text:
How to connnect Azure Windows Virtual Desktop?

Hi,
Is it possible to connect Azure WVD with FreeRdp client? Azure WVD uses host pool architecture and it doesn't use TCP 3389 port. I have tried using gateway parameters but didn't work. Do you have any comments?
Thank you,

It's not possible

What barriers are there to add this support? Many corporate RDP desktops are now using RDPW Windows Virtual Desktops and there are only non-free implementations so far (e.g I-gel viewer)

The barrier is that MS still has not provided any documentation/specification on how to authenticate to WVD environments to the public. Igel just uses the (closed source) MS RD Core SDK for Linux which currently is only available to selected partners.

I'm also waiting for this ability. My company also just started using RDPW. Thanks.

Anyone who wants to help, I created a feature request on the Microsoft Tech Community. Any upvote can help to get Linux support.
Link: https://techcommunity.microsoft.com/t5/azure-virtual-desktop-feedback/linux-desktop-support-for-remote-desktop-client/idi-p/3079481
I don't know if there's a better way to request a feature from Microsoft. The Microsoft Tech Community was the only way I found.
Cheers.

I am very interested in this as well! I'd love a native Linux client. Microsoft has made some changes. You can actually connect to managed vms in the pools with the usual RDP port. However, I can't figure out how to use the Azure Active directory credentials. It should be possible according to this:https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows , and with a custom rdp attribute stated here: https://docs.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm?WT.mc_id=Portal-Microsoft_Azure_Support#connect-using-the-other-clients. Although, I still think there is a bit of black magic that needs to be ripped from MS RD Core SDK for Linux. And, also to use the pooling features.
It all does work under Linux when using the web client, Here: https://client.wvd.microsoft.com/arm/webclient/index.html
I did find a free Linux client for Azure Virtual Desktop that seems to work well, although I haven't tested all it's features. Here it is: https://docs.teradici.com/find/product/cloud-access-software/2022.01/software-client-for-linux
It has instructions here: https://www.teradici.com/web-help/pcoip_client/linux/21.07/using/connecting_to_avd/
@akallabeth Can you become a selected Microsoft Partner? Or, could we recreate the missing bits? =]

Did anyone have any success with the teradici / igel software mentioned above? If yes, I guess many of us would welcome a howto guide on getting these working.

Did anyone have any success with the teradici / igel software mentioned above? If yes, I guess many of us would welcome a howto guide on getting these working.
I'm pretty sure it was working when I posted the links. I think the pcoip docs outline the process pretty well.

I did get xfreerdp to connect to the individual vms in the azure pool using azure active directory credentials, but not using the pool. You have to pass credentials using a weird syntax.  like   .\AzureAD\email@domain.com

Yeah I'm trying to get the teradici client to work using the guide link above, but the email address that I usually enter at https://client.wvd.microsoft.com/arm/webclient/index.html does not work in the PCoIP client. After a slight pause, it says "Unable to connect to email@address.com Please verify the address or registraction code and try again" and does not show the OATUH login page similar to the web client. I'm using the email address that's also visible when I log into the wvd page and click the top right corner to display my profile, so I have no clue what could be wrong.
In the debug log, it says:
QUERYBROKER :QueryBrokerClient result: NON_EXISTENT_BROKER on port 443
So I guess it tries to connect to the hostname via this port? I'm not sure that will work, since my company is just using WVD as a paid service and does not have a server running locally. Strange.
I do not fully get your comments about the azure pool, not even sure what that is. We're just using (up until now) WVD via the above webclient simply with an email address and password + 2FA.

Yeah I'm trying to get the teradici client to work using the guide link above, but the email address that I usually enter at https://client.wvd.microsoft.com/arm/webclient/index.html does not work in the PCoIP client. After a slight pause, it says "Unable to connect to email@address.com Please verify the address or registraction code and try again" and does not show the OATUH login page similar to the web client. I'm using the email address that's also visible when I log into the wvd page and click the top right corner to display my profile, so I have no clue what could be wrong.
In the debug log, it says: QUERYBROKER :QueryBrokerClient result: NON_EXISTENT_BROKER on port 443
So I guess it tries to connect to the hostname via this port? I'm not sure that will work, since my company is just using WVD as a paid service and does not have a server running locally. Strange.
I do not fully get your comments about the azure pool, not even sure what that is. We're just using (up until now) WVD via the above webclient simply with an email address and password + 2FA.

It sounds like it's broken to me. =[ MS probably changed some things since that was released.
My solution was to install wireguard on the Azure Remote Desktop vm. Do you have admin access to your Azure portal account?
You can connect directly to your vm using xfreerdp, and you can use the same credential as the web client, but you can't use the load balancing features of the pool. Instead of using email@domain.com you have to use .\AzureAD\email@domain.com when connecting directly with xfreerdp.

it says "Unable to connect to email@address.com Please verify the address or registraction code and try again" and does not show the OATUH login page similar to the web client. I'm using the email address that's also visible when I log into the wvd page and click the top right corner to display my profile, so I have no clue what could be wrong.

It appears that they have removed AVD support without their software running on the virtual machine :( https://www.teradici.com/web-help/pcoip_client/linux/22.09/overview/whats-new/

Did anyone have any success with the teradici / igel software mentioned above? If yes, I guess many of us would welcome a howto guide on getting these working.

I'm pretty sure it was working when I posted the links. I think the pcoip docs outline the process pretty well.
I did get xfreerdp to connect to the individual vms in the azure pool using azure active directory credentials, but not using the pool. You have to pass credentials using a weird syntax. like .\AzureAD\email@domain.com

You mean, using FreeRDP you could connect? How?
What connection value did you pass? The Subscription URL? Your email? (Workspace)

You mean, using FreeRDP you could connect? How?
What connection value did you pass? The Subscription URL? Your email? (Workspace)

Yes, you can. You can connect directly to any virtual machine in an Azure Virtual Desktop pool individually using xfreerdp on Linux. You have to either install a VPN  on the virtual network like Wireguard, or open TCP 3389 port in the Azure firewall. You have to have admin access to either the vm, or the Azure portal. The only caveat is that you have to use. \AzureAD\email@domain.com as your username instead of email@domain.com. This isn't quite as useful as a native linux client for Linux, because the extra effort setting it up, and you can't take advantage of the load balancing pooling.

I am very interested in this as well! I'd love a native Linux client. Microsoft has made some changes. You can actually connect to managed vms in the pools with the usual RDP port. However, I can't figure out how to use the Azure Active directory credentials. It should be possible according to this:https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows , and with a custom rdp attribute stated here: https://docs.microsoft.com/en-us/azure/virtual-desktop/deploy-azure-ad-joined-vm?WT.mc_id=Portal-Microsoft_Azure_Support#connect-using-the-other-clients. Although, I still think there is a bit of black magic that needs to be ripped from MS RD Core SDK for Linux. And, also to use the pooling features. It all does work under Linux when using the web client, Here: https://client.wvd.microsoft.com/arm/webclient/index.html
@akallabeth Can you become a selected Microsoft Partner? Or, could we recreate the missing bits? =]

So the reason this is a bit of a pain and requires their specific clients (per the broker error message in another comment) is that the Azure Virtual Desktop "Workspaces" that you subscribe to can (and almost always do) enforce "Conditional Access", which is basically a way of forcing MFA/2FA if your user is coming from an untrusted network to ensure their credentials aren't being abused by someone else. So FreeRDP would need a way to receive that request from the WVD service, pop open either an OAuth login window or MFA prompt and send a response to the WVD service that the user is logged in, push the MFA notification, and then after all that is settled, THEN it should receive an actual response with a list of VMs that the user could pick from.

I too would love to see FreeRDP support that feature, when Microsoft publicly documents WVD authentication.
In the meantime, I wonder if any of the proprietary tools that the approved thin client devices use, is available for purchase outside of their customized Linux distributions, and actually works for this task...

we´ve implemented AAD authentication and should be available with current nightly. we´ve not had much time to test this yet, but it might help.

@akallabeth @fifthdegree Could you please give an example of using the freerdp nightly to connect to WVD with AAD? I've played around with the parameters, but without success and not really clear to me what should be the server parameter in this case and such.

@idevai this is for the case when you log on to your AzureAD with OAUTH2 (e.g. you get a browser window where you have to authenticate)
if you use another method, this will not help.

@akallabeth I use the web client https://client.wvd.microsoft.com/arm/webclient/index.html and just enter the username/password. Can I login to the same WVD using freerdp?

Hello @akallabeth. I log in to the web client using OAuth2 (first login redirects to the SSO page) and the user/pass fields (when click on the PC icon). Can I use the nightly feature?

@idevai I get a redirection to an oauth2 resource ( https://login.microsoftonline.com/common/oauth2/v2.0/authorize ) so chances are high this might work.

but how do we use this nightly feature? I do authenticate this way. I've tried with every build switch I can find from trawling through pull requests like:
-DWITH_SPNEGO=ON
-DWITH_KRB5=ON
-DWITH_WEBVIEW=ON

I've tried with the x and SDL version
... but nothing. I keeps trying to use Kerberos which of course I have no clue what the KDC is for AAD managed stuff.
How to use this new OAUTH2 authentication? Would really like to give it a try...

@rlees85 Are you sure your server supports aad logon (and is joined to an azure domain)? A log dump with /log-level:DEBUG could help reveal more information

@rlees85 @fifthdegree since this is quite new, it might be a good idea to document the steps in the wiki.
we did have to remove direct write access (wiki vandalism and such), but you can fork the repo https://github.com/FreeRDP/FreeRDP.wiki.git and create a patch or pull request so we can merge that.

[10:06:41:720] [1468973:1468974] [DEBUG][com.freerdp.core.nego] - [nego_enable_aad]: Enabling RDS AAD security: FALSE

AAD isn't being enabled for you for some reason, it would be very helpful if you can try to figure out why.
Regardless, we haven't yet implemented AAD for gateways. Unfortunately, I don't have such a setup to play with, but we would need to know what the server expects as the bearer token. @rlees85, can you try to send your gateway an authorization header with an access token obtained with https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=a85cf173-4192-42f8-81fa-777a763e6e2c&response_type=code&scope=ms-device-service%3A%2F%2Ftermsrv.wvd.microsoft.com%2Fname%2F<DEVICE NAME>%2Fuser_impersonation&redirect_uri=https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Fnativeclient in the form of Authorization: Bearer <access token>?

AAD isn't being enabled for you for some reason, it would be very helpful if you can try to figure out why.

Using /sec:aad sets that line to TRUE - but as you said, it isn't implemented for gateway authentication so it doesn't allow this particular setup to work.
I am having a play around with the headers but I am struggling. I think the client id, url, scope, etc are wrong from what I get from the gateway. I've tried constructing my own request but I have no idea what to provide for 'scope' and so far my guesses haven't pleased it.
Do the developers have a chat they are on where I can PM further details? if I get further I'll update this comment

@rlees85 check https://freerdp.com for contact details

Thanks - I've joined. No clue how to use Matrix. If I end up digging keep into this maybe I'll set up a temporary room.
Onto the bad news, I've been playing with this a lot and I think its going to be a complete pig to reverse engineer without some sort of clever man in the middling.
It seems the windows RDP client just 'knows' what the scope of the claim is and how to provide the received token to the gateway. But this is what I have so far:

I suspect its using active directory federation / application proxy for authentication, for application ID: fa4345a4-a730-4230-84a8-7d9651b86739 which is Windows Virtual Desktop Client. Ref: https://learn.microsoft.com/en-us/azure/virtual-desktop/set-up-mfa
Some details about how I think this works and what its based on: https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-integrate-with-remote-desktop-services
Including the CURL request to the gateway with much less stuff that isn't secret redacted:

$ curl -LI https://afdfp-rdgateway-r1.wvd.microsoft.com/remoteDesktopGateway
HTTP/2 401
content-length: 0
content-type: text/html
set-cookie: TiPMix=[removed decimal number]; path=/; HttpOnly; Domain=rdgateway-c106-UKS-r1.wvd.microsoft.com; Max-Age=3600; Secure; SameSite=None
set-cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=rdgateway-c106-UKS-r1.wvd.microsoft.com; Max-Age=3600; Secure; SameSite=None
set-cookie: ARRAffinity=[removed];Path=/;HttpOnly;Secure;Domain=rdgateway-c106-UKS-r1.wvd.microsoft.com
set-cookie: ARRAffinitySameSite=[removed];Path=/;HttpOnly;SameSite=None;Secure;Domain=rdgateway-c106-UKS-r1.wvd.microsoft.com
www-authenticate: Claims:Authority=https://login.windows.net/common/;Client=fa4345a4-a730-4230-84a8-7d9651b86739;Redirect=https://mrs-prod.ame.gbl/mrs-RDInfraClient-prod;Resource=https://mrs-prod.ame.gbl/mrs-RDInfra-prod;Site=[removed numeric value]
rd-infrarole-version: 1.0.6425.1200
x-ms-wvd-service-region: UKS
x-ms-lamport-ts: [removed long number]
x-ms-correlation-id: [removed guid]
x-ms-request-id: [removed guid]
x-powered-by: ASP.NET
x-content-type-options: nosniff
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: [removed hex string] Ref B: [removed] Ref C: 2023-06-13T12:40:42Z
date: Tue, 13 Jun 2023 12:40:41 GMT

ok there is hope. I posted a tonne of stuff on the Matrix channel. I hope that it is enough to help get this thing working :)

ok there is hope. I posted a tonne of stuff on the Matrix channel. I hope that it is enough to help get this thing working :)
going to upload here just incase my Matrix client doesn't work well:
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=fa4345a4-a730-4230-84a8-7d9651b86739&response_type=code&scope=https%3A%2F%2Fmrs-prod.ame.gbl%2Fmrs-RDInfra-prod%2F.default&redirect_uri=https%3A%2F%2Fmrs-prod.ame.gbl%2Fmrs-RDInfraClient-prod

Gives me a valid code. The scope looks like it is always that (hardcoded). The redirect uri and client id can be found in the RDP gateway www-authenticate header.
curl -XPOST "https://login.microsoftonline.com/common/oauth2/v2.0/token" --data "client_id=fa4345a4-a730-4230-84a8-7d9651b86739&grant_type=authorization_code&code=[removed]&scope=https%3A%2F%2Fmrs-prod.ame.gbl%2Fmrs-RDInfra-prod%2F.default&req_cnf=eyJraWQiOiJBYnBIR2NnTGIta1JzSkdud0ZFa3RrN3V6cFpPQ2NCWTc0LVlCZHJLVkdzIn0K&redirect_uri=https%3A%2F%2Fmrs-prod.ame.gbl%2Fmrs-RDInfraClient-prod"

Then gives me a valid access token.
Adding the access token to Authorization: Bearer <access token> to the RDP gateway then gives me a 405 METHOD NOT ALLOWED which is probably expected as I don't know how to talk RDP gateway language, but its not 401 anymore...!

if that is the case in theory if you make the /remoteDesktopGateway request with the bearer header and use RDG_OUT_DATA as mehtod and add a header RDG-Connection-Id: 7ba37f80-08b2-4a16-aabb-86113944f45d (just some uuid) and look what happens
curl -v -X RDG_OUT_DATA -H 'RDG-Connection-Id: <uuid>' -H 'Authorization: Bearer <your bearer>' https://afdfp-rdgateway-r1.wvd.microsoft.com/remoteDesktopGateway

if that works the rdg part of freerdp should be quite straight forward to implement (from the point on where the bearer is known).

