Issue metadata
Sign in to add a comment
|
Two DeclarativeApiTest Consistently Crash on Mac ASan 64 Tests |
||||||||||||||||||||||
Issue descriptionThese two tests: DeclarativeApiTest.NoTracesAfterUninstalling DeclarativeApiTest.ExtensionLifetimeRulesHandling Leak memory and thus crash. Example waterfall build where they failed: https://ci.chromium.org/buildbot/chromium.memory/Mac%20ASan%2064%20Tests%20%281%29/41221 Flakiness dashboard: https://test-results.appspot.com/dashboards/flakiness_dashboard.html#testType=browser_tests%20(with%20patch)&tests=NoTracesAfterUninstalling%2CExtensionLifetimeRulesHandling Interestingly, they don't seem to have trouble on on other bots, just the the mac_chromium_rel_ng one.
,
Jun 12 2018
[ RUN ] DeclarativeApiTest.ExtensionLifetimeRulesHandling
[91777:4611:0611/153027.228917:WARNING:notification_platform_bridge_mac.mm(510)] AlertNotificationService: XPC connection invalidated.
[91788:775:0611/153028.505159:WARNING:vt_video_decode_accelerator_mac.cc(193)] Failed to create VTDecompressionSession: Error Domain=NSOSStatusErrorDomain Code=-8973 "codecOpenErr" (-8973)
[91788:775:0611/153028.506392:WARNING:vt_video_decode_accelerator_mac.cc(215)] Hardware decoding with VideoToolbox is not supported
[91788:775:0611/153028.711238:ERROR:vt_video_encode_accelerator_mac.cc(516)] VTCompressionSessionCreate failed: -12908
[91777:775:0611/153029.186628:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11
[91788:775:0611/153029.806989:WARNING:ca_layer_tree_coordinator.mm(55)] Blank frame: No overlays or CALayers
[91777:775:0611/153030.135243:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11
[91777:775:0611/153033.074509:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11
[91777:775:0611/153040.362178:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11
=================================================================
==91777==ERROR: AddressSanitizer: heap-use-after-free on address 0x6160000f1590 at pc 0x00011bd41233 bp 0x7ffeea5e0b70 sp 0x7ffeea5e0b68
READ of size 1 at 0x6160000f1590 thread T0
#0 0x11bd41232 in non-virtual thunk to ExtensionInstalledBubbleView::GetWindowTitle() const ??:0:0
#1 0x1145791e9 in views::WidgetDelegate::GetAccessibleWindowTitle() const ??:0:0
#2 0x11455fa6e in views::internal::RootView::GetAccessibleNodeData(ui::AXNodeData*) ??:0:0
#3 0x11434ae0a in views::ViewAccessibility::GetAccessibleNodeData(ui::AXNodeData*) const ??:0:0
#4 0x1113ef14d in (anonymous namespace)::DoesViewHaveAccessibilityErrorsRecursive(views::View*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0
#5 0x1113eed1d in AddFailureOnWidgetAccessibilityError(views::Widget*) ??:0:0
#6 0x11456ed19 in views::Widget::OnNativeWidgetVisibilityChanged(bool) ??:0:0
#7 0x1143b27cf in views::BridgedNativeWidget::OnVisibilityChanged() ??:0:0
#8 0x1143c2cb0 in -[NativeWidgetMacNSWindow orderWindow:relativeTo:] ??:0:0
#9 0x1143b3153 in views::BridgedNativeWidget::NotifyVisibilityChangeDown() ??:0:0
#10 0x1143b272d in views::BridgedNativeWidget::OnVisibilityChanged() ??:0:0
#11 0x1143c2cb0 in -[NativeWidgetMacNSWindow orderWindow:relativeTo:] ??:0:0
#12 0x1143ae509 in views::BridgedNativeWidget::SetVisibilityState(views::BridgedNativeWidget::WindowVisibilityState) ??:0:0
#13 0x11bed63d9 in BrowserView::CanClose() ??:0:0
#14 0x11456a51c in views::Widget::Close() ??:0:0
#15 0x1120d229b in BrowserCloseManager::CloseBrowsers() ??:0:0
#16 0x1120d2aa3 in BrowserCloseManager::TryToCloseBrowsers() ??:0:0
#17 0x111b229f9 in chrome::CloseAllBrowsers() ??:0:0
#18 0x1117d3893 in -[AppController tryToTerminateApplication:] ??:0:0
#19 0x111b238ac in chrome::AttemptExit() ??:0:0
#20 0x111409988 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) ??:0:0
#21 0x11148a25f in base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) ??:0:0
#22 0x11149540e in base::MessageLoop::RunTask(base::PendingTask*) ??:0:0
#23 0x111495f00 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) ??:0:0
#24 0x1114965c3 in base::MessageLoop::DoWork() ??:0:0
#25 0x1114a044c in base::MessagePumpCFRunLoopBase::RunWork() ??:0:0
#26 0x1114568b9 in base::mac::CallWithEHFrame(void () block_pointer) ??:0:0
#27 0x11149ea15 in base::MessagePumpCFRunLoopBase::RunWorkSource(void*) ??:0:0
#28 0x7fff49385a20 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ ??:0:0
#29 0x7fff4943d26b in __CFRunLoopDoSource0 ??:0:0
#30 0x7fff49368aaf in __CFRunLoopDoSources0 ??:0:0
#31 0x7fff49367f2c in __CFRunLoopRun ??:0:0
#32 0x7fff49367786 in CFRunLoopRunSpecific ??:0:0
#33 0x7fff48674e25 in RunCurrentEventLoopInMode ??:0:0
#34 0x7fff48674b95 in ReceiveNextEventCommon ??:0:0
#35 0x7fff48674913 in _BlockUntilNextEventMatchingListInModeWithFilter ??:0:0
#36 0x7fff4693ff5e in _DPSNextEvent ??:0:0
#37 0x7fff470d5b4b in -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] ??:0:0
#38 0x1118e4ea0 in __71-[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:]_block_invoke ??:0:0
#39 0x1114568b9 in base::mac::CallWithEHFrame(void () block_pointer) ??:0:0
#40 0x1118e4a51 in -[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ??:0:0
#41 0x7fff46934d6c in -[NSApplication run] ??:0:0
