob/master/gpac-MP4Box/gpac-00dfc93-crashes/POC-new-memory-leak

gdb info:
```C
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[iso file] Box "metx" size 15 (start 89) invalid (read 25)
[iso file] Box "abst" size 24 (start 0) invalid (read 104)
[iso file] Incomplete box abst - start 0 size 24
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] Box "metx" size 15 (start 89) invalid (read 25)
[iso file] Box "abst" size 24 (start 0) invalid (read 104)
Truncated file - missing 24 bytes
[Inferior 1 (process 6276) exited with code 01]
```
ASAN info:
```C
==26041==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 224 byte(s) in 2 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0xaefada in metx_New isomedia/box_code_base.c:8367

Direct leak of 8 byte(s) in 2 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0x792106 in abst_Read isomedia/box_code_adobe.c:95
    #2 0xb62c63  (/bin/MP4Box+0xb62c63)

Indirect leak of 32 byte(s) in 2 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0x46c27d in gf_list_new utils/list.c:602

Indirect leak of 16 byte(s) in 4 object(s) allocated from:
    #0 0x7ffff6f02602 in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0x7ffff63eb489 in __strdup (/lib/x86_64-linux-gnu/libc.so.6+0x8b489)
```


SUMMARY: AddressSanitizer: 280 byte(s) leaked in 10 allocation(s).

---

Addition: This bug was found with our fuzzer, which is based on AFL. Our fuzzer is developed by Yuanpingyu(cfenicey@gmail.com) 、Yanhao and Marsman1996(lqliuyuwei@outlook.com)
--- end body ---
