Thanks for reporting your issue. Please make sure these boxes are checked before submitting your issue - thank you!

- [√ ] I looked for a similar issue and couldn't find any.
- [√ ] I tried with the latest version of GPAC. Installers available at http://gpac.io/downloads/gpac-nightly-builds/
- [√] I give enough information for contributors to reproduce my issue (meaningful title, github labels, platform and compiler, command-line ...). I can share files anonymously with this dropbox: https://www.mediafire.com/filedrop/filedrop_hosted.php?drop=eec9e058a9486fe4e99c33021481d9e1826ca9dbc242a6cfaab0fe95da5e5d95

Detailed guidelines: http://gpac.io/2013/07/16/how-to-file-a-bug-properly/

### version
```
./MP4Box -version                                                                                                    
MP4Box - GPAC version 1.1.0-DEV-rev1574-g8b22f0912-master
(c) 2000-2021 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io
        MINI build (encoders, decoders, audio and video output disabled)
```

### System information
Ubuntu 20.04.1 LTS, gcc version 9.3.0 (Ubuntu 9.3.0-17ubuntu1~20.04)

### command
```
./bin/gcc/MP4Box -bt POC
```
[POC.zip](https://github.com/xiao-benben/xiao-benben.github.io/blob/master/pocs/poc1.zip)

### Result
``` 
[iso file] Unknown box type stbl in parent dref
[iso file] Box "UNKN" is larger than container box
[iso file] Box "dref" size 41 (start 387) invalid (read 1842)
[iso file] Box "dref" is larger than container box
[iso file] Box "dinf" size 36 (start 379) invalid (read 49)
[iso file] extra box maxr found in hinf, deleting
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] Unknown box type stbl in parent dref
[iso file] Box "UNKN" is larger than container box
[iso file] Box "dref" size 41 (start 387) invalid (read 1842)
[iso file] Box "dref" is larger than container box
[iso file] Box "dinf" size 36 (start 379) invalid (read 49)
[iso file] extra box maxr found in hinf, deleting
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[ODF] Reading bifs config: shift in sizes (not supported)
double free or corruption (top)
[5]    47384 abort      ./MP4Box -bt 

