New issue
Advanced search Search tips

Issue 753792 link

Starred by 1 user

Issue metadata

Status: Archived
Owner:
Closed: Aug 2017
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 1
Type: Bug

Blocking:
issue 737960



Sign in to add a comment

heap-user-after-free in login_browsertests on Linux Chromium OS ASan LSan Tests (1)

Project Member Reported by gab@chromium.org, Aug 9 2017

Issue description

https://build.chromium.org/p/chromium.memory/builders/Linux%20Chromium%20OS%20ASan%20LSan%20Tests%20%281%29

Suspect: https://chromium-review.googlesource.com/c/555500 (reverting)

[ RUN      ] ActiveDirectoryLoginTest.LoginSuccess
HTTPS server started on 127.0.0.1:49284...
sending server_data: {"host": "127.0.0.1", "port": 49284} (36 bytes)
[25311:25311:0809/034237.146421:ERROR:configuration_policy_handler_list.cc(92)] Unknown policy: NTPContentSuggestionsEnabled
[25311:25364:0809/034237.333450:WARNING:freezer_cgroup_process_manager.cc(62)] Cgroup freezer does not exist or is not writable. Unable to freeze renderer processes.
[25311:25311:0809/034237.408186:ERROR:configuration_policy_handler_list.cc(92)] Unknown policy: NTPContentSuggestionsEnabled
[25311:25311:0809/034239.771735:WARNING:CONSOLE(0)] "Styling master document from stylesheets defined in HTML Imports is deprecated, and is planned to be removed in M65, around March 2018. Please refer to https://goo.gl/EGXzpw for possible migration paths.", source:  (0)
[25311:25311:0809/034248.548440:INFO:CONSOLE(9404)] "Loading asset bundle oauth-enrollment", source: chrome://oobe/login.js (9404)
[25311:25311:0809/034248.609099:INFO:lock_screen_utils.cc(56)] GetUserLastInputMethod: no input method for this user
[25311:25311:0809/034248.909926:INFO:signin_screen_handler.cc(1357)] Login WebUI >> active: 1, source: gaia-signin
[25311:25311:0809/034250.923524:INFO:CONSOLE(9388)] "Finished loading asset bundle oauth-enrollment", source: chrome://oobe/login.js (9388)
[25311:25311:0809/034252.584206:ERROR:configuration_policy_handler_list.cc(92)] Unknown policy: NTPContentSuggestionsEnabled
=================================================================
==25311==AddressSanitizer: while reporting a bug found another one. Ignoring.
==25311==ERROR: AddressSanitizer: heap-use-after-free on address 0x6030004f7441 at pc 0x0000004bfe74 bp 0x7fcb0a9029b0 sp 0x7fcb0a902158
READ of size 12 at 0x6030004f7441 thread T11 (TaskSchedulerBa)
    #0 0x4bfe73 in __interceptor_strlen (/b/s/w/ir/out/Release/interactive_ui_tests+0x4bfe73)
    #1 0x4dae367 in length buildtools/third_party/libc++/trunk/include/__string:215:53
    #2 0x4dae367 in basic_string buildtools/third_party/libc++/trunk/include/string:1574
    #3 0x4dae367 in void base::internal::FunctorTraits<void (*)(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), void>::Invoke<char const*, char const*>(void (*)(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&), char const*&&, char const*&&) base/bind_internal.h:151
    #4 0xb382e55 in Run base/callback.h:91:12
    #5 0xb382e55 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) base/debug/task_annotator.cc:59
    #6 0xb50367e in base::internal::TaskTracker::PerformRunTask(std::__1::unique_ptr<base::internal::Task, std::__1::default_delete<base::internal::Task> >, base::internal::Sequence*) base/task_scheduler/task_tracker.cc:335:28
    #7 0xb504c29 in base::internal::TaskTrackerPosix::PerformRunTask(std::__1::unique_ptr<base::internal::Task, std::__1::default_delete<base::internal::Task> >, base::internal::Sequence*) base/task_scheduler/task_tracker_posix.cc:22:16
    #8 0xb501d2b in base::internal::TaskTracker::RunNextTask(base::internal::Sequence*) base/task_scheduler/task_tracker.cc:251:5
    #9 0xb61fd0c in base::internal::SchedulerWorker::Thread::ThreadMain() base/task_scheduler/scheduler_worker.cc:73:34
    #10 0xb51bef2 in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:71:13