#42 0x1114a2fe2 in base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) ??:0:0
#43 0x11149da40 in base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) ??:0:0
#44 0x1114942b5 in base::MessageLoop::Run(bool) ??:0:0
#45 0x11153002c in base::RunLoop::Run() ??:0:0
#46 0x11174039b in InProcessBrowserTest::QuitBrowsers() ??:0:0
#47 0x11173ffdb in InProcessBrowserTest::PostRunTestOnMainThread() ??:0:0
#48 0x112c39bf6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ??:0:0
#49 0x1118f7d8e in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ??:0:0
#50 0x1118f505d in ChromeBrowserMainParts::PreMainMessageLoopRun() ??:0:0
#51 0x10c34fe42 in content::BrowserMainLoop::PreMainMessageLoopRun() ??:0:0
#52 0x10d3e88ce in content::StartupTaskRunner::RunAllTasksNow() ??:0:0
#53 0x10c34b619 in content::BrowserMainLoop::CreateStartupTasks() ??:0:0
#54 0x10c358064 in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0
#55 0x10c34481e in content::BrowserMain(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0
#56 0x11128f5ca in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0
#57 0x111292084 in content::ContentMainRunnerImpl::Run() ??:0:0
#58 0x117c4f57c in service_manager::Main(service_manager::MainParams const&) ??:0:0
#59 0x11128f2a0 in content::ContentMain(content::ContentMainParams const&) ??:0:0
#60 0x112c38485 in content::BrowserTestBase::SetUp() ??:0:0
#61 0x11173c320 in InProcessBrowserTest::SetUp() ??:0:0
#62 0x1096403c4 in testing::Test::Run() ??:0:0
#63 0x109642825 in testing::TestInfo::Run() ??:0:0
#64 0x109643c96 in testing::TestCase::Run() ??:0:0
#65 0x109669236 in testing::internal::UnitTestImpl::RunAllTests() ??:0:0
#66 0x10966868d in testing::UnitTest::Run() ??:0:0
#67 0x11178f0c6 in base::TestSuite::Run() ??:0:0
#68 0x1113d9f25 in ChromeTestSuiteRunner::RunTestSuite(int, char**) ??:0:0
#69 0x112cbdde9 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ??:0:0
#70 0x1113dabde in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ??:0:0
#71 0x1113d9d7c in main ??:0:0
#72 0x7fff70d2b114 in start ??:0:0
0x6160000f1590 is located 16 bytes inside of 544-byte region [0x6160000f1580,0x6160000f17a0)
freed by thread T5 here:
#0 0x132988632 in __sanitizer_finish_switch_fiber ??:0:0
#1 0x1189bdbcd in std::__1::__tree<std::__1::__value_type<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, scoped_refptr<extensions::Extension const> >, std::__1::__map_value_compare<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::__value_type<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, scoped_refptr<extensions::Extension const> >, std::__1::less<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > >, true>, std::__1::allocator<std::__1::__value_type<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, scoped_refptr<extensions::Extension const> > > >::erase(std::__1::__tree_const_iterator<std::__1::__value_type<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, scoped_refptr<extensions::Extension const> >, std::__1::__tree_node<std::__1::__value_type<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, scoped_refptr<extensions::Extension const> >, void*>*, long>) ??:0:0
#2 0x1189bbc01 in extensions::ExtensionSet::Remove(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&) ??:0:0
#3 0x10dde4f3a in extensions::InfoMap::RemoveExtension(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, extensions::UnloadedExtensionReason) ??:0:0
#4 0x11a5026a3 in base::internal::Invoker<base::internal::BindState<void (extensions::InfoMap::*)(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, extensions::UnloadedExtensionReason), scoped_refptr<extensions::InfoMap>, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, extensions::UnloadedExtensionReason>, void ()>::RunOnce(base::internal::BindStateBase*) ??:0:0
#5 0x111409988 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) ??:0:0
#6 0x11148a25f in base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) ??:0:0
#7 0x11149540e in base::MessageLoop::RunTask(base::PendingTask*) ??:0:0
#8 0x111495f00 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) ??:0:0
#9 0x1114965c3 in base::MessageLoop::DoWork() ??:0:0
#10 0x1116bd9f7 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) ??:0:0
#11 0x1114942b5 in base::MessageLoop::Run(bool) ??:0:0
#12 0x11153002c in base::RunLoop::Run() ??:0:0
#13 0x1115e7332 in base::Thread::Run(base::RunLoop*) ??:0:0
#14 0x10c37682d in content::BrowserProcessSubThread::IOThreadRun(base::RunLoop*) ??:0:0
#15 0x10c376554 in content::BrowserProcessSubThread::Run(base::RunLoop*) ??:0:0
#16 0x1115e7a14 in base::Thread::ThreadMain() ??:0:0
#17 0x1116a74fd in base::(anonymous namespace)::ThreadFunc(void*) ??:0:0
#18 0x7fff70fb66c0 in _pthread_body ??:0:0
#19 0x7fff70fb656c in _pthread_start ??:0:0
#20 0x7fff70fb5c5c in thread_start ??:0:0
previously allocated by thread T13 here:
#0 0x132988032 in __sanitizer_finish_switch_fiber ??:0:0
#1 0x118971cbc in extensions::Extension::Create(base::FilePath const&, extensions::Manifest::Location, base::DictionaryValue const&, int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0
