New issue
Advanced search Search tips

Issue 849171 link

Starred by 1 user
Status: Fixed
Owner:
w...@chromium.org
Closed: Jun 2018
Cc:
kinuko@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

"MediaFileValidatorTest.ValidAudio" is flaky

Project Member Reported by chromium...@appspot.gserviceaccount.com, Jun 4 2018 
"MediaFileValidatorTest.ValidAudio" is flaky.

This issue was created automatically by the chromium-try-flakes app. Please find the right owner to fix the respective test/step and assign this issue to them. If the step/test is infrastructure-related, please add Infra-Troopers label and change issue status to Untriaged. When done, please remove the issue from Sheriff Bug Queue by removing the Sheriff-Chromium label.

We have detected 3 recent flakes. List of all flakes can be found at https://chromium-try-flakes.appspot.com/all_flake_occurrences?key=ahVzfmNocm9taXVtLXRyeS1mbGFrZXNyLAsSBUZsYWtlIiFNZWRpYUZpbGVWYWxpZGF0b3JUZXN0LlZhbGlkQXVkaW8M.

Flaky tests should be disabled within 30 minutes unless culprit CL is found and reverted. Please see more details here: https://sites.google.com/a/chromium.org/dev/developers/tree-sheriffs/sheriffing-bug-queues#triaging-auto-filed-flakiness-bugs

Comment 1 by battre@chromium.org, Jun 4 2018 

This looks real.