    #11 0x7fcb22d30183 in start_thread /build/eglibc-MjiXCM/eglibc-2.19/nptl/pthread_create.c:312
0x6030004f7441 is located 1 bytes inside of 24-byte region [0x6030004f7440,0x6030004f7458)
freed by thread T0 (interactive_ui_) here:
    #0 0x5774d2 in operator delete(void*) (/b/s/w/ir/out/Release/interactive_ui_tests+0x5774d2)
    #1 0xc221d44 in google::protobuf::internal::ArenaStringPtr::DestroyNoArena(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const*) third_party/protobuf/src/google/protobuf/arenastring.cc:50:5
    #2 0xc60ba9d in SharedDtor out/Release/gen/chromeos/dbus/authpolicy/active_directory_info.pb.cc:1469:11
    #3 0xc60ba9d in authpolicy::KerberosFiles::~KerberosFiles() out/Release/gen/chromeos/dbus/authpolicy/active_directory_info.pb.cc:1465
    #4 0xb1afeeb in ~__tuple_leaf buildtools/third_party/libc++/trunk/include/tuple:170:7
    #5 0xb1afeeb in ~__tuple_impl buildtools/third_party/libc++/trunk/include/tuple:369
    #6 0xb1afeeb in ~tuple buildtools/third_party/libc++/trunk/include/tuple:474
    #7 0xb1afeeb in ~BindState base/bind_internal.h:480
    #8 0xb1afeeb in base::internal::BindState<base::Callback<void (authpolicy::ErrorType, authpolicy::KerberosFiles const&), (base::internal::CopyMode)0, (base::internal::RepeatMode)0>, authpolicy::ErrorType, authpolicy::KerberosFiles>::Destroy(base::internal::BindStateBase const*) base/bind_internal.h:483
    #9 0xb382e5d in Run base/callback.h:92:3
    #10 0xb382e5d in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) base/debug/task_annotator.cc:59
    #11 0xb3f8d2a in base::MessageLoop::RunTask(base::PendingTask*) base/message_loop/message_loop.cc:410:19
    #12 0xb3f9690 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) base/message_loop/message_loop.cc:421:5
    #13 0xb3fa3d1 in base::MessageLoop::DoWork() base/message_loop/message_loop.cc:528:13
    #14 0xb404e70 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_libevent.cc:220:31
    #15 0xb3f7b85 in base::MessageLoop::Run() base/message_loop/message_loop.cc:350:10
    #16 0xb496ad0 in base::RunLoop::Run() base/run_loop.cc:123:14
    #17 0x93414d9 in RunThisRunLoop content/public/test/test_utils.cc:125:13
    #18 0x93414d9 in content::MessageLoopRunner::Run() content/public/test/test_utils.cc:244
    #19 0x934226c in content::WindowedNotificationObserver::Wait() content/public/test/test_utils.cc:313:25
    #20 0xc61c08 in chromeos::ActiveDirectoryLoginTest_LoginSuccess_Test::RunTestOnMainThread() chrome/browser/chromeos/login/login_browsertest.cc:443:24
    #21 0x9312cdf in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:315:5
    #22 0x83bfc02 in Run base/callback.h:80:12
    #23 0x83bfc02 in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() chrome/browser/chrome_browser_main.cc:1857
    #24 0x83bcf03 in ChromeBrowserMainParts::PreMainMessageLoopRun() chrome/browser/chrome_browser_main.cc:1210:18
    #25 0x4de8aa0 in chromeos::ChromeBrowserMainPartsChromeos::PreMainMessageLoopRun() chrome/browser/chromeos/chrome_browser_main_chromeos.cc:659:32
    #26 0x2b296e4 in content::BrowserMainLoop::PreMainMessageLoopRun() content/browser/browser_main_loop.cc:1151:13
    #27 0x3a53b78 in Run base/callback.h:80:12
    #28 0x3a53b78 in content::StartupTaskRunner::RunAllTasksNow() content/browser/startup_task_runner.cc:45
    #29 0x2b245df in content::BrowserMainLoop::CreateStartupTasks() content/browser/browser_main_loop.cc:935:25
    #30 0x2b3237d in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&) content/browser/browser_main_runner.cc:131:17
    #31 0x2b1c406 in content::BrowserMain(content::MainFunctionParams const&) content/browser/browser_main.cc:42:32
    #32 0x809ac6e in content::RunNamedProcessTypeMain(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, content::MainFunctionParams const&, content::ContentMainDelegate*) content/app/content_main_runner.cc:408:14
    #33 0x809cc69 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner.cc:690:12