#2 0x1189dc12c in extensions::file_util::LoadExtension(base::FilePath const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, extensions::Manifest::Location, int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0
#3 0x1189dbed4 in extensions::file_util::LoadExtension(base::FilePath const&, extensions::Manifest::Location, int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0
#4 0x11a44ace9 in extensions::CrxInstaller::ReloadExtensionAfterInstall(base::FilePath const&) ??:0:0
#5 0x11a44ea44 in base::internal::Invoker<base::internal::BindState<void (extensions::CrxInstaller::*)(base::FilePath const&), scoped_refptr<extensions::CrxInstaller> >, void (base::FilePath const&)>::Run(base::internal::BindStateBase*, base::FilePath const&) ??:0:0
#6 0x11a4721e1 in extensions::(anonymous namespace)::ExtensionAssetsManagerImpl::InstallExtension(extensions::Extension const*, base::FilePath const&, base::FilePath const&, Profile*, base::RepeatingCallback<void (base::FilePath const&)>) ??:0:0
#7 0x11a44a84e in extensions::CrxInstaller::CompleteInstall() ??:0:0
#8 0x11a44d6ff in base::internal::Invoker<base::internal::BindState<void (extensions::CrxInstaller::*)(), scoped_refptr<extensions::CrxInstaller> >, void ()>::RunOnce(base::internal::BindStateBase*) ??:0:0
#9 0x111409988 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) ??:0:0
#10 0x1115bf5c2 in base::internal::TaskTracker::RunOrSkipTask(base::internal::Task, base::internal::Sequence*, bool) ??:0:0
#11 0x1116a6547 in base::internal::TaskTrackerPosix::RunOrSkipTask(base::internal::Task, base::internal::Sequence*, bool) ??:0:0
#12 0x1115bd0dc in base::internal::TaskTracker::RunAndPopNextTask(scoped_refptr<base::internal::Sequence>, base::internal::CanScheduleSequenceObserver*) ??:0:0
#13 0x11159e843 in base::internal::SchedulerWorker::RunWorker() ??:0:0
#14 0x11159dfc5 in base::internal::SchedulerWorker::RunPooledWorker() ??:0:0
#15 0x1116a74fd in base::(anonymous namespace)::ThreadFunc(void*) ??:0:0
#16 0x7fff70fb66c0 in _pthread_body ??:0:0
#17 0x7fff70fb656c in _pthread_start ??:0:0
#18 0x7fff70fb5c5c in thread_start ??:0:0
Thread T5 created by T0 here:
#0 0x132972dfd in __sanitizer_weak_hook_memcmp ??:0:0
#1 0x1116a6b71 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) ??:0:0
#2 0x1115e6025 in base::Thread::StartWithOptions(base::Thread::Options const&) ??:0:0
#3 0x10c375ea8 in content::BrowserProcessSubThread::CreateIOThread() ??:0:0
#4 0x1112928e6 in content::ContentMainRunnerImpl::GetServiceManagerTaskRunnerForEmbedderProcess() ??:0:0
#5 0x11128ee8d in content::ContentServiceManagerMainDelegate::GetServiceManagerTaskRunnerForEmbedderProcess() ??:0:0
#6 0x117c4f50e in service_manager::Main(service_manager::MainParams const&) ??:0:0
#7 0x11128f2a0 in content::ContentMain(content::ContentMainParams const&) ??:0:0
#8 0x112c38485 in content::BrowserTestBase::SetUp() ??:0:0
#9 0x11173c320 in InProcessBrowserTest::SetUp() ??:0:0
#10 0x1096403c4 in testing::Test::Run() ??:0:0
#11 0x109642825 in testing::TestInfo::Run() ??:0:0
#12 0x109643c96 in testing::TestCase::Run() ??:0:0
#13 0x109669236 in testing::internal::UnitTestImpl::RunAllTests() ??:0:0
#14 0x10966868d in testing::UnitTest::Run() ??:0:0
#15 0x11178f0c6 in base::TestSuite::Run() ??:0:0
#16 0x1113d9f25 in ChromeTestSuiteRunner::RunTestSuite(int, char**) ??:0:0
#17 0x112cbdde9 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ??:0:0
#18 0x1113dabde in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ??:0:0
#19 0x1113d9d7c in main ??:0:0
#20 0x7fff70d2b114 in start ??:0:0
Thread T13 created by T0 here:
#0 0x132972dfd in __sanitizer_weak_hook_memcmp ??:0:0
#1 0x1116a6b71 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) ??:0:0
#2 0x11159ca32 in base::internal::SchedulerWorker::Start(base::SchedulerWorkerObserver*) ??:0:0
#3 0x1115a435c in base::internal::SchedulerWorkerPoolImpl::CreateRegisterAndStartSchedulerWorkerLockRequired() ??:0:0
#4 0x1115a3594 in base::internal::SchedulerWorkerPoolImpl::Start(base::SchedulerWorkerPoolParams const&, int, scoped_refptr<base::TaskRunner>, base::SchedulerWorkerObserver*, base::internal::SchedulerWorkerPoolImpl::WorkerEnvironment) ??:0:0
#5 0x1115b6b9f in base::internal::TaskSchedulerImpl::Start(base::TaskScheduler::InitParams const&, base::SchedulerWorkerObserver*) ??:0:0
#6 0x10c34bd18 in content::BrowserMainLoop::CreateThreads() ??:0:0
#7 0x10d3e88ce in content::StartupTaskRunner::RunAllTasksNow() ??:0:0
#8 0x10c34b619 in content::BrowserMainLoop::CreateStartupTasks() ??:0:0
#9 0x10c358064 in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0
#10 0x10c34481e in content::BrowserMain(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0
#11 0x11128f5ca in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0
#12 0x111292084 in content::ContentMainRunnerImpl::Run() ??:0:0
#13 0x117c4f57c in service_manager::Main(service_manager::MainParams const&) ??:0:0
#14 0x11128f2a0 in content::ContentMain(content::ContentMainParams const&) ??:0:0
#15 0x112c38485 in content::BrowserTestBase::SetUp() ??:0:0
#16 0x11173c320 in InProcessBrowserTest::SetUp() ??:0:0
#17 0x1096403c4 in testing::Test::Run() ??:0:0
#18 0x109642825 in testing::TestInfo::Run() ??:0:0
#19 0x109643c96 in testing::TestCase::Run() ??:0:0