Perhaps this would be helpful.
https://github.com/FreeRDP/FreeRDP/issues/8515#issuecomment-1596137853

@rich can you try adding -L to the curl? I think Microsoft wants to
redirect you post auth to another URL.
If you want an easy way to get tokens without needing to use the web,
install the Azure CLI and check out this article I came across recently
that has been hugely helpful in my debugging of since Azure AD auth issues.
https://dotnetdevlife.wordpress.com/2022/01/26/get-bearer-token-for-given-scope/
I'll see if I can find the other resources I found that outlined the claims
and audience bits, but the above should let you get a token easily after
doing an az login to do the Oauth2 web flow once.
On Wed, Jun 14, 2023, 9:06 AM Rich @.***> wrote:

Didn't work sadly:

Trying 204.79.197.219:443...
Connected to afdfp-rdgateway-r1.wvd.microsoft.com (204.79.197.219) port 443 (#0)
ALPN: offers h2,http/1.1
TLSv1.3 (OUT), TLS handshake, Client hello (1):
CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: none
TLSv1.3 (IN), TLS handshake, Server hello (2):
TLSv1.2 (IN), TLS handshake, Certificate (11):
TLSv1.2 (IN), TLS handshake, Server key exchange (12):
TLSv1.2 (IN), TLS handshake, Server finished (14):
TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
TLSv1.2 (OUT), TLS handshake, Finished (20):
TLSv1.2 (IN), TLS handshake, Finished (20):
SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
ALPN: server accepted h2
Server certificate:
subject: C=US; ST=WA; L=Redmond; O=Microsoft Corporation; CN=*.wvd.microsoft.com
start date: May 28 08:23:12 2023 GMT
expire date: Nov 24 08:23:12 2023 GMT
subjectAltName: host "afdfp-rdgateway-r1.wvd.microsoft.com" matched cert's "*.wvd.microsoft.com"
issuer: C=US; O=Microsoft Corporation; CN=Microsoft Azure TLS Issuing CA 01
SSL certificate verify ok.
using HTTP/2
Failed sending HTTP request
Connection #0 to host afdfp-rdgateway-r1.wvd.microsoft.com left intact
curl: (43) Failed sending HTTP request

I tried adding --http1.1 to the command and it just threw HTTP/1.1 405
Method Not Allowed again
—
Reply to this email directly, view it on GitHub
https://github.com/FreeRDP/FreeRDP/issues/6529#issuecomment-1591280092,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ANPSNA26NGVKL5AEKX5NSTLXLHAM5ANCNFSM4S4IXAAA
.
You are receiving this because you commented.Message ID:
@.***>

I would like to add some information to this issue report that might be new to those who are not in the matrix channel:
@fifthdegree  and @rlees85 found out how the first connections steps work and with some guessing @rlees85 and I discovered how the data connection itself works (aka gateway transport).
first we have a rdgw file (how to get that is out of scope for now, I guess the easiest way is to download that file from the web portal)
That rdpw file contains the following information that we need:
application id (remoteapplicationprogram:s:||uuid), gatewayhostname and loadbalanceinfo
first step is to get a oauth2 bearer (aka modern auth) for the gateway server. The gateway server in the rdpw file is not actually a gateway but does the orchestration.
second step is a HTTP post request to https://<gateway>/api/arm/v2/connections/ sending a json object like ex:
{"application": "||<remoteapplicationprogram>", "loadBalanceInfo": "<mth://...>", "LogonToken": null, "gatewayLoadBalancerToken": null, "geo": "<country code?>"}

the gateway server then responds with a JSON object. The most important information is gatewayurl.
This is the websocket endpoint we need to connect to.
When we connect to that endpoint we first get a 403 error containing some cookies. There seems to be the need to use one of that cookies (namely ARRAffinity) and reconnect with this cookie. Then we should get a plain websocket that can be used. This seems to be a normal rdp connection over websocket without extra framing (that transport type was recently merged, see https://github.com/FreeRDP/FreeRDP/pull/9064).
for every http request we use the oauth2 token.

just a quick update:
the thing basically works like stated above (with a few details to be figured out, like what parameters must be sent when as query parameters and when as http headers, all requests need a x-ms-useragent fake header)
the next issue is that microsoft did not update https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/a6abf1a2-f0ea-427e-bf02-fae7beb09b6a and now the server sends a payload we currently are not able to parse.
the good news is that someone already got a picture. It will take some time before all is stable enough to get merged though

I have been using it all morning for work and it is working perfectly. It fixes so many issues that are present in Microsoft's web client: namely - microphone redirection, keyboard redirection being very wobbly, speed/display.
Thanks very much for the hard work of @akarl10 and @fifthdegree  and the FreeRDP developers in general that we may get an open source client for WVD. Apparently there is quite a big thread on Microsoft's site of people asking for a Linux client and this is even better.
Anyone who is comfortable building software can give it a go: https://github.com/akarl10/FreeRDP/tree/arm-gateway
If you are using Arch its as simple as checking out: https://aur.archlinux.org/packages/freerdp-git and making some trivial changes to the PKGBUILD.
You need a bearer token, see above.
export BEARER="YOUR BEARER TOKEN"
sdl-freerdp ./your.rdpw /gateway:type:arm,bearer:${BEARER}

Obviously it may or may not work for everyone... I think like two of us have got a desktop so far so testing has been limited :+1:

using my branch is not required anymore since this feature was now merged (will delete the branch soon)
https://github.com/FreeRDP/FreeRDP/pull/9102
now somebody needs to implement the bearer token fetching

Sadly I haven't had any luck connecting to my W365 instance with these changes, I can access it via the browser at either https://client.wvd.microsoft.com/arm/webclient/v2/index.html or https://windows365.microsoft.com/ but I get a protocol negotiation failure when attempting to use the sdl-freerdp from the freerdp-nightly PPA in Debian 11.
I've pulled the Bearer token from the browser session and also used the Azure CLI to get a current token and both give the same protocol error.
az login # triggers web popup and caches the session
export BEARER=$(az account get-access-token --query accessToken --output tsv) # gives the same type of token the browser session does
sdl-freerdp ~/Cloud\ PC\ Enterprise\ 8vCPU_32GB_256GB.rdpw /gateway:type:arm,bearer:${BEARER}

Results in
[08:39:03:664] [3628:3628] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]: [experimental] sdl-freerdp client is currently experimental!
[08:39:03:664] [3628:3628] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  If problems occur please check https://github.com/FreeRDP/FreeRDP/issues for know issues or create a new one!
[08:39:03:664] [3628:3628] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  Developers hang out in https://matrix.to/#/#FreeRDP:matrix.org?via=matrix.org - dont hesitate to ask some questions. (replies might take some time depending on your timezone)
[08:39:03:763] [3628:3629] [INFO][com.freerdp.client.SDL] - [sdl_pre_connect]: Update size to 1024x768
[08:39:03:244] [3628:3629] [ERROR][com.freerdp.core.gateway.http] - [http_response_parse_header]: parsing failed
[08:39:03:244] [3628:3629] [ERROR][com.freerdp.core.nego] - [nego_connect]: Protocol Security Negotiation Failure
[08:39:03:244] [3628:3629] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[08:39:03:244] [3628:3629] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure```

Some issue @Exploder98 found:

Just a tip for anyone else trying to do this, especially if you're using Firefox: the devtools don't display the full value of the header, it's cut off from the middle. You need to right click and "copy value" to get the full value. Then you can paste it to a text editor to get rid of the "Bearer " bit at the start.

I copied the token with "Edit and Resend", but the problem is unfortunately the same with the suggested tip.

I got traffic through mitmproxy, and the request looks weird.
POST /api/arm/v2/connections/ HTTP/1.1
Cache-Control: no-cache
Pragma: no-cache
Accept: application/json
User-Agent: FreeRDP/3.0
Host: afdfp-rdgateway-r1.wvd.microsoft.com
Connection: Keep-Alive
Content-Length: 130
Authorization: Bearer <my-token>
Content-Type: application/json
X-MS-User-Agent: FreeRDP/3.0

{"application":"||<id>","loadBalanceInfo":"mth://localhost/<some-id>/<some-id>","LogonToken":null,"gatewayLoadBalancerToken":null}

HTTP/1.1 400 Bad Request
Transfer-Encoding: chunked
Content-Type: application/json; charset=utf-8
Set-Cookie: TiPMix=59.1020279373517; path=/; HttpOnly; Domain=rdgateway-c101-weu-r1.wvd.microsoft.com; Max-Age=3600; Secure; SameSite=None
Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=rdgateway-c101-weu-r1.wvd.microsoft.com; Max-Age=3600; Secure; SameSite=None
Set-Cookie: ARRAffinity=<cookie>;Path=/;HttpOnly;Secure;Domain=rdgateway-c101-weu-r1.wvd.microsoft.com
Set-Cookie: ARRAffinitySameSite=<cookie>;Path=/;HttpOnly;SameSite=None;Secure;Domain=rdgateway-c101-weu-r1.wvd.microsoft.com
api-supported-versions: 2.0
X-Rate-Limit-Limit: 1m
X-Rate-Limit-Remaining: 99
X-Rate-Limit-Reset: <date>
x-ms-wvd-service-region: WEU
x-ms-lamport-ts: <value>
x-ms-correlation-id: <id>
x-ms-request-id: <id>
X-Powered-By: ASP.NET
X-Content-Type-Options: nosniff
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: <ref-a> Ref B: <ref-b> Ref C: <ref-c>
Date: Fri, 30 Jun 2023 07:37:33 GMT

{
  "Code": "E_PROXY_ORCHESTRATION_UNKNOWN_ERROR",
  "Message": "Error mapping URI to handler instance",
  "Target": null,
  "Details": null,
  "InnerError": null
}

hmm. As said I don't really know what they do in the background, but reading
Error mapping URI to handler instance
I would blame the mth:// url. Is the rdpw file "fresh"?
The web client should also make a /api/arm/v2/connections/ request. Do the two values (application and loadBalanceInfo) correlate to the values found in the rdpw file?

Sorry, my bad) I saved the dummy value I posted yesterday to the original file))

Sorry, my bad) I saved the dummy value I posted yesterday to the original file))

does it work with the new nightly (and the fixed .rdpw) or at least give a 401 on the /connections/ endpoint?

Unfortunately, I got the following error. I'm not sure if it is related to the connection method.
P.S. I got it on the main PC and decided to check it on the VM. Installed xUbuntu 22.04 from scratch, but the error is the same.

Stacktrace
[20:33:12:58] [10097:00002772] [DEBUG][com.freerdp.core.gateway.arm] - [arm_fill_gateway_parameters][(null)]: extracted target url <url>
[20:33:12:263] [10097:00002772] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: resetting error state
[20:33:12:264] [10097:00002772] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: connecting to peer 65.52.158.177
[20:33:12:312] [10097:00002772] [DEBUG][com.freerdp.core.gateway.wst] - [wst_tls_connect][(null)]: connecting to rdgateway-c104-weu-r1.wvd.microsoft.com 443
[20:33:12:495] [10097:00002772] [DEBUG][com.freerdp.core.gateway.wst] - [wst_handle_ok_or_forbidden][(null)]: Got Affinity cookie <cookie>
[20:33:12:499] [10097:00002772] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: resetting error state
[20:33:12:499] [10097:00002772] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: connecting to peer 65.52.158.177
[20:33:12:548] [10097:00002772] [DEBUG][com.freerdp.core.gateway.wst] - [wst_tls_connect][(null)]: connecting to rdgateway-c104-weu-r1.wvd.microsoft.com 443
==10097==ERROR: AddressSanitizer: heap-use-after-free on address 0x60b000018200 at pc 0x7f5dac4f7d2f bp 0x7f5d9edd1510 sp 0x7f5d9edd1500
READ of size 8 at 0x60b000018200 thread T1
    #0 0x7f5dac4f7d2e  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x218d2e)
    #1 0x7f5dac595dc8  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6dc8)
    #2 0x7f5dac658d32  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d32)
    #3 0x7f5dac65ceca  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37deca)
    #4 0x7f5dac5e531f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30631f)
    #5 0x7f5dac61e28a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f28a)
    #6 0x55f2213c3eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)
    #7 0x7f5dabded6b3  (/lib/x86_64-linux-gnu/libstdc++.so.6+0xda6b3)
    #8 0x7f5dabccd608 in start_thread /build/glibc-SzIz7B/glibc-2.31/nptl/pthread_create.c:477
    #9 0x7f5dace5c132 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x11f132)

0x60b000018200 is located 16 bytes inside of 112-byte region [0x60b0000181f0,0x60b000018260)
freed by thread T1 here:
    #0 0x7f5dad03c40f in __interceptor_free ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:122
    #1 0x7f5dac596af9  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7af9)
    #2 0x7f5dac658d32  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d32)
    #3 0x7f5dac65ceca  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37deca)
    #4 0x7f5dac5e531f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30631f)
    #5 0x7f5dac61e28a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f28a)
    #6 0x55f2213c3eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

previously allocated by thread T1 here:                                                                                [11/1821]
    #0 0x7f5dad03ca06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f5dac4f0efd  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211efd)
    #2 0x7f5dac596abb  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7abb)
    #3 0x7f5dac658d32  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d32)
    #4 0x7f5dac65ceca  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37deca)
    #5 0x7f5dac5e531f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30631f)
    #6 0x7f5dac61e28a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f28a)
    #7 0x55f2213c3eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Thread T1 created by T0 here:
    #0 0x7f5dacf69815 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cc:208
    #1 0x7f5dabded989 in std::thread::_M_start_thread(std::unique_ptr<std::thread::_State, std::default_delete<std::thread::_State> >, void (*)()) (/lib/x86_64-linux-gnu/libstdc++.so.6+0xda989)
    #2 0x7ffcd0e89b5f  ([stack]+0x1fb5f)

SUMMARY: AddressSanitizer: heap-use-after-free (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x218d2e)
Shadow bytes around the buggy address:
  0x0c167fffaff0: fd fd fd fa fa fa fa fa fa fa fa fa fd fd fd fd
  0x0c167fffb000: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa
  0x0c167fffb010: fa fa fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c167fffb020: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x0c167fffb030: fd fd fd fd fd fa fa fa fa fa fa fa fa fa fd fd
=>0x0c167fffb040:[fd]fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa
  0x0c167fffb050: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c167fffb060: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c167fffb070: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c167fffb080: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x0c167fffb090: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
==10097==ABORTING

Haven't gotten a chance to test this yet, but it seems REALLY promising. I installed the m365 cli (previously called the o365 cli) since the WVD service is M365/O365 rather than "pure" AVD, and then I asked its "m365_chili" helper mode about getting a wvd token and it gave me an exciting answer.

m365_chili "how can I get a wvd access token?"
To get a WVD (Windows Virtual Desktop) access token, you can use the m365 util accesstoken get command with the appropriate resource. The resource for WVD is typically the URL of the WVD management endpoint.
Here is an example command to get a WVD access token:
m365 util accesstoken get --resource
Replace  with the actual URL of the WVD management endpoint.
For example, if the WVD management endpoint URL is https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery, the command would be:
m365 util accesstoken get --resource https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery
This command will return the access token for WVD, which you can use for authentication and authorization when working with WVD APIs or resources.
Please note that the specific URL and endpoint for WVD may vary depending on your environment and configuration. Make sure to use the correct URL for your WVD deployment.

@progxaker what happens if you don't use mitmproxy? maybe mitmproxy does something nasty with websocket?
101 would mean you are essentially connected through the gateway
of course the use after free should not happen, but with that stacktrace I don't see the exact line where it happens

@progxaker what happens if you don't use mitmproxy? maybe mitmproxy does something nasty with websocket?

I tried it on the VM and the main PC w/o mitmproxy. The result was the same.
I  wanted to find out if the problem with 401 was fixed, that's why I attached the report.

actually I might have found the "use after free". Strange nobody noticed it yet. It will need some days until this fix gets merged.

That would be great! Thanks

I tried the new build (9af563d4d193d5e73b35ff5d749d45213c1dbf16) and could get to the username/password fields. I put in the data, and at one point something happened with the screen resolution, probably FreeRDP was trying to open an RDP window, but after a second the resolution reset to the default and I got a LeakSanitizer error.
I also saw the following in the logs:
[06:16:30:938] [141966:00022a8f] [ERROR][com.winpr.library] - [LoadLibraryA][(null)]: failed with /opt/freerdp-nightly/lib/freerdp3/librdpecam-client.so: cannot open shared object file: No such file or directory
[06:16:30:938] [141966:00022a8f] [WARN][com.freerdp.addin] - [freerdp_load_channel_addin_entry][(null)]: Failed to load channel rdpecam [(null)]
[06:16:30:938] [141966:00022a8f] [ERROR][com.freerdp.channels.drdynvc.client] - [drdynvc_virtual_channel_init_event_ex][(null)]: drdynvc_virtual_channel_event_connected failed with error 1

Full stacktrace
$ /opt/freerdp-nightly/bin/sdl-freerdp /tmp/SessionDesktop.rdpw /gateway:type:arm,bearer:${TOKEN} /log-level:TRACE

