+ valgrind --trace-children=yes --suppressions=/home/user/chromium/src/tools/valgrind/memcheck/suppressions.txt '--db-command=gdb -nw %f %p' --db-attach=no --malloc-fill=41 --free-fill=41 /usr/lib/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/ --channel=907.0x7f54f94a5400.1322926804 ==954== Memcheck, a memory error detector ==954== Copyright (C) 2002-2010, and GNU GPL'd, by Julian Seward et al. ==954== Using Valgrind-3.7.0.SVN and LibVEX; rerun with -h for copyright info ==954== Command: /usr/lib/chromium-browser/chromium-browser --type=renderer --lang=en-US --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/max_250ms_queue_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/ --channel=907.0x7f54f94a5400.1322926804 ==954== ==954== Warning: set address range perms: large range [0x15558000, 0x35558000) (noaccess) ==954== Invalid read of size 8 ==954== at 0x19BD3BB: WebCore::ContainerNode::parserAddChild(WTF::PassRefPtr) (ContainerNode.cpp:647) ==954== by 0x16AD90F: WTF::PassRefPtr WebCore::HTMLConstructionSite::attach(WebCore::ContainerNode*, WTF::PassRefPtr) (HTMLConstructionSite.cpp:98) ==954== by 0x16AD9D4: WebCore::HTMLConstructionSite::attachToCurrent(WTF::PassRefPtr) (HTMLConstructionSite.cpp:237) ==954== by 0x16ADDC6: WebCore::HTMLConstructionSite::insertHTMLElement(WebCore::AtomicHTMLToken&) (HTMLConstructionSite.cpp:267) ==954== by 0x169F8BC: WebCore::HTMLTreeBuilder::processGenericRawTextStartTag(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:2776) ==954== by 0x16A4340: WebCore::HTMLTreeBuilder::processStartTagForInBody(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:946) ==954== by 0x16A4F49: WebCore::HTMLTreeBuilder::processStartTag(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:1326) ==954== by 0x16A8558: WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:453) ==954== by 0x16A85DB: WebCore::HTMLTreeBuilder::constructTreeFromToken(WebCore::HTMLToken&) (HTMLTreeBuilder.cpp:448) ==954== by 0x168C706: WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) (HTMLDocumentParser.cpp:239) ==954== by 0x168DF58: WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() (HTMLDocumentParser.cpp:441) ==954== by 0x168E1F7: WebCore::HTMLDocumentParser::notifyFinished(WebCore::CachedResource*) (HTMLDocumentParser.cpp:486) ==954== Address 0xf7466d0 is 0 bytes inside a block of size 128 free'd ==954== at 0x4C28D7A: operator delete(void*) (vg_replace_malloc.c:915) ==954== by 0x19BA98B: WebCore::ContainerNode::removeAllChildren() (ContainerNodeAlgorithms.h:64) ==954== by 0x19BB50D: WebCore::ContainerNode::~ContainerNode() (ContainerNode.cpp:97) ==954== by 0x16805F0: WebCore::HTMLHtmlElement::~HTMLHtmlElement() (HTMLElement.h:34) ==954== by 0x1A00E82: WebCore::Node::dispatchGenericEvent(WTF::PassRefPtr) (TreeShared.h:79) ==954== by 0x1B6A6E8: WebCore::DOMWindow::dispatchLoadEvent() (DOMWindow.cpp:1525) ==954== by 0x19CFD63: WebCore::Document::implicitClose() (Document.cpp:2150) ==954== by 0x1B1E582: WebCore::FrameLoader::checkCompleted() (FrameLoader.cpp:842) ==954== by 0x1B1D326: WebCore::FrameLoader::finishedParsing() (FrameLoader.cpp:776) ==954== by 0x19D056F: WebCore::Document::finishedParsing() (Document.cpp:4282) ==954== by 0x168CDD7: WebCore::HTMLDocumentParser::prepareToStopParsing() (HTMLDocumentParser.cpp:152) ==954== by 0x168CE23: WebCore::HTMLDocumentParser::finish() (HTMLDocumentParser.cpp:388) ==954== ==954== Invalid read of size 8 ==954== at 0x19BD3D1: WebCore::ContainerNode::parserAddChild(WTF::PassRefPtr) (ContainerNode.cpp:647) ==954== by 0x16AD90F: WTF::PassRefPtr