#20 0x109669236 in testing::internal::UnitTestImpl::RunAllTests() ??:0:0
#21 0x10966868d in testing::UnitTest::Run() ??:0:0
#22 0x11178f0c6 in base::TestSuite::Run() ??:0:0
#23 0x1113d9f25 in ChromeTestSuiteRunner::RunTestSuite(int, char**) ??:0:0
#24 0x112cbdde9 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ??:0:0
#25 0x1113dabde in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ??:0:0
#26 0x1113d9d7c in main ??:0:0
#27 0x7fff70d2b114 in start ??:0:0
SUMMARY: AddressSanitizer: heap-use-after-free (/b/s/w/ir/out/Release/./browser_tests:x86_64+0x116730232)
Shadow bytes around the buggy address:
0x1c2c0001e260: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x1c2c0001e270: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x1c2c0001e280: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x1c2c0001e290: fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa fa
0x1c2c0001e2a0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x1c2c0001e2b0: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
0x1c2c0001e2c0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x1c2c0001e2d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x1c2c0001e2e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x1c2c0001e2f0: fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa fa
0x1c2c0001e300: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==91777==ABORTING
Received signal 6
0 browser_tests 0x000000011167e73c base::debug::StackTrace::StackTrace(unsigned long) + 28
1 browser_tests 0x000000011167e437 base::debug::(anonymous namespace)::StackDumpSignalHandler(int, __siginfo*, void*) + 4135
2 libsystem_platform.dylib 0x00007fff70facf5a _sigtramp + 26
3 ??? 0x00007ffeea5df968 0x0 + 140732830447976
4 libsystem_c.dylib 0x00007fff70dd7312 abort + 127
5 libclang_rt.asan_osx_dynamic.dylib 0x0000000132999f16 __sanitizer_sandbox_on_notify + 1190
6 libclang_rt.asan_osx_dynamic.dylib 0x0000000132999876 OnPrint + 14406
7 libclang_rt.asan_osx_dynamic.dylib 0x00000001329819c9 __asan_on_error + 1001
8 libclang_rt.asan_osx_dynamic.dylib 0x00000001329811d3 __asan_unpoison_intra_object_redzone + 8323
9 libclang_rt.asan_osx_dynamic.dylib 0x0000000132981cfb __asan_report_load1 + 43
10 browser_tests 0x000000011bd41233 non-virtual thunk to ExtensionInstalledBubbleView::GetWindowTitle() const + 531
11 browser_tests 0x00000001145791ea views::WidgetDelegate::GetAccessibleWindowTitle() const + 58
12 browser_tests 0x000000011455fa6f views::internal::RootView::GetAccessibleNodeData(ui::AXNodeData*) + 287
13 browser_tests 0x000000011434ae0b views::ViewAccessibility::GetAccessibleNodeData(ui::AXNodeData*) const + 619
14 browser_tests 0x00000001113ef14e (anonymous namespace)::DoesViewHaveAccessibilityErrorsRecursive(views::View*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) + 382
15 browser_tests 0x00000001113eed1e AddFailureOnWidgetAccessibilityError(views::Widget*) + 302
16 browser_tests 0x000000011456ed1a views::Widget::OnNativeWidgetVisibilityChanged(bool) + 698
17 browser_tests 0x00000001143b27d0 views::BridgedNativeWidget::OnVisibilityChanged() + 1664
18 browser_tests 0x00000001143c2cb1 -[NativeWidgetMacNSWindow orderWindow:relativeTo:] + 353
19 browser_tests 0x00000001143b3154 views::BridgedNativeWidget::NotifyVisibilityChangeDown() + 1620
20 browser_tests 0x00000001143b272e views::BridgedNativeWidget::OnVisibilityChanged() + 1502
21 browser_tests 0x00000001143c2cb1 -[NativeWidgetMacNSWindow orderWindow:relativeTo:] + 353
22 browser_tests 0x00000001143ae50a views::BridgedNativeWidget::SetVisibilityState(views::BridgedNativeWidget::WindowVisibilityState) + 810
23 browser_tests 0x000000011bed63da BrowserView::CanClose() + 266
24 browser_tests 0x000000011456a51d views::Widget::Close() + 285
25 browser_tests 0x00000001120d229c BrowserCloseManager::CloseBrowsers() + 1036
26 browser_tests 0x00000001120d2aa4 BrowserCloseManager::TryToCloseBrowsers() + 660
27 browser_tests 0x0000000111b229fa chrome::CloseAllBrowsers() + 58
28 browser_tests 0x00000001117d3894 -[AppController tryToTerminateApplication:] + 612
29 browser_tests 0x0000000111b238ad chrome::AttemptExit() + 797
30 browser_tests 0x0000000111409989 base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) + 825
31 browser_tests 0x000000011148a260 base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) + 288
32 browser_tests 0x000000011149540f base::MessageLoop::RunTask(base::PendingTask*) + 1391
33 browser_tests 0x0000000111495f01 base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) + 497
34 browser_tests 0x00000001114965c4 base::MessageLoop::DoWork() + 1444
35 browser_tests 0x00000001114a044d base::MessagePumpCFRunLoopBase::RunWork() + 333
36 browser_tests 0x00000001114568ba base::mac::CallWithEHFrame(void () block_pointer) + 10
37 browser_tests 0x000000011149ea16 base::MessagePumpCFRunLoopBase::RunWorkSource(void*) + 374
38 CoreFoundation 0x00007fff49385a21 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17
39 CoreFoundation 0x00007fff4943d26c __CFRunLoopDoSource0 + 108
40 CoreFoundation 0x00007fff49368ab0 __CFRunLoopDoSources0 + 208
41 CoreFoundation 0x00007fff49367f2d __CFRunLoopRun + 1293