[06:16:15:494] [141966:00022a8e] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental][(null)]: [experimental] /opt/freerdp-nightly/bin/sdl-freerdp client is currently experimental!
[06:16:15:494] [141966:00022a8e] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental][(null)]:  If problems occur please check https://github.com/FreeRDP/FreeRDP/issues for know issues or create a new one!
[06:16:15:494] [141966:00022a8e] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental][(null)]:  Developers hang out in https://matrix.to/#/#FreeRDP:matrix.org?via=matrix.org - dont hesitate to ask some questions. (replies might take some time depending on your timezone)
[06:16:15:500] [141966:00022a8e] [DEBUG][com.freerdp.client.common] - [freerdp_client_settings_parse_command_line][(null)]: This is 3.0.0-dev Build configuration: BUILD_TESTING=OFF WINPR_HAVE_AIO_H=1 WINPR_HAVE_EXECINFO_BACKTRACE=1 WINPR_HAVE_EXECINFO_BACKTRACE_SYMBOLS=1 WINPR_HAVE_EXECINFO_BACKTRACE_SYMBOLS_FD=1 WINPR_HAVE_EXECINFO_HEADER=1 WINPR_HAVE_FCNTL_H=1 WINPR_HAVE_GETLOGIN_R=1 WINPR_HAVE_GETPWUID_R=1 WINPR_HAVE_INTTYPES_H=1 WINPR_HAVE_JOURNALD_H=TRUE WINPR_HAVE_POLL_H=1 WINPR_HAVE_PTHREAD_MUTEX_TIMEDLOCK_LIB=1 WINPR_HAVE_PTHREAD_MUTEX_TIMEDLOCK_LIBS= WINPR_HAVE_PTHREAD_MUTEX_TIMEDLOCK_SYMBOL=1 WINPR_HAVE_STDBOOL_H=1 WINPR_HAVE_STDINT_H=1 WINPR_HAVE_STRNDUP=1 WINPR_HAVE_SYSLOG_H=1 WINPR_HAVE_SYS_EVENTFD_H=1 WINPR_HAVE_SYS_FILIO_H= WINPR_HAVE_SYS_SELECT_H=1 WINPR_HAVE_SYS_SOCKIO_H= WINPR_HAVE_SYS_TIMERFD_H=1 WINPR_HAVE_TM_GMTOFF=1 WINPR_HAVE_UNISTD_H=1 WINPR_HAVE_UNWIND_H=1 WITH_ADD_PLUGIN_TO_RPATH=OFF WITH_ALSA=ON WITH_CAIRO=ON WITH_CCACHE=OFF WITH_CHANNELS=ON WITH_CJSON=ON WITH_CLANG_FORMAT=ON WITH_CLIENT=ON WITH_CLIENT_AVAILABLE=1 WITH_CLIENT_CHANNELS=ON WITH_CLIENT_CHANNELS_AVAILABLE=1 WITH_CLIENT_COMMON=ON WITH_CLIENT_INTERFACE=OFF WITH_CLIENT_SDL=ON WITH_CLIENT_SDL_AVAILABLE=1 WITH_CUPS=ON WITH_DEBUG_ALL=OFF WITH_DEBUG_CAPABILITIES=OFF WITH_DEBUG_CERTIFICATE=OFF WITH_DEBUG_CHANNELS=OFF WITH_DEBUG_CLIPRDR=OFF WITH_DEBUG_CODECS=OFF WITH_DEBUG_DVC=OFF WITH_DEBUG_EVENTS=OFF WITH_DEBUG_KBD=OFF WITH_DEBUG_LICENSE=OFF WITH_DEBUG_MUTEX=OFF WITH_DEBUG_NEGO=OFF WITH_DEBUG_NLA=OFF WITH_DEBUG_NTLM=OFF WITH_DEBUG_RAIL=OFF WITH_DEBUG_RDP=OFF WITH_DEBUG_RDPDR=OFF WITH_DEBUG_RDPEI=OFF WITH_DEBUG_RDPGFX=OFF WITH_DEBUG_REDIR=OFF WITH_DEBUG_RFX=OFF WITH_DEBUG_RINGBUFFER=OFF WITH_DEBUG_SCARD=OFF WITH_DEBUG_SCHANNEL=OFF WITH_DEBUG_SDL_EVENTS=OFF WITH_DEBUG_SDL_KBD_EVENTS=OFF WITH_DEBUG_SND=OFF WITH_DEBUG_SVC=OFF WITH_DEBUG_SYMBOLS=OFF WITH_DEBUG_THREADS=OFF WITH_DEBUG_TIMEZONE=OFF WITH_DEBUG_TRANSPORT=OFF WITH_DEBUG_TSG=OFF WITH_DEBUG_TSMF=OFF WITH_DEBUG_TSMF_AVAILABLE=0 WITH_DEBUG_URBDRC=OFF WITH_DEBUG_WND=OFF WITH_DEBUG_X11=OFF WITH_DEBUG_X11_LOCAL_MOVESIZE=OFF WITH_DEBUG_XV=OFF WITH_DSP_EXPERIMENTAL=OFF WITH_DSP_FFMPEG=ON WITH_DSP_FFMPEG_AVAILABLE=1 WITH_EVENTFD_READ_WRITE=1 WITH_FAAC=OFF WITH_FAAD2=OFF WITH_FFMPEG=ON WITH_FREERDP_DEPRECATED=OFF WITH_FREERDP_DEPRECATED_COMMANDLINE=ON WITH_FUSE=ON WITH_GFX_H264=ON WITH_GPROF=OFF WITH_GSM=OFF WITH_INTERNAL_MD4=OFF WITH_INTERNAL_MD5=OFF WITH_INTERNAL_RC4=OFF WITH_IPP=OFF WITH_JPEG=OFF WITH_KRB5=ON WITH_KRB5_NO_NTLM_FALLBACK=OFF WITH_LAME=OFF WITH_LIBRARY_VERSIONING=ON WITH_LIBSYSTEMD=ON WITH_MACAUDIO=OFF WITH_MACAUDIO_AVAILABLE=0 WITH_MANPAGES=ON WITH_MBEDTLS=OFF WITH_NATIVE_SSPI=OFF WITH_OPENCL=OFF WITH_OPENH264=OFF WITH_OPENSC_PKCS11_LINKED=OFF WITH_OPENSLES=OFF WITH_OPENSSL=ON WITH_OSS=ON WITH_PCSC=ON WITH_PKCS11=ON WITH_POLL=ON WITH_PROFILER=OFF WITH_PROXY=ON WITH_PROXY_APP=ON WITH_PROXY_EMULATE_SMARTCARD=OFF WITH_PROXY_MODULES=ON WITH_PULSE=ON WITH_RDTK=ON WITH_SAMPLE=OFF WITH_SANITIZE_ADDRESS=ON WITH_SANITIZE_ADDRESS_AVAILABLE=1 WITH_SANITIZE_MEMORY=OFF WITH_SANITIZE_MEMORY_AVAILABLE=0 WITH_SANITIZE_THREAD=OFF WITH_SANITIZE_THREAD_AVAILABLE=0 WITH_SERVER=ON WITH_SERVER_CHANNELS=ON WITH_SERVER_INTERFACE=ON WITH_SHADOW=ON WITH_SMARTCARD_EMULATE=OFF WITH_SMARTCARD_INSPECT=OFF WITH_SMARTCARD_PCSC=ON WITH_SOXR=OFF WITH_SSE2=ON WITH_SWSCALE=OFF WITH_THIRD_PARTY=OFF WITH_UNICODE_BUILTIN=OFF WITH_VAAPI=OFF WITH_VAAPI_AVAILABLE=1 WITH_VALGRIND_MEMCHECK=OFF WITH_VALGRIND_MEMCHECK_AVAILABLE=0 WITH_VERBOSE_WINPR_ASSERT=ON WITH_VIDEO_FFMPEG=ON WITH_VIDEO_FFMPEG_AVAILABLE=1 WITH_WAYLAND=ON WITH_WEBVIEW=OFF WITH_WINPR_DEPRECATED=OFF WITH_WINPR_TOOLS=ON WITH_X11=ON WITH_XCURSOR=ON WITH_XEXT=ON WITH_XFIXES=ON WITH_XI=ON WITH_XINERAMA=ON WITH_XRANDR=ON WITH_XRENDER=ON WITH_XV=ON WITH_ZLIB=ON
Build type:          RelWithDebInfo
CFLAGS:              -g -O2 -fdebug-prefix-map=/build/freerdp-nightly-3.0.0+0~20230704014821.1354~1.gbp9af563=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC -Wall -fvisibility=hidden -Wimplicit-function-declaration -Wredundant-decls -g -fno-omit-frame-pointer -fsanitize=address -fsanitize-address-use-after-scope
Compiler:            GNU, 9.3.0
Target architecture: x64

[06:16:15:500] [141966:00022a8f] [DEBUG][com.freerdp.core] - [freerdp_connect_begin][(null)]: resetting error state
[06:16:15:645] [141966:00022a8f] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin][(null)]: loading channelEx rdpdr
[06:16:15:646] [141966:00022a8f] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin][(null)]: loading channelEx rdpsnd
[06:16:15:646] [141966:00022a8f] [DEBUG][com.freerdp.channels.drdynvc.client] - [drdynvc_VirtualChannelEntryEx][(null)]: VirtualChannelEntryEx
[06:16:15:646] [141966:00022a8f] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_load_static_channel_addin][(null)]: loading channelEx drdynvc
[06:16:15:658] [141966:00022a8f] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best][(null)]: primitives benchmark result:
[06:16:15:823] [141966:00022a8f] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best][(null)]:  * generic= 16
[06:16:15:980] [141966:00022a8f] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best][(null)]:  * optimized= 24
[06:16:15:980] [141966:00022a8f] [DEBUG][com.freerdp.primitives] - [primitives_autodetect_best][(null)]: primitives autodetect, using optimized
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_set_negotiation_enabled][(null)]: Enabling security layer negotiation: TRUE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_set_restricted_admin_mode_required][(null)]: Enabling restricted admin mode: FALSE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdp][(null)]: Enabling RDP security: TRUE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_enable_tls][(null)]: Enabling TLS security: TRUE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_enable_nla][(null)]: Enabling NLA security: TRUE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_enable_ext][(null)]: Enabling NLA extended security: FALSE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_enable_rdstls][(null)]: Enabling RDSTLS security: FALSE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_enable_aad][(null)]: Enabling RDS AAD security: FALSE
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_INITIAL --> CONNECTION_STATE_NEGO
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_connect][(null)]: state: NEGO_STATE_NLA
[06:16:15:996] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_attempt_nla][(null)]: Attempting NLA security
[06:16:15:01] [141966:00022a8f] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: resetting error state
[06:16:15:01] [141966:00022a8f] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: connecting to peer 204.79.197.219
[06:16:15:55] [141966:00022a8f] [DEBUG][com.freerdp.core.gateway.arm] - [arm_tls_connect][(null)]: connecting to afdfp-rdgateway-r1.wvd.microsoft.com 443
[06:16:18:287] [141966:00022a8f] [DEBUG][com.freerdp.core.gateway.http] - [http_chuncked_read][(null)]: chunked encoding end of stream received
[06:16:18:287] [141966:00022a8f] [DEBUG][com.freerdp.core.gateway.arm] - [arm_resolve_endpoint][(null)]: Got HTTP Response data: {
  "udpPort": 0,
  "redirectedServerName": "<server-name>",
  "redirectedServerCert": "<server-cert>",
  "redirectedAuthBlob": "<auth-blob>",
  "redirectedAuthGuid": "<auth-guid>",
  "redirectedUsername": null,
  "clientUpdateLocation": "",
  "logonCertEnabled": false,
  "gatewayLocation": "https://rdgateway-c101-gwc-r1.wvd.microsoft.com/api/arm/v2/connections/<id>/<id>?RDmiGatewayToken=<gateway-token>&x-ms-routing-name=self",
  "gatewayLocationPreWebSocket": "https://rdgateway-c101-gwc-r1.wvd.microsoft.com/api/arm/v2/connections/<id>/<id>?RDmiGatewayToken=<gateway-token>&x-ms-routing-name=self",
  "gatewayConnectionToken": "<connection-token>",
  "gatewayLoadBalancerToken": "ARRAffinity=<lb-token>",
  "gatewayLoadBalancerMethod": "Cookie",
  "clientRendezvousLocation": "https://afdfp-rdgateway-r1.wvd.microsoft.com/api/arm/v2/connections/rendezvousclient/<id>/<id>/GWC?RDmiGatewayToken=<token>&x-ms-routing-name=self",
  "azureInstanceNetworkMetadata": "{\"interface\":[{\"ipv4\":{\"ipAddress\":[{\"privateIpAddress\":\"<private-ip>\",\"publicIpAddress\":\"\"}],\"subnet\":[{\"address\":\"<address>\",\"prefix\":\"<prefix>\"}]},\"ipv6\":{\"ipAddress\":[]},\"macAddress\":\"<mac-address>\"}]}",
  "iceServersConfig": {
    "turnEnabled": false,
    "stunEnabled": true,
    "stunServers": null,
    "turnServers": [
      {
        "url": {
          "secure": false,
          "host": "<host>",
          "port": <port>,
          "transport": null
        },
        "username": "<username>",
        "password": "<password>",
        "realm": "\"rtcmedia\"",
        "expiresOn": "<expiration-date>"
      }
    ]
  },
  "deviceId": "<device-id>",
  "deviceTenantId": "<device-tenant-id>",
  "sessionId": -1
}
[06:16:18:288] [141966:00022a8f] [DEBUG][com.freerdp.core.gateway.arm] - [arm_fill_gateway_parameters][(null)]: extracted target url https://rdgateway-c101-gwc-r1.wvd.microsoft.com/api/arm/v2/connections/2af17ed0-2e46-490a-8d01-4f3bfdbb3cf2/0e0bfe62-26bd-4f18-8c96-e49821fb106c?RDmiGatewayToken=<gateway-token>&x-ms-routing-name=self
[06:16:18:564] [141966:00022a8f] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: resetting error state
[06:16:18:564] [141966:00022a8f] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: connecting to peer 51.116.236.74
[06:16:18:616] [141966:00022a8f] [DEBUG][com.freerdp.core.gateway.wst] - [wst_tls_connect][(null)]: connecting to rdgateway-c101-gwc-r1.wvd.microsoft.com 443
[06:16:18:829] [141966:00022a8f] [DEBUG][com.freerdp.core.gateway.wst] - [wst_handle_ok_or_forbidden][(null)]: Got Affinity cookie 607acc0b60c99d398a1b4a887b17d42dc08c6889973dd3e1514cc34bb8598dbf
[06:16:18:833] [141966:00022a8f] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: resetting error state
[06:16:18:834] [141966:00022a8f] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect][(null)]: connecting to peer 51.116.236.74
[06:16:18:881] [141966:00022a8f] [DEBUG][com.freerdp.core.gateway.wst] - [wst_tls_connect][(null)]: connecting to rdgateway-c101-gwc-r1.wvd.microsoft.com 443
[06:16:18:98] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_send_negotiation_request][(null)]: Adding terminating CRLF to routing token
[06:16:18:98] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_send_negotiation_request][(null)]: RequestedProtocols: 3
[06:16:19:248] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_process_negotiation_response][(null)]: RDP_NEG_RSP::flags = { [0x3f] |EXTENDED_CLIENT_DATA_SUPPORTED|DYNVC_GFX_PROTOCOL_SUPPORTED|RDP_NEGRSP_RESERVED|RESTRICTED_ADMIN_MODE_SUPPORTED|REDIRECTED_AUTHENTICATION_MODE_SUPPORTED|UNKNOWN }
[06:16:19:248] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_recv][(null)]: selected_protocol: 2
[06:16:19:248] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_attempt_nla][(null)]: state: NEGO_STATE_FINAL
[06:16:19:248] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_connect][(null)]: Negotiated NLA security
[06:16:19:248] [141966:00022a8f] [DEBUG][com.freerdp.core.nego] - [nego_try_connect][(null)]: nego_security_connect with PROTOCOL_HYBRID
[06:16:19:572] [141966:00022a8f] [WARN][com.freerdp.crypto] - [verify_cb][(null)]: Certificate verification failure 'unable to get local issuer certificate (20)' at stack position 0
[06:16:19:572] [141966:00022a8f] [WARN][com.freerdp.crypto] - [verify_cb][(null)]: CN = <AVD.corp.org.com>
[06:16:19:574] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_set_early_user_auth][(null)]: Early User Auth active: false
[06:16:19:574] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_set_state][(null)]: -- NLA_STATE_INITIAL	--> NLA_STATE_INITIAL
[06:16:19:574] [141966:00022a8f] [DEBUG][com.winpr.sspi] - [InitSecurityInterfaceExA][(null)]: InitSecurityInterfaceExA
[06:16:19:574] [141966:00022a8f] [DEBUG][com.freerdp.core.auth] - [credssp_auth_init][(null)]: Using package: Negotiate (cbMaxToken: 12256 bytes)
Username:        <username>
Domain:
Password:        <password>
[06:16:28:993] [141966:00022a8f] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_log_msg][(null)]: Cannot find KDC for realm "<domain (from username)>"
[06:16:29:608] [141966:00022a8f] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_log_msg][(null)]: Cannot find KDC for realm "<domain (from username)>"
[06:16:29:608] [141966:00022a8f] [DEBUG][com.freerdp.core.auth] - [credssp_auth_setup_client][(null)]: Acquired client credentials
[06:16:29:608] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_change_state][(null)]: change state from NTLM_STATE_INITIAL to NTLM_STATE_INITIAL
[06:16:29:608] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_change_state][(null)]: change state from NTLM_STATE_INITIAL to NTLM_STATE_NEGOTIATE
[06:16:29:608] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_write_negotiate_flags][(null)]: Write flags [0xe20882b7] NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_NEGOTIATE_OEM|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_LM_KEY|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[06:16:29:608] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_change_state][(null)]: change state from NTLM_STATE_NEGOTIATE to NTLM_STATE_CHALLENGE
[06:16:29:609] [141966:00022a8f] [DEBUG][com.winpr.negotiate] - [negotiate_InitializeSecurityContextW][(null)]: Available mechanism: NTLM (1.3.6.1.4.1.311.2.2.10)
[06:16:29:609] [141966:00022a8f] [DEBUG][com.winpr.negotiate] - [negotiate_InitializeSecurityContextW][(null)]: Using direct NTLM
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.auth] - [credssp_auth_authenticate][(null)]: Authentication in progress... (output token size: 40)
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]: ----->> sending...
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]:    ----->> protocol version 6
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_write_octet_string][(null)]:    ----->> negoToken
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_write_octet_string][(null)]:    ----->> client nonce
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]: [93 bytes]
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_set_state][(null)]: -- NLA_STATE_INITIAL	--> NLA_STATE_NEGO_TOKEN
[06:16:29:609] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_NLA
[06:16:29:814] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_decode_ts_request][(null)]: <<----- receiving...
[06:16:29:814] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_decode_ts_request][(null)]:    <<----- protocol version 6
[06:16:29:814] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_decode_ts_request][(null)]:    <<----- nego token
[06:16:29:814] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_read_negotiate_flags][(null)]: Read flags [0xe2898235] NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_TARGET_TYPE_DOMAIN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_TARGET_INFO|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[06:16:29:815] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_change_state][(null)]: change state from NTLM_STATE_CHALLENGE to NTLM_STATE_AUTHENTICATE
[06:16:29:815] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_write_negotiate_flags][(null)]: Write flags [0xe288a235] NTLMSSP_NEGOTIATE_UNICODE|NTLMSSP_REQUEST_TARGET|NTLMSSP_NEGOTIATE_SIGN|NTLMSSP_NEGOTIATE_SEAL|NTLMSSP_NEGOTIATE_NTLM|NTLMSSP_NEGOTIATE_WORKSTATION_SUPPLIED|NTLMSSP_NEGOTIATE_ALWAYS_SIGN|NTLMSSP_NEGOTIATE_EXTENDED_SESSION_SECURITY|NTLMSSP_NEGOTIATE_TARGET_INFO|NTLMSSP_NEGOTIATE_VERSION|NTLMSSP_NEGOTIATE_128|NTLMSSP_NEGOTIATE_KEY_EXCH
[06:16:29:815] [141966:00022a8f] [DEBUG][com.winpr.sspi.NTLM] - [ntlm_change_state][(null)]: change state from NTLM_STATE_AUTHENTICATE to NTLM_STATE_FINAL
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.auth] - [credssp_auth_authenticate][(null)]: Authentication complete (output token size: 564 bytes)
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.auth] - [credssp_auth_authenticate][(null)]: Context sizes: cbMaxSignature=16, cbSecurityTrailer=16
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]: ----->> sending...
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]:    ----->> protocol version 6
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_write_octet_string][(null)]:    ----->> negoToken
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_write_octet_string][(null)]:    ----->> public key auth
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_write_octet_string][(null)]:    ----->> client nonce
[06:16:29:815] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]: [681 bytes]
[06:16:29:816] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_set_state][(null)]: -- NLA_STATE_NEGO_TOKEN	--> NLA_STATE_PUB_KEY_AUTH
[06:16:29:816] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_NLA -> CONNECTION_STATE_NLA] current return STATE_RUN_SUCCESS [0] [feeding 299 bytes, 0 bytes not processed]
[06:16:29:17] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_decode_ts_request][(null)]: <<----- receiving...
[06:16:29:17] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_decode_ts_request][(null)]:    <<----- protocol version 6
[06:16:29:17] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_decode_ts_request][(null)]:    <<----- public key auth
[06:16:29:17] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]: ----->> sending...
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]:    ----->> protocol version 6
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_write_octet_string][(null)]:    ----->> auth info
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_write_octet_string][(null)]:    ----->> client nonce
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_send][(null)]: [171 bytes]
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_set_state][(null)]: -- NLA_STATE_PUB_KEY_AUTH	--> NLA_STATE_AUTH_INFO
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.nla] - [nla_set_state][(null)]: -- NLA_STATE_AUTH_INFO	--> NLA_STATE_FINAL
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_NLA --> CONNECTION_STATE_MCS_CREATE_REQUEST
[06:16:29:18] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_NLA -> CONNECTION_STATE_MCS_CREATE_REQUEST] current return STATE_RUN_CONTINUE [-24] [feeding 59 bytes, 0 bytes not processed]
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.gcc] - [gcc_write_client_core_data][(null)]: Sending highColorDepth=HIGH_COLOR_24BPP, supportedColorDepths=RNS_UD_32BPP_SUPPORT|RNS_UD_24BPP_SUPPORT|RNS_UD_16BPP_SUPPORT|RNS_UD_15BPP_SUPPORT, earlyCapabilityFlags=RNS_UD_CS_WANT_32BPP_SESSION|RNS_UD_CS_VALID_CONNECTION_TYPE|RNS_UD_CS_SUPPORT_NETCHAR_AUTODETECT|RNS_UD_CS_SUPPORT_DYNVC_GFX_PROTOCOL|RNS_UD_CS_SUPPORT_HEARTBEAT_PDU|RNS_UD_CS_SUPPORT_SKIP_CHANNELJOIN|[0x00000da2]
[06:16:29:18] [141966:00022a8f] [TRACE][com.freerdp.core.gcc] - [gcc_write_client_cluster_data][(null)]: write ClusterInfoFlags=REDIRECTION_SUPPORTED|REDIRECTION_VERSION6[0x00000015], RedirectedSessionId=0x00000000
[06:16:29:18] [141966:00022a8f] [DEBUG][com.freerdp.core.gcc] - [gcc_write_client_monitor_data][(null)]: MonitorCount=1
[06:16:29:19] [141966:00022a8f] [DEBUG][com.freerdp.core.gcc] - [gcc_write_client_monitor_data][(null)]: FINISHED
[06:16:29:19] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_MCS_CREATE_REQUEST --> CONNECTION_STATE_MCS_CREATE_RESPONSE
[06:16:29:19] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_MCS_CREATE_REQUEST -> CONNECTION_STATE_MCS_CREATE_RESPONSE] current return STATE_RUN_SUCCESS [0] [feeding 0 bytes, 0 bytes not processed]
[06:16:30:222] [141966:00022a8f] [DEBUG][com.freerdp.core.gcc] - [gcc_read_server_core_data][(null)]: Received EarlyCapabilityFlags=RNS_UD_CS_SUPPORT_STATUSINFO_PDU|RNS_UD_CS_STRONG_ASYMMETRIC_KEYS|[0x0000000c]
[06:16:30:222] [141966:00022a8f] [DEBUG][com.freerdp.core.gcc] - [gcc_read_server_security_data][(null)]: Server rdp encryption method: NONE
[06:16:30:222] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_MCS_CREATE_RESPONSE --> CONNECTION_STATE_MCS_ERECT_DOMAIN
[06:16:30:222] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_MCS_ERECT_DOMAIN --> CONNECTION_STATE_MCS_ATTACH_USER
[06:16:30:222] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_MCS_ATTACH_USER --> CONNECTION_STATE_MCS_ATTACH_USER_CONFIRM
[06:16:30:223] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_MCS_CREATE_RESPONSE -> CONNECTION_STATE_MCS_ATTACH_USER_CONFIRM] current return STATE_RUN_SUCCESS [0] [feeding 126 bytes, 0 bytes not processed]
[06:16:30:427] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_skip_mcs_channel_join][(null)]:  rdpdr [1004]
[06:16:30:427] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_skip_mcs_channel_join][(null)]:  rdpsnd [1005]
[06:16:30:427] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_skip_mcs_channel_join][(null)]:  drdynvc [1006]
[06:16:30:427] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_MCS_ATTACH_USER_CONFIRM --> CONNECTION_STATE_SECURE_SETTINGS_EXCHANGE
[06:16:30:427] [141966:00022a8f] [DEBUG][com.freerdp.core.info] - [rdp_write_info_packet][(null)]: Client Info Packet Flags = INFO_MOUSE|INFO_DISABLECTRLALTDEL|INFO_UNICODE|INFO_MAXIMIZESHELL|INFO_LOGONNOTIFY|INFO_COMPRESSION|INFO_ENABLEWINDOWSKEY|INFO_FORCE_ENCRYPTED_CS_PDU|INFO_LOGONERRORS|INFO_MOUSE_HAS_WHEEL|INFO_AUDIOCAPTURE
[06:16:30:427] [141966:00022a8f] [DEBUG][com.winpr.timezone] - [winpr_get_unix_timezone_identifier_from_file][(null)]: tzid: Europe/Kiev
[06:16:30:427] [141966:00022a8f] [DEBUG][com.winpr.timezone] - [winpr_get_timezone_from_link][(null)]: tzid: Europe/Kyiv
[06:16:30:427] [141966:00022a8f] [INFO][com.winpr.timezone] - [winpr_detect_windows_time_zone][(null)]: tzid: Europe/Kyiv
[06:16:30:431] [141966:00022a8f] [ERROR][com.winpr.timezone] - [winpr_detect_windows_time_zone][(null)]: Unable to find a match for unix timezone: Europe/Kyiv
[06:16:30:431] [141966:00022a8f] [DEBUG][com.winpr.timezone] - [GetTimeZoneInformation][(null)]: tz not found, using computed bias -180.
[06:16:30:431] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_write_security_header][(null)]: SEC_INFO_PKT[0x00000040]
[06:16:30:431] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_SECURE_SETTINGS_EXCHANGE --> CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST
[06:16:30:431] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_MCS_ATTACH_USER_CONFIRM -> CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST] current return STATE_RUN_SUCCESS [0] [feeding 11 bytes, 0 bytes not processed]
[06:16:30:631] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST --> CONNECTION_STATE_LICENSING
[06:16:30:632] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_CONNECT_TIME_AUTO_DETECT_REQUEST -> CONNECTION_STATE_LICENSING] current return STATE_RUN_TRY_AGAIN [-23] [feeding 34 bytes, 34 bytes not processed]
[06:16:30:632] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_read_security_header][(null)]: SEC_LICENSE_PKT[0x00000080]
[06:16:30:632] [141966:00022a8f] [WARN][com.freerdp.core.license] - [license_read_binary_blob_data][(null)]: license binary blob::type BB_ERROR_BLOB, length=0, skipping.
[06:16:30:632] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_LICENSING --> CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST
[06:16:30:632] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_LICENSING -> CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST] current return STATE_RUN_SUCCESS [0] [feeding 34 bytes, 0 bytes not processed]
[06:16:30:641] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_read_security_header][(null)]: SEC_TRANSPORT_REQ[0x00000002]
[06:16:30:641] [141966:00022a8f] [WARN][com.freerdp.core.multitransport] - [multitransport_recv_request][(null)]: reserved is 1 instead of 0, skipping 2153bytes of unknown data
[06:16:30:641] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_write_security_header][(null)]: SEC_TRANSPORT_RSP[0x00000004]
[06:16:30:641] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST -> CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST] current return STATE_RUN_SUCCESS [0] [feeding 2196 bytes, 0 bytes not processed]
[06:16:30:789] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST --> CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE
[06:16:30:789] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_MULTITRANSPORT_BOOTSTRAPPING_REQUEST -> CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE] current return STATE_RUN_TRY_AGAIN [-23] [feeding 472 bytes, 472 bytes not processed]
[06:16:30:789] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_read_share_control_header][(null)]: type=PDU_TYPE_DEMAND_ACTIVE[0x00000001], tpktLength=457, remainingLength=451
[06:16:30:789] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE --> CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE
[06:16:30:789] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_CAPABILITIES_EXCHANGE_DEMAND_ACTIVE -> CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE] current return STATE_RUN_CONTINUE [-24] [feeding 472 bytes, 0 bytes not processed]
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE --> CONNECTION_STATE_FINALIZATION_SYNC
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_FINALIZATION_SYNC] reset finalize_sc_pdus
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_send_data_pdu][(null)]: sending data (type=0x1f size=37 channelId=1008)
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_FINALIZATION_SYNC --> CONNECTION_STATE_FINALIZATION_COOPERATE
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_FINALIZATION_COOPERATE] reset finalize_sc_pdus
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_send_data_pdu][(null)]: sending data (type=0x14 size=41 channelId=1008)
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_FINALIZATION_COOPERATE --> CONNECTION_STATE_FINALIZATION_REQUEST_CONTROL
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_FINALIZATION_REQUEST_CONTROL] reset finalize_sc_pdus
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_send_data_pdu][(null)]: sending data (type=0x14 size=41 channelId=1008)
[06:16:30:790] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_FINALIZATION_REQUEST_CONTROL --> CONNECTION_STATE_FINALIZATION_FONT_LIST
[06:16:30:791] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_FINALIZATION_FONT_LIST] reset finalize_sc_pdus
[06:16:30:791] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_send_data_pdu][(null)]: sending data (type=0x27 size=41 channelId=1008)
[06:16:30:791] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_FINALIZATION_FONT_LIST --> CONNECTION_STATE_FINALIZATION_CLIENT_SYNC
[06:16:30:791] [141966:00022a8f] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_CAPABILITIES_EXCHANGE_CONFIRM_ACTIVE -> CONNECTION_STATE_FINALIZATION_CLIENT_SYNC] current return STATE_RUN_SUCCESS [0] [feeding 0 bytes, 0 bytes not processed]
[06:16:30:791] [141966:00022a8f] [INFO][com.freerdp.gdi] - [gdi_init_ex][(null)]: Local framebuffer format  PIXEL_FORMAT_BGRA32
[06:16:30:791] [141966:00022a8f] [INFO][com.freerdp.gdi] - [gdi_init_ex][(null)]: Remote framebuffer format PIXEL_FORMAT_BGRA32
[06:16:30:931] [141966:00022a9f] [INFO][com.freerdp.channels.rdpdr.client] - [devman_load_device_service][(null)]: Loading device service smartcard (static)
[06:16:30:938] [141966:00022a8f] [INFO][com.freerdp.channels.rdpsnd.client] - [rdpsnd_load_device_plugin][(null)]: [static] Loaded pulse backend for rdpsnd
[06:16:30:938] [141966:00022a8f] [INFO][com.freerdp.channels.drdynvc.client] - [dvcman_load_addin][(null)]: Loading Dynamic Virtual Channel rdpecam
[06:16:30:938] [141966:00022a8f] [DEBUG][com.freerdp.addin] - [freerdp_get_dynamic_addin_install_path][(null)]: freerdp_get_dynamic_addin_install_path <- pszInstallPrefix: /opt/freerdp-nightly, pszAddinPath: lib/freerdp3
[06:16:30:938] [141966:00022a8f] [DEBUG][com.freerdp.addin] - [freerdp_get_dynamic_addin_install_path][(null)]: freerdp_get_dynamic_addin_install_path -> pszPath: /opt/freerdp-nightly/lib/freerdp3
[06:16:30:938] [141966:00022a8f] [DEBUG][com.freerdp.addin] - [freerdp_load_dynamic_addin][(null)]: freerdp_load_dynamic_addin <- pszFileName: librdpecam-client.so, pszPath: (null), pszEntryName: DVCPluginEntry
[06:16:30:938] [141966:00022a8f] [ERROR][com.winpr.library] - [LoadLibraryA][(null)]: failed with /opt/freerdp-nightly/lib/freerdp3/librdpecam-client.so: cannot open shared object file: No such file or directory
[06:16:30:938] [141966:00022a8f] [WARN][com.freerdp.addin] - [freerdp_load_channel_addin_entry][(null)]: Failed to load channel rdpecam [(null)]
[06:16:30:938] [141966:00022a8f] [ERROR][com.freerdp.channels.drdynvc.client] - [drdynvc_virtual_channel_init_event_ex][(null)]: drdynvc_virtual_channel_event_connected failed with error 1
[06:16:30:938] [141966:00022a8f] [ERROR][com.freerdp.core] - [freerdp_connect][(null)]: freerdp_post_connect failed
[06:16:30:938] [141966:00022a8f] [ERROR][com.freerdp.core] - [freerdp_connect][(null)]: ERRCONNECT_POST_CONNECT_FAILED [0x00020003]
[06:16:30:940] [141966:00022a8f] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_FINALIZATION_CLIENT_SYNC] reset finalize_sc_pdus
[06:16:30:940] [141966:00022a8f] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_FINALIZATION_CLIENT_SYNC --> CONNECTION_STATE_INITIAL