```
#### gdb information
```
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] Unknown box type stbl in parent dref
[iso file] Box "UNKN" is larger than container box
[iso file] Box "dref" size 41 (start 387) invalid (read 1842)
[iso file] Box "dref" is larger than container box
[iso file] Box "dinf" size 36 (start 379) invalid (read 49)
[iso file] extra box maxr found in hinf, deleting
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[ODF] Reading bifs config: shift in sizes (not supported)
double free or corruption (top)

Program received signal SIGABRT, Aborted.
0x0000000001063fe7 in raise ()
(gdb) bt
#0  0x0000000001063fe7 in raise ()
#1  0x0000000001064201 in abort ()
#2  0x0000000001080b17 in __libc_message ()
#3  0x0000000001087cba in malloc_printerr ()
#4  0x000000000108f2e4 in free ()
#5  0x000000000047e2f2 in gf_free (ptr=0x2) at /home/wb/fuzz/gpac1/gpac/src/utils/alloc.c:165
#6  0x0000000000515437 in gf_sg_sfimage_del (im=...) at /home/wb/fuzz/gpac1/gpac/src/scenegraph/vrml_tools.c:608
#7  0x00000000004d1e0a in gf_sg_mpeg4_node_del (node=0x172c370) at /home/wb/fuzz/gpac1/gpac/src/scenegraph/mpeg4_nodes.c:27351
#8  0x00000000004b55a1 in gf_node_unregister (pNode=0x172c370, parentNode=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/scenegraph/base_scenegraph.c:761
#9  0x000000000059751b in gf_bifs_dec_node (codec=0x1729800, bs=0x1716360, NDT_Tag=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:912
#10 0x000000000059598b in gf_bifs_dec_sf_field (codec=0x1729800, bs=0x1716360, node=0x172c2c0, field=0x7fffffff6cb0, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:250
#11 0x0000000000598468 in gf_bifs_dec_field (codec=0x1729800, bs=0x1716360, node=0x172c2c0, field=0x7fffffff6cb0, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:499
#12 0x0000000000598bda in gf_bifs_dec_node_list (codec=0x1729800, bs=0x1716360, node=0x172c2c0, is_proto=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:600
#13 0x000000000059748f in gf_bifs_dec_node (codec=0x1729800, bs=0x1716360, NDT_Tag=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:902
#14 0x000000000059598b in gf_bifs_dec_sf_field (codec=0x1729800, bs=0x1716360, node=0x172c210, field=0x7fffffff7220, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:250
#15 0x0000000000598468 in gf_bifs_dec_field (codec=0x1729800, bs=0x1716360, node=0x172c210, field=0x7fffffff7220, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:499
#16 0x0000000000598bda in gf_bifs_dec_node_list (codec=0x1729800, bs=0x1716360, node=0x172c210, is_proto=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:600
#17 0x000000000059748f in gf_bifs_dec_node (codec=0x1729800, bs=0x1716360, NDT_Tag=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:902
#18 0x0000000000588cd0 in gf_bifs_dec_proto_list (codec=<optimized out>, bs=0x1716360, proto_list=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/com_dec.c:1131
#19 0x0000000000589939 in BD_DecSceneReplace (codec=0x1729800, bs=0x1716360, proto_list=0x172bd90) at /home/wb/fuzz/gpac1/gpac/src/bifs/com_dec.c:1322
#20 0x00000000005a12df in BM_SceneReplace (codec=0x1729800, bs=0x7fffffff6330, com_list=0x1729bc0) at /home/wb/fuzz/gpac1/gpac/src/bifs/memory_decoder.c:860
#21 0x00000000005a1616 in BM_ParseCommand (codec=0x1729800, bs=0x1716360, com_list=0x1729bc0) at /home/wb/fuzz/gpac1/gpac/src/bifs/memory_decoder.c:908
#22 0x00000000005a1d7c in gf_bifs_decode_command_list (codec=0x1729800, ESID=<optimized out>,
    data=0x1729c40 "\373\305\356\004\252m\003tF\a\215\377\337\336\300`\304\026\035t\032\tV\373-؎\264\336?qo|\233\022\017\066\333Je\021\tQ\220\221\315P6\240\261\343\320S˫\"\245\\\250\020\242\264\066\357ygsI\204\027\"\254\273(\275`\304\023-\247\310ȡ\347\225\351d\224", <incomplete sequence \322>, data_length=<optimized out>, com_list=0x1729bc0) at /home/wb/fuzz/gpac1/gpac/src/bifs/memory_decoder.c:1009
#23 0x000000000078c044 in gf_sm_load_run_isom (load=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/scene_manager/loader_isom.c:303
#24 0x00000000004230ac in dump_isom_scene (file=<optimized out>, inName=<optimized out>, is_final_name=GF_FALSE, dump_mode=GF_SM_DUMP_BT, do_log=GF_FALSE, no_odf_conv=<optimized out>)
    at /home/wb/fuzz/gpac1/gpac/applications/mp4box/filedump.c:199
#25 0x0000000000418390 in mp4boxMain (argc=<optimized out>, argv=<optimized out>) at /home/wb/fuzz/gpac1/gpac/applications/mp4box/main.c:6044
#26 0x00000000010551d9 in __libc_start_main ()
#27 0x0000000000402b7a in _start ()

```
Double Free in filedump.c:199
This is a GitHub Issue
repo:gpac
owner:gpac
Title : Double Free in filedump.c:199
Issue date:

--- start body ---
Thanks for reporting your issue. Please make sure these boxes are checked before submitting your issue - thank you!

