New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 637933 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 635602
Owner:
Closed: Aug 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug



Sign in to add a comment

MSaN Memory failure CheckSystemTokenAvailability_EnterprisePlatformKeysTest.Basic_0

Project Member Reported by tommycli@chromium.org, Aug 15 2016

Issue description

yhirano: Do you think your patch here may have caused this?

https://codereview.chromium.org/1970693002

Since that patch is so large, do you think there's a patch we can make instead of reverting the whole thing?

Thanks!

First failing build:
https://build.chromium.org/p/chromium.memory.full/builders/Linux%20ChromeOS%20MSan%20Tests/builds/345

Message:

(view as text)
CheckSystemTokenAvailability/EnterprisePlatformKeysTest.Basic/0 (run #1):

CheckSystemTokenAvailability/EnterprisePlatformKeysTest.Basic/0 (run #2):
[ RUN      ] CheckSystemTokenAvailability/EnterprisePlatformKeysTest.Basic/0
HTTPS server started on 127.0.0.1:52595...
sending server_data: {"host": "127.0.0.1", "port": 52595} (36 bytes)
[14300:14300:0813/071452:WARNING:audio_manager.cc(317)] Multiple instances of AudioManager detected
[14300:14300:0813/071452:WARNING:audio_manager.cc(278)] Multiple instances of AudioManager detected
Xlib:  extension "RANDR" missing on display ":9".
[14300:14300:0813/071452:WARNING:auto_enrollment_controller.cc(127)] Auto-enrollment disabled: command line.
[14300:14300:0813/071452:WARNING:auto_enrollment_controller.cc(259)] New auto-enrollment state: 5
[14300:14317:0813/071452:WARNING:freezer_cgroup_process_manager.cc(59)] Cgroup freezer does not exist or is not writable. Unable to freeze renderer processes.
[14300:14300:0813/071452:ERROR:network_profile_handler.cc(83)] Manager properties returned from Shill don't contain the field Profiles
[14300:14300:0813/071452:ERROR:network_sms_handler.cc(417)] NetworkSmsHandler: No list value for: Devices
[14300:14300:0813/071452:WARNING:server_backed_state_keys_broker.cc(76)] Failed to obtain server-backed state keys.
[14300:14300:0813/071452:WARNING:remote_commands_service.cc(36)] Fetching remote commands.
[14300:14332:0813/071452:ERROR:device_status_collector.cc(126)] Unable to get volume status for /tmp/chromeos/media/archive
[14300:14332:0813/071452:ERROR:device_status_collector.cc(126)] Unable to get volume status for /usr/share/oem
[14300:14332:0813/071452:ERROR:device_status_collector.cc(126)] Unable to get volume status for /tmp/chromeos/media/removable
[14300:14300:0813/071452:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14300:14300:0813/071452:WARNING:remote_commands_service.cc(161)] Remote commands fetched.
[14300:14300:0813/071452:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14300:14300:0813/071452:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14300:14300:0813/071452:WARNING:merge_session_throttling_utils.cc(138)] Loading content for a profile without session restore?
[14300:14300:0813/071452:WARNING:merge_session_throttling_utils.cc(138)] Loading content for a profile without session restore?
[14300:14315:0813/071452:WARNING:local_extension_cache.cc(259)] Extensions will not be installed from update URLs until /tmp/.org.chromium.Chromium.rBqht7/dHcqFb8/stub_device_local_extension_cache/.initialized exists.
[14300:14300:0813/071452:ERROR:multi_user_window_manager_stub.cc(56)] Not implemented reached in virtual void chrome::MultiUserWindowManagerStub::RemoveObserver(chrome::MultiUserWindowManager::Observer *)
[14300:14352:0813/071452:WARNING:server_connection_manager.cc(272)] ServerConnectionManager forcing SYNC_AUTH_ERROR
[14300:14352:0813/071452:WARNING:syncer_proto_util.cc(342)] Error posting from syncer: Response Code (bogus on error): -1 Content-Length (bogus on error): -1 Server Status: SYNC_AUTH_ERROR