42 CoreFoundation 0x00007fff49367787 CFRunLoopRunSpecific + 487
43 HIToolbox 0x00007fff48674e26 RunCurrentEventLoopInMode + 286
44 HIToolbox 0x00007fff48674b96 ReceiveNextEventCommon + 613
45 HIToolbox 0x00007fff48674914 _BlockUntilNextEventMatchingListInModeWithFilter + 64
46 AppKit 0x00007fff4693ff5f _DPSNextEvent + 2085
47 AppKit 0x00007fff470d5b4c -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044
48 browser_tests 0x00000001118e4ea1 __71-[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:]_block_invoke + 401
49 browser_tests 0x00000001114568ba base::mac::CallWithEHFrame(void () block_pointer) + 10
50 browser_tests 0x00000001118e4a52 -[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 770
51 AppKit 0x00007fff46934d6d -[NSApplication run] + 764
52 browser_tests 0x00000001114a2fe3 base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) + 1011
53 browser_tests 0x000000011149da41 base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) + 401
54 browser_tests 0x00000001114942b6 base::MessageLoop::Run(bool) + 422
55 browser_tests 0x000000011153002d base::RunLoop::Run() + 685
56 browser_tests 0x000000011174039c InProcessBrowserTest::QuitBrowsers() + 716
57 browser_tests 0x000000011173ffdc InProcessBrowserTest::PostRunTestOnMainThread() + 236
58 browser_tests 0x0000000112c39bf7 content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() + 2423
59 browser_tests 0x00000001118f7d8f ChromeBrowserMainParts::PreMainMessageLoopRunImpl() + 10463
60 browser_tests 0x00000001118f505e ChromeBrowserMainParts::PreMainMessageLoopRun() + 270
61 browser_tests 0x000000010c34fe43 content::BrowserMainLoop::PreMainMessageLoopRun() + 355
[end of stack trace]
,
Jun 12 2018
Morphing this bug to a larger issue that Mac ASan 64 Tests is red because these tests consistently fail there. https://ci.chromium.org/buildbot/chromium.memory/Mac%20ASan%2064%20Tests%20%281%29/ I don't have time left in my shift to handle this.
,
Jun 12 2018
,
Jun 15 2018
Karan, I think you're now the most expert in the declarative APIs. Can you take a look when you have a chance?
,
Jun 18 2018
https://test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=NoTracesAfterUninstalling%2CExtensionLifetimeRulesHandling These seem to have been mostly fine for a few days; taking out of the sheriff queue. Please do take a look though :)
,
Jul 23
Seems like battre@ had found the culprit for this in issue 851854. Merging. |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by mpear...@chromium.org
, Jun 12 2018Crash / leak logs: [ RUN ] DeclarativeApiTest.NoTracesAfterUninstalling [49271:7943:0611/153048.662589:WARNING:notification_platform_bridge_mac.mm(510)] AlertNotificationService: XPC connection invalidated. [49282:775:0611/153049.478386:WARNING:vt_video_decode_accelerator_mac.cc(193)] Failed to create VTDecompressionSession: Error Domain=NSOSStatusErrorDomain Code=-8973 "codecOpenErr" (-8973) [49282:775:0611/153049.479088:WARNING:vt_video_decode_accelerator_mac.cc(215)] Hardware decoding with VideoToolbox is not supported [49282:775:0611/153049.660575:ERROR:vt_video_encode_accelerator_mac.cc(516)] VTCompressionSessionCreate failed: -12908 [49271:775:0611/153050.179763:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11 [49271:775:0611/153051.136805:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11 [49282:775:0611/153052.223307:WARNING:ca_layer_tree_coordinator.mm(55)] Blank frame: No overlays or CALayers [49271:775:0611/153053.810814:WARNING:gaia_auth_fetcher.cc(902)] Could not reach Google Accounts servers: errno -11 ================================================================= ==49271==ERROR: AddressSanitizer: heap-use-after-free on address 0x6160000f1b90 at pc 0x000121c60233 bp 0x7ffee46c1b70 sp 0x7ffee46c1b68 READ of size 1 at 0x6160000f1b90 thread T0 #0 0x121c60232 in non-virtual thunk to ExtensionInstalledBubbleView::GetWindowTitle() const ??:0:0 #1 0x11a4981e9 in views::WidgetDelegate::GetAccessibleWindowTitle() const ??:0:0 #2 0x11a47ea6e in views::internal::RootView::GetAccessibleNodeData(ui::AXNodeData*) ??:0:0 #3 0x11a269e0a in views::ViewAccessibility::GetAccessibleNodeData(ui::AXNodeData*) const ??:0:0 #4 0x11730e14d in (anonymous namespace)::DoesViewHaveAccessibilityErrorsRecursive(views::View*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0 #5 0x11730dd1d in AddFailureOnWidgetAccessibilityError(views::Widget*) ??:0:0 #6 0x11a48dd19 in views::Widget::OnNativeWidgetVisibilityChanged(bool) ??:0:0 #7 0x11a2d17cf in views::BridgedNativeWidget::OnVisibilityChanged() ??:0:0 #8 0x11a2e1cb0 in -[NativeWidgetMacNSWindow orderWindow:relativeTo:] ??:0:0 #9 0x11a2d2153 in views::BridgedNativeWidget::NotifyVisibilityChangeDown() ??:0:0 #10 0x11a2d172d in views::BridgedNativeWidget::OnVisibilityChanged() ??:0:0 #11 0x11a2e1cb0 in -[NativeWidgetMacNSWindow orderWindow:relativeTo:] ??:0:0 #12 0x11a2cd509 in views::BridgedNativeWidget::SetVisibilityState(views::BridgedNativeWidget::WindowVisibilityState) ??:0:0 #13 0x121df53d9 in BrowserView::CanClose() ??:0:0 #14 0x11a48951c in views::Widget::Close() ??:0:0 #15 0x117ff129b in BrowserCloseManager::CloseBrowsers() ??:0:0 #16 0x117ff1aa3 in