[ RUN      ] MediaFileValidatorTest.ValidAudio
Xlib:  extension "RANDR" missing on display ":99".
[12361:12392:0603/204224.241152:ERROR:bus.cc(394)] Failed to connect to the bus: Could not parse server address: Unknown address type (examples of valid types are "tcp" and on UNIX "unix")
[12361:12361:0603/204224.301989:WARNING:password_store_factory.cc(250)] Using basic (unencrypted) store for password storage. See https://chromium.googlesource.com/chromium/src/+/master/docs/linux_password_storage.md for more information about password storage options.
(browser_tests:12361): LIBDBUSMENU-GLIB-WARNING **: Unable to get session bus: Unknown or unsupported transport 'disabled' for address 'disabled:'
[12361:12361:0603/204224.840569:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11
=================================================================
==12361==ERROR: AddressSanitizer: heap-use-after-free on address 0x60c000110858 at pc 0x0000088fde96 bp 0x7f74c48dbf70 sp 0x7f74c48dbf68
READ of size 8 at 0x60c000110858 thread T2 (Chrome_IOThread)
    #0 0x88fde95 in __root buildtools/third_party/libc++/trunk/include/__tree:1089:59
    #1 0x88fde95 in find<int> buildtools/third_party/libc++/trunk/include/__tree:2412
    #2 0x88fde95 in unsigned long std::__1::__tree<int, std::__1::less<int>, std::__1::allocator<int> >::__erase_unique<int>(int const&) buildtools/third_party/libc++/trunk/include/__tree:2388
    #3 0x1d183a9c in erase buildtools/third_party/libc++/trunk/include/set:630:25
    #4 0x1d183a9c in storage::FileSystemOperationRunner::FinishOperation(int) storage/browser/fileapi/file_system_operation_runner.cc:721
    #5 0x1d17ab7a in storage::FileSystemOperationRunner::DidGetMetadata(storage::FileSystemOperationRunner::OperationHandle const&, base::RepeatingCallback<void (base::File::Error, base::File::Info const&)> const&, base::File::Error, base::File::Info const&) storage/browser/fileapi/file_system_operation_runner.cc:585:3
    #6 0x1d185c04 in Invoke<void (storage::FileSystemOperationRunner::*)(const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &), const base::WeakPtr<storage::FileSystemOperationRunner> &, const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &> base/bind_internal.h:507:12
    #7 0x1d185c04 in MakeItSo<void (storage::FileSystemOperationRunner::*const &)(const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &), const base::WeakPtr<storage::FileSystemOperationRunner> &, const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &> base/bind_internal.h:627
    #8 0x1d185c04 in RunImpl<void (storage::FileSystemOperationRunner::*const &)(const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &), const std::__1::tuple<base::WeakPtr<storage::FileSystemOperationRunner>, storage::FileSystemOperationRunner::OperationHandle, base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> > &, 0, 1, 2> base/bind_internal.h:681
    #9 0x1d185c04 in base::internal::Invoker<base::internal::BindState<void (storage::FileSystemOperationRunner::*)(storage::FileSystemOperationRunner::OperationHandle const&, base::RepeatingCallback<void (base::File::Error, base::File::Info const&)> const&, base::File::Error, base::File::Info const&), base::WeakPtr<storage::FileSystemOperationRunner>, storage::FileSystemOperationRunner::OperationHandle, base::RepeatingCallback<void (base::File::Error, base::File::Info const&)> >, void (base::File::Error, base::File::Info const&)>::Run(base::internal::BindStateBase*, base::File::Error, base::File::Info const&) base/bind_internal.h:663
    #10 0x15eecefb in Run base/callback.h:96:12
    #11 0x15eecefb in void base::internal::FunctorTraits<base::OnceCallback<void (base::File::Error, base::File::Info const&)>, void>::Invoke<base::OnceCallback<void (base::File::Error, base::File::Info const&)>, base::File::Error, base::File::Info>(base::OnceCallback<void (base::File::Error, base::File::Info const&)>&&, base::File::Error&&, base::File::Info&&) base/bind_internal.h:568
    #12 0x151f9a2d in Run base/callback.h:96:12
    #13 0x151f9a2d in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) base/debug/task_annotator.cc:101
    #14 0x1528227f in base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) base/message_loop/incoming_task_queue.cc:126:19
    #15 0x1527bd6c in base::MessageLoop::RunTask(base::PendingTask*) base/message_loop/message_loop.cc:319:25