==14300==WARNING: MemorySanitizer: use-of-uninitialized-value
    #0 0x65015b0 in GetInterface content/browser/renderer_host/render_process_host_impl.cc:511:15
    #1 0x6501885 in Invoke\u003Cconst base::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl> &, const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle> > base/bind_internal.h:214:12
    #2 0x6501885 in MakeItSo\u003Cvoid (content::RenderProcessHostImpl::ConnectionFilterImpl::*const &)(const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle>), const base::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl> &, const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle> > base/bind_internal.h:303:0
    #3 0x6501885 in RunImpl\u003Cvoid (content::RenderProcessHostImpl::ConnectionFilterImpl::*const &)(const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle>), const std::__1::tuple\u003Cbase::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl>, std::__1::basic_string\u003Cchar> > &, 0, 1> base/bind_internal.h:346:0
    #4 0x6501885 in Run base/bind_internal.h:324:0
    #5 0x1336d6f6 in Run base/callback.h:389:12
    #6 0x1336d6f6 in BindInterface services/shell/public/cpp/lib/callback_binder.cc:28:0
    #7 0x13360eab in GetInterface services/shell/public/cpp/lib/interface_registry.cc:90:19
    #8 0x564046c in Accept ./out/Release/gen/services/shell/public/interfaces/interface_provider.mojom.cc:262:14
    #9 0x129a944d in HandleMessageInternal mojo/public/cpp/bindings/lib/router.cc:291:32
    #10 0x129a6abf in HandleIncomingMessage mojo/public/cpp/bindings/lib/router.cc:221:10
    #11 0x5640ebe in Accept ./out/Release/gen/services/shell/public/interfaces/interface_provider.mojom.cc:297:19
    #12 0x1298367b in Accept mojo/public/cpp/bindings/lib/message_header_validator.cc:93:17
    #13 0x12972299 in ReadSingleMessage mojo/public/cpp/bindings/lib/connector.cc:276:51
    #14 0x129730f9 in ReadAllAvailableMessages mojo/public/cpp/bindings/lib/connector.cc:302:10
    #15 0x129730f9 in OnHandleReadyInternal mojo/public/cpp/bindings/lib/connector.cc:234:0
    #16 0x129730f9 in OnWatcherHandleReady mojo/public/cpp/bindings/lib/connector.cc:214:0
    #17 0x546ebde in Run base/callback.h:389:12
    #18 0x546ebde in OnHandleReady mojo/public/cpp/system/watcher.cc:122:0
    #19 0x546ebde in CallOnHandleReady mojo/public/cpp/system/watcher.cc:142:0
    #20 0x139a58c8 in Run base/callback.h:389:12
    #21 0x139a58c8 in MaybeInvokeCallback mojo/edk/system/watcher.cc:24:0
    #22 0x1398d051 in ~RequestContext mojo/edk/system/request_context.cc:59:22
    #23 0x139ca214 in OnChannelMessage mojo/edk/system/node_channel.cc:766:1
    #24 0x139b0714 in OnReadComplete mojo/edk/system/channel.cc:563:18
    #25 0x139b8446 in OnFileCanReadWithoutBlocking mojo/edk/system/channel_posix.cc:288:14
    #26 0xbe47fd0 in OnFileCanReadWithoutBlocking base/message_loop/message_pump_libevent.cc:95:13
    #27 0xbe47fd0 in OnLibeventNotification base/message_loop/message_pump_libevent.cc:344:0
    #28 0xf73243a in event_process_active base/third_party/libevent/event.c:381:4
    #29 0xf73243a in event_base_loop base/third_party/libevent/event.c:521:0
    #30 0xbe48e82 in Run base/message_loop/message_pump_libevent.cc:221:5
    #31 0xbed6f9c in Run base/run_loop.cc:35:10
    #32 0x59f5d87 in IOThreadRun content/browser/browser_thread_impl.cc:243:11
    #33 0x59f6359 in Run content/browser/browser_thread_impl.cc:278:14
    #34 0xbf7c7bc in ThreadMain base/threading/thread.cc:301:3
    #35 0xbf6b9c5 in ThreadFunc base/threading/platform_thread_posix.cc:71:13
    #36 0x7fba22c25e99 in start_thread /build/eglibc-oqps9y/eglibc-2.15/nptl/pthread_create.c:308:0
    #37 0x7fba1ed7e36c in ?? /build/eglibc-oqps9y/eglibc-2.15/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:112:0