=================================================================
==141966==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 168 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a2ee74c  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b374c)
    #2 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #3 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #4 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #5 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #6 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Direct leak of 112 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a24cf9d  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211f9d)
    #2 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Direct leak of 26 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9a3f386f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b886f)
    #2 0x7f0a9a253f23  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x218f23)
    #3 0x7f0a9a2eebaa  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3baa)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 65536 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9a48b7f4 in ringbuffer_init (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x4507f4)
    #2 0x7f0a9a30a310  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2cf310)
    #3 0x7f0a990ac7b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #4 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 16712 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9930130f  (/lib/x86_64-linux-gnu/libssl.so.1.1+0x2730f)

Indirect leak of 16472 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99301421  (/lib/x86_64-linux-gnu/libssl.so.1.1+0x27421)

Indirect leak of 16384 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99c3e in __interceptor_realloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:163
    #1 0x7f0a99e541ea in Stream_EnsureCapacity (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c91ea)
    #2 0x7f0a9a24dfc8  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x212fc8)
    #3 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 14352 byte(s) in 209 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9917fc0d in CRYPTO_zalloc (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x17bc0d)

Indirect leak of 7648 byte(s) in 6 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9917fc0d in CRYPTO_zalloc (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x17bc0d)
    #2 0x7f0a9a3effbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #3 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 4972 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a24ff40  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214f40)
    #3 0x7f0a9a2f1e06  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6e06)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 4972 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99dca79a in winpr_asprintf (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x13f79a)
    #2 0x7f0a9a2f1d5c  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6d5c)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 2854 byte(s) in 2 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a990a31ed  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x9f1ed)

Indirect leak of 1849 byte(s) in 52 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99096ce9 in ASN1_STRING_set (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x92ce9)

Indirect leak of 1564 byte(s) in 4 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9908d42c  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x8942c)

Indirect leak of 728 byte(s) in 4 object(s) allocated from:
    #0 0x7f0a9ad99c3e in __interceptor_realloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:163
    #1 0x7f0a991e2774  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1de774)

Indirect leak of 536 byte(s) in 2 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a991e2d58 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded58)

Indirect leak of 532 byte(s) in 4 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a990cfcdf in BUF_MEM_grow (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xcbcdf)

Indirect leak of 381 byte(s) in 4 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99201c4b  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1fdc4b)

Indirect leak of 352 byte(s) in 4 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9917fc0d in CRYPTO_zalloc (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x17bc0d)
    #2 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 320 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a29aa7a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x25fa7a)
    #2 0x7f0a9a2eec0c  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3c0c)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 312 byte(s) in 3 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a990c034b in BN_MONT_CTX_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xbc34b)

Indirect leak of 270 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a3e6717 in freerdp_certificate_get_public_key (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3ab717)
    #2 0x7f0a9a3ec7b1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b17b1)
    #3 0x7f0a9a3ef5a7  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b45a7)
    #4 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #5 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #6 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #7 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #8 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #9 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #10 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 168 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a24d326  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x212326)
    #2 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 136 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e4e10d in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c310d)
    #2 0x7f0a9a24ffc1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214fc1)
    #3 0x7f0a9a2eea1b  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a1b)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 136 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e4e10d in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c310d)
    #2 0x7f0a9a24cfb0  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211fb0)
    #3 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 136 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e4e10d in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c310d)
    #2 0x7f0a9a24cff2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211ff2)
    #3 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 120 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a3eb54f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b054f)
    #2 0x7f0a9a2f1bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 112 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a24ffa9  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214fa9)
    #2 0x7f0a9a2eea1b  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a1b)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 96 byte(s) in 6 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a990a181d  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x9d81d)
    #2 0xd195f87fbcc5f7ff  (<unknown module>)

Indirect leak of 96 byte(s) in 4 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e47d31 in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd31)
    #2 0x7f0a9a24ebb4  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x213bb4)
    #3 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 85 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a3ec6a0  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b16a0)
    #2 0x7f0a9a3ef5a7  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b45a7)
    #3 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 80 byte(s) in 2 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9918931a in CRYPTO_strdup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x18531a)

Indirect leak of 65 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a99e42f68  (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1b7f68)
    #3 0x7f0a99e47d9b in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd9b)
    #4 0x7f0a9a2f2b12  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7b12)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 64 byte(s) in 2 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a991e2d03 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded03)

Indirect leak of 64 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a30a2ef  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2cf2ef)
    #2 0x7f0a990ac7b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #3 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 56 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99e45738 in Stream_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1ba738)
    #2 0x7f0a9a24d039  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x212039)
    #3 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 48 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a3df3a3  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3a43a3)
    #2 0x7f0a990ac7b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #3 0x7f0a9a3effbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #4 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #5 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #6 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #7 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #8 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #9 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #10 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 40 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a24fe30  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214e30)
    #3 0x7f0a9a2eeb87  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3b87)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 40 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9a2ee938  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3938)
    #2 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #3 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #4 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #5 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #6 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 40 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e933fa in CreateEventA (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x2083fa)
    #2 0x7f0a9a2f8693  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2bd693)
    #3 0x7f0a9a2f8ab1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2bdab1)
    #4 0x7f0a990ad019 in BIO_ctrl (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa9019)