- [√ ] I looked for a similar issue and couldn't find any.
- [√ ] I tried with the latest version of GPAC. Installers available at http://gpac.io/downloads/gpac-nightly-builds/
- [√] I give enough information for contributors to reproduce my issue (meaningful title, github labels, platform and compiler, command-line ...). I can share files anonymously with this dropbox: https://www.mediafire.com/filedrop/filedrop_hosted.php?drop=eec9e058a9486fe4e99c33021481d9e1826ca9dbc242a6cfaab0fe95da5e5d95

Detailed guidelines: http://gpac.io/2013/07/16/how-to-file-a-bug-properly/

### version
```
./MP4Box -version                                                                                                    
MP4Box - GPAC version 1.1.0-DEV-rev1574-g8b22f0912-master
(c) 2000-2021 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io
        MINI build (encoders, decoders, audio and video output disabled)
```

### System information
Ubuntu 20.04.1 LTS, gcc version 9.3.0 (Ubuntu 9.3.0-17ubuntu1~20.04)

### command
```
./bin/gcc/MP4Box -bt POC
```
[POC.zip](https://github.com/xiao-benben/xiao-benben.github.io/blob/master/pocs/poc1.zip)

### Result
``` 
[iso file] Unknown box type stbl in parent dref
[iso file] Box "UNKN" is larger than container box
[iso file] Box "dref" size 41 (start 387) invalid (read 1842)
[iso file] Box "dref" is larger than container box
[iso file] Box "dinf" size 36 (start 379) invalid (read 49)
[iso file] extra box maxr found in hinf, deleting
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] Unknown box type stbl in parent dref
[iso file] Box "UNKN" is larger than container box
[iso file] Box "dref" size 41 (start 387) invalid (read 1842)
[iso file] Box "dref" is larger than container box
[iso file] Box "dinf" size 36 (start 379) invalid (read 49)
[iso file] extra box maxr found in hinf, deleting
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[ODF] Reading bifs config: shift in sizes (not supported)
double free or corruption (top)
[5]    47384 abort      ./MP4Box -bt 