    #16 0x1527c8d2 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) base/message_loop/message_loop.cc:329:5
    #17 0x1527d206 in base::MessageLoop::DoWork() base/message_loop/message_loop.cc:373:16
    #18 0x154d0340 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_libevent.cc:210:31
    #19 0x1527a781 in base::MessageLoop::Run(bool) base/message_loop/message_loop.cc:271:12
    #20 0x153246da in base::RunLoop::Run() base/run_loop.cc:102:14
    #21 0x153d5d34 in base::Thread::Run(base::RunLoop*) base/threading/thread.cc:255:13
    #22 0xf9afa5d in content::BrowserProcessSubThread::IOThreadRun(base::RunLoop*) content/browser/browser_process_sub_thread.cc:178:11
    #23 0xf9af74f in content::BrowserProcessSubThread::Run(base::RunLoop*) content/browser/browser_process_sub_thread.cc:128:7
    #24 0x153d66ff in base::Thread::ThreadMain() base/threading/thread.cc:337:3
    #25 0x154bea82 in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:76:13
    #26 0x7f74d83a7183 in start_thread /build/eglibc-ripdx6/eglibc-2.19/nptl/pthread_create.c:312
0x60c000110858 is located 88 bytes inside of 128-byte region [0x60c000110800,0x60c000110880)
freed by thread T2 (Chrome_IOThread) here:
    #0 0x839dbb2 in operator delete(void*) /b/build/slave/linux_upload_clang/build/src/third_party/llvm/compiler-rt/lib/asan/asan_new_delete.cc:150:3
    #1 0x1d146100 in operator() buildtools/third_party/libc++/trunk/include/memory:2321:5
    #2 0x1d146100 in reset buildtools/third_party/libc++/trunk/include/memory:2634
    #3 0x1d146100 in ~unique_ptr buildtools/third_party/libc++/trunk/include/memory:2588
    #4 0x1d146100 in storage::FileSystemContext::~FileSystemContext() storage/browser/fileapi/file_system_context.cc:512
    #5 0x1d146a96 in storage::FileSystemContext::DeleteOnCorrectSequence() const storage/browser/fileapi/file_system_context.cc:519:3
    #6 0x1d14b2ed in storage::FileSystemOperationImpl::~FileSystemOperationImpl() storage/browser/fileapi/file_system_operation_impl.cc:66:51
    #7 0x1d18d0cb in operator() buildtools/third_party/libc++/trunk/include/memory:2321:5
    #8 0x1d18d0cb in reset buildtools/third_party/libc++/trunk/include/memory:2634
    #9 0x1d18d0cb in ~unique_ptr buildtools/third_party/libc++/trunk/include/memory:2588
    #10 0x1d18d0cb in ~pair buildtools/third_party/libc++/trunk/include/utility:312
    #11 0x1d18d0cb in __destroy<std::__1::pair<const int, std::__1::unique_ptr<storage::FileSystemOperation, std::__1::default_delete<storage::FileSystemOperation> > > > buildtools/third_party/libc++/trunk/include/memory:1733
    #12 0x1d18d0cb in destroy<std::__1::pair<const int, std::__1::unique_ptr<storage::FileSystemOperation, std::__1::default_delete<storage::FileSystemOperation> > > > buildtools/third_party/libc++/trunk/include/memory:1596
    #13 0x1d18d0cb in erase buildtools/third_party/libc++/trunk/include/__tree:2368
    #14 0x1d18d0cb in unsigned long std::__1::__tree<std::__1::__value_type<int, std::__1::unique_ptr<storage::FileSystemOperation, std::__1::default_delete<storage::FileSystemOperation> > >, std::__1::__map_value_compare<int, std::__1::__value_type<int, std::__1::unique_ptr<storage::FileSystemOperation, std::__1::default_delete<storage::FileSystemOperation> > >, std::__1::less<int>, true>, std::__1::allocator<std::__1::__value_type<int, std::__1::unique_ptr<storage::FileSystemOperation, std::__1::default_delete<storage::FileSystemOperation> > > > >::__erase_unique<int>(int const&) buildtools/third_party/libc++/trunk/include/__tree:2391
    #15 0x1d183a90 in erase buildtools/third_party/libc++/trunk/include/map:1197:25
    #16 0x1d183a90 in storage::FileSystemOperationRunner::FinishOperation(int) storage/browser/fileapi/file_system_operation_runner.cc:720
    #17 0x1d17ab7a in storage::FileSystemOperationRunner::DidGetMetadata(storage::FileSystemOperationRunner::OperationHandle const&, base::RepeatingCallback<void (base::File::Error, base::File::Info const&)> const&, base::File::Error, base::File::Info const&) storage/browser/fileapi/file_system_operation_runner.cc:585:3
    #18 0x1d185c04 in Invoke<void (storage::FileSystemOperationRunner::*)(const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &), const base::WeakPtr<storage::FileSystemOperationRunner> &, const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &> base/bind_internal.h:507:12
