[746:783:692811979569:ERROR:web_data_service.cc(677)] Cannot initialize the web database: 2
|
=================================================================
|
==910== ERROR: AddressSanitizer heap-use-after-free on address 0x7fffe7bbbb98 at pc 0x55555a7f8be3 bp 0x7fffffff97c0 sp 0x7fffffff97b8
|
READ of size 8 at 0x7fffe7bbbb98 thread T0
|
#0 0x55555a7f8be3 in WebCore::InlineBox::remove() ???:0
|
#1 0x55555a82d51d in WebCore::RenderBlock::willBeDestroyed() ???:0
|
#2 0x55555aa323c2 in WebCore::RenderObject::destroy() ???:0
|
#3 0x55555aa37799 in WebCore::RenderObjectChildList::destroyLeftoverChildren() ???:0
|
#4 0x55555a82d371 in WebCore::RenderBlock::willBeDestroyed() ???:0
|
#5 0x55555aa323c2 in WebCore::RenderObject::destroy() ???:0
|
#6 0x55555a82d3bb in WebCore::RenderBlock::willBeDestroyed() ???:0
|
#7 0x55555aa323c2 in WebCore::RenderObject::destroy() ???:0
|
#8 0x55555a82d3bb in WebCore::RenderBlock::willBeDestroyed() ???:0
|
#9 0x55555aa323c2 in WebCore::RenderObject::destroy() ???:0
|
#10 0x5555596bac8c in WebCore::Node::detach() ???:0
|
#11 0x555559688045 in WebCore::Element::detach() ???:0
|
#12 0x55555960a539 in WebCore::ContainerNode::detach() ???:0
|
#13 0x555559688045 in WebCore::Element::detach() ???:0
|
#14 0x5555596894e5 in WebCore::Element::recalcStyle(WebCore::Node::StyleChange) ???:0
|
#15 0x55555968a150 in WebCore::Element::recalcStyle(WebCore::Node::StyleChange) ???:0
|
#16 0x55555968a150 in WebCore::Element::recalcStyle(WebCore::Node::StyleChange) ???:0
|
#17 0x5555596286c2 in WebCore::Document::recalcStyle(WebCore::Node::StyleChange) ???:0
|
#18 0x55555962baeb in WebCore::Document::updateStyleIfNeeded() ???:0
|
#19 0x55555962bd1c in WebCore::Document::updateStyleForAllDocuments() ???:0
|
#20 0x55555a4db897 in WebCore::ScheduledAction::execute(WebCore::V8Proxy*) ???:0
|
#21 0x55555a30c58c in WebCore::DOMTimer::fired() ???:0
|
#22 0x555559a751b8 in WebCore::ThreadTimers::sharedTimerFiredInternal() ???:0
|
#23 0x555557948c49 in base::subtle::TaskClosureAdapter::Run() ???:0
|
#24 0x5555578d9bb4 in MessageLoop::RunTask(base::PendingTask const&) ???:0
|
#25 0x5555578da436 in MessageLoop::DeferOrRunPendingTask(base::PendingTask const&) ???:0
|
#26 0x5555578dbdf9 in MessageLoop::DoDelayedWork(base::TimeTicks*) ???:0
|
#27 0x5555578e5fbe in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ???:0
|
#28 0x5555578d87ce in MessageLoop::RunInternal() ???:0
|
#29 0x5555578d6b1f in MessageLoop::Run() ???:0
|
#30 0x55555c3bef5a in RendererMain(content::MainFunctionParams const&) ???:0
|
#31 0x555557832148 in (anonymous namespace)::RunNamedProcessTypeMain(std::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, content::MainFunctionParams const&, content::ContentMainDelegate*) content/app/content_main.cc:0
|
#32 0x555557831614 in content::ContentMain(int, char const**, content::ContentMainDelegate*) ???:0
|
#33 0x555556115647 in ChromeMain ??:0
|
#34 0x55555611554b in main ???:0
|
#35 0x7ffff207430d in ?? ??:0
|
0x7fffe7bbbb98 is located 24 bytes inside of 80-byte region [0x7fffe7bbbb80,0x7fffe7bbbbd0)
|
freed by thread T0 here:
|
#0 0x55555cefa5d2 in free ??:0
|
#1 0x55555a81309d in WebCore::InlineTextBox::destroy(WebCore::RenderArena*) ???:0
|
#2 0x55555aaa310d in WebCore::RenderText::dirtyLineBoxes(bool) ???:0
|
#3 0x55555a8bdf92 in WebCore::RenderBlock::layoutInlineChildren(bool, int&, int&) ???:0
|
#4 0x55555a83adff in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#5 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#6 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#7 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#8 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#9 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#10 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#11 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#12 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#13 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#14 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#15 