WebCore::HTMLConstructionSite::attach(WebCore::ContainerNode*, WTF::PassRefPtr) (HTMLConstructionSite.cpp:98) ==954== by 0x16AD9D4: WebCore::HTMLConstructionSite::attachToCurrent(WTF::PassRefPtr) (HTMLConstructionSite.cpp:237) ==954== by 0x16ADDC6: WebCore::HTMLConstructionSite::insertHTMLElement(WebCore::AtomicHTMLToken&) (HTMLConstructionSite.cpp:267) ==954== by 0x169F8BC: WebCore::HTMLTreeBuilder::processGenericRawTextStartTag(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:2776) ==954== by 0x16A4340: WebCore::HTMLTreeBuilder::processStartTagForInBody(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:946) ==954== by 0x16A4F49: WebCore::HTMLTreeBuilder::processStartTag(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:1326) ==954== by 0x16A8558: WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:453) ==954== by 0x16A85DB: WebCore::HTMLTreeBuilder::constructTreeFromToken(WebCore::HTMLToken&) (HTMLTreeBuilder.cpp:448) ==954== by 0x168C706: WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) (HTMLDocumentParser.cpp:239) ==954== by 0x168DF58: WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() (HTMLDocumentParser.cpp:441) ==954== by 0x168E1F7: WebCore::HTMLDocumentParser::notifyFinished(WebCore::CachedResource*) (HTMLDocumentParser.cpp:486) ==954== Address 0x41414141414143a9 is not stack'd, malloc'd or (recently) free'd ==954== ==954== ==954== Process terminating with default action of signal 11 (SIGSEGV) ==954== General Protection Fault ==954== at 0x19BD3D1: WebCore::ContainerNode::parserAddChild(WTF::PassRefPtr) (ContainerNode.cpp:647) ==954== by 0x16AD90F: WTF::PassRefPtr WebCore::HTMLConstructionSite::attach(WebCore::ContainerNode*, WTF::PassRefPtr) (HTMLConstructionSite.cpp:98) ==954== by 0x16AD9D4: WebCore::HTMLConstructionSite::attachToCurrent(WTF::PassRefPtr) (HTMLConstructionSite.cpp:237) ==954== by 0x16ADDC6: WebCore::HTMLConstructionSite::insertHTMLElement(WebCore::AtomicHTMLToken&) (HTMLConstructionSite.cpp:267) ==954== by 0x169F8BC: WebCore::HTMLTreeBuilder::processGenericRawTextStartTag(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:2776) ==954== by 0x16A4340: WebCore::HTMLTreeBuilder::processStartTagForInBody(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:946) ==954== by 0x16A4F49: WebCore::HTMLTreeBuilder::processStartTag(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:1326) ==954== by 0x16A8558: WebCore::HTMLTreeBuilder::constructTreeFromAtomicToken(WebCore::AtomicHTMLToken&) (HTMLTreeBuilder.cpp:453) ==954== by 0x16A85DB: WebCore::HTMLTreeBuilder::constructTreeFromToken(WebCore::HTMLToken&) (HTMLTreeBuilder.cpp:448) ==954== by 0x168C706: WebCore::HTMLDocumentParser::pumpTokenizer(WebCore::HTMLDocumentParser::SynchronousMode) (HTMLDocumentParser.cpp:239) ==954== by 0x168DF58: WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution() (HTMLDocumentParser.cpp:441) ==954== by 0x168E1F7: WebCore::HTMLDocumentParser::notifyFinished(WebCore::CachedResource*) (HTMLDocumentParser.cpp:486) ==954== ==954== HEAP SUMMARY: ==954== in use at exit: 1,964,443 bytes in 6,169 blocks ==954== total heap usage: 11,188 allocs, 5,019 frees, 3,367,266 bytes allocated ==954== ==954== LEAK SUMMARY: ==954== definitely lost: 14,306 bytes in 15 blocks ==954== indirectly lost: 21,587 bytes in 458 blocks ==954== possibly lost: 138,356 bytes in 587 blocks ==954== still reachable: 453,589 bytes in 1,575 blocks ==954== suppressed: 1,336,605 bytes in 3,534 blocks ==954== Rerun with --leak-check=full to see details of leaked memory ==954== ==954== For counts of detected and suppressed errors, rerun with: -v ==954== ERROR SUMMARY: 2 errors from 2 contexts (suppressed: 8 from 6)