BrowserCloseManager::TryToCloseBrowsers() ??:0:0 #17 0x117a419f9 in chrome::CloseAllBrowsers() ??:0:0 #18 0x1176f2893 in -[AppController tryToTerminateApplication:] ??:0:0 #19 0x117a428ac in chrome::AttemptExit() ??:0:0 #20 0x117328988 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) ??:0:0 #21 0x1173a925f in base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) ??:0:0 #22 0x1173b440e in base::MessageLoop::RunTask(base::PendingTask*) ??:0:0 #23 0x1173b4f00 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) ??:0:0 #24 0x1173b55c3 in base::MessageLoop::DoWork() ??:0:0 #25 0x1173bf44c in base::MessagePumpCFRunLoopBase::RunWork() ??:0:0 #26 0x1173758b9 in base::mac::CallWithEHFrame(void () block_pointer) ??:0:0 #27 0x1173bda15 in base::MessagePumpCFRunLoopBase::RunWorkSource(void*) ??:0:0 #28 0x7fff3341ba20 in __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ ??:0:0 #29 0x7fff334d326b in __CFRunLoopDoSource0 ??:0:0 #30 0x7fff333feaaf in __CFRunLoopDoSources0 ??:0:0 #31 0x7fff333fdf2c in __CFRunLoopRun ??:0:0 #32 0x7fff333fd786 in CFRunLoopRunSpecific ??:0:0 #33 0x7fff3270ae25 in RunCurrentEventLoopInMode ??:0:0 #34 0x7fff3270ab95 in ReceiveNextEventCommon ??:0:0 #35 0x7fff3270a913 in _BlockUntilNextEventMatchingListInModeWithFilter ??:0:0 #36 0x7fff309d5f5e in _DPSNextEvent ??:0:0 #37 0x7fff3116bb4b in -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] ??:0:0 #38 0x117803ea0 in __71-[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:]_block_invoke ??:0:0 #39 0x1173758b9 in base::mac::CallWithEHFrame(void () block_pointer) ??:0:0 #40 0x117803a51 in -[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:] ??:0:0 #41 0x7fff309cad6c in -[NSApplication run] ??:0:0 #42 0x1173c1fe2 in base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) ??:0:0 #43 0x1173bca40 in base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) ??:0:0 #44 0x1173b32b5 in base::MessageLoop::Run(bool) ??:0:0 #45 0x11744f02c in base::RunLoop::Run() ??:0:0 #46 0x11765f39b in InProcessBrowserTest::QuitBrowsers() ??:0:0 #47 0x11765efdb in InProcessBrowserTest::PostRunTestOnMainThread() ??:0:0 #48 0x118b58bf6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ??:0:0 #49 0x117816d8e in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ??:0:0 #50 0x11781405d in ChromeBrowserMainParts::PreMainMessageLoopRun() ??:0:0 #51 0x11226ee42 in content::BrowserMainLoop::PreMainMessageLoopRun() ??:0:0 #52 0x1133078ce in content::StartupTaskRunner::RunAllTasksNow() ??:0:0 #53 0x11226a619 in content::BrowserMainLoop::CreateStartupTasks() ??:0:0 #54 0x112277064 in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0 #55 0x11226381e in content::BrowserMain(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0 #56 0x1171ae5ca in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0 #57 0x1171b1084 in content::ContentMainRunnerImpl::Run() ??:0:0 #58 0x11db6e57c in service_manager::Main(service_manager::MainParams const&) ??:0:0 #59 0x1171ae2a0 in content::ContentMain(content::ContentMainParams const&) ??:0:0 #60 0x118b57485 in content::BrowserTestBase::SetUp() ??:0:0 #61 0x11765b320 in InProcessBrowserTest::SetUp() ??:0:0 #62 0x10f55f3c4 in testing::Test::Run() ??:0:0 #63 0x10f561825 in testing::TestInfo::Run() ??:0:0 #64 0x10f562c96 in testing::TestCase::Run() ??:0:0 #65 0x10f588236 in testing::internal::UnitTestImpl::RunAllTests() ??:0:0 #66 0x10f58768d in testing::UnitTest::Run() ??:0:0 #67 0x1176ae0c6 in base::TestSuite::Run() ??:0:0 #68 0x1172f8f25 in ChromeTestSuiteRunner::RunTestSuite(int, char**) ??:0:0 #69 0x118bdcde9 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ??:0:0 #70 0x1172f9bde in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ??:0:0 #71 0x1172f8d7c in main ??:0:0 #72 0x7fff5adb7114 in start ??:0:0 0x6160000f1b90 is located 16 bytes inside of 544-byte region [0x6160000f1b80,0x6160000f1da0) freed by thread T6 here: #0 0x1388a2632 in __sanitizer_finish_switch_fiber ??:0:0 #1 0x113f5740d in base::internal::BindState<void (*)(scoped_refptr<extensions::Extension const>, void (extensions::RulesRegistry::*)(extensions::Extension const*), scoped_refptr<extensions::RulesRegistry>), scoped_refptr<extensions::Extension const>, void (extensions::RulesRegistry::*)(extensions::Extension const*), scoped_refptr<extensions::RulesRegistry> >::Destroy(base::internal::BindStateBase const*) ??:0:0 #2 0x117328990 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) ??:0:0 #3 0x1173a925f in base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) ??:0:0 #4 0x1173b440e in base::MessageLoop::RunTask(base::PendingTask*) ??:0:0 #5 0x1173b4f00 in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) ??:0:0 #6 0x1173b55c3 in base::MessageLoop::DoWork() ??:0:0 #7 0x1175dc9f7 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) ??:0:0 #8 0x1173b32b5 in base::MessageLoop::Run(bool) ??:0:0 #9 0x11744f02c in base::RunLoop::Run() ??:0:0 #10 0x117506332 in base::Thread::Run(base::RunLoop*) ??:0:0 #11 0x11229582d in content::BrowserProcessSubThread::IOThreadRun(base::RunLoop*) ??:0:0 #12 0x112295554 in content::BrowserProcessSubThread::Run(base::RunLoop*) ??:0:0 #13 0x117506a14 in base::Thread::ThreadMain() ??:0:0 #14 0x1175c64fd in base::(anonymous namespace)::ThreadFunc(void*) ??:0:0 #15 0x7fff5b0426c0 in _pthread_body ??:0:0 #16 0x7fff5b04256c in _pthread_start ??:0:0 #17 0x7fff5b041c5c in thread_start ??:0:0 previously allocated by thread T15 here: #0 0x1388a2032 in __sanitizer_finish_switch_fiber ??:0:0 #1 0x11e890cbc in extensions::Extension::Create(base::FilePath const&, extensions::Manifest::Location, base::DictionaryValue const&, int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0 #2 0x11e8fb12c in extensions::file_util::LoadExtension(base::FilePath const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, extensions::Manifest::Location, int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0 #3 0x11e8faed4 in extensions::file_util::LoadExtension(base::FilePath const&, extensions::Manifest::Location, int, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) ??:0:0 #4 0x120369ce9 in extensions::CrxInstaller::ReloadExtensionAfterInstall(base::FilePath const&) ??:0:0 #5 0x12036da44 in base::internal::Invoker<base::internal::BindState<void (extensions::CrxInstaller::*)(base::FilePath const&), scoped_refptr<extensions::CrxInstaller> >, void (base::FilePath const&)>::Run(base::internal::BindStateBase*, base::FilePath const&) ??:0:0 #6 0x1203911e1 in extensions::(anonymous namespace)::ExtensionAssetsManagerImpl::InstallExtension(extensions::Extension const*, base::FilePath const&, base::FilePath const&, Profile*, base::RepeatingCallback<void (base::FilePath const&)>) ??:0:0 #7 0x12036984e in extensions::CrxInstaller::CompleteInstall() ??:0:0 #8 0x12036c6ff in base::internal::Invoker<base::internal::BindState<void (extensions::CrxInstaller::*)(), scoped_refptr<extensions::CrxInstaller> >, void ()>::RunOnce(base::internal::BindStateBase*) ??:0:0 #9 0x117328988 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) ??:0:0 #10 0x1174de5c2 in base::internal::TaskTracker::RunOrSkipTask(base::internal::Task, base::internal::Sequence*, bool) ??:0:0 #11 0x1175c5547 in base::internal::TaskTrackerPosix::RunOrSkipTask(base::internal::Task, base::internal::Sequence*, bool) ??:0:0 #12 0x1174dc0dc in base::internal::TaskTracker::RunAndPopNextTask(scoped_refptr<base::internal::Sequence>, base::internal::CanScheduleSequenceObserver*) ??:0:0 #13 0x1174bd843 in base::internal::SchedulerWorker::RunWorker() ??:0:0 #14 0x1174bcfc5 in base::internal::SchedulerWorker::RunPooledWorker() ??:0:0 #15 0x1175c64fd in base::(anonymous namespace)::ThreadFunc(void*) ??:0:0 #16 0x7fff5b0426c0 in _pthread_body ??:0:0 #17 0x7fff5b04256c in _pthread_start ??:0:0 #18 0x7fff5b041c5c in thread_start ??:0:0 Thread T6 created by T0 here: #0 0x13888cdfd in __sanitizer_weak_hook_memcmp ??:0:0 #1 0x1175c5b71 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) ??:0:0 #2 0x117505025 in base::Thread::StartWithOptions(base::Thread::Options const&) ??:0:0 #3 0x112294ea8 in content::BrowserProcessSubThread::CreateIOThread() ??:0:0 #4 0x1171b18e6 in content::ContentMainRunnerImpl::GetServiceManagerTaskRunnerForEmbedderProcess() ??:0:0 #5 0x1171ade8d in content::ContentServiceManagerMainDelegate::GetServiceManagerTaskRunnerForEmbedderProcess() ??:0:0 #6 0x11db6e50e in service_manager::Main(service_manager::MainParams const&) ??:0:0 #7 0x1171ae2a0 in content::ContentMain(content::ContentMainParams const&) ??:0:0 #8 0x118b57485 in content::BrowserTestBase::SetUp() ??:0:0 #9 0x11765b320 in InProcessBrowserTest::SetUp() ??:0:0 #10 0x10f55f3c4 in testing::Test::Run() ??:0:0 #11 0x10f561825 in testing::TestInfo::Run() ??:0:0 #12 0x10f562c96 in testing::TestCase::Run() ??:0:0 #13 0x10f588236 in testing::internal::UnitTestImpl::RunAllTests() ??:0:0 #14 0x10f58768d in testing::UnitTest::Run() ??:0:0 #15 0x1176ae0c6 in base::TestSuite::Run() ??:0:0 #16 0x1172f8f25 in ChromeTestSuiteRunner::RunTestSuite(int, char**) ??:0:0 #17 0x118bdcde9 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ??:0:0 #18 0x1172f9bde in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ??:0:0 #19 0x1172f8d7c in main ??:0:0 #20 0x7fff5adb7114 in start ??:0:0 Thread T15 created by T0 here: #0 0x13888cdfd in __sanitizer_weak_hook_memcmp ??:0:0 #1 0x1175c5b71 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) ??:0:0 #2 0x1174bba32 in base::internal::SchedulerWorker::Start(base::SchedulerWorkerObserver*) ??:0:0 #3 0x1174c335c in base::internal::SchedulerWorkerPoolImpl::CreateRegisterAndStartSchedulerWorkerLockRequired() ??:0:0 #4 0x1174c2594 in base::internal::SchedulerWorkerPoolImpl::Start(base::SchedulerWorkerPoolParams const&, int, scoped_refptr<base::TaskRunner>, base::SchedulerWorkerObserver*, base::internal::SchedulerWorkerPoolImpl::WorkerEnvironment) ??:0:0 #5 0x1174d5b9f in base::internal::TaskSchedulerImpl::Start(base::TaskScheduler::InitParams const&, base::SchedulerWorkerObserver*) ??:0:0 #6 0x11226ad18 in content::BrowserMainLoop::CreateThreads() ??:0:0 #7 0x1133078ce in content::StartupTaskRunner::RunAllTasksNow() ??:0:0 #8 0x11226a619 in content::BrowserMainLoop::CreateStartupTasks() ??:0:0 #9 0x112277064 in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0 #10 0x11226381e in content::BrowserMain(content::MainFunctionParams