    #19 0x1d185c04 in MakeItSo<void (storage::FileSystemOperationRunner::*const &)(const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &), const base::WeakPtr<storage::FileSystemOperationRunner> &, const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &> base/bind_internal.h:627
    #20 0x1d185c04 in RunImpl<void (storage::FileSystemOperationRunner::*const &)(const storage::FileSystemOperationRunner::OperationHandle &, const base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> &, base::File::Error, const base::File::Info &), const std::__1::tuple<base::WeakPtr<storage::FileSystemOperationRunner>, storage::FileSystemOperationRunner::OperationHandle, base::RepeatingCallback<void (base::File::Error, const base::File::Info &)> > &, 0, 1, 2> base/bind_internal.h:681
    #21 0x1d185c04 in base::internal::Invoker<base::internal::BindState<void (storage::FileSystemOperationRunner::*)(storage::FileSystemOperationRunner::OperationHandle const&, base::RepeatingCallback<void (base::File::Error, base::File::Info const&)> const&, base::File::Error, base::File::Info const&), base::WeakPtr<storage::FileSystemOperationRunner>, storage::FileSystemOperationRunner::OperationHandle, base::RepeatingCallback<void (base::File::Error, base::File::Info const&)> >, void (base::File::Error, base::File::Info const&)>::Run(base::internal::BindStateBase*, base::File::Error, base::File::Info const&) base/bind_internal.h:663
    #22 0x15eecefb in Run base/callback.h:96:12
    #23 0x15eecefb in void base::internal::FunctorTraits<base::OnceCallback<void (base::File::Error, base::File::Info const&)>, void>::Invoke<base::OnceCallback<void (base::File::Error, base::File::Info const&)>, base::File::Error, base::File::Info>(base::OnceCallback<void (base::File::Error, base::File::Info const&)>&&, base::File::Error&&, base::File::Info&&) base/bind_internal.h:568
    #24 0x151f9a2d in Run base/callback.h:96:12
    #25 0x151f9a2d in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) base/debug/task_annotator.cc:101
    #26 0x1528227f in base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) base/message_loop/incoming_task_queue.cc:126:19
    #27 0x1527bd6c in base::MessageLoop::RunTask(base::PendingTask*) base/message_loop/message_loop.cc:319:25
    #28 0x1527c8d2 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) base/message_loop/message_loop.cc:329:5
    #29 0x1527d206 in base::MessageLoop::DoWork() base/message_loop/message_loop.cc:373:16
    #30 0x154d0340 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_libevent.cc:210:31
    #31 0x1527a781 in base::MessageLoop::Run(bool) base/message_loop/message_loop.cc:271:12
    #32 0x153246da in base::RunLoop::Run() base/run_loop.cc:102:14
    #33 0x153d5d34 in base::Thread::Run(base::RunLoop*) base/threading/thread.cc:255:13
    #34 0xf9afa5d in content::BrowserProcessSubThread::IOThreadRun(base::RunLoop*) content/browser/browser_process_sub_thread.cc:178:11
    #35 0xf9af74f in content::BrowserProcessSubThread::Run(base::RunLoop*) content/browser/browser_process_sub_thread.cc:128:7
    #36 0x153d66ff in base::Thread::ThreadMain() base/threading/thread.cc:337:3
    #37 0x154bea82 in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:76:13
    #38 0x7f74d83a7183 in start_thread /build/eglibc-ripdx6/eglibc-2.19/nptl/pthread_create.c:312
previously allocated by thread T13 (TaskSchedulerFo) here:
    #0 0x839cf72 in operator new(unsigned long) /b/build/slave/linux_upload_clang/build/src/third_party/llvm/compiler-rt/lib/asan/asan_new_delete.cc:93:3
    #1 0x1d13de31 in storage::FileSystemContext::FileSystemContext(base::SingleThreadTaskRunner*, base::SequencedTaskRunner*, storage::ExternalMountPoints*, storage::SpecialStoragePolicy*, storage::QuotaManagerProxy*, std::__1::vector<std::__1::unique_ptr<storage::FileSystemBackend, std::__1::default_delete<storage::FileSystemBackend> >, std::__1::allocator<std::__1::unique_ptr<storage::FileSystemBackend, std::__1::default_delete<storage::FileSystemBackend> > > >, std::__1::vector<base::RepeatingCallback<bool (storage::FileSystemRequestInfo const&, storage::FileSystemURL const&, base::OnceCallback<void (base::File::Error)>)>, std::__1::allocator<base::RepeatingCallback<bool (storage::FileSystemRequestInfo const&, storage::FileSystemURL const&, base::OnceCallback<void (base::File::Error)>)> > > const&, base::FilePath const&, storage::FileSystemOptions const&) storage/browser/fileapi/file_system_context.cc:175:25