  Uninitialized value was created by a heap deallocation
    #0 0x7e5722 in operator delete(void*) ??:0
    #1 0x15e8fb37 in ReplaceSearchTerms components/search_engines/template_url.cc:372:1
    #2 0xc405055 in ReplaceSearchTerms components/search_engines/template_url.h:239:12
    #3 0xc405055 in TemplateURLRefToGURL chrome/browser/search/search.cc:154:0
    #4 0xc405055 in ForProfile chrome/browser/search/search.cc:257:0
    #5 0xc40031f in GetNewTabPageURL chrome/browser/search/search.cc:470:10
    #6 0xc40031f in IsInstantURL chrome/browser/search/search.cc:165:0
    #7 0xc3ffff1 in ShouldAssignURLToInstantRenderer chrome/browser/search/search.cc:341:11
    #8 0xc1f370d in ?? chrome/browser/chrome_content_browser_client.cc:1038:7
    #9 0x686337d in GetEffectiveURL content/browser/site_instance_impl.cc:365:7
    #10 0x686337d in GetSiteForURL content/browser/site_instance_impl.cc:336:0
    #11 0x64fb7f6 in GetProcessHostForSite content/browser/renderer_host/render_process_host_impl.cc:2397:7
    #12 0x6860bfc in HasProcess content/browser/site_instance_impl.cc:78:7
    #13 0xc1f6593 in SiteInstanceDeleting chrome/browser/chrome_content_browser_client.cc:1269:23
    #14 0x68600d6 in ~SiteInstanceImpl content/browser/site_instance_impl.cc:37:34
    #15 0x68609bc in ?? content/browser/site_instance_impl.cc:36:39
    #16 0x5dcc4dc in Release base/memory/ref_counted.h:137:7
    #17 0x5dcc4dc in Release base/memory/ref_counted.h:407:0
    #18 0x5dcc4dc in ~scoped_refptr base/memory/ref_counted.h:311:0
    #19 0x5dcc4dc in ~RenderFrameHostImpl content/browser/frame_host/render_frame_host_impl.cc:346:0
    #20 0x5dccecc in ?? content/browser/frame_host/render_frame_host_impl.cc:303:45
    #21 0x5e2b939 in operator() buildtools/third_party/libc++/trunk/include/memory:2529:13
    #22 0x5e2b939 in reset buildtools/third_party/libc++/trunk/include/memory:2735:0
    #23 0x5e2b939 in ~unique_ptr buildtools/third_party/libc++/trunk/include/memory:2703:0
    #24 0x5e2b939 in ~RenderFrameHostManager content/browser/frame_host/render_frame_host_manager.cc:84:0
    #25 0x5d41c3f in ~FrameTreeNode content/browser/frame_host/frame_tree_node.cc:130:1
    #26 0x5d317c1 in ~FrameTree content/browser/frame_host/frame_tree.cc:116:3
    #27 0x696260c in ~WebContentsImpl content/browser/web_contents/web_contents_impl.cc:553:1
    #28 0x6964b7c in ?? content/browser/web_contents/web_contents_impl.cc:457:37
    #29 0x1761f998 in operator() buildtools/third_party/libc++/trunk/include/memory:2529:13
    #30 0x1761f998 in reset buildtools/third_party/libc++/trunk/include/memory:2735:0
    #31 0x1761f998 in SetWebContents ui/views/controls/webview/webview.cc:73:0

SUMMARY: MemorySanitizer: use-of-uninitialized-value (/b/swarm_slave/w/irnRYyqs/out/Release/browser_tests+0x65015b0)
Exiting