Indirect leak of 39 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e6f055 in GetCombinedPath (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1e4055)
    #2 0x7f0a9a3eb4bd in freerdp_certificate_store_new (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b04bd)
    #3 0x7f0a9a3eb617  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b0617)
    #4 0x7f0a9a2f1bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 38 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e6f055 in GetCombinedPath (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1e4055)
    #2 0x7f0a9a3eb49d in freerdp_certificate_store_new (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b049d)
    #3 0x7f0a9a3eb617  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b0617)
    #4 0x7f0a9a2f1bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99e93a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f0a99e4e13e in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c313e)
    #3 0x7f0a9a24cfb0  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211fb0)
    #4 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99153bda  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x14fbda)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a991e2d58 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded58)
    #2 0x7f0a9a3effbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #3 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a991e2d03 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded03)
    #2 0x7f0a9a3effbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #3 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99e93a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f0a9a3df3b9  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3a43b9)
    #3 0x7f0a990ac7b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #4 0x7f0a9a3effbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #5 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #6 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #7 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #8 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #9 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #10 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #11 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99e93a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f0a9a2eec00  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3c00)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99e93a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f0a99e4e13e in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c313e)
    #3 0x7f0a9a24ffc1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214fc1)
    #4 0x7f0a9a2eea1b  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a1b)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99e93a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f0a99e4e13e in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c313e)
    #3 0x7f0a9a24cff2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211ff2)
    #4 0x7f0a9a2f30d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 27 byte(s) in 3 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a99090a0a  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x8ca0a)

Indirect leak of 26 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9a3f386f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b886f)
    #2 0x7f0a9a253f23  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x218f23)
    #3 0x7f0a9a2f1e21  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6e21)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 24 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a99e47d31 in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd31)
    #2 0x7f0a9a2f2b12  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7b12)
    #3 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 20 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f0a9910df29 in EC_GROUP_copy (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x109f29)

Indirect leak of 16 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a3ec65d  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b165d)
    #2 0x7f0a9a3ef5a7  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b45a7)
    #3 0x7f0a9a2546fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 16 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a2f8285  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2bd285)
    #2 0x7f0a990ac7b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #3 0x7f0a9a2f1c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 16 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad99a06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f0a9a3eb46e in freerdp_certificate_store_new (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b046e)
    #2 0x7f0a9a3eb617  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b0617)
    #3 0x7f0a9a2f1bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 12 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a99e47d69 in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd69)
    #3 0x7f0a9a2f2b12  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7b12)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 12 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a18cc6a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x151c6a)
    #3 0x7f0a9a2eeb42  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3b42)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 12 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a24fec6  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214ec6)
    #3 0x7f0a9a2eeb24  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3b24)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 11 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a18c82a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x15182a)
    #3 0x7f0a9a2eeaff  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3aff)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 9 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a24fd36  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214d36)
    #3 0x7f0a9a2eeae1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3ae1)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 9 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a18c8aa  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x1518aa)
    #3 0x7f0a9a2eeabc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3abc)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 4 byte(s) in 1 object(s) allocated from:
    #0 0x7f0a9ad223ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f0a99dd1d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f0a9a24fdb6  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214db6)
    #3 0x7f0a9a2eea93  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a93)
    #4 0x7f0a9a3b4d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f0a9a3b8e9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f0a9a34132f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f0a9a37a29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x561923ee7eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

SUMMARY: AddressSanitizer: 159181 byte(s) leaked in 359 allocation(s).

At least the avd part seems to work now. I guess the real reason why it fails is the missing librdpecam-client.so. Sure, te cleanup should not lead to a address sanitizer error, but your result would be the same since after failing to load that plugin the state machine started to terminate the connection (ERRCONNECT_POST_CONNECT_FAILED)
could you retry without camera redirecton (I think this is enabled in the rdpw file with the camerastoredirect line, just remove that line for testing). Sure, if all you need this for is camera redirection than this failing is unfortunate, but in that case you may open two new bug reports, one for nightly packaging, one for cleanup if a addin fails to load

Some correction: FreeRDP does not support rdpecam, so it should not try to load that channel. Removing that line in the rdpw file might currently be your only option (you may redirect the camera directly with usb though)

@akarl10 @progxaker fixed with https://github.com/FreeRDP/FreeRDP/pull/9132

@akallabeth thank you :)
@akarl10 it works! At first I had a problem with the RDP window, but after rebooting the problem disappeared.
Thank you a lot)
But... I had two issues.

Alt+TAB doesn't work. I tried +unmap-buttons from #3888 and -grab-keyboard from #7935, but no luck.
When I back to the terminal and click Ctrl+C to terminate FreeRDP, got the stacktrace (perhaps this will be remedied by the akallabeth merge).

Logs
$ /opt/freerdp-nightly/bin/sdl-freerdp ./SessionDesktop.rdpw /gateway:type:arm,bearer:${TOKEN} /f /size:1360x768 +unmap-buttons /log-level:TRACE

...
[13:18:04:413] [4850:000012f3] [TRACE][com.freerdp.core.rdp] - [rdp_recv_callback][(null)]: (client)[CONNECTION_STATE_ACTIVE -> CONNECTION_STATE_ACTIVE] current return STATE_RUN_SUCCESS [0] [feeding 24 bytes, 0 bytes not processed]
[13:18:04:413] [4850:00001311] [DEBUG][com.freerdp.channels.drdynvc.client] - [dvcman_channel_close][(null)]: sending close confirm for 'Microsoft::Windows::RDS::Geometry::v08.01'
[13:18:04:413] [4850:00001311] [WARN][com.freerdp.channels.drdynvc.client] - [check_open_close_receive][(null)]: {Microsoft::Windows::RDS::Geometry::v08.01:13} OnOpen=(nil), OnClose=0x7f2b2b7d97d0
^C[13:18:04:777] [4850:000012f2] [ERROR][com.freerdp.utils.signal] - [term_handler][(null)]: Caught signal 'Interrupt' [2]
[13:18:04:778] [4850:000012f2] [INFO][com.freerdp.core] - [sig_abort_connect][(null)]: Signal Interrupt [2], terminating session 0x61f000000080
[13:18:04:778] [4850:000012f2] [ERROR][com.freerdp.core] - [freerdp_abort_connect_context][(null)]: ERRCONNECT_CONNECT_CANCELLED [0x0002000B]
[13:18:04:778] [4850:000012f3] [DEBUG][com.freerdp.core.transport] - [transport_check_fds][(null)]: transport_check_fds: transport_read_pdu() - -1
[13:18:04:778] [4850:000012f3] [DEBUG][com.freerdp.core.rdp] - [rdp_check_fds][(null)]: transport_check_fds() - -1
[13:18:04:778] [4850:000012f3] [DEBUG][com.freerdp.core] - [freerdp_check_fds][(null)]: rdp_check_fds() - -1
[13:18:04:778] [4850:000012f3] [DEBUG][com.freerdp.client.SDL] - [error_info_to_error][(null)]: Terminate with SDL_EXIT_SUCCESS due to ERROR_INFO ERRINFO_SUCCESS [0x00000000]: Success.
[13:18:04:779] [4850:000012f3] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_ACTIVE] reset finalize_sc_pdus
[13:18:04:779] [4850:000012f3] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_ACTIVE --> CONNECTION_STATE_INITIAL
[13:18:04:787] [4850:00001311] [WARN][com.freerdp.channels.drdynvc.client] - [check_open_close_receive][(null)]: {Microsoft::Windows::RDS::DisplayControl:12} OnOpen=(nil), OnClose=0x7f2b2b7d97b0
[13:18:04:787] [4850:00001311] [WARN][com.freerdp.channels.drdynvc.client] - [check_open_close_receive][(null)]: {Microsoft::Windows::RDS::Geometry::v08.01:16} OnOpen=(nil), OnClose=0x7f2b2b7d97d0
[13:18:04:788] [4850:000012f3] [TRACE][com.freerdp.channels.ainput.client] - [generic_plugin_terminated][(null)]: ...
[13:18:04:788] [4850:000012f3] [TRACE][com.freerdp.channels.audin.client] - [audin_plugin_terminated][(null)]: ...
[13:18:04:788] [4850:000012f3] [DEBUG][com.freerdp.channels.audin.client] - [audin_pulse_context_state_callback][(null)]: context state PA_CONTEXT_TERMINATED
[13:18:04:789] [4850:000012f3] [TRACE][com.freerdp.channels.rdpgfx.client] - [generic_plugin_terminated][(null)]: ...
[13:18:04:789] [4850:000012f3] [TRACE][com.freerdp.channels.disp.client] - [generic_plugin_terminated][(null)]: ...
[13:18:04:789] [4850:000012f3] [TRACE][com.freerdp.channels.geometry.client] - [generic_plugin_terminated][(null)]: ...

=================================================================
==4850==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 168 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b2e274c  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b374c)
    #2 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #3 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #4 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #5 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #6 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Direct leak of 112 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b240f9d  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211f9d)
    #2 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Direct leak of 26 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2b3e786f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b886f)
    #2 0x7f2b2b247f23  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x218f23)
    #3 0x7f2b2b2e2baa  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3baa)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 65536 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2b47f7f4 in ringbuffer_init (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x4507f4)
    #2 0x7f2b2b2fe310  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2cf310)
    #3 0x7f2b2a0a07b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #4 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 16712 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a2f530f  (/lib/x86_64-linux-gnu/libssl.so.1.1+0x2730f)

Indirect leak of 16472 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a2f5421  (/lib/x86_64-linux-gnu/libssl.so.1.1+0x27421)

Indirect leak of 16384 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8dc3e in __interceptor_realloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:163
    #1 0x7f2b2ae481ea in Stream_EnsureCapacity (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c91ea)
    #2 0x7f2b2b241fc8  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x212fc8)
    #3 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 14352 byte(s) in 209 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a173c0d in CRYPTO_zalloc (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x17bc0d)

Indirect leak of 7648 byte(s) in 6 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a173c0d in CRYPTO_zalloc (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x17bc0d)
    #2 0x7f2b2b3e3fbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #3 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 4972 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b243f40  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214f40)
    #3 0x7f2b2b2e5e06  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6e06)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 4972 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2adbe79a in winpr_asprintf (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x13f79a)
    #2 0x7f2b2b2e5d5c  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6d5c)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 2854 byte(s) in 2 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a0971ed  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x9f1ed)

Indirect leak of 1849 byte(s) in 52 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a08ace9 in ASN1_STRING_set (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x92ce9)

Indirect leak of 1564 byte(s) in 4 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a08142c  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x8942c)

Indirect leak of 728 byte(s) in 4 object(s) allocated from:
    #0 0x7f2b2bd8dc3e in __interceptor_realloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:163
    #1 0x7f2b2a1d6774  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1de774)

Indirect leak of 536 byte(s) in 2 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a1d6d58 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded58)

Indirect leak of 532 byte(s) in 4 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a0c3cdf in BUF_MEM_grow (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xcbcdf)

Indirect leak of 381 byte(s) in 4 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a1f5c4b  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1fdc4b)

Indirect leak of 352 byte(s) in 4 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a173c0d in CRYPTO_zalloc (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x17bc0d)
    #2 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 320 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b28ea7a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x25fa7a)
    #2 0x7f2b2b2e2c0c  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3c0c)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 312 byte(s) in 3 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a0b434b in BN_MONT_CTX_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xbc34b)

Indirect leak of 270 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b3da717 in freerdp_certificate_get_public_key (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3ab717)
    #2 0x7f2b2b3e07b1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b17b1)
    #3 0x7f2b2b3e35a7  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b45a7)
    #4 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #5 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #6 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #7 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #8 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #9 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #10 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 168 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b241326  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x212326)
    #2 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 136 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae4210d in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c310d)
    #2 0x7f2b2b243fc1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214fc1)
    #3 0x7f2b2b2e2a1b  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a1b)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 136 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae4210d in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c310d)
    #2 0x7f2b2b240fb0  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211fb0)
    #3 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 136 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae4210d in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c310d)
    #2 0x7f2b2b240ff2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211ff2)
    #3 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 120 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b3df54f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b054f)
    #2 0x7f2b2b2e5bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 112 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b243fa9  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214fa9)
    #2 0x7f2b2b2e2a1b  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a1b)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 96 byte(s) in 6 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a09581d  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x9d81d)
    #2 0x82ed5371a8476dff  (<unknown module>)

Indirect leak of 96 byte(s) in 4 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae3bd31 in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd31)
    #2 0x7f2b2b242bb4  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x213bb4)
    #3 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 85 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b3e06a0  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b16a0)
    #2 0x7f2b2b3e35a7  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b45a7)
    #3 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 80 byte(s) in 2 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a17d31a in CRYPTO_strdup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x18531a)

Indirect leak of 65 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2ae36f68  (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1b7f68)
    #3 0x7f2b2ae3bd9b in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd9b)
    #4 0x7f2b2b2e6b12  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7b12)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 64 byte(s) in 2 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a1d6d03 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded03)

Indirect leak of 64 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b2fe2ef  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2cf2ef)
    #2 0x7f2b2a0a07b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #3 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 56 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2ae39738 in Stream_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1ba738)
    #2 0x7f2b2b241039  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x212039)
    #3 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 48 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b3d33a3  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3a43a3)
    #2 0x7f2b2a0a07b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #3 0x7f2b2b3e3fbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #4 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #5 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #6 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #7 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #8 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #9 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #10 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 40 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b243e30  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214e30)
    #3 0x7f2b2b2e2b87  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3b87)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 40 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2b2e2938  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3938)
    #2 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #3 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #4 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #5 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #6 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 40 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae873fa in CreateEventA (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x2083fa)
    #2 0x7f2b2b2ec693  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2bd693)
    #3 0x7f2b2b2ecab1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2bdab1)
    #4 0x7f2b2a0a1019 in BIO_ctrl (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa9019)

Indirect leak of 39 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae63055 in GetCombinedPath (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1e4055)
    #2 0x7f2b2b3df4bd in freerdp_certificate_store_new (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b04bd)
    #3 0x7f2b2b3df617  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b0617)
    #4 0x7f2b2b2e5bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 38 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae63055 in GetCombinedPath (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1e4055)
    #2 0x7f2b2b3df49d in freerdp_certificate_store_new (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b049d)
    #3 0x7f2b2b3df617  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b0617)
    #4 0x7f2b2b2e5bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2ae87a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f2b2ae4213e in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c313e)
    #3 0x7f2b2b240fb0  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211fb0)
    #4 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a147bda  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x14fbda)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a1d6d58 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded58)
    #2 0x7f2b2b3e3fbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #3 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a1d6d03 in OPENSSL_sk_dup (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x1ded03)
    #2 0x7f2b2b3e3fbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #3 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2ae87a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f2b2b3d33b9  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3a43b9)
    #3 0x7f2b2a0a07b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #4 0x7f2b2b3e3fbc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b4fbc)
    #5 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #6 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #7 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #8 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #9 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #10 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #11 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2ae87a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f2b2b2e2c00  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3c00)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2ae87a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f2b2ae4213e in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c313e)
    #3 0x7f2b2b243fc1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214fc1)
    #4 0x7f2b2b2e2a1b  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a1b)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 32 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2ae87a40 in InitializeCriticalSectionEx (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x208a40)
    #2 0x7f2b2ae4213e in ListDictionary_New (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1c313e)
    #3 0x7f2b2b240ff2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x211ff2)
    #4 0x7f2b2b2e70d2  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b80d2)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 27 byte(s) in 3 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a084a0a  (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x8ca0a)

Indirect leak of 26 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2b3e786f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b886f)
    #2 0x7f2b2b247f23  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x218f23)
    #3 0x7f2b2b2e5e21  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6e21)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 24 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2ae3bd31 in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd31)
    #2 0x7f2b2b2e6b12  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7b12)
    #3 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #4 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #5 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #6 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #7 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 20 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8d808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f2b2a101f29 in EC_GROUP_copy (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0x109f29)

Indirect leak of 16 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b3e065d  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b165d)
    #2 0x7f2b2b3e35a7  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b45a7)
    #3 0x7f2b2b2486fe  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2196fe)
    #4 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #5 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #6 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #7 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #8 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #9 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 16 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b2ec285  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2bd285)
    #2 0x7f2b2a0a07b6 in BIO_new (/lib/x86_64-linux-gnu/libcrypto.so.1.1+0xa87b6)
    #3 0x7f2b2b2e5c10  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6c10)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 16 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd8da06 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:153
    #1 0x7f2b2b3df46e in freerdp_certificate_store_new (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b046e)
    #2 0x7f2b2b3df617  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x3b0617)
    #3 0x7f2b2b2e5bee  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b6bee)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 12 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2ae3bd69 in ListDictionary_Add (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x1bcd69)
    #3 0x7f2b2b2e6b12  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b7b12)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 12 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b180c6a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x151c6a)
    #3 0x7f2b2b2e2b42  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3b42)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 12 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b243ec6  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214ec6)
    #3 0x7f2b2b2e2b24  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3b24)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 11 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b18082a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x15182a)
    #3 0x7f2b2b2e2aff  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3aff)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 9 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b243d36  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214d36)
    #3 0x7f2b2b2e2ae1  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3ae1)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 9 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b1808aa  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x1518aa)
    #3 0x7f2b2b2e2abc  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3abc)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

Indirect leak of 4 byte(s) in 1 object(s) allocated from:
    #0 0x7f2b2bd163ed in __interceptor_strdup ../../../../src/libsanitizer/asan/asan_interceptors.cc:445
    #1 0x7f2b2adc5d93 in _strdup (/opt/freerdp-nightly/bin/../lib/libwinpr3.so.3+0x146d93)
    #2 0x7f2b2b243db6  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x214db6)
    #3 0x7f2b2b2e2a93  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x2b3a93)
    #4 0x7f2b2b3a8d02  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x379d02)
    #5 0x7f2b2b3ace9a  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x37de9a)
    #6 0x7f2b2b33532f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x30632f)
    #7 0x7f2b2b36e29a in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x33f29a)
    #8 0x558523968eb0  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1ceb0)

SUMMARY: AddressSanitizer: 159181 byte(s) leaked in 359 allocation(s).