    #2 0x2945a656 in content::CreateFileSystemContextWithAdditionalProvidersForTesting(scoped_refptr<base::SingleThreadTaskRunner>, scoped_refptr<base::SequencedTaskRunner>, storage::QuotaManagerProxy*, std::__1::vector<std::__1::unique_ptr<storage::FileSystemBackend, std::__1::default_delete<storage::FileSystemBackend> >, std::__1::allocator<std::__1::unique_ptr<storage::FileSystemBackend, std::__1::default_delete<storage::FileSystemBackend> > > >, base::FilePath const&) storage/browser/test/test_file_system_context.cc:40:14
    #3 0x8f0d02f in MediaFileValidatorTest::SetupBlocking(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, bool) chrome/browser/media_galleries/fileapi/media_file_validator_browsertest.cc:136:9
    #4 0x8f13c09 in MediaFileValidatorTest::SetupFromFileBlocking(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, base::FilePath const&, bool) chrome/browser/media_galleries/fileapi/media_file_validator_browsertest.cc:183:5
    #5 0x151f9a2d in Run base/callback.h:96:12
    #6 0x151f9a2d in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) base/debug/task_annotator.cc:101
    #7 0x153b0bc8 in base::internal::TaskTracker::RunOrSkipTask(base::internal::Task, base::internal::Sequence*, bool) base/task_scheduler/task_tracker.cc:529:23
    #8 0x154bce03 in base::internal::TaskTrackerPosix::RunOrSkipTask(base::internal::Task, base::internal::Sequence*, bool) base/task_scheduler/task_tracker_posix.cc:23:16
    #9 0x153ae04c in base::internal::TaskTracker::RunAndPopNextTask(scoped_refptr<base::internal::Sequence>, base::internal::CanScheduleSequenceObserver*) base/task_scheduler/task_tracker.cc:404:3
    #10 0x153a2fd7 in base::internal::SchedulerWorker::RunWorker() base/task_scheduler/scheduler_worker.cc:321:24
    #11 0x153a2684 in base::internal::SchedulerWorker::RunPooledWorker() base/task_scheduler/scheduler_worker.cc:215:3
    #12 0x154bea82 in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:76:13
    #13 0x7f74d83a7183 in start_thread /build/eglibc-ripdx6/eglibc-2.19/nptl/pthread_create.c:312
Thread T2 (Chrome_IOThread) created by T0 (browser_tests) here:
    #0 0x8359b5d in __interceptor_pthread_create /b/build/slave/linux_upload_clang/build/src/third_party/llvm/compiler-rt/lib/asan/asan_interceptors.cc:210:3
    #1 0x154bd9cc in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) base/threading/platform_thread_posix.cc:115:13
    #2 0x153d44c6 in base::Thread::StartWithOptions(base::Thread::Options const&) base/threading/thread.cc:112:15
    #3 0xf9aefa8 in content::BrowserProcessSubThread::CreateIOThread() content/browser/browser_process_sub_thread.cc:91:19
    #4 0x14da4363 in content::ContentMainRunnerImpl::GetServiceManagerTaskRunnerForEmbedderProcess() content/app/content_main_runner_impl.cc:1000:29
    #5 0x14d9d7f4 in content::ContentServiceManagerMainDelegate::GetServiceManagerTaskRunnerForEmbedderProcess() content/app/content_service_manager_main_delegate.cc:132:32
    #6 0x1c00104c in service_manager::Main(service_manager::MainParams const&) services/service_manager/embedder/main.cc:456:23
    #7 0x14d9dd20 in content::ContentMain(content::ContentMainParams const&) content/app/content_main.cc:19:10
    #8 0x1697c647 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:323:3
    #9 0x1557073d in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:244:20
    #10 0xc848a72 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #11 0xc84ae34 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2667:11
    #12 0xc84c246 in testing::TestCase::Run() third_party/googletest/src/googletest/src/gtest.cc:2785:28
    #13 0xc871f76 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:5047:43
    #14 0xc8711a2 in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #15 0x155bd947 in RUN_ALL_TESTS third_party/googletest/src/googletest/include/gtest/gtest.h:2329:46
    #16 0x155bd947 in base::TestSuite::Run() base/test/test_suite.cc:275
    #17 0x151d162f in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:65:38
    #18 0x16a11713 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:625:31
    #19 0x151d240a in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:170:10
    #20 0x151d142b in main chrome/test/base/browser_tests_main.cc:36:10
    #21 0x7f74d18d1f44 in __libc_start_main /build/eglibc-ripdx6/eglibc-2.19/csu/libc-start.c:287