CheckSystemTokenAvailability/EnterprisePlatformKeysTest.Basic/0 (run #3):
[ RUN      ] CheckSystemTokenAvailability/EnterprisePlatformKeysTest.Basic/0
HTTPS server started on 127.0.0.1:33549...
sending server_data: {"host": "127.0.0.1", "port": 33549} (36 bytes)
[14426:14426:0813/071456:WARNING:audio_manager.cc(317)] Multiple instances of AudioManager detected
[14426:14426:0813/071456:WARNING:audio_manager.cc(278)] Multiple instances of AudioManager detected
Xlib:  extension "RANDR" missing on display ":9".
[14426:14426:0813/071456:WARNING:auto_enrollment_controller.cc(127)] Auto-enrollment disabled: command line.
[14426:14426:0813/071456:WARNING:auto_enrollment_controller.cc(259)] New auto-enrollment state: 5
[14426:14445:0813/071456:WARNING:freezer_cgroup_process_manager.cc(59)] Cgroup freezer does not exist or is not writable. Unable to freeze renderer processes.
[14426:14426:0813/071456:ERROR:network_profile_handler.cc(83)] Manager properties returned from Shill don't contain the field Profiles
[14426:14426:0813/071456:ERROR:network_sms_handler.cc(417)] NetworkSmsHandler: No list value for: Devices
[14426:14426:0813/071456:WARNING:server_backed_state_keys_broker.cc(76)] Failed to obtain server-backed state keys.
[14426:14426:0813/071456:WARNING:remote_commands_service.cc(36)] Fetching remote commands.
[14426:14460:0813/071456:ERROR:device_status_collector.cc(126)] Unable to get volume status for /tmp/chromeos/media/archive
[14426:14460:0813/071456:ERROR:device_status_collector.cc(126)] Unable to get volume status for /usr/share/oem
[14426:14460:0813/071456:ERROR:device_status_collector.cc(126)] Unable to get volume status for /tmp/chromeos/media/removable
[14426:14426:0813/071456:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14426:14426:0813/071456:WARNING:remote_commands_service.cc(161)] Remote commands fetched.
[14426:14426:0813/071456:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14426:14426:0813/071456:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14426:14426:0813/071456:WARNING:merge_session_throttling_utils.cc(138)] Loading content for a profile without session restore?
[14426:14426:0813/071456:WARNING:merge_session_throttling_utils.cc(138)] Loading content for a profile without session restore?
[14426:14460:0813/071456:WARNING:local_extension_cache.cc(259)] Extensions will not be installed from update URLs until /tmp/.org.chromium.Chromium.rBqht7/dZDcooW/stub_device_local_extension_cache/.initialized exists.
[14455:14455:0813/071456:ERROR:interface_registry.cc(100)] Failed to locate a binder for interface: mojom::ResourceUsageReporter
[14426:14426:0813/071456:ERROR:multi_user_window_manager_stub.cc(56)] Not implemented reached in virtual void chrome::MultiUserWindowManagerStub::RemoveObserver(chrome::MultiUserWindowManager::Observer *)
[14426:14479:0813/071456:WARNING:server_connection_manager.cc(272)] ServerConnectionManager forcing SYNC_AUTH_ERROR
[14426:14479:0813/071456:WARNING:syncer_proto_util.cc(342)] Error posting from syncer: Response Code (bogus on error): -1 Content-Length (bogus on error): -1 Server Status: SYNC_AUTH_ERROR
==14426==WARNING: MemorySanitizer: use-of-uninitialized-value
    #0 0x65015b0 in GetInterface content/browser/renderer_host/render_process_host_impl.cc:511:15
    #1 0x6501885 in Invoke\u003Cconst base::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl> &, const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle> > base/bind_internal.h:214:12
    #2 0x6501885 in MakeItSo\u003Cvoid (content::RenderProcessHostImpl::ConnectionFilterImpl::*const &)(const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle>), const base::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl> &, const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle> > base/bind_internal.h:303:0
    #3 0x6501885 in RunImpl\u003Cvoid (content::RenderProcessHostImpl::ConnectionFilterImpl::*const &)(const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle>), const std::__1::tuple\u003Cbase::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl>, std::__1::basic_string\u003Cchar> > &, 0, 1> base/bind_internal.h:346:0
    #4 0x6501885 in Run base/bind_internal.h:324:0
    #5 0x1336d6f6 in Run base/callback.h:389:12
    #6 0x1336d6f6 in BindInterface services/shell/public/cpp/lib/callback_binder.cc:28:0
    #7 0x13360eab in GetInterface services/shell/public/cpp/lib/interface_registry.cc:90:19
    #8 0x564046c in Accept ./out/Release/gen/services/shell/public/interfaces/interface_provider.mojom.cc:262:14
    #9 0x129a944d in HandleMessageInternal mojo/public/cpp/bindings/lib/router.cc:291:32
    #10 0x129a6abf in HandleIncomingMessage mojo/public/cpp/bindings/lib/router.cc:221:10
    #11 0x5640ebe in Accept ./out/Release/gen/services/shell/public/interfaces/interface_provider.mojom.cc:297:19
    #12 0x1298367b in Accept mojo/public/cpp/bindings/lib/message_header_validator.cc:93:17
    #13 0x12972299 in ReadSingleMessage mojo/public/cpp/bindings/lib/connector.cc:276:51
    #14 0x129730f9 in ReadAllAvailableMessages mojo/public/cpp/bindings/lib/connector.cc:302:10
    #15 0x129730f9 in OnHandleReadyInternal mojo/public/cpp/bindings/lib/connector.cc:234:0
    #16 0x129730f9 in OnWatcherHandleReady mojo/public/cpp/bindings/lib/connector.cc:214:0
    #17 0x546ebde in Run base/callback.h:389:12
    #18 0x546ebde in OnHandleReady mojo/public/cpp/system/watcher.cc:122:0
    #19 0x546ebde in CallOnHandleReady mojo/public/cpp/system/watcher.cc:142:0
    #20 0x139a58c8 in Run base/callback.h:389:12
    #21 0x139a58c8 in MaybeInvokeCallback mojo/edk/system/watcher.cc:24:0
    #22 0x1398d051 in ~RequestContext mojo/edk/system/request_context.cc:59:22
    #23 0x139ca214 in OnChannelMessage mojo/edk/system/node_channel.cc:766:1
    #24 0x139b0714 in OnReadComplete mojo/edk/system/channel.cc:563:18
    #25 0x139b8446 in OnFileCanReadWithoutBlocking mojo/edk/system/channel_posix.cc:288:14
    #26 0xbe47fd0 in OnFileCanReadWithoutBlocking base/message_loop/message_pump_libevent.cc:95:13
    #27 0xbe47fd0 in OnLibeventNotification base/message_loop/message_pump_libevent.cc:344:0
    #28 0xf73243a in event_process_active base/third_party/libevent/event.c:381:4
    #29 0xf73243a in event_base_loop base/third_party/libevent/event.c:521:0
    #30 0xbe48e82 in Run base/message_loop/message_pump_libevent.cc:221:5
    #31 0xbed6f9c in Run base/run_loop.cc:35:10
    #32 0x59f5d87 in IOThreadRun content/browser/browser_thread_impl.cc:243:11
    #33 0x59f6359 in Run content/browser/browser_thread_impl.cc:278:14
    #34 0xbf7c7bc in ThreadMain base/threading/thread.cc:301:3
    #35 0xbf6b9c5 in ThreadFunc base/threading/platform_thread_posix.cc:71:13
    #36 0x7f1e28a8be99 in start_thread /build/eglibc-oqps9y/eglibc-2.15/nptl/pthread_create.c:308:0
    #37 0x7f1e24be436c in ?? /build/eglibc-oqps9y/eglibc-2.15/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:112:0