P.S. Full logs - PasteBin
...and one question. Is it worth posting updates here and beyond, or is it better to post such (minor) updates on Matrix?

@progxaker good to know that works so far!
from your log I see some troubling memory leaks still left to address (most likely in the new transport).
are you able to build a (custom) nightly yourself? that might help getting the correct leak locations. (would need a debug build)

actually the memory leak is the most obvious possible 😞
sorry, will prepare a PR
spoiler: the call to wst_free is missing. after doing that at least on my system I did not get any other sanitizer warning, but I'm not able to test it fully

@progxaker good to know that works so far!
from your log I see some troubling memory leaks still left to address (most likely in the new transport). are you able to build a (custom) nightly yourself? that might help getting the correct leak locations. (would need a debug build)

I have tried compiling before, but I had a lot of problems with the libraries :slightly_smiling_face: Eventually I did, but got an error with TLSCleanup() when I ran the binary.
If you don't mind, I'll wait for your and akarl10's merge, and if the problem still remains, I'll try to build this time on VM.

@progxaker good to know that works so far!
from your log I see some troubling memory leaks still left to address (most likely in the new transport). are you able to build a (custom) nightly yourself? that might help getting the correct leak locations. (would need a debug build)

I have tried compiling before, but I had a lot of problems with the libraries :slightly_smiling_face: Eventually I did, but got an error with TLSCleanup() when I ran the binary.
If you don't mind, I'll wait for your and akarl10's merge, and if the problem still remains, I'll try to build this time on VM.

Hi guys. I tried a new build, but the memory leaks isn't fixed.
I built FreeRDP using the following command:
cmake -GNinja -DCMAKE_SKIP_RPATH=FALSE -DCMAKE_SKIP_INSTALL_RPATH=FALSE -DWITH_PULSE=ON -DWITH_CHANNELS=ON -DWITH_CUPS=ON -DWITH_KRB5=ON -DWITH_PCSC=ON -DWITH_FFMPEG=ON -DWITH_DSP_FFMPEG=ON -DCHANNEL_URBDRC=ON -DCHANNEL_URBDRC_CLIENT=ON -DWITH_FREERDP_DEPRECATED_COMMANDLINE=ON -DWITH_SERVER=ON -DWITH_WAYLAND=ON -DWITH_CAIRO=ON -DWITH_CCACHE=OFF -DBUILD_TESTING=OFF -DCMAKE_BUILD_TYPE=RelWithDebInfo -DCMAKE_INSTALL_PREFIX=/tmp/freerdp/ -DCMAKE_INSTALL_INCLUDEDIR=include -DCMAKE_INSTALL_LIBDIR=lib -DWITH_SANITIZE_ADDRESS=ON -B/build -H/tmp/FreeRDP/ -DCMAKE_BUILD_TYPE=Debug -DWITH_DEBUG_ALL=ON

Hope the logs (PasteBin) will be helpful.

@progxaker the one in arm.c might be clear, but the one in wst.c I don't get..
if you add http_response_free(response); after the line arm_error: in libfreerdp/core/gateway/arm.c most of the remaining warnings should go away

I built on your suggestion
arm_error:
+       http_response_free(response);
        arm_free(arm);
        free(message);
        return rc;
#endif
}

and it looks like the light at the end of the tunnel)
[10:02:58:10] [64401:0000fb91] [ERROR][com.freerdp.utils.signal] - [term_handler][(null)]: Caught signal 'Interrupt' [2]
[10:02:58:10] [64401:0000fb91] [INFO][com.freerdp.core] - [sig_abort_connect][(null)]: Signal Interrupt [2], terminating session 0x61f000000080
[10:02:58:10] [64401:0000fb91] [ERROR][com.freerdp.core] - [freerdp_abort_connect_context][(null)]: ERRCONNECT_CONNECT_CANCELLED [0x0002000B]
[10:02:58:10] [64401:0000fb92] [DEBUG][com.freerdp.core.transport] - [transport_check_fds][(null)]: transport_check_fds: transport_read_pdu() - -1
[10:02:58:10] [64401:0000fb92] [DEBUG][com.freerdp.core.rdp] - [rdp_check_fds][(null)]: transport_check_fds() - -1
[10:02:58:10] [64401:0000fb92] [DEBUG][com.freerdp.core] - [freerdp_check_fds][(null)]: rdp_check_fds() - -1
[10:02:58:10] [64401:0000fb92] [DEBUG][com.freerdp.client.SDL] - [error_info_to_error][(null)]: Terminate with SDL_EXIT_SUCCESS due to ERROR_INFO ERRINFO_SUCCESS [0x00000000]: Success.
[10:02:58:11] [64401:0000fb92] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_write][(null)]: ringbuffer_write(0x606000024ab0): sz: 66
[10:02:58:11] [64401:0000fb92] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_peek][(null)]: ringbuffer_peek(0x606000024ab0): sz: 66
[10:02:58:11] [64401:0000fb92] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_commit_read_bytes][(null)]: ringbuffer_commit_read_bytes(0x606000024ab0): sz: 66
[10:02:58:11] [64401:0000fb92] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_write][(null)]: ringbuffer_write(0x606000024ab0): sz: 31                                                       [10:02:58:11] [64401:0000fb92] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_peek][(null)]: ringbuffer_peek(0x606000024ab0): sz: 31
[10:02:58:11] [64401:0000fb92] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_commit_read_bytes][(null)]: ringbuffer_commit_read_bytes(0x606000024ab0): sz: 31                               [10:02:58:11] [64401:0000fb92] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_destroy][(null)]: ringbuffer_destroy(0x606000024ab0)
[10:02:58:13] [64401:0000fb92] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_ACTIVE] reset finalize_sc_pdus                                               [10:02:58:13] [64401:0000fb92] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_ACTIVE --> CONNECTION_STATE_INITIAL
[10:02:58:15] [64401:0000fbae] [DEBUG][com.freerdp.channels.rdpgfx.client] - [rdpgfx_on_close][(null)]: OnClose
[10:02:58:23] [64401:0000fbae] [WARN][com.freerdp.channels.drdynvc.client] - [check_open_close_receive][(null)]: {Microsoft::Windows::RDS::DisplayControl:12} OnOpen=(nil), OnClose=0x7f7a84db8851
[10:02:58:24] [64401:0000fbae] [WARN][com.freerdp.channels.drdynvc.client] - [check_open_close_receive][(null)]: {Microsoft::Windows::RDS::Geometry::v08.01:16} OnOpen=(nil), OnClose=0x7f7a84db66
29
[10:02:58:34] [64401:0000fb92] [TRACE][com.freerdp.channels.ainput.client] - [generic_plugin_terminated][(null)]: ...
[10:02:58:34] [64401:0000fb92] [TRACE][com.freerdp.channels.audin.client] - [audin_plugin_terminated][(null)]: ...
[10:02:58:34] [64401:0000fb92] [DEBUG][com.freerdp.channels.audin.client] - [audin_pulse_context_state_callback][(null)]: context state PA_CONTEXT_TERMINATED
[10:02:58:35] [64401:0000fb92] [TRACE][com.freerdp.channels.rdpgfx.client] - [generic_plugin_terminated][(null)]: ...
[10:02:58:35] [64401:0000fb92] [DEBUG][com.freerdp.channels.rdpgfx.client] - [terminate_plugin_cb][(null)]: Terminated
[10:02:58:36] [64401:0000fb92] [TRACE][com.freerdp.channels.disp.client] - [generic_plugin_terminated][(null)]: ...
[10:02:58:36] [64401:0000fb92] [TRACE][com.freerdp.channels.geometry.client] - [generic_plugin_terminated][(null)]: ...

=================================================================
==64401==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 26 byte(s) in 1 object(s) allocated from:
    #0 0x7f7a85190808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144
    #1 0x7f7a84727705 in base64_encode /tmp/FreeRDP/libfreerdp/crypto/base64.c:39
    #2 0x7f7a847289fb in crypto_base64_encode /tmp/FreeRDP/libfreerdp/crypto/base64.c:202
    #3 0x7f7a8492785d in http_context_enable_websocket_upgrade /tmp/FreeRDP/libfreerdp/core/gateway/http.c:342
    #4 0x7f7a84935577 in wst_new /tmp/FreeRDP/libfreerdp/core/gateway/wst.c:815
    #5 0x7f7a8487424b in transport_connect /tmp/FreeRDP/libfreerdp/core/transport.c:482
    #6 0x7f7a8477c194 in nego_tcp_connect /tmp/FreeRDP/libfreerdp/core/nego.c:390
    #7 0x7f7a8477c351 in nego_transport_connect /tmp/FreeRDP/libfreerdp/core/nego.c:415
    #8 0x7f7a8477d5c5 in nego_attempt_nla /tmp/FreeRDP/libfreerdp/core/nego.c:648
    #9 0x7f7a8477efdf in nego_send /tmp/FreeRDP/libfreerdp/core/nego.c:1040
    #10 0x7f7a8477af4f in nego_connect /tmp/FreeRDP/libfreerdp/core/nego.c:245
    #11 0x7f7a84823699 in rdp_client_connect /tmp/FreeRDP/libfreerdp/core/connection.c:415
    #12 0x7f7a847dbcad in freerdp_connect_begin /tmp/FreeRDP/libfreerdp/core/freerdp.c:160
    #13 0x7f7a847dbf7c in freerdp_connect /tmp/FreeRDP/libfreerdp/core/freerdp.c:178
    #14 0x55e4e7741c71 in sdl_client_thread_proc /tmp/FreeRDP/client/SDL/sdl_freerdp.cpp:955
    #15 0x55e4e7748203 in unsigned int std::__invoke_impl<unsigned int, unsigned int (*)(SdlContext*), SdlContext*>(std::__invoke_other, unsigned int (*&&)(SdlContext*), SdlContext*&&) /usr/include/c++/9/bits/invoke.h:60
    #16 0x55e4e7748138 in std::__invoke_result<unsigned int (*)(SdlContext*), SdlContext*>::type std::__invoke<unsigned int (*)(SdlContext*), SdlContext*>(unsigned int (*&&)(SdlContext*), SdlContext*&&) /usr/include/c++/9/bits/invoke.h:95
    #17 0x55e4e77480a8 in unsigned int std::thread::_Invoker<std::tuple<unsigned int (*)(SdlContext*), SdlContext*> >::_M_invoke<0ul, 1ul>(std::_Index_tuple<0ul, 1ul>) /usr/include/c++/9/thread:244
    #18 0x55e4e7748063 in std::thread::_Invoker<std::tuple<unsigned int (*)(SdlContext*), SdlContext*> >::operator()() /usr/include/c++/9/thread:251
    #19 0x55e4e7748049 in std::thread::_State_impl<std::thread::_Invoker<std::tuple<unsigned int (*)(SdlContext*), SdlContext*> > >::_M_run() /usr/include/c++/9/thread:195
    #20 0x7f7a83f2b6b3  (/lib/x86_64-linux-gnu/libstdc++.so.6+0xda6b3)

SUMMARY: AddressSanitizer: 26 byte(s) leaked in 1 allocation(s).

@progxaker: second guess:
could you try adding free(context->SecWebsocketKey); on the line before context->SecWebsocketKey = crypto_base64_encode(key, sizeof(key)); in libfreerdp/core/gateway/http.c (line ~342)

BOOL http_context_enable_websocket_upgrade(HttpContext* context, BOOL enable)
{
        if (!context)
                return FALSE;

        if (enable)
        {
                BYTE key[16];
                if (winpr_RAND(key, sizeof(key)) != 0)
                        return FALSE;

+               free(context->SecWebsocketKey);
                context->SecWebsocketKey = crypto_base64_encode(key, sizeof(key));
                if (!context->SecWebsocketKey)
                        return FALSE;
        }

        context->websocketUpgrade = enable;
        return TRUE;
}

Result
[10:21:17:57] [68580:00010be4] [ERROR][com.freerdp.utils.signal] - [term_handler][(null)]: Caught signal 'Interrupt' [2]
[10:21:17:57] [68580:00010be4] [INFO][com.freerdp.core] - [sig_abort_connect][(null)]: Signal Interrupt [2], terminating session 0x61f000000080
[10:21:17:57] [68580:00010be4] [ERROR][com.freerdp.core] - [freerdp_abort_connect_context][(null)]: ERRCONNECT_CONNECT_CANCELLED [0x0002000B]
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.core.transport] - [transport_check_fds][(null)]: transport_check_fds: transport_read_pdu() - -1
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.core.rdp] - [rdp_check_fds][(null)]: transport_check_fds() - -1
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.core] - [freerdp_check_fds][(null)]: rdp_check_fds() - -1
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.client.SDL] - [error_info_to_error][(null)]: Terminate with SDL_EXIT_SUCCESS due to ERROR_INFO ERRINFO_SUCCESS [0x00000000]: Success.
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_write][(null)]: ringbuffer_write(0x606000024ab0): sz: 66
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_peek][(null)]: ringbuffer_peek(0x606000024ab0): sz: 66
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_commit_read_bytes][(null)]: ringbuffer_commit_read_bytes(0x606000024ab0): sz: 66
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_write][(null)]: ringbuffer_write(0x606000024ab0): sz: 31
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_peek][(null)]: ringbuffer_peek(0x606000024ab0): sz: 31
[10:21:17:58] [68580:00010be5] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_commit_read_bytes][(null)]: ringbuffer_commit_read_bytes(0x606000024ab0): sz: 31
[10:21:17:59] [68580:00010be5] [DEBUG][com.freerdp.utils.ringbuffer] - [ringbuffer_destroy][(null)]: ringbuffer_destroy(0x606000024ab0)
[10:21:17:60] [68580:00010be5] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][(null)]: [CONNECTION_STATE_ACTIVE] reset finalize_sc_pdus
[10:21:17:60] [68580:00010be5] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state][(null)]: CONNECTION_STATE_ACTIVE --> CONNECTION_STATE_INITIAL
[10:21:17:62] [68580:00010bfb] [DEBUG][com.freerdp.channels.rdpgfx.client] - [rdpgfx_on_close][(null)]: OnClose
[10:21:17:74] [68580:00010bfb] [WARN][com.freerdp.channels.drdynvc.client] - [check_open_close_receive][(null)]: {Microsoft::Windows::RDS::Geometry::v08.01:12} OnOpen=(nil), OnClose=0x7f6c03ad8629
[10:21:17:74] [68580:00010bfb] [WARN][com.freerdp.channels.drdynvc.client] - [check_open_close_receive][(null)]: {Microsoft::Windows::RDS::DisplayControl:16} OnOpen=(nil), OnClose=0x7f6c03ada851
[10:21:17:75] [68580:00010be5] [TRACE][com.freerdp.channels.ainput.client] - [generic_plugin_terminated][(null)]: ...
[10:21:17:75] [68580:00010be5] [TRACE][com.freerdp.channels.audin.client] - [audin_plugin_terminated][(null)]: ...
[10:21:17:78] [68580:00010be5] [DEBUG][com.freerdp.channels.audin.client] - [audin_pulse_context_state_callback][(null)]: context state PA_CONTEXT_TERMINATED
[10:21:17:78] [68580:00010be5] [TRACE][com.freerdp.channels.rdpgfx.client] - [generic_plugin_terminated][(null)]: ...
[10:21:17:78] [68580:00010be5] [DEBUG][com.freerdp.channels.rdpgfx.client] - [terminate_plugin_cb][(null)]: Terminated
[10:21:17:78] [68580:00010be5] [TRACE][com.freerdp.channels.disp.client] - [generic_plugin_terminated][(null)]: ...
[10:21:17:78] [68580:00010be5] [TRACE][com.freerdp.channels.geometry.client] - [generic_plugin_terminated][(null)]: ...

From the upper comment

UPD: when I go to the terminal and back to the RDP window, sometimes I get a black picture. If something is changed, this part will be restored/updated. Perhaps this is due to the protocol specifics but in the Web version this (most likely) restores itself.

UPD2: the RDP window always goes to the end of the window list (when press Alt+TAB it opens the program list (on main PC)) and this is uncomfortable. I use KeePass to input my password and it tries to switch to the next window, but it's not RDP but something else :/

Could you please implement some kind of buffer to keep the screen for the first UPD?