Thread T13 (TaskSchedulerFo) created by T0 (browser_tests) here:
    #0 0x8359b5d in __interceptor_pthread_create /b/build/slave/linux_upload_clang/build/src/third_party/llvm/compiler-rt/lib/asan/asan_interceptors.cc:210:3
    #1 0x154bd9cc in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) base/threading/platform_thread_posix.cc:115:13
    #2 0x153a1353 in base::internal::SchedulerWorker::Start(base::SchedulerWorkerObserver*) base/task_scheduler/scheduler_worker.cc:74:3
    #3 0x153927c2 in base::internal::SchedulerWorkerPoolImpl::CreateRegisterAndStartSchedulerWorkerLockRequired() base/task_scheduler/scheduler_worker_pool_impl.cc:902:16
    #4 0x153917f7 in base::internal::SchedulerWorkerPoolImpl::Start(base::SchedulerWorkerPoolParams const&, int, scoped_refptr<base::TaskRunner>, base::SchedulerWorkerObserver*, base::internal::SchedulerWorkerPoolImpl::WorkerEnvironment) base/task_scheduler/scheduler_worker_pool_impl.cc:256:9
    #5 0x15384ad1 in base::internal::TaskSchedulerImpl::Start(base::TaskScheduler::InitParams const&, base::SchedulerWorkerObserver*) base/task_scheduler/task_scheduler_impl.cc:131:39
    #6 0xf983b8b in content::BrowserMainLoop::CreateThreads() content/browser/browser_main_loop.cc:929:41
    #7 0x10b65d67 in Run base/callback.h:125:12
    #8 0x10b65d67 in content::StartupTaskRunner::RunAllTasksNow() content/browser/startup_task_runner.cc:44
    #9 0xf983464 in content::BrowserMainLoop::CreateStartupTasks() content/browser/browser_main_loop.cc:877:25
    #10 0xf990fda in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) content/browser/browser_main_runner_impl.cc:148:15
    #11 0xf97c191 in content::BrowserMain(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) content/browser/browser_main.cc:47:20
    #12 0x14da0f3c in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) content/app/content_main_runner_impl.cc:620:10
    #13 0x14da3b00 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:964:12
    #14 0x1c0010cb in service_manager::Main(service_manager::MainParams const&) services/service_manager/embedder/main.cc:459:29
    #15 0x14d9dd20 in content::ContentMain(content::ContentMainParams const&) content/app/content_main.cc:19:10
    #16 0x1697c647 in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:323:3
    #17 0x1557073d in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:244:20
    #18 0xc848a72 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #19 0xc84ae34 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2667:11
    #20 0xc84c246 in testing::TestCase::Run() third_party/googletest/src/googletest/src/gtest.cc:2785:28
    #21 0xc871f76 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:5047:43
    #22 0xc8711a2 in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #23 0x155bd947 in RUN_ALL_TESTS third_party/googletest/src/googletest/include/gtest/gtest.h:2329:46
    #24 0x155bd947 in base::TestSuite::Run() base/test/test_suite.cc:275
    #25 0x151d162f in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:65:38
    #26 0x16a11713 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:625:31
    #27 0x151d240a in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:170:10
    #28 0x151d142b in main chrome/test/base/browser_tests_main.cc:36:10
    #29 0x7f74d18d1f44 in __libc_start_main /build/eglibc-ripdx6/eglibc-2.19/csu/libc-start.c:287
SUMMARY: AddressSanitizer: heap-use-after-free buildtools/third_party/libc++/trunk/include/__tree:1089:59 in __root
Shadow bytes around the buggy address:
  0x0c188001a0b0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x0c188001a0c0: fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa fa
  0x0c188001a0d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0c188001a0e0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x0c188001a0f0: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
=>0x0c188001a100: fd fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd
  0x0c188001a110: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x0c188001a120: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa
  0x0c188001a130: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa
  0x0c188001a140: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x0c188001a150: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
  Shadow gap:              cc
Cannot upload crash dump: failed to open
==12361==ABORTING