  Uninitialized value was created by a heap deallocation
    #0 0x7e5722 in operator delete(void*) ??:0
    #1 0x15e8fb37 in ReplaceSearchTerms components/search_engines/template_url.cc:372:1
    #2 0xc405055 in ReplaceSearchTerms components/search_engines/template_url.h:239:12
    #3 0xc405055 in TemplateURLRefToGURL chrome/browser/search/search.cc:154:0
    #4 0xc405055 in ForProfile chrome/browser/search/search.cc:257:0
    #5 0xc40031f in GetNewTabPageURL chrome/browser/search/search.cc:470:10
    #6 0xc40031f in IsInstantURL chrome/browser/search/search.cc:165:0
    #7 0xc3ffff1 in ShouldAssignURLToInstantRenderer chrome/browser/search/search.cc:341:11
    #8 0xc1f370d in ?? chrome/browser/chrome_content_browser_client.cc:1038:7
    #9 0x686337d in GetEffectiveURL content/browser/site_instance_impl.cc:365:7
    #10 0x686337d in GetSiteForURL content/browser/site_instance_impl.cc:336:0
    #11 0x64fb7f6 in GetProcessHostForSite content/browser/renderer_host/render_process_host_impl.cc:2397:7
    #12 0x6860bfc in HasProcess content/browser/site_instance_impl.cc:78:7
    #13 0xc1f6593 in SiteInstanceDeleting chrome/browser/chrome_content_browser_client.cc:1269:23
    #14 0x68600d6 in ~SiteInstanceImpl content/browser/site_instance_impl.cc:37:34
    #15 0x68609bc in ?? content/browser/site_instance_impl.cc:36:39
    #16 0x5dcc4dc in Release base/memory/ref_counted.h:137:7
    #17 0x5dcc4dc in Release base/memory/ref_counted.h:407:0
    #18 0x5dcc4dc in ~scoped_refptr base/memory/ref_counted.h:311:0
    #19 0x5dcc4dc in ~RenderFrameHostImpl content/browser/frame_host/render_frame_host_impl.cc:346:0
    #20 0x5dccecc in ?? content/browser/frame_host/render_frame_host_impl.cc:303:45
    #21 0x5e2b939 in operator() buildtools/third_party/libc++/trunk/include/memory:2529:13
    #22 0x5e2b939 in reset buildtools/third_party/libc++/trunk/include/memory:2735:0
    #23 0x5e2b939 in ~unique_ptr buildtools/third_party/libc++/trunk/include/memory:2703:0
    #24 0x5e2b939 in ~RenderFrameHostManager content/browser/frame_host/render_frame_host_manager.cc:84:0
    #25 0x5d41c3f in ~FrameTreeNode content/browser/frame_host/frame_tree_node.cc:130:1
    #26 0x5d317c1 in ~FrameTree content/browser/frame_host/frame_tree.cc:116:3
    #27 0x696260c in ~WebContentsImpl content/browser/web_contents/web_contents_impl.cc:553:1
    #28 0x6964b7c in ?? content/browser/web_contents/web_contents_impl.cc:457:37
    #29 0x1761f998 in operator() buildtools/third_party/libc++/trunk/include/memory:2529:13
    #30 0x1761f998 in reset buildtools/third_party/libc++/trunk/include/memory:2735:0
    #31 0x1761f998 in SetWebContents ui/views/controls/webview/webview.cc:73:0