    #34 0xe65237c in service_manager::Main(service_manager::MainParams const&) services/service_manager/embedder/main.cc:469:29
    #35 0x8099033 in content::ContentMain(content::ContentMainParams const&) content/app/content_main.cc:19:10
    #36 0x9311c6f in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:271:3
    #37 0x8384717 in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:271:20
    #38 0xc6b755 in chromeos::LoginManagerTest::SetUp() chrome/browser/chromeos/login/login_manager_test.cc:93:26
previously allocated by thread T0 (interactive_ui_) here:
    #0 0x5768b2 in operator new(unsigned long) (/b/s/w/ir/out/Release/interactive_ui_tests+0x5768b2)
    #1 0x25917e9 in google::protobuf::internal::ArenaStringPtr::CreateInstanceNoArena(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const*) third_party/protobuf/src/google/protobuf/arenastring.h:295:12
    #2 0xc60b8fc in SetNoArena third_party/protobuf/src/google/protobuf/arenastring.h:207:7
    #3 0xc60b8fc in AssignWithDefault third_party/protobuf/src/google/protobuf/arenastring.h:313
    #4 0xc60b8fc in authpolicy::KerberosFiles::KerberosFiles(authpolicy::KerberosFiles const&) out/Release/gen/chromeos/dbus/authpolicy/active_directory_info.pb.cc:1448
    #5 0xb1afda7 in __tuple_leaf<authpolicy::KerberosFiles &, void> buildtools/third_party/libc++/trunk/include/tuple:226:15
    #6 0xb1afda7 in __tuple_impl<0, 1, authpolicy::ErrorType, authpolicy::KerberosFiles, authpolicy::ErrorType, authpolicy::KerberosFiles &> buildtools/third_party/libc++/trunk/include/tuple:385
    #7 0xb1afda7 in tuple<authpolicy::ErrorType, authpolicy::KerberosFiles &, false, false> buildtools/third_party/libc++/trunk/include/tuple:738
    #8 0xb1afda7 in base::internal::BindState<base::Callback<void (authpolicy::ErrorType, authpolicy::KerberosFiles const&), (base::internal::CopyMode)0, (base::internal::RepeatMode)0>, authpolicy::ErrorType, authpolicy::KerberosFiles>::BindState<base::Callback<void (authpolicy::ErrorType, authpolicy::KerberosFiles const&), (base::internal::CopyMode)0, (base::internal::RepeatMode)0>, authpolicy::ErrorType, authpolicy::KerberosFiles&>(std::__1::integral_constant<bool, true>, void (*)(), base::Callback<void (authpolicy::ErrorType, authpolicy::KerberosFiles const&), (base::internal::CopyMode)0, (base::internal::RepeatMode)0>&&, authpolicy::ErrorType&&, authpolicy::KerberosFiles&) base/bind_internal.h:465
    #9 0xb1ac43f in BindState<base::Callback<void (authpolicy::ErrorType, const authpolicy::KerberosFiles &), base::internal::CopyMode::MoveOnly, base::internal::RepeatMode::Once>, authpolicy::ErrorType, authpolicy::KerberosFiles &> base/bind_internal.h:442:9
    #10 0xb1ac43f in BindOnce<base::Callback<void (authpolicy::ErrorType, const authpolicy::KerberosFiles &), base::internal::CopyMode::MoveOnly, base::internal::RepeatMode::Once>, authpolicy::ErrorType, authpolicy::KerberosFiles &> base/bind.h:162
    #11 0xb1ac43f in chromeos::FakeAuthPolicyClient::GetUserKerberosFiles(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::Callback<void (authpolicy::ErrorType, authpolicy::KerberosFiles const&), (base::internal::CopyMode)0, (base::internal::RepeatMode)0>) chromeos/dbus/fake_auth_policy_client.cc:166
    #12 0x4da7e2e in chromeos::AuthPolicyCredentialsManager::GetUserKerberosFiles() chrome/browser/chromeos/authpolicy/auth_policy_credentials_manager.cc:237:9
    #13 0x4da680f in chromeos::AuthPolicyCredentialsManager::AuthPolicyCredentialsManager(Profile*) chrome/browser/chromeos/authpolicy/auth_policy_credentials_manager.cc:131:3
    #14 0x4dad089 in chromeos::AuthPolicyCredentialsManagerFactory::BuildServiceInstanceFor(content::BrowserContext*) const chrome/browser/chromeos/authpolicy/auth_policy_credentials_manager.cc:402:14
    #15 0xf9a4057 in BrowserContextKeyedServiceFactory::BuildServiceInstanceFor(base::SupportsUserData*) const components/keyed_service/content/browser_context_keyed_service_factory.cc:92:7
