sigbjornf@, could you please look into this (https://chromium.googlesource.com/chromium/src/+/be260f5b91027b81be5ba04939ebef2dbd5c92ee%5E%21/third_party/WebKit/Source/platform/heap/PersistentNode.h) if possible?

Thank you!

Thanks,TSan is an invaluable tool. Will fix.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/599c0724311759cb37ed1be9971fa694eee766ca

commit 599c0724311759cb37ed1be9971fa694eee766ca
Author: sigbjornf <sigbjornf@opera.com>
Date: Fri May 13 09:19:37 2016

Avoid race on uninitializing CrossThreadPersistent nodes.

R=
BUG= 611593 ,  611594 

Review-Url: https://codereview.chromium.org/1974233002
Cr-Commit-Position: refs/heads/master@{#393488}

[modify] https://crrev.com/599c0724311759cb37ed1be9971fa694eee766ca/third_party/WebKit/Source/platform/heap/Handle.h
[modify] https://crrev.com/599c0724311759cb37ed1be9971fa694eee766ca/third_party/WebKit/Source/platform/heap/PersistentNode.h

ClusterFuzz has detected this issue as fixed in range 393466:393498.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6339108074422272

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Data race WRITE 8
Crash Address: 0x7d0400018798
Crash State:
  blink::CrossThreadPersistentRegion::prepareForThreadStateTermination
  blink::ThreadState::runTerminationGC
  blink::ThreadHeap::detach
  
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=393466:393498

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97UqMX-Xcfx7xBlzt142d1auV5kQpwMJFom_AY9ia3Z6GpgOMKOBnW6IZMob-9n4kIN_XE8t5CRCnogPj4ksp9FLa3te3Ta-RA1Io6H6d7nzXMfllu_VwQo2s-UI5lPSKM1hhlBSvxX7pOR1G85yRNb6_vz4Q


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot