New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 814724 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Direct-leak in content::ResourceDispatcher::StartAsync

Project Member Reported by ClusterFuzz, Feb 22 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4718143210258432

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: Direct-leak
Crash Address: 
Crash State:
  content::ResourceDispatcher::StartAsync
  content::WebURLLoaderImpl::Context::Start
  content::WebURLLoaderImpl::LoadAsynchronously
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=512182:512192

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4718143210258432

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Feb 22 2018

Components: Internals>Core
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Feb 22 2018

Labels: Test-Predator-Auto-Owner
Owner: jbroman@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/04f27c37974050559508833241e11258fb8c1a4a (Replace base::MakeUnique with std::make_unique in content/.).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.
Also reproduces at the beginning of the blame range.
It looks like this does actually get collected if the worker runs GC.
So it looks like this object gets deleted in (through a number of layers of indirection) ~BytesConsumerForDataConsumerHandle. That finalizer only runs when GC occurs on the worker, but in this test there is never enough memory pressure to trigger a GC.
Cc: glider@chromium.org euge...@chromium.org
Status: WontFix (was: Assigned)
WontFix-ing as this does not appear to be a real leak

cc glider, eugenis, in case there's something we could do to about detecting leaks like this. The process does a leak check and then dies in SuicideOnChannelErrorFilter, so we don't seem to ever go and GC the various Oilpan/V8 heaps we might have.
Cc: jbroman@chromium.org
 Issue 808295  has been merged into this issue.
 Issue 817661  has been merged into this issue.
Project Member

Comment 9 by ClusterFuzz, Mar 1 2018

Labels: Needs-Feedback
ClusterFuzz testcase 4718143210258432 is still reproducing on tip-of-tree build (trunk).

If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase.

Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.
Labels: ClusterFuzz-Ignore

Comment 11 by horo@chromium.org, Apr 10 2018

Cc: horo@chromium.org nhiroki@chromium.org
 Issue 829652  has been merged into this issue.
Project Member

Comment 12 by ClusterFuzz, Jun 12 2018

ClusterFuzz has detected this issue as fixed in range 566300:566302.

Detailed report: https://clusterfuzz.com/testcase?key=4718143210258432

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: Direct-leak
Crash Address: 
Crash State:
  content::ResourceDispatcher::StartAsync
  content::WebURLLoaderImpl::Context::Start
  content::WebURLLoaderImpl::LoadAsynchronously
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=512182:512192
Fixed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=566300:566302

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4718143210258432

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Sign in to add a comment