    #16 0xea20a8a in KeyedServiceFactory::GetServiceForContext(base::SupportsUserData*, bool) components/keyed_service/core/keyed_service_factory.cc:89:15
    #17 0x85fd5e8 in ProfileImpl::ProfileImpl(base::FilePath const&, Profile::Delegate*, Profile::CreateMode, scoped_refptr<base::SequencedTaskRunner>) chrome/browser/profiles/profile_impl.cc:478:3
    #18 0x85f8d02 in Profile::CreateProfile(base::FilePath const&, Profile::Delegate*, Profile::CreateMode) chrome/browser/profiles/profile_impl.cc:335:14
    #19 0x865478a in ProfileManager::CreateProfileAsync(base::FilePath const&, base::Callback<void (Profile*, Profile::CreateStatus), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, std::__1::basic_string<unsigned short, base::string16_char_traits, std::__1::allocator<unsigned short> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) chrome/browser/profiles/profile_manager.cc:561:28
    #20 0x5164f2c in chromeos::UserSessionManager::PrepareProfile() chrome/browser/chromeos/login/session/user_session_manager.cc:1011:41
    #21 0x5178753 in Invoke<const base::WeakPtr<chromeos::UserSessionManager> &> base/bind_internal.h:196:12
    #22 0x5178753 in MakeItSo<void (chromeos::UserSessionManager::*const &)(), const base::WeakPtr<chromeos::UserSessionManager> &> base/bind_internal.h:285
    #23 0x5178753 in RunImpl<void (chromeos::UserSessionManager::*const &)(), const std::__1::tuple<base::WeakPtr<chromeos::UserSessionManager> > &, 0> base/bind_internal.h:340
    #24 0x5178753 in base::internal::Invoker<base::internal::BindState<void (chromeos::UserSessionManager::*)(), base::WeakPtr<chromeos::UserSessionManager> >, void ()>::Run(base::internal::BindStateBase*) base/bind_internal.h:319
    #25 0x4c97cbd in Run base/callback.h:80:12
    #26 0x4c97cbd in arc::UpdateArcFileSystemCompatibilityPrefIfNeeded(AccountId const&, base::FilePath const&, base::Callback<void (), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&) chrome/browser/chromeos/arc/arc_util.cc:345
    #27 0x5164690 in chromeos::UserSessionManager::StartSession(chromeos::UserContext const&, chromeos::UserSessionManager::StartSessionType, bool, bool, chromeos::UserSessionManagerDelegate*) chrome/browser/chromeos/login/session/user_session_manager.cc:522:3
    #28 0x50c32f9 in chromeos::ExistingUserController::OnAuthSuccess(chromeos::UserContext const&) chrome/browser/chromeos/login/existing_user_controller.cc:890:38
    #29 0xb014cac in chromeos::LoginPerformer::OnAuthSuccess(chromeos::UserContext const&) chromeos/login/auth/login_performer.cc:92:14
    #30 0xaff74d4 in chromeos::CryptohomeAuthenticator::OnAuthSuccess() chromeos/login/auth/cryptohome_authenticator.cc:671:16
    #31 0xb382e55 in Run base/callback.h:91:12
    #32 0xb382e55 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) base/debug/task_annotator.cc:59
    #33 0xb3f8d2a in base::MessageLoop::RunTask(base::PendingTask*) base/message_loop/message_loop.cc:410:19
    #34 0xb3f9690 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) base/message_loop/message_loop.cc:421:5
    #35 0xb3fa3d1 in base::MessageLoop::DoWork() base/message_loop/message_loop.cc:528:13
    #36 0xb404e70 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_libevent.cc:220:31
    #37 0xb3f7b85 in base::MessageLoop::Run() base/message_loop/message_loop.cc:350:10
    #38 0xb496ad0 in base::RunLoop::Run() base/run_loop.cc:123:14
    #39 0x93414d9 in RunThisRunLoop content/public/test/test_utils.cc:125:13
    #40 0x93414d9 in content::MessageLoopRunner::Run() content/public/test/test_utils.cc:244
    #41 0x931ef41 in content::DOMMessageQueue::WaitForMessage(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) content/public/test/browser_test_utils.cc:1550:27
    #42 0x931ce32 in content::(anonymous namespace)::ExecuteScriptHelper(content::RenderFrameHost*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, bool, std::__1::unique_ptr<base::Value, std::__1::default_delete<base::Value> >*) content/public/test/browser_test_utils.cc:157:26