SUMMARY: MemorySanitizer: use-of-uninitialized-value (/b/swarm_slave/w/irnRYyqs/out/Release/browser_tests+0x65015b0)
Exiting

CheckSystemTokenAvailability/EnterprisePlatformKeysTest.Basic/0 (run #4):
[ RUN      ] CheckSystemTokenAvailability/EnterprisePlatformKeysTest.Basic/0
HTTPS server started on 127.0.0.1:33160...
sending server_data: {"host": "127.0.0.1", "port": 33160} (36 bytes)
[14553:14553:0813/071459:WARNING:audio_manager.cc(317)] Multiple instances of AudioManager detected
[14553:14553:0813/071459:WARNING:audio_manager.cc(278)] Multiple instances of AudioManager detected
Xlib:  extension "RANDR" missing on display ":9".
[14553:14553:0813/071500:WARNING:auto_enrollment_controller.cc(127)] Auto-enrollment disabled: command line.
[14553:14553:0813/071500:WARNING:auto_enrollment_controller.cc(259)] New auto-enrollment state: 5
[14553:14570:0813/071500:WARNING:freezer_cgroup_process_manager.cc(59)] Cgroup freezer does not exist or is not writable. Unable to freeze renderer processes.
[14553:14553:0813/071500:ERROR:network_profile_handler.cc(83)] Manager properties returned from Shill don't contain the field Profiles
[14553:14553:0813/071500:ERROR:network_sms_handler.cc(417)] NetworkSmsHandler: No list value for: Devices
[14553:14553:0813/071500:WARNING:server_backed_state_keys_broker.cc(76)] Failed to obtain server-backed state keys.
[14553:14553:0813/071500:WARNING:remote_commands_service.cc(36)] Fetching remote commands.
[14553:14568:0813/071500:ERROR:device_status_collector.cc(126)] Unable to get volume status for /tmp/chromeos/media/archive
[14553:14568:0813/071500:ERROR:device_status_collector.cc(126)] Unable to get volume status for /usr/share/oem
[14553:14568:0813/071500:ERROR:device_status_collector.cc(126)] Unable to get volume status for /tmp/chromeos/media/removable
[14553:14553:0813/071500:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14553:14553:0813/071500:WARNING:remote_commands_service.cc(161)] Remote commands fetched.
[14553:14553:0813/071500:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14553:14553:0813/071500:WARNING:device_management_service.cc(247)] DMServer request failed, status: 3, error: -102
[14553:14553:0813/071500:WARNING:merge_session_throttling_utils.cc(138)] Loading content for a profile without session restore?
[14553:14553:0813/071500:WARNING:merge_session_throttling_utils.cc(138)] Loading content for a profile without session restore?
[14553:14568:0813/071500:WARNING:local_extension_cache.cc(259)] Extensions will not be installed from update URLs until /tmp/.org.chromium.Chromium.rBqht7/dsTtRqt/stub_device_local_extension_cache/.initialized exists.
[14553:14553:0813/071500:ERROR:multi_user_window_manager_stub.cc(56)] Not implemented reached in virtual void chrome::MultiUserWindowManagerStub::RemoveObserver(chrome::MultiUserWindowManager::Observer *)
[14553:14605:0813/071500:WARNING:server_connection_manager.cc(272)] ServerConnectionManager forcing SYNC_AUTH_ERROR
[14553:14605:0813/071500:WARNING:syncer_proto_util.cc(342)] Error posting from syncer: Response Code (bogus on error): -1 Content-Length (bogus on error): -1 Server Status: SYNC_AUTH_ERROR
==14553==WARNING: MemorySanitizer: use-of-uninitialized-value
    #0 0x65015b0 in GetInterface content/browser/renderer_host/render_process_host_impl.cc:511:15
    #1 0x6501885 in Invoke\u003Cconst base::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl> &, const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle> > base/bind_internal.h:214:12
