Massive quic qos 2 message pub will cause heap buffer flow.

[xinyi-xs]

Massive quic qos 2 message pub will cause heap buffer flow.

[wanghaEMQ]

Another bug was also discovered.

./nanomq_cli/nanomq_cli pub -t "topic1/a" -m "qqqaa" -q 2 --quic -h 432121.xyz -p 14567 -L 10000
quic_connect_cb: mqtt-quic://432121.xyz:14567 connect result: 0
AddressSanitizer:DEADLYSIGNAL
=================================================================
==31093==ERROR: AddressSanitizer: SEGV on unknown address 0x000061717181 (pc 0xffff9fee3b24 bp 0xffff910fe330 sp 0xffff910fe330 T20)
==31093==The signal is caused by a READ memory access.
    #0 0xffff9fee3b24 in __pthread_mutex_lock@GLIBC_2.17 (/lib64/libc.so.6+0x83b24)
    #1 0x4b0264 in nni_pthread_mutex_lock /root/nanomq/nng/src/platform/posix/posix_thread.c:84
    #2 0x4b0464 in nni_plat_mtx_lock /root/nanomq/nng/src/platform/posix/posix_thread.c:146
    #3 0x4a68b4 in nni_mtx_lock /root/nanomq/nng/src/core/thread.c:27
    #4 0x4872e4 in nni_aio_abort /root/nanomq/nng/src/core/aio.c:416
    #5 0x517d94 in mqtt_close_unack_msg_cb /root/nanomq/nng/src/supplemental/mqtt/mqtt_msg.c:921
    #6 0x48d1d0 in nni_id_map_foreach /root/nanomq/nng/src/core/idhash.c:70
    #7 0x4bf9a0 in quic_mqtt_stream_close /root/nanomq/nng/src/mqtt/protocol/mqtt/mqtt_quic.c:1703
    #8 0x52ccdc in quic_connection_cb /root/nanomq/nng/src/supplemental/quic/quic_api.c:645
    #9 0xffffa00ccd00 in QuicConnIndicateEvent /root/nanomq/nng/extern/msquic/src/core/connection.c:749
    #10 0xffffa00cf41c in QuicConnOnShutdownComplete /root/nanomq/nng/extern/msquic/src/core/connection.c:1479
    #11 0xffffa00e3114 in QuicConnDrainOperations /root/nanomq/nng/extern/msquic/src/core/connection.c:7532
    #12 0xffffa00b89e8 in QuicWorkerProcessConnection /root/nanomq/nng/extern/msquic/src/core/worker.c:510
    #13 0xffffa00b9004 in QuicWorkerLoop /root/nanomq/nng/extern/msquic/src/core/worker.c:667
    #14 0xffffa011b0c4 in CxPlatRunExecutionContexts /root/nanomq/nng/extern/msquic/src/platform/platform_worker.c:369
    #15 0xffffa011b834 in CxPlatWorkerThread /root/nanomq/nng/extern/msquic/src/platform/platform_worker.c:454
    #16 0xffff9fee09a4 in start_thread (/lib64/libc.so.6+0x809a4)
    #17 0xffff9ff4bd18 in thread_start (/lib64/libc.so.6+0xebd18)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib64/libc.so.6+0x83b24) in __pthread_mutex_lock@GLIBC_2.17
Thread T20 created by T0 here:
    #0 0xffffa03dacdc in __interceptor_pthread_create (/lib64/libasan.so.8+0x4acdc)
    #1 0xffffa011fc6c in CxPlatThreadCreate /root/nanomq/nng/extern/msquic/src/platform/platform_posix.c:666
    #2 0xffffa011a48c in CxPlatWorkersLazyStart /root/nanomq/nng/extern/msquic/src/platform/platform_worker.c:193
    #3 0xffffa0123310 in CxPlatDataPathInitialize /root/nanomq/nng/extern/msquic/src/platform/datapath_epoll.c:557
    #4 0xffffa0097cf0 in QuicLibraryEnsureExecutionContext /root/nanomq/nng/extern/msquic/src/core/library.c:659
    #5 0xffffa00a0de8 in MsQuicRegistrationOpen /root/nanomq/nng/extern/msquic/src/core/registration.c:56
    #6 0x531b00 in quic_open /root/nanomq/nng/src/supplemental/quic/quic_api.c:1456
    #7 0x4c0564 in nng_mqtt_quic_open_conf /root/nanomq/nng/src/mqtt/protocol/mqtt/mqtt_quic.c:1985
    #8 0x4c03b4 in nng_mqtt_quic_client_open /root/nanomq/nng/src/mqtt/protocol/mqtt/mqtt_quic.c:1965
    #9 0x45da3c in create_quic_client /root/nanomq/nanomq_cli/client.c:1823
    #10 0x45c3c8 in client /root/nanomq/nanomq_cli/client.c:1589
    #11 0x45c478 in publish_start /root/nanomq/nanomq_cli/client.c:1624
    #12 0x45e354 in main /root/nanomq/nanomq_cli/main.c:106
    #13 0xffff9fe873c4 in __libc_start_call_main (/lib64/libc.so.6+0x273c4)
    #14 0xffff9fe8749c in __libc_start_main_alias_2 (/lib64/libc.so.6+0x2749c)
    #15 0x45126c in _start (/root/nanomq/build/nanomq_cli/nanomq_cli+0x45126c)

==31093==ABORTING