Comment 2 by battre@chromium.org, Jun 4 2018

Owner: w...@chromium.org
Status: Assigned (was: Untriaged)
The first flake happened in the ASAN build that contained
https://chromium-review.googlesource.com/1072965

https://ci.chromium.org/p/chromium/builders/luci.chromium.ci/Linux%20ASan%20LSan%20Tests%20%281%29/46638

Trying to revert.
Project Member

Comment 3 by bugdroid1@chromium.org, Jun 4 2018 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/4603361e99c204ae881ffd20f5c07b320c646249

commit 4603361e99c204ae881ffd20f5c07b320c646249
Author: Dominic Battré <battre@chromium.org>
Date: Mon Jun 04 07:55:10 2018

Revert "Break down the NativeMediaFileUtil into IO and MediaTaskRunner parts."

This reverts commit 7a5f1db86fda6c73b7362eb9e990c080c9bb6d55.
Strongly expecting this to be the cause of  crbug.com/849171 . First flakes happened when this CL landed.

Original change's description:
> Break down the NativeMediaFileUtil into IO and MediaTaskRunner parts.
> 
> The NativeMediaFileUtil runs tasks on a TaskScheduler sequence provided
> by the MediaFileSystemBackend, but was itself owned and deleted on the
> IO thread, where its AsyncFileUtil API was used.
> 
> The NativeMediaFileUtil is split into an outer part, used and owned on
> the IO thread, and a "core" containing the MediaPathFilter for use on
> the MediaFileSystemBackend's media TaskRunner.
> 
> The MediaFileValidatorTests are also fixed, to tear-down the storage
> FileSystemContext before the browser's threads are torn-down.
> 
> Bug: 729716
> Change-Id: I339fe68f28d1bf6330ec4d341d2730df26bc4b30
> Reviewed-on: https://chromium-review.googlesource.com/1072965
> Commit-Queue: Wez <wez@chromium.org>
> Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
> Cr-Commit-Position: refs/heads/master@{#563918}

TBR=wez@chromium.org,kinuko@chromium.org,tzik@chromium.org

# Not skipping CQ checks because original CL landed > 1 day ago.

Bug: 729716,  849171 
Change-Id: I0034caf2868bbc94565e883a94e3d0bac2e6af33
Reviewed-on: https://chromium-review.googlesource.com/1084491
Reviewed-by: Dominic Battré <battre@chromium.org>
Commit-Queue: Dominic Battré <battre@chromium.org>
Cr-Commit-Position: refs/heads/master@{#564011}
[modify] https://crrev.com/4603361e99c204ae881ffd20f5c07b320c646249/chrome/browser/media_galleries/fileapi/media_file_system_backend.cc
[modify] https://crrev.com/4603361e99c204ae881ffd20f5c07b320c646249/chrome/browser/media_galleries/fileapi/media_file_validator_browsertest.cc
[modify] https://crrev.com/4603361e99c204ae881ffd20f5c07b320c646249/chrome/browser/media_galleries/fileapi/native_media_file_util.cc
[modify] https://crrev.com/4603361e99c204ae881ffd20f5c07b320c646249/chrome/browser/media_galleries/fileapi/native_media_file_util.h

Comment 4 by battre@chromium.org, Jun 4 2018

Labels: -Sheriff-Chromium

Comment 5 by w...@chromium.org, Jun 4 2018

Components: Blink>Media
Labels: M-69 OS-Linux
Status: Started (was: Assigned)

Comment 6 by w...@chromium.org, Jun 4 2018

Cc: kinuko@chromium.org
Status: Fixed (was: Started)
Fixed and re-landed in https://chromium-review.googlesource.com/c/chromium/src/+/1085527 but forgot to add this bug #; sorry.
►

Sign in to add a comment