I'm getting stuck at credentials. Any idea?
<...>
Username:        user@domain.com (changed)
Domain:
Password:
[12:50:22:714] [59424:0000e821] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_log_msg]: Cannot find KDC for realm "DOMAIN.COM"
[12:50:22:732] [59424:0000e821] [ERROR][com.winpr.sspi.Kerberos] - [kerberos_log_msg]: Cannot find KDC for realm "DOMAIN.COM"
[12:50:22:855] [59424:0000e821] [ERROR][com.freerdp.core] - [nla_recv_pdu]: ERRCONNECT_LOGON_FAILURE [0x00020014]
[12:50:22:856] [59424:0000e821] [ERROR][com.freerdp.core.rdp] - [rdp_recv_callback_int][0x61f000000080]: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[12:50:22:856] [59424:0000e821] [ERROR][com.freerdp.core.rdp] - [rdp_recv_callback_int][0x61f000000080]: CONNECTION_STATE_NLA status STATE_RUN_FAILED [-1]
[12:50:22:856] [59424:0000e821] [ERROR][com.freerdp.core.transport] - [transport_check_fds]: transport_check_fds: transport->ReceiveCallback() - STATE_RUN_FAILED [-1]

@pokemonas ERRCONNECT_LOGON_FAILURE means that the credentials are not accepted by the remote host. You can ignore the kerberos messages, if you increase the verbosity you will see that it falls back to ntlm.
some people say the username format is /u:.\AzureAD\email@domain (using bash you might need to escape: /u:.\\AzureAD\\email@domain)
You might also try to use AzureAD as domain (strictly speaking the domain in the example above is . and the username AzureAD\email)

nah, - tried that - it ignores AzureAD and fails against email domain.

what could work is the following (quite complicated, I know)
If you run with /log-level:debug you should see a json object that has a field redirectedServerName. copy that and run again with
/sec:add /v:
it should open a webview (if used with sdl-freerdp) or show a url that you should browse to. At the end you should get to an empty page. copy that address from the addessbar and paste it back to the freerdp prompt

I'm using nightly build from last night, but it doesn't recognize "add" method in /sec. Is it fresh feature?

sorry,  a typo. should be /sec:aad

thanks for prompt response ... though ... I've got nasty error after I pasted the URL:
==63731==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x6190000a7c02 at pc 0x7f2d6eaae4bf bp 0x7f2d5fdd1790 sp 0x7f2d5fdd0f38
WRITE of size 899 at 0x6190000a7c02 thread T1
#0 0x7f2d6eaae4be in __interceptor_strcpy ../../../../src/libsanitizer/asan/asan_interceptors.cpp:440
#1 0x7f2d6e7b837f in client_cli_get_aad_auth_code (/opt/freerdp-nightly/bin/../lib/libfreerdp-client3.so.3+0x16537f)
#2 0x7f2d6e1e6c15  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x222c15)
#3 0x7f2d6e258d4f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x294d4f)
#4 0x7f2d6e233019 in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x26f019)
#5 0x557a64908584  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1e584)
#6 0x7f2d6da4e2b2  (/lib/x86_64-linux-gnu/libstdc++.so.6+0xdc2b2)
#7 0x7f2d6d6d7b42 in start_thread nptl/pthread_create.c:442
#8 0x7f2d6d7699ff  (/lib/x86_64-linux-gnu/libc.so.6+0x1269ff)
0x6190000a7c02 is located 0 bytes to the right of 898-byte region [0x6190000a7880,0x6190000a7c02)
allocated by thread T1 here:
#0 0x7f2d6eb0ea37 in __interceptor_calloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:154
#1 0x7f2d6e7b834d in client_cli_get_aad_auth_code (/opt/freerdp-nightly/bin/../lib/libfreerdp-client3.so.3+0x16534d)
#2 0x7f2d6e1e6c15  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x222c15)
#3 0x7f2d6e258d4f  (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x294d4f)
#4 0x7f2d6e233019 in freerdp_connect (/opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3+0x26f019)
#5 0x557a64908584  (/opt/freerdp-nightly/bin/sdl-freerdp+0x1e584)
Thread T1 created by T0 here:
#0 0x7f2d6eab2685 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:216
#1 0x7f2d6da4e388 in std::thread::_M_start_thread(std::unique_ptr<std::thread::_State, std::default_deletestd::thread::_State >, void (*)()) (/lib/x86_64-linux-gnu/libstdc++.so.6+0xdc388)
#2 0x7ffcbbeae6bf  ([stack]+0x1f6bf)
SUMMARY: AddressSanitizer: heap-buffer-overflow ../../../../src/libsanitizer/asan/asan_interceptors.cpp:440 in __interceptor_strcpy
Shadow bytes around the buggy address:
0x0c328000cf30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c328000cf40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c328000cf50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c328000cf60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c328000cf70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c328000cf80:[02]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c328000cf90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c328000cfa0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c328000cfb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c328000cfc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c328000cfd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable:           00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone:       fa
Freed heap region:       fd
Stack left redzone:      f1
Stack mid redzone:       f2
Stack right redzone:     f3
Stack after return:      f5
Stack use after scope:   f8
Global redzone:          f9
Global init order:       f6
Poisoned by user:        f7
Container overflow:      fc
Array cookie:            ac
Intra object redzone:    bb
ASan internal:           fe
Left alloca redzone:     ca
Right alloca redzone:    cb
Shadow gap:              cc
==63731==ABORTING

the AddressSanitizer issue you are facing should be fixed now in master. The nightly of tomorrow probably has the fix incorporated.

@pokemonas can you summarize the steps to get it working on Linux? Fedora to be more precise?

I was just following guidance given by @akarl10 , which, as he mentioned - is a bit complicated, but easy to follow:
so, - first of all - I burned quite a time with firefox trying to fish-out the headers - apparently - there is something ... either wrong or differently done in FF, - so go with Chrome. You will need Bearer value from browser - by some reason in FF Bearer value is ~ 1000 chars, and it doesnt work - I'm getting error with this Bearer value. Thou - in Chrome the Bearer value is ~ 9000 chars ... almost 10x longer - and most important - that one works. so - Chrome.
goto https://client.wvd.microsoft.com/arm/webclient/v2/index.html

RDPW file
download rpdw file of your resource, to do that - switch into download:

BEARER variable from browser.
after you download it - switch it back to "Open resource". Then open Chrome Web developer tools (or ctrl-shift-I) and select Network tab.
then in Remote Desktop web client click on resource - aka - start web session ( in developer tools will start s#itload of comuunications ), once you get to user and passwd - cancel it, and focus back into web developer tools. s
Scroll a bit up until you find packet with 403 response, - click on it and grab the Bearer value - it will be big.
then in console export it as BEARER variable:
$ export BEARER="BEARER-KEY-WHICH-IS-VERY-LONG-APPROX-9000-CHARS"
Then turn off developer tools in Chrome.

PC name.
once you have BEARER continue. you'll need PC name. if you know it (it will be static) - you can skip it.
in the same console where you set BEARER - continue:
$ /opt/freerdp-nightly/bin/sdl-freerdp ./path-to-your-rdpw-file/CloudPC.rdpw /log-level:debug /gateway:type:arm,bearer:${BEARER}
when dialog comes to user/passwd credentials - cancel. And search in Debug output or server name:

Connect
once you have all these - connect:
$ /opt/freerdp-nightly/bin/sdl-freerdp ./path-to-your-rdpw-file/CloudPC.rdpw /gateway:type:arm,bearer:${BEARER} /sec:aad /v:COMPUTER-NAME-FROM-STEP-3

follow the dialog:

once you done - you 'll be connected to cloudpc.

Hello. Thanks @pokemonas for the instruction. You have tipped me off to a new way to get the token.
TL;DR (@akarl10)

Go to Azure Sign-in to retrieve a code for WVD.
https://login.microsoftonline.com/common/oauth2/authorize?response_type=code&client_id=a85cf173-4192-42f8-81fa-777a763e6e2c&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient&resource=https%3a%2f%2fwww.wvd.microsoft.com
Request a bearer token (I used curl for this)

POST https://login.microsoftonline.com/common/oauth2/v2.0/token

Data:
grant_type=authorization_code&code=<code>&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient&client_id=a85cf173-4192-42f8-81fa-777a763e6e2c'

Use the token

Full story coming soon.

fyi: https://github.com/FreeRDP/FreeRDP/pull/9127 now landed in master
This means that now it should work with
freerdp <path-to.rdpw> /gateway:type:arm /u:<username>
some might need /sec:aad instead of the username (I think this is when the account is pure azure)
freerdp <path-to.rdpw> /gateway:type:arm /sec:aad
@akallabeth do you think it makes sense closing this and referencing your new shiny sdl/webview bug reports?
I think from a library standpoint (not client) we are more or less done. The only thing might be considerend missing is the "special" rdstls support that would enable email/password login (but you will still need the webview/bearer for the gateway)
what could be an improvement is to automatically choose the arm gateway type, but for that someone would need to understand how the rdc client does that (probably resourcetype:s:arm)
also it might make sense documenting the usage on a discussion site or your wiki for the time being (since here it might get lost)

I´d suggest writing some docs in the wiki (it is accessible via git for those not allowed to directly write for creating a pull request)

remaining issues tracked at #9073 and https://github.com/FreeRDP/FreeRDP/issues/9074

fyi: #9127 now landed in master This means that now it should work with freerdp <path-to.rdpw> /gateway:type:arm /u:<username>
some might need /sec:aad instead of the username (I think this is when the account is pure azure) freerdp <path-to.rdpw> /gateway:type:arm /sec:aad
@akallabeth do you think it makes sense closing this and referencing your new shiny sdl/webview bug reports? I think from a library standpoint (not client) we are more or less done. The only thing might be considerend missing is the "special" rdstls support that would enable email/password login (but you will still need the webview/bearer for the gateway) what could be an improvement is to automatically choose the arm gateway type, but for that someone would need to understand how the rdc client does that (probably resourcetype:s:arm)
also it might make sense documenting the usage on a discussion site or your wiki for the time being (since here it might get lost)

Unfortunately, the changes don't work :/
# /opt/freerdp-nightly/bin/sdl-freerdp SessionDesktop.rdpw /gateway:type:arm /f /size:1366x768 /log-level:TRACE /u:<email>
and
# /opt/freerdp-nightly/bin/sdl-freerdp SessionDesktop.rdpw /gateway:type:arm /f /size:1366x768 /log-level:TRACE /sec:aad

[09:23:41:765] [42912:0000a7a1] [DEBUG][com.freerdp.core.nego] - [nego_attempt_nla]: Attempting NLA security
[09:23:41:769] [42912:0000a7a1] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state
[09:23:41:769] [42912:0000a7a1] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer 204.79.197.219
[09:23:41:815] [42912:0000a7a1] [DEBUG][com.freerdp.core.gateway.arm] - [arm_tls_connect]: connecting to afdfp-rdgateway-r1.wvd.microsoft.com 443
Browse to: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=a85cf173-4192-42f8-81fa-777a763e6e2c&response_type=code&scope=https%3A%2F%2Fwww.wvd.microsoft.com%2F.default&redirect_uri=https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Fnativeclient
Paste redirect URL here:
https://login.microsoftonline.com/common/oauth2/nativeclient?code=<code>&session_state=<state>
[09:23:57:22] [42912:0000a7a1] [DEBUG][com.freerdp.utils.http] - [freerdp_http_request]: headers:
POST /common/oauth2/v2.0/token HTTP/1.1
Host: login.microsoftonline.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 1038

[09:23:57:407] [42912:0000a7a1] [DEBUG][com.freerdp.utils.http] - [freerdp_http_request]: body:
grant_type=authorization_code&code=<code>&client_id=a85cf173-4192-42f8-81fa-777a763e6e2c&scope=https%3A%2F%2Fwww.wvd.microsoft.com%2F.default&redirect_uri=https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Fnativeclient
[09:23:58:925] [42912:0000a7a1] [ERROR][com.freerdp.client.common] - [client_common_get_access_token]: Failed to parse access token response
[09:23:58:925] [42912:0000a7a1] [ERROR][com.freerdp.core.gateway.arm] - [arm_build_http_request]: Unable to obtain access token
[09:23:58:926] [42912:0000a7a1] [ERROR][com.freerdp.core.nego] - [nego_connect]: Protocol Security Negotiation Failure
[09:23:58:926] [42912:0000a7a1] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[09:23:58:926] [42912:0000a7a1] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure
[09:23:58:927] [42912:0000a7a1] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x623000000100]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[09:23:58:927] [42912:0000a7a1] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL

Eduard, does your organization require 2FA and have conditional access
implemented? The fact that it is attempting to prompt for an additional
access code when it already has a bearer tokens leads me to believe this is
the case.
On Fri, Jul 21, 2023, 1:30 AM Eduard Mielieshkin @.***>
wrote:

fyi: #9127 https://github.com/FreeRDP/FreeRDP/pull/9127 now landed in
master This means that now it should work with freerdp <path-to.rdpw>
/gateway:type:arm /u:
some might need /sec:aad instead of the username (I think this is when the
account is pure azure) freerdp <path-to.rdpw> /gateway:type:arm /sec:aad
@akallabeth https://github.com/akallabeth do you think it makes sense
closing this and referencing your new shiny sdl/webview bug reports? I
think from a library standpoint (not client) we are more or less done. The
only thing might be considerend missing is the "special" rdstls support
that would enable email/password login (but you will still need the
webview/bearer for the gateway) what could be an improvement is to
automatically choose the arm gateway type, but for that someone would need
to understand how the rdc client does that (probably resourcetype:s:arm)
also it might make sense documenting the usage on a discussion site or
your wiki for the time being (since here it might get lost)
Unfortunately, the changes don't work :/
/opt/freerdp-nightly/bin/sdl-freerdp SessionDesktop.rdpw /gateway:type:arm /f /size:1366x768 /log-level:TRACE /u:
and
/opt/freerdp-nightly/bin/sdl-freerdp SessionDesktop.rdpw /gateway:type:arm /f /size:1366x768 /log-level:TRACE /sec:aad
[09:23:41:765] [42912:0000a7a1] [DEBUG][com.freerdp.core.nego] - [nego_attempt_nla]: Attempting NLA security
[09:23:41:769] [42912:0000a7a1] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: resetting error state
[09:23:41:769] [42912:0000a7a1] [DEBUG][com.freerdp.core] - [freerdp_tcp_default_connect]: connecting to peer 204.79.197.219
[09:23:41:815] [42912:0000a7a1] [DEBUG][com.freerdp.core.gateway.arm] - [arm_tls_connect]: connecting to afdfp-rdgateway-r1.wvd.microsoft.com 443
Browse to: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=a85cf173-4192-42f8-81fa-777a763e6e2c&response_type=code&scope=https%3A%2F%2Fwww.wvd.microsoft.com%2F.default&redirect_uri=https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Fnativeclient
Paste redirect URL here: https://login.microsoftonline.com/common/oauth2/nativeclient?code=&session_state=
[09:23:57:22] [42912:0000a7a1] [DEBUG][com.freerdp.utils.http] - [freerdp_http_request]: headers:
POST /common/oauth2/v2.0/token HTTP/1.1
Host: login.microsoftonline.com
Content-Type: application/x-www-form-urlencoded
Content-Length: 1038
[09:23:57:407] [42912:0000a7a1] [DEBUG][com.freerdp.utils.http] - [freerdp_http_request]: body:
grant_type=authorization_code&code=&client_id=a85cf173-4192-42f8-81fa-777a763e6e2c&scope=https%3A%2F%2Fwww.wvd.microsoft.com%2F.default&redirect_uri=https%3A%2F%2Flogin.microsoftonline.com%2Fcommon%2Foauth2%2Fnativeclient
[09:23:58:925] [42912:0000a7a1] [ERROR][com.freerdp.client.common] - [client_common_get_access_token]: Failed to parse access token response
[09:23:58:925] [42912:0000a7a1] [ERROR][com.freerdp.core.gateway.arm] - [arm_build_http_request]: Unable to obtain access token
[09:23:58:926] [42912:0000a7a1] [ERROR][com.freerdp.core.nego] - [nego_connect]: Protocol Security Negotiation Failure
[09:23:58:926] [42912:0000a7a1] [ERROR][com.freerdp.core] - [rdp_client_connect]: ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x0002000C]
[09:23:58:926] [42912:0000a7a1] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: Error: protocol security negotiation or connection failure
[09:23:58:927] [42912:0000a7a1] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x623000000100]: [CONNECTION_STATE_NEGO] reset finalize_sc_pdus
[09:23:58:927] [42912:0000a7a1] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_INITIAL
—
Reply to this email directly, view it on GitHub
https://github.com/FreeRDP/FreeRDP/issues/6529#issuecomment-1645050860,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ANPSNA3GW3QIP5JONUBRNIDXRIOYZANCNFSM4S4IXAAA
.
You are receiving this because you commented.Message ID:
@.***>

@spoelstraethan I don't think this is the issue since the 2fa auth is in the browser. The log output also suggests that the json parse did not work.
@progxaker Could you retry with the next nightly, it could be that the nightly was in between some work in this area. The json parse error could be a cJSON issue (dont beleve but maybe the specific nightly had an issue) or a mitm modifies the respone to a transfer-encoding: chunked response that is not implemented in the simplified http client

@spoelstraethan @akarl10 next nightly should have a bit more debug output upon failure (http return code, size of response, ...)

From the comment above

UPD: when I go to the terminal and back to the RDP window, sometimes I get a black picture. If something is changed, this part will be restored/updated. Perhaps this is due to the protocol specifics but in the Web version this (most likely) restores itself.

UPD2: the RDP window always goes to the end of the window list (when press Alt+TAB it opens the program list (on main PC)) and this is uncomfortable. I use KeePass to input my password and it tries to switch to the next window, but it's not RDP but something else :/

Could you please implement some kind of buffer to keep the screen for the first UPD?