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#16 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#17 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#18 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#19 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#20 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#21 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#22 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#23 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#24 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#25 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#26 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#27 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#28 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#29 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
previously allocated by thread T0 here:
|
#0 0x55555cefa692 in malloc ??:0
|
#1 0x55555aaa3327 in WebCore::RenderText::createTextBox() ???:0
|
#2 0x55555aaa3636 in WebCore::RenderText::createInlineTextBox() ???:0
|
#3 0x55555a89ce03 in WebCore::RenderBlock::constructLine(WebCore::BidiRunList<WebCore::BidiRun>&, WebCore::LineInfo const&) ???:0
|
#4 0x55555a8a30af in WebCore::RenderBlock::createLineBoxesFromBidiRuns(WebCore::BidiRunList<WebCore::BidiRun>&, WebCore::InlineIterator const&, WebCore::LineInfo&, WebCore::VerticalPositionCache&, WebCore::BidiRun*) ???:0
|
#5 0x55555a8ab081 in WebCore::RenderBlock::layoutRunsAndFloatsInRange(WebCore::LineLayoutState&, WebCore::BidiResolver<WebCore::InlineIterator, WebCore::BidiRun>&, WebCore::InlineIterator const&, WebCore::BidiStatus const&, unsigned int) ???:0
|
#6 0x55555a8a46c2 in WebCore::RenderBlock::layoutRunsAndFloats(WebCore::LineLayoutState&, bool) ???:0
|
#7 0x55555a8be09c in WebCore::RenderBlock::layoutInlineChildren(bool, int&, int&) ???:0
|
#8 0x55555a83adff in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#9 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#10 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#11 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#12 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#13 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#14 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#15 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#16 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#17 0x55555a8430b2 in WebCore::RenderBlock::layoutColumns(bool, int, WebCore::LayoutStateMaintainer&) ???:0
|
#18 0x55555a83b61b in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
#19 0x55555a8398c5 in WebCore::RenderBlock::layout() ???:0
|
#20 0x55555a854b7c in WebCore::RenderBlock::layoutBlockChild(WebCore::RenderBox*, WebCore::RenderBlock::MarginInfo&, int&, int&) ???:0
|
#21 0x55555a84268c in WebCore::RenderBlock::layoutBlockChildren(bool, int&) ???:0
|
#22 0x55555a83ae1a in WebCore::RenderBlock::layoutBlock(bool, int, WebCore::RenderBlock::BlockLayoutPass) ???:0
|
==910== ABORTING
|
Stats: 10M malloced (12M for red zones) by 30138 calls
|
Stats: 0M realloced by 350 calls
|
Stats: 5M freed by 21284 calls
|
Stats: 0M really freed by 0 calls
|
Stats: 52M (13320 full pages) mmaped in 13 calls
|
mmaps by size class: 8:32766; 9:8191; 10:4095; 11:2047; 12:1024; 13:512; 14:256; 15:128; 16:64; 17:64; 22:1;
|
mallocs by size class: 8:24811; 9:2802; 10:1429; 11:518; 12:305; 13:114; 14:98; 15:10; 16:11; 17:39; 22:1;
|
frees by size class: 8:16793; 9:2368; 10:1304; 11:367; 12:237; 13:98; 14:86; 15:6; 16:4; 17:21;
|
rfrees by size class:
|
Stats: malloc large: 40 small slow: 131
|
Shadow byte and word:
|
0x1ffffcf77773: fd
|
0x1ffffcf77770: fd fd fd fd fd fd fd fd
|
More shadow bytes:
|
0x1ffffcf77750: fd fd fd fd fd fd fd fd
|
0x1ffffcf77758: fd fd fd fd fd fd fd fd
|
0x1ffffcf77760: fa fa fa fa fa fa fa fa
|
0x1ffffcf77768: fa fa fa fa fa fa fa fa
|
=>0x1ffffcf77770: fd fd fd fd fd fd fd fd
|
0x1ffffcf77778: fd fd fd fd fd fd fd fd
|
0x1ffffcf77780: fa fa fa fa fa fa fa fa
|
0x1ffffcf77788: fa fa fa fa fa fa fa fa
|
0x1ffffcf77790: fd fd fd fd fd fd fd fd
|