Thread T11 (TaskSchedulerBa) created by T0 (interactive_ui_) here:
    #0 0x536ecd in __interceptor_pthread_create (/b/s/w/ir/out/Release/interactive_ui_tests+0x536ecd)
    #1 0xb51af36 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) base/threading/platform_thread_posix.cc:110:13
    #2 0xb61e9a2 in Initialize base/task_scheduler/scheduler_worker.cc:118:5
    #3 0xb61e9a2 in base::internal::SchedulerWorker::Thread::Create(scoped_refptr<base::internal::SchedulerWorker>) base/task_scheduler/scheduler_worker.cc:31
    #4 0xb61e4de in base::internal::SchedulerWorker::Start() base/task_scheduler/scheduler_worker.cc:206:13
    #5 0xb621738 in base::internal::SchedulerWorkerPoolImpl::CreateRegisterAndStartSchedulerWorker() base/task_scheduler/scheduler_worker_pool_impl.cc:614:16
    #6 0xb620f77 in base::internal::SchedulerWorkerPoolImpl::Start(base::SchedulerWorkerPoolParams const&) base/task_scheduler/scheduler_worker_pool_impl.cc:241:31
    #7 0xb4ff2a1 in base::internal::TaskSchedulerImpl::Start(base::TaskScheduler::InitParams const&) base/task_scheduler/task_scheduler_impl.cc:80:39
    #8 0x2b24d9c in content::BrowserMainLoop::CreateThreads() content/browser/browser_main_loop.cc:987:41
    #9 0x3a53b78 in Run base/callback.h:80:12
    #10 0x3a53b78 in content::StartupTaskRunner::RunAllTasksNow() content/browser/startup_task_runner.cc:45
    #11 0x2b245df in content::BrowserMainLoop::CreateStartupTasks() content/browser/browser_main_loop.cc:935:25
    #12 0x2b3237d in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&) content/browser/browser_main_runner.cc:131:17
    #13 0x2b1c406 in content::BrowserMain(content::MainFunctionParams const&) content/browser/browser_main.cc:42:32
    #14 0x809ac6e in content::RunNamedProcessTypeMain(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, content::MainFunctionParams const&, content::ContentMainDelegate*) content/app/content_main_runner.cc:408:14
    #15 0x809cc69 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner.cc:690:12
    #16 0xe65237c in service_manager::Main(service_manager::MainParams const&) services/service_manager/embedder/main.cc:469:29
    #17 0x8099033 in content::ContentMain(content::ContentMainParams const&) content/app/content_main.cc:19:10
    #18 0x9311c6f in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:271:3
    #19 0x8384717 in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:271:20
    #20 0xc6b755 in chromeos::LoginManagerTest::SetUp() chrome/browser/chromeos/login/login_manager_test.cc:93:26
    #21 0xd364ec in HandleExceptionsInMethodIfSupported<testing::Test, void> third_party/googletest/src/googletest/src/gtest.cc:2455:12
    #22 0xd364ec in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc:2467
    #23 0xd38474 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2653:11
    #24 0xd397d6 in testing::TestCase::Run() third_party/googletest/src/googletest/src/gtest.cc:2771:28
    #25 0xd4f1f6 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:4648:43
    #26 0xd4e777 in HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool> third_party/googletest/src/googletest/src/gtest.cc:2455:12
    #27 0xd4e777 in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc:4256
    #28 0xb32c5b4 in RUN_ALL_TESTS third_party/googletest/src/googletest/include/gtest/gtest.h:2237:46
    #29 0xb32c5b4 in base::TestSuite::Run() base/test/test_suite.cc:270
    #30 0x96a29e in InteractiveUITestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/interactive_ui_tests_main.cc:85:47
    #31 0x9336baf in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:520:31
    #32 0x96a0da in main chrome/test/base/interactive_ui_tests_main.cc:111:22
    #33 0x7fcb2388ff44 in __libc_start_main /build/eglibc-MjiXCM/eglibc-2.19/csu/libc-start.c:287
SUMMARY: AddressSanitizer: heap-use-after-free (/b/s/w/ir/out/Release/interactive_ui_tests+0x4bfe73) in __interceptor_strlen
 