    #2 0x6501885 in MakeItSo\u003Cvoid (content::RenderProcessHostImpl::ConnectionFilterImpl::*const &)(const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle>), const base::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl> &, const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle> > base/bind_internal.h:303:0
    #3 0x6501885 in RunImpl\u003Cvoid (content::RenderProcessHostImpl::ConnectionFilterImpl::*const &)(const std::__1::basic_string\u003Cchar> &, mojo::ScopedHandleBase\u003Cmojo::MessagePipeHandle>), const std::__1::tuple\u003Cbase::WeakPtr\u003Ccontent::RenderProcessHostImpl::ConnectionFilterImpl>, std::__1::basic_string\u003Cchar> > &, 0, 1> base/bind_internal.h:346:0
    #4 0x6501885 in Run base/bind_internal.h:324:0
    #5 0x1336d6f6 in Run base/callback.h:389:12
    #6 0x1336d6f6 in BindInterface services/shell/public/cpp/lib/callback_binder.cc:28:0
    #7 0x13360eab in GetInterface services/shell/public/cpp/lib/interface_registry.cc:90:19
    #8 0x564046c in Accept ./out/Release/gen/services/shell/public/interfaces/interface_provider.mojom.cc:262:14
    #9 0x129a944d in HandleMessageInternal mojo/public/cpp/bindings/lib/router.cc:291:32
    #10 0x129a6abf in HandleIncomingMessage mojo/public/cpp/bindings/lib/router.cc:221:10
    #11 0x5640ebe in Accept ./out/Release/gen/services/shell/public/interfaces/interface_provider.mojom.cc:297:19
    #12 0x1298367b in Accept mojo/public/cpp/bindings/lib/message_header_validator.cc:93:17
    #13 0x12972299 in ReadSingleMessage mojo/public/cpp/bindings/lib/connector.cc:276:51
    #14 0x129730f9 in ReadAllAvailableMessages mojo/public/cpp/bindings/lib/connector.cc:302:10
    #15 0x129730f9 in OnHandleReadyInternal mojo/public/cpp/bindings/lib/connector.cc:234:0
    #16 0x129730f9 in OnWatcherHandleReady mojo/public/cpp/bindings/lib/connector.cc:214:0
    #17 0x546ebde in Run base/callback.h:389:12
    #18 0x546ebde in OnHandleReady mojo/public/cpp/system/watcher.cc:122:0
    #19 0x546ebde in CallOnHandleReady mojo/public/cpp/system/watcher.cc:142:0
    #20 0x139a58c8 in Run base/callback.h:389:12
    #21 0x139a58c8 in MaybeInvokeCallback mojo/edk/system/watcher.cc:24:0
    #22 0x1398d051 in ~RequestContext mojo/edk/system/request_context.cc:59:22
    #23 0x139ca214 in OnChannelMessage mojo/edk/system/node_channel.cc:766:1
    #24 0x139b0714 in OnReadComplete mojo/edk/system/channel.cc:563:18
    #25 0x139b8446 in OnFileCanReadWithoutBlocking mojo/edk/system/channel_posix.cc:288:14
    #26 0xbe47fd0 in OnFileCanReadWithoutBlocking base/message_loop/message_pump_libevent.cc:95:13
    #27 0xbe47fd0 in OnLibeventNotification base/message_loop/message_pump_libevent.cc:344:0
    #28 0xf73243a in event_process_active base/third_party/libevent/event.c:381:4
    #29 0xf73243a in event_base_loop base/third_party/libevent/event.c:521:0
    #30 0xbe48e82 in Run base/message_loop/message_pump_libevent.cc:221:5
    #31 0xbed6f9c in Run base/run_loop.cc:35:10
    #32 0x59f5d87 in IOThreadRun content/browser/browser_thread_impl.cc:243:11
    #33 0x59f6359 in Run content/browser/browser_thread_impl.cc:278:14
    #34 0xbf7c7bc in ThreadMain base/threading/thread.cc:301:3
    #35 0xbf6b9c5 in ThreadFunc base/threading/platform_thread_posix.cc:71:13
    #36 0x7ff635083e99 in start_thread /build/eglibc-oqps9y/eglibc-2.15/nptl/pthread_create.c:308:0
    #37 0x7ff6311dc36c in ?? /build/eglibc-oqps9y/eglibc-2.15/misc/../sysdeps/unix/sysv/linux/x86_64/clone.S:112:0