I fixed that using /gfx:rfx (tried some options from #5927). Not completely, sometimes there are artifacts or a black screen, but this is much better and issues rarely occur.

hi,
the /gateway:type:arm,bearer:${BEARER} /sec:aad /v:PC-NAME - is not working anymore.
[22:07:16:978] [106395:00019f9c] [DEBUG][com.freerdp.utils.http] - [freerdp_http_request]: body:
grant_type=srv_challenge
[22:07:17:131] [106395:00019f9c] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state]: CONNECTION_STATE_NEGO --> CONNECTION_STATE_AAD
[22:07:17:194] [106395:00019f9c] [ERROR][com.freerdp.aad] - [aad_parse_state_auth]: Authentication result: -2146893048.000000
[22:07:17:194] [106395:00019f9c] [ERROR][com.freerdp.core.rdp] - [rdp_recv_callback_int][0x61f000000080]: CONNECTION_STATE_AAD - aad_recv() fail
[22:07:17:194] [106395:00019f9c] [ERROR][com.freerdp.core.rdp] - [rdp_recv_callback_int][0x61f000000080]: CONNECTION_STATE_AAD status STATE_RUN_FAILED [-1]
[22:07:17:194] [106395:00019f9c] [ERROR][com.freerdp.core.transport] - [transport_check_fds]: transport_check_fds: transport->ReceiveCallback() - STATE_RUN_FAILED [-1]
[22:07:17:194] [106395:00019f9c] [DEBUG][com.freerdp.core.rdp] - [rdp_check_fds][0x61f000000080]: transport_check_fds() - -1
[22:07:17:195] [106395:00019f9c] [ERROR][com.freerdp.core] - [rdp_client_wait_for_activation]: ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]
[22:07:17:196] [106395:00019f9c] [DEBUG][com.freerdp.core.rdp] - [rdp_finalize_reset_flags][0x61f000000080]: [CONNECTION_STATE_AAD] reset finalize_sc_pdus
[22:07:17:196] [106395:00019f9c] [DEBUG][com.freerdp.core.connection] - [rdp_client_transition_to_state]: CONNECTION_STATE_AAD --> CONNECTION_STATE_INITIAL

@pokemonas what exact version are you using?
current master should only require the rdpw file and /gateway:type:arm (and /sec:aad)
Not both are able to fetch the required tokens (and the name of the target pc)
Authentication result: -2146893048.000000 corresponds to 0x80090308 that could be SEC_E_INVALID_TOKEN

I'm using latest nightly . The rdpw-file /gateway:type:arm /sec:aad also not working - same error
/opt/freerdp-nightly/bin/sdl-freerdp /version
[22:54:32:632] [122298:0001ddba] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]: [experimental] /opt/freerdp-nightly/bin/sdl-freerdp client is currently experimental!
[22:54:32:632] [122298:0001ddba] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  If problems occur please check https://github.com/FreeRDP/FreeRDP/issues for know issues or create a new one!
[22:54:32:632] [122298:0001ddba] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  Developers hang out in https://matrix.to/#/#FreeRDP:matrix.org?via=matrix.org - dont hesitate to ask some questions. (replies might take some time depending on your timezone)
This is FreeRDP version 3.0.0-dev2 (5de7887d9)

ahh, think I found a possible issue...
I cannot test this myself, but if someone is able to check https://github.com/FreeRDP/FreeRDP/pull/9192 and confirms this is the issue I will remove the draft flag

@pokemonas the url you have to copy from the terminal to a webbrowser should contain the target computer name. Does that look correct?

yes, name is correct

I hate to be adding nothing useful to the conversation, but I'm also running into the SEC_E_INVALID_TOKEN error. I'm on v3.0.0-dev2 installed via flathub-beta on Fedora Silverblue.
Command:
flatpak run com.freerdp.FreeRDP './AVD.rdpw' /gateway:type:arm /sec:aad
Errors at the end:
[09:07:14:791] [2:00000003] [ERROR][com.freerdp.aad] - [aad_parse_state_auth]: Authentication result: SEC_E_INVALID_TOKEN (0x80090308)
[09:07:14:791] [2:00000003] [ERROR][com.freerdp.core.rdp] - [rdp_recv_callback_int][0x558e6321af80]: CONNECTION_STATE_AAD - aad_recv() fail
[09:07:14:791] [2:00000003] [ERROR][com.freerdp.core.rdp] - [rdp_recv_callback_int][0x558e6321af80]: CONNECTION_STATE_AAD status STATE_RUN_FAILED [-1]
[09:07:14:791] [2:00000003] [ERROR][com.freerdp.core.transport] - [transport_check_fds]: transport_check_fds: transport->ReceiveCallback() - STATE_RUN_FAILED [-1]
[09:07:14:791] [2:00000003] [ERROR][com.freerdp.core] - [rdp_client_wait_for_activation]: ERRCONNECT_CONNECT_TRANSPORT_FAILED [0x0002000D]

@teconmoon https://github.com/FreeRDP/FreeRDP/issues/9363

The command I'm running is:
/opt/freerdp-nightly/bin/sdl-freerdp ./fiserv.rdpw /gateway:type:arm /u:username@example.com /p:password /sec:add
It opens up a window with the MS login... I log in with username and password (despite providing them on the commandline), then I get my PingID 2FA, which succeeds.. and then I get a white background with the message: "Redirection to URL with a scheme that is not HTTP(S)"
/opt/freerdp-nightly/bin/sdl-freerdp /version
[09:31:25:711] [100048:000186d0] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]: [experimental] /opt/freerdp-nightly/bin/sdl-freerdp client is currently experimental!
[09:31:25:711] [100048:000186d0] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  If problems occur please check https://github.com/FreeRDP/FreeRDP/issues for know issues or create a new one!
[09:31:25:711] [100048:000186d0] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  Developers hang out in https://matrix.to/#/#FreeRDP:matrix.org?via=matrix.org - dont hesitate to ask some questions. (replies might take some time depending on your timezone)
This is FreeRDP version 3.0.0-dev5 (694d95a58)

@imbezol you need to recompile with -DWITH_WEBVIEW=OFF, the current nightly has a bug with the webview not supporting custom url schemes

The command I'm running is:
/opt/freerdp-nightly/bin/sdl-freerdp ./myrdpw.rdpw /gateway:type:arm /u:username@example.com /p:password /sec:add
It opens up a window with the MS login... I log in with username and password (despite providing them on the commandline), then I get my PingID 2FA, which succeeds.. and then I get a white background with the message: "Redirection to URL with a scheme that is not HTTP(S)"
Log output:
[09:32:14:129] [100052:000186d4] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]: [experimental] /opt/freerdp-nightly/bin/sdl-freerdp client is currently experimental!
[09:32:14:130] [100052:000186d4] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  If problems occur please check https://github.com/FreeRDP/FreeRDP/issues for know issues or create a new one!
[09:32:14:130] [100052:000186d4] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  Developers hang out in https://matrix.to/#/#FreeRDP:matrix.org?via=matrix.org - dont hesitate to ask some questions. (replies might take some time depending on your timezone)
[09:32:14:134] [100052:000186d4] [WARN][com.freerdp.client.common] - [freerdp_client_populate_settings_from_rdp_file]: This build does not support [MS-RDPECAM] camera redirection channel. Ignoring 'camerastoredirect'
[09:32:14:152] [100052:000186d5] [INFO][com.freerdp.client.SDL] - [sdl_pre_connect]: Update size to 1024x768
Overriding existing handler for signal 10. Set JSC_SIGNAL_FOR_GC if you want WebKit to use a different signal

(process:100117): libsoup-WARNING **: 09:32:23.953: gssapi step failed: No credentials were supplied, or the credentials were unavailable or inaccessible: SPNEGO cannot find mechanisms to negotiate

[09:33:53:943] [100052:000186d5] [ERROR][com.freerdp.core.gateway.arm] - [arm_build_http_request]: Unable to obtain access token
[09:33:53:944] [100052:000186d5] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: error retrieving ARM configuration
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [fatal_handler]: Caught signal 'Aborted' [6]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 0: /lib/x86_64-linux-gnu/libasan.so.8(+0x6bbbe) [0x7f078986bbbe]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 1: /opt/freerdp-nightly/bin/../lib/libwinpr3.so.3(winpr_backtrace+0x62) [0x7f07887558e2]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 2: /opt/freerdp-nightly/bin/../lib/libwinpr3.so.3(winpr_log_backtrace_ex+0xa0) [0x7f0788757910]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 3: /opt/freerdp-nightly/bin/../lib/libfreerdp3.so.3(+0x1744ef) [0x7f0788d744ef]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 4: /lib/x86_64-linux-gnu/libc.so.6(+0x42910) [0x7f0780e42910]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 5: /lib/x86_64-linux-gnu/libc.so.6(pthread_kill+0x11b) [0x7f0780e9999b]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 6: /lib/x86_64-linux-gnu/libc.so.6(raise+0x16) [0x7f0780e42866]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 7: /lib/x86_64-linux-gnu/libc.so.6(abort+0xd7) [0x7f0780e268b7]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 8: /lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37(+0x6edc7f) [0x7f07846edc7f]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 9: /lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37(+0xcfb919) [0x7f0784cfb919]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 10: /lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37(+0xcfbebd) [0x7f0784cfbebd]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 11: /lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37(+0xc68b27) [0x7f0784c68b27]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 12: /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_object_unref+0x22c) [0x7f0789325e1c]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 13: /lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37(+0xc56882) [0x7f0784c56882]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 14: /lib/x86_64-linux-gnu/libwebkit2gtk-4.0.so.37(+0xc543a1) [0x7f0784c543a1]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 15: /lib/x86_64-linux-gnu/libgobject-2.0.so.0(g_object_unref+0x22c) [0x7f0789325e1c]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 16: /lib/x86_64-linux-gnu/libc.so.6(+0x45126) [0x7f0780e45126]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 17: /lib/x86_64-linux-gnu/libc.so.6(+0x45260) [0x7f0780e45260]
[09:33:53:953] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 18: /lib/x86_64-linux-gnu/libc.so.6(+0x280d7) [0x7f0780e280d7]
[09:33:53:954] [100052:000186d4] [ERROR][com.freerdp.utils.signal] - [winpr_log_backtrace_ex]: 19: /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x89) [0x7f0780e28189]

^C

Aborted (core dumped)

[09:31:25:711] [100048:000186d0] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]: [experimental] /opt/freerdp-nightly/bin/sdl-freerdp client is currently experimental!
[09:31:25:711] [100048:000186d0] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  If problems occur please check https://github.com/FreeRDP/FreeRDP/issues for know issues or create a new one!
[09:31:25:711] [100048:000186d0] [WARN][com.freerdp.client.common.cmdline] - [freerdp_client_warn_experimental]:  Developers hang out in https://matrix.to/#/#FreeRDP:matrix.org?via=matrix.org - dont hesitate to ask some questions. (replies might take some time depending on your timezone)
This is FreeRDP version 3.0.0-dev5 (694d95a58)

Sorry for the out of order post. I will try with -DWITH_WEBVIEW=OFF and report back.

Using the dpkg-buildpackage, where should I be specifying WITH_WEBVIEW=OFF?

@akallabeth Thanks. I'm able to connect and get onto my desktop now. Next issue is the mouse. With /mouse:grab:on I'm stuck in the bottom right corner. With /mouse:relative:on I can move around but the mouse pointer and the location of the click are not in sync. I'll look for an existing bug or open a new one on that.

Hi. I'm trying to build the app with webkit off to avoid the issue, but when I did try to connect, I got this:
[09:43:00:904] [235314:00039733] [ERROR][com.freerdp.core.gateway.arm] - [arm_resolve_endpoint]: arm gateway support not compiled in
[09:43:00:904] [235314:00039733] [ERROR][com.freerdp.core.connection] - [rdp_client_connect]: error retrieving ARM configuration
I'm running on a Linux on Amd64. Do you know what should I do for this to work?

Replying to myself, need to install cjson-dev and clean cmakecache file.
Still not able to connect due to some certificate errors, but hopefuly getting there.

love this issue, I was trying to do the same but I feel its not so straight forward as it seems
basically, what I have got from this thread is:

now somebody needs to implement the bearer token fetching

I think we can use the following steps to add them to the FreeRDP code. In the /sec:add code, everything is there to accomplish the points 1-2.

Go to Azure Sign-in to retrieve a code for WVD:

GET https://login.microsoftonline.com/common/oauth2/authorize

response_type: code
client_id: a85cf173-4192-42f8-81fa-777a763e6e2c
redirect_uri: https://login.microsoftonline.com/common/oauth2/nativeclient
resource: https://www.wvd.microsoft.com

URL
2. Copy the code value from the URL after authorization.
3. Request a bearer token (I used curl for this):
POST https://login.microsoftonline.com/common/oauth2/v2.0/token

grant_type: authorization_code
code: <code>
redirect_uri: https://login.microsoftonline.com/common/oauth2/nativeclient
client_id: a85cf173-4192-42f8-81fa-777a763e6e2c

curl command
P.S. code can be used once, for multiple use it's necessary to use a new code or a refresh token.
Error
4. Use the token.
{
    "token_type": "Bearer",
    "scope": "https://www.wvd.microsoft.com/User.Access https://www.wvd.microsoft.com/user_impersonation",
    "expires_in": 4427,
    "ext_expires_in": 4427,
    "access_token": "<bearer-token>"
}

Full story
Among the interesting things:

The Windows application use
redirection_uri: ms-appx-web://Microsoft.AAD.BrokerPlugin/a85cf173-4192-42f8-81fa-777a763e6e2c.
and request Bearer Token in two ways.
At the first login - grant_type: authorization_code,
and after connecting to AVD - grant_type: refresh_token.
To automatically log in as a user, it can be used login_hint: <email>.
For example, my username is test@example.com, so I can use the URL from the first point
and add &login_hint=test@example.com to the end and skip the account selection in the Sign-in page.

This was really helpful @progxaker, I haven't tried it yet, but It seems promising. would let you guys know if this works.

Having some issues with running the latest nightly version. Authentication seems to go fine but it fails during negotiation with the error SSL_REQUIRED_BY_SERVER.
I've attached the full log output with stuff redacted.
rdpw-log.txt
And my RDPW file (but with stuff redacted)
rdpw.txt

@ktwrd your system does not seem to use /sec:aad and fails as the required mechanism is turned off. better try with /sec:aad,rdp,tls,nla,ext which turns on all authentication modes and check if that works for you.

love this issue, I was trying to do the same but I feel its not so straight forward as it seems
basically, what I have got from this thread is:

now somebody needs to implement the bearer token fetching

I think we can use the following steps to add them to the FreeRDP code. In the /sec:add code, everything is there to accomplish the points 1-2.

Go to Azure Sign-in to retrieve a code for WVD:

GET https://login.microsoftonline.com/common/oauth2/authorize

response_type: code
client_id: a85cf173-4192-42f8-81fa-777a763e6e2c
redirect_uri: https://login.microsoftonline.com/common/oauth2/nativeclient
resource: https://www.wvd.microsoft.com

URL
2. Copy the code value from the URL after authorization.
3. Request a bearer token (I used curl for this):
POST https://login.microsoftonline.com/common/oauth2/v2.0/token

grant_type: authorization_code
code: <code>
redirect_uri: https://login.microsoftonline.com/common/oauth2/nativeclient
client_id: a85cf173-4192-42f8-81fa-777a763e6e2c

curl command
P.S. code can be used once, for multiple use it's necessary to use a new code or a refresh token.
Error
4. Use the token.
{
    "token_type": "Bearer",
    "scope": "https://www.wvd.microsoft.com/User.Access https://www.wvd.microsoft.com/user_impersonation",
    "expires_in": 4427,
    "ext_expires_in": 4427,
    "access_token": "<bearer-token>"
}

Full story
Among the interesting things:

The Windows application use
redirection_uri: ms-appx-web://Microsoft.AAD.BrokerPlugin/a85cf173-4192-42f8-81fa-777a763e6e2c.
and request Bearer Token in two ways.
At the first login - grant_type: authorization_code,
and after connecting to AVD - grant_type: refresh_token.
To automatically log in as a user, it can be used login_hint: <email>.
For example, my username is test@example.com, so I can use the URL from the first point
and add &login_hint=test@example.com to the end and skip the account selection in the Sign-in page.

This was really helpful @progxaker, I haven't tried it yet, but It seems promising. would let you guys know if this works.
Summary
I have added a summary of this issue for new users joining in
* The issue was about adding support in FreeRDP for connecting to Azure Virtual Desktop (AVD) using the new ARM gateway architecture.

* Initially, there was no support for connecting to AVD using FreeRDP or other Linux RDP clients, as Microsoft did not provide public documentation on how to authenticate with the new AVD architecture (raised by @kubistika  @ck-kc).

* Some users like @jphein tried using proprietary tools like Teradici PCoIP client or Igel viewer, but they either didn't work or required running additional software on the AVD virtual machines.

* After some development efforts by @fifthdegree, FreeRDP added support for Azure Active Directory (AAD) authentication required by the new AVD architecture using OAuth2.

* The solution involved:

  * Obtaining an authorization code from Microsoft login page (instructions provided by @fifthdegree)
  * Exchanging the code for an access token (bearer token)
  * Using the bearer token to authenticate with the AVD ARM gateway

* Some remaining issues were:

  * Automatically detecting the need to use ARM gateway type (raised by @akarl10)
  * Supporting additional authentication scenarios like Conditional Access with MFA (mentioned by @spoelstraethan)
  * Resolving sporadic errors like SEC_E_INVALID_TOKEN (faced by @pokemonas, @teconmoon)

* In the end, the core FreeRDP library gained the ability to connect to AVD using the new ARM gateway by authenticating with AAD and fetching required bearer tokens (merged by @akallabeth).

* Some client-specific issues like mouse sync problems persisted (raised by @imbezol, @protoman).

So in summary, while not a complete solution, significant progress was made in adding Azure Virtual Desktop support to the open-source FreeRDP client on Linux using new authentication mechanisms required by Microsoft, with contributions from @fifthdegree, @akallabeth and feedback from various users.

Hello everyone,
If I have understood correctly, in order to log in to the AVD you still have to log in to Manuel via the browser.
Is it possible to link the whole thing with e.g. google-chrome (chromedriver) when you get the message "Browse to" and you have logged in that the link is automatically inserted there?
Or is there already another way?
Greetings

Hello everyone,
If I have understood correctly, in order to log in to the AVD you still have to log in to Manuel via the browser.
Is it possible to link the whole thing with e.g. google-chrome (chromedriver) when you get the message "Browse to" and you have logged in that the link is automatically inserted there?
Or is there already another way?
Greetings

@xBr0th3rx Yes, if you use the sdl client, it has bindings to webview so that you get a proper webview popup instead of the manual way

@xBr0th3rx if you have a build without -DWITH_WEBVIEW=ON then yes.

@xBr0th3rx if you have a build without -DWITH_WEBVIEW=ON then yes.

Hey @akallabeth
I don't quite understand the build instructions, I have managed to build the following:
cmake -GNinja \
-B freerdp-build \
-S freerdp \
-DCMAKE_BUILD_TYPE=Release \
-DCMAKE_SKIP_INSTALL_ALL_DEPENDENCY=ON \
-DCMAKE_INSTALL_PREFIX=/opt/freerdp-selbstgebaut \
-DWITH_SERVER=ON \
-DWITH_SAMPLE=ON \
-DWITH_PLATFORM_SERVER=OFF \
-DUSE_UNWIND=OFF \
-DWITH_SWSCALE=OFF \
-DWITH_FFMPEG=OFF \
-DWITH_WEBVIEW=ON
But apparently some things are still missing
What do I have to do to make what comes from Jenkins only additionally WEBVIEW is active for Debian11 and Ubuntu24?
I'm really sorry but I don't quite understand.

authors: Exploder98 akallabeth akarl10 alkisg brian3t ck-kc fifthdegree gtgy hedwigz idevai imbezol jphein ktwrd kubistika mfleisz murder pokemonas progxaker protoman rlees85 ronymesquita snydox spoelstraethan teconmoon xBr0th3rx xXWarMachineRoXx