Comment 1 by gab@chromium.org, Aug 9 2017

Labels: Sheriff-Chromium
Project Member

Comment 2 by bugdroid1@chromium.org, Aug 9 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/f34edfdd32fd9660fa358ee546d4010f7ce04aa1

commit f34edfdd32fd9660fa358ee546d4010f7ce04aa1
Author: Gabriel Charette <gab@chromium.org>
Date: Wed Aug 09 13:41:44 2017

Revert "Chromad: Get Kerberos files from authpolicyd"

This reverts commit 0a61d9ee2b51d8b2df8023f3493af2dce15af2bb.

Reason for revert: heap-user-after-free  https://crbug.com/753792 

Original change's description:
> Chromad: Get Kerberos files from authpolicyd
> 
> The goal is to let Chrome use the user's Kerberos ticket (through GSSAPI) to enable
> single sign-on to other services that use Active Directory authentication.
> 
> Fetches credential cache file and krb5.conf file for the user.
> Puts them on the user partition.
> Set environment variables for GSSAPI library.
> 
> Bug:  737960 
> Change-Id: Ie8ea1d0a3d032bf1cc647d579b7c908dd652c787
> Reviewed-on: https://chromium-review.googlesource.com/555500
> Reviewed-by: Xiyuan Xia <xiyuan@chromium.org>
> Commit-Queue: Roman Sorokin <rsorokin@chromium.org>
> Cr-Commit-Position: refs/heads/master@{#492906}

TBR=xiyuan@chromium.org,rsorokin@chromium.org,ljusten@chromium.org

Change-Id: If02f4da8e49beddb3180a8ef8c87e984c08a10d9
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug:  737960 ,  753792 
Reviewed-on: https://chromium-review.googlesource.com/608387
Reviewed-by: Gabriel Charette <gab@chromium.org>
Commit-Queue: Gabriel Charette <gab@chromium.org>
Cr-Commit-Position: refs/heads/master@{#492962}

Comment 3 by gab@chromium.org, Aug 9 2017

Status: Fixed (was: Assigned)

Comment 4 by dchan@chromium.org, Jan 22 2018

Status: Archived (was: Fixed)

Sign in to add a comment