  Uninitialized value was created by a heap deallocation
    #0 0x7e5722 in operator delete(void*) ??:0
    #1 0x15e8fb37 in ReplaceSearchTerms components/search_engines/template_url.cc:372:1
    #2 0xc405055 in ReplaceSearchTerms components/search_engines/template_url.h:239:12
    #3 0xc405055 in TemplateURLRefToGURL chrome/browser/search/search.cc:154:0
    #4 0xc405055 in ForProfile chrome/browser/search/search.cc:257:0
    #5 0xc40031f in GetNewTabPageURL chrome/browser/search/search.cc:470:10
    #6 0xc40031f in IsInstantURL chrome/browser/search/search.cc:165:0
    #7 0xc3ffff1 in ShouldAssignURLToInstantRenderer chrome/browser/search/search.cc:341:11
    #8 0xc1f370d in ?? chrome/browser/chrome_content_browser_client.cc:1038:7
    #9 0x686337d in GetEffectiveURL content/browser/site_instance_impl.cc:365:7
    #10 0x686337d in GetSiteForURL content/browser/site_instance_impl.cc:336:0
    #11 0x64fb7f6 in GetProcessHostForSite content/browser/renderer_host/render_process_host_impl.cc:2397:7
    #12 0x6860bfc in HasProcess content/browser/site_instance_impl.cc:78:7
    #13 0xc1f6593 in SiteInstanceDeleting chrome/browser/chrome_content_browser_client.cc:1269:23
    #14 0x68600d6 in ~SiteInstanceImpl content/browser/site_instance_impl.cc:37:34
    #15 0x68609bc in ?? content/browser/site_instance_impl.cc:36:39
    #16 0x5dcc4dc in Release base/memory/ref_counted.h:137:7
    #17 0x5dcc4dc in Release base/memory/ref_counted.h:407:0
    #18 0x5dcc4dc in ~scoped_refptr base/memory/ref_counted.h:311:0
    #19 0x5dcc4dc in ~RenderFrameHostImpl content/browser/frame_host/render_frame_host_impl.cc:346:0
    #20 0x5dccecc in ?? content/browser/frame_host/render_frame_host_impl.cc:303:45
    #21 0x5e2b939 in operator() buildtools/third_party/libc++/trunk/include/memory:2529:13
    #22 0x5e2b939 in reset buildtools/third_party/libc++/trunk/include/memory:2735:0
    #23 0x5e2b939 in ~unique_ptr buildtools/third_party/libc++/trunk/include/memory:2703:0
    #24 0x5e2b939 in ~RenderFrameHostManager content/browser/frame_host/render_frame_host_manager.cc:84:0
    #25 0x5d41c3f in ~FrameTreeNode content/browser/frame_host/frame_tree_node.cc:130:1
    #26 0x5d317c1 in ~FrameTree content/browser/frame_host/frame_tree.cc:116:3
    #27 0x696260c in ~WebContentsImpl content/browser/web_contents/web_contents_impl.cc:553:1
    #28 0x6964b7c in ?? content/browser/web_contents/web_contents_impl.cc:457:37
    #29 0x1761f998 in operator() buildtools/third_party/libc++/trunk/include/memory:2529:13
    #30 0x1761f998 in reset buildtools/third_party/libc++/trunk/include/memory:2735:0
    #31 0x1761f998 in SetWebContents ui/views/controls/webview/webview.cc:73:0

SUMMARY: MemorySanitizer: use-of-uninitialized-value (/b/swarm_slave/w/irnRYyqs/out/Release/browser_tests+0x65015b0)
Exiting
 
Status: Started (was: Untriaged)
Cc: tzik@chromium.org

Comment 3 by tzik@chromium.org, Aug 16 2016

Cc: ben@chromium.org
I believe this is related to  issue 635602 . [1] shows a RenderProcessHostImpl::ConnectionFilterImpl is accessed after its destruction (search [1] for "this = 0x70c00003f360").

I can't see  issue 635602 . Please cc me.

1: https://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_chromeos_msan_rel_ng/builds/358/steps/browser_tests%20%28with%20patch%29%20on%20Ubuntu-12.04/logs/stdio
Mergedinto: 635602
Status: Duplicate (was: Started)
It's now fixed, probably by https://chromium.googlesource.com/chromium/src/+/e4efa8e32c849adaf14e11b4c9d27bd2a7c433b5.
yhirano: Thank you for investigating and fixing it. I'm glad I didn't revert your mega CL now.

Sign in to add a comment