```
#### gdb information
```
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
[iso file] Unknown box type stbl in parent dref
[iso file] Box "UNKN" is larger than container box
[iso file] Box "dref" size 41 (start 387) invalid (read 1842)
[iso file] Box "dref" is larger than container box
[iso file] Box "dinf" size 36 (start 379) invalid (read 49)
[iso file] extra box maxr found in hinf, deleting
[iso file] extra box maxr found in hinf, deleting
[iso file] Unknown box type dmaX in parent hinf
[iso file] Unknown box type 80rak in parent moov
[iso file] Incomplete box mdat - start 11495 size 853037
[iso file] Incomplete file while reading for dump - aborting parsing
MPEG-4 BIFS Scene Parsing
[ODF] Reading bifs config: shift in sizes (not supported)
double free or corruption (top)

Program received signal SIGABRT, Aborted.
0x0000000001063fe7 in raise ()
(gdb) bt
#0  0x0000000001063fe7 in raise ()
#1  0x0000000001064201 in abort ()
#2  0x0000000001080b17 in __libc_message ()
#3  0x0000000001087cba in malloc_printerr ()
#4  0x000000000108f2e4 in free ()
#5  0x000000000047e2f2 in gf_free (ptr=0x2) at /home/wb/fuzz/gpac1/gpac/src/utils/alloc.c:165
#6  0x0000000000515437 in gf_sg_sfimage_del (im=...) at /home/wb/fuzz/gpac1/gpac/src/scenegraph/vrml_tools.c:608
#7  0x00000000004d1e0a in gf_sg_mpeg4_node_del (node=0x172c370) at /home/wb/fuzz/gpac1/gpac/src/scenegraph/mpeg4_nodes.c:27351
#8  0x00000000004b55a1 in gf_node_unregister (pNode=0x172c370, parentNode=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/scenegraph/base_scenegraph.c:761
#9  0x000000000059751b in gf_bifs_dec_node (codec=0x1729800, bs=0x1716360, NDT_Tag=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:912
#10 0x000000000059598b in gf_bifs_dec_sf_field (codec=0x1729800, bs=0x1716360, node=0x172c2c0, field=0x7fffffff6cb0, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:250
#11 0x0000000000598468 in gf_bifs_dec_field (codec=0x1729800, bs=0x1716360, node=0x172c2c0, field=0x7fffffff6cb0, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:499
#12 0x0000000000598bda in gf_bifs_dec_node_list (codec=0x1729800, bs=0x1716360, node=0x172c2c0, is_proto=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:600
#13 0x000000000059748f in gf_bifs_dec_node (codec=0x1729800, bs=0x1716360, NDT_Tag=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:902
#14 0x000000000059598b in gf_bifs_dec_sf_field (codec=0x1729800, bs=0x1716360, node=0x172c210, field=0x7fffffff7220, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:250
#15 0x0000000000598468 in gf_bifs_dec_field (codec=0x1729800, bs=0x1716360, node=0x172c210, field=0x7fffffff7220, is_mem_com=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:499
#16 0x0000000000598bda in gf_bifs_dec_node_list (codec=0x1729800, bs=0x1716360, node=0x172c210, is_proto=GF_FALSE) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:600
#17 0x000000000059748f in gf_bifs_dec_node (codec=0x1729800, bs=0x1716360, NDT_Tag=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/field_decode.c:902
#18 0x0000000000588cd0 in gf_bifs_dec_proto_list (codec=<optimized out>, bs=0x1716360, proto_list=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/bifs/com_dec.c:1131
#19 0x0000000000589939 in BD_DecSceneReplace (codec=0x1729800, bs=0x1716360, proto_list=0x172bd90) at /home/wb/fuzz/gpac1/gpac/src/bifs/com_dec.c:1322
#20 0x00000000005a12df in BM_SceneReplace (codec=0x1729800, bs=0x7fffffff6330, com_list=0x1729bc0) at /home/wb/fuzz/gpac1/gpac/src/bifs/memory_decoder.c:860
#21 0x00000000005a1616 in BM_ParseCommand (codec=0x1729800, bs=0x1716360, com_list=0x1729bc0) at /home/wb/fuzz/gpac1/gpac/src/bifs/memory_decoder.c:908
#22 0x00000000005a1d7c in gf_bifs_decode_command_list (codec=0x1729800, ESID=<optimized out>,
    data=0x1729c40 "\373\305\356\004\252m\003tF\a\215\377\337\336\300`\304\026\035t\032\tV\373-؎\264\336?qo|\233\022\017\066\333Je\021\tQ\220\221\315P6\240\261\343\320S˫\"\245\\\250\020\242\264\066\357ygsI\204\027\"\254\273(\275`\304\023-\247\310ȡ\347\225\351d\224", <incomplete sequence \322>, data_length=<optimized out>, com_list=0x1729bc0) at /home/wb/fuzz/gpac1/gpac/src/bifs/memory_decoder.c:1009
#23 0x000000000078c044 in gf_sm_load_run_isom (load=<optimized out>) at /home/wb/fuzz/gpac1/gpac/src/scene_manager/loader_isom.c:303
#24 0x00000000004230ac in dump_isom_scene (file=<optimized out>, inName=<optimized out>, is_final_name=GF_FALSE, dump_mode=GF_SM_DUMP_BT, do_log=GF_FALSE, no_odf_conv=<optimized out>)
    at /home/wb/fuzz/gpac1/gpac/applications/mp4box/filedump.c:199
#25 0x0000000000418390 in mp4boxMain (argc=<optimized out>, argv=<optimized out>) at /home/wb/fuzz/gpac1/gpac/applications/mp4box/main.c:6044
#26 0x00000000010551d9 in __libc_start_main ()
#27 0x0000000000402b7a in _start ()

```
--- end body ---

A double free vulnerability in the GPAC MP4Box application can lead to memory corruption and potential arbitrary code execution. The issue occurs in the filedump.c file at line 199, where improper memory management allows the same memory to be freed multiple times, resulting in a crash or exploitation opportunity.