const&, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0 #11 0x1171ae5ca in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*, std::__1::unique_ptr<content::BrowserProcessSubThread, std::__1::default_delete<content::BrowserProcessSubThread> >) ??:0:0 #12 0x1171b1084 in content::ContentMainRunnerImpl::Run() ??:0:0 #13 0x11db6e57c in service_manager::Main(service_manager::MainParams const&) ??:0:0 #14 0x1171ae2a0 in content::ContentMain(content::ContentMainParams const&) ??:0:0 #15 0x118b57485 in content::BrowserTestBase::SetUp() ??:0:0 #16 0x11765b320 in InProcessBrowserTest::SetUp() ??:0:0 #17 0x10f55f3c4 in testing::Test::Run() ??:0:0 #18 0x10f561825 in testing::TestInfo::Run() ??:0:0 #19 0x10f562c96 in testing::TestCase::Run() ??:0:0 #20 0x10f588236 in testing::internal::UnitTestImpl::RunAllTests() ??:0:0 #21 0x10f58768d in testing::UnitTest::Run() ??:0:0 #22 0x1176ae0c6 in base::TestSuite::Run() ??:0:0 #23 0x1172f8f25 in ChromeTestSuiteRunner::RunTestSuite(int, char**) ??:0:0 #24 0x118bdcde9 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ??:0:0 #25 0x1172f9bde in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ??:0:0 #26 0x1172f8d7c in main ??:0:0 #27 0x7fff5adb7114 in start ??:0:0 SUMMARY: AddressSanitizer: heap-use-after-free (/b/s/w/ir/out/Release/./browser_tests:x86_64+0x116730232) Shadow bytes around the buggy address: 0x1c2c0001e320: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x1c2c0001e330: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x1c2c0001e340: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x1c2c0001e350: fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa fa 0x1c2c0001e360: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x1c2c0001e370: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd 0x1c2c0001e380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x1c2c0001e390: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x1c2c0001e3a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x1c2c0001e3b0: fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa fa 0x1c2c0001e3c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb Shadow gap: cc ==49271==ABORTING Received signal 6 0 browser_tests 0x000000011759d73c base::debug::StackTrace::StackTrace(unsigned long) + 28 1 browser_tests 0x000000011759d437 base::debug::(anonymous namespace)::StackDumpSignalHandler(int, __siginfo*, void*) + 4135 2 libsystem_platform.dylib 0x00007fff5b038f5a _sigtramp + 26 3 ??? 0x00007ffee46c0968 0x0 + 140732730706280 4 libsystem_c.dylib 0x00007fff5ae63312 abort + 127 5 libclang_rt.asan_osx_dynamic.dylib 0x00000001388b3f16 __sanitizer_sandbox_on_notify + 1190 6 libclang_rt.asan_osx_dynamic.dylib 0x00000001388b3876 OnPrint + 14406 7 libclang_rt.asan_osx_dynamic.dylib 0x000000013889b9c9 __asan_on_error + 1001 8 libclang_rt.asan_osx_dynamic.dylib 0x000000013889b1d3 __asan_unpoison_intra_object_redzone + 8323 9 libclang_rt.asan_osx_dynamic.dylib 0x000000013889bcfb __asan_report_load1 + 43 10 browser_tests 0x0000000121c60233 non-virtual thunk to ExtensionInstalledBubbleView::GetWindowTitle() const + 531 11 browser_tests 0x000000011a4981ea views::WidgetDelegate::GetAccessibleWindowTitle() const + 58 12 browser_tests 0x000000011a47ea6f views::internal::RootView::GetAccessibleNodeData(ui::AXNodeData*) + 287 13 browser_tests 0x000000011a269e0b views::ViewAccessibility::GetAccessibleNodeData(ui::AXNodeData*) const + 619 14 browser_tests 0x000000011730e14e (anonymous namespace)::DoesViewHaveAccessibilityErrorsRecursive(views::View*, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >*) + 382 15 browser_tests 0x000000011730dd1e AddFailureOnWidgetAccessibilityError(views::Widget*) + 302 16 browser_tests 0x000000011a48dd1a views::Widget::OnNativeWidgetVisibilityChanged(bool) + 698 17 browser_tests 0x000000011a2d17d0 views::BridgedNativeWidget::OnVisibilityChanged() + 1664 18 browser_tests 0x000000011a2e1cb1 -[NativeWidgetMacNSWindow orderWindow:relativeTo:] + 353 19 browser_tests 0x000000011a2d2154 views::BridgedNativeWidget::NotifyVisibilityChangeDown() + 1620 20 browser_tests 0x000000011a2d172e views::BridgedNativeWidget::OnVisibilityChanged() + 1502 21 browser_tests 0x000000011a2e1cb1 -[NativeWidgetMacNSWindow orderWindow:relativeTo:] + 353 22 browser_tests 0x000000011a2cd50a views::BridgedNativeWidget::SetVisibilityState(views::BridgedNativeWidget::WindowVisibilityState) + 810 23 browser_tests 0x0000000121df53da BrowserView::CanClose() + 266 24 browser_tests 0x000000011a48951d views::Widget::Close() + 285 25 browser_tests 0x0000000117ff129c BrowserCloseManager::CloseBrowsers() + 1036 26 browser_tests 0x0000000117ff1aa4 BrowserCloseManager::TryToCloseBrowsers() + 660 27 browser_tests 0x0000000117a419fa chrome::CloseAllBrowsers() + 58 28 browser_tests 0x00000001176f2894 -[AppController tryToTerminateApplication:] + 612 29 browser_tests 0x0000000117a428ad chrome::AttemptExit() + 797 30 browser_tests 0x0000000117328989 base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) + 825 31 browser_tests 0x00000001173a9260 base::internal::IncomingTaskQueue::RunTask(base::PendingTask*) + 288 32 browser_tests 0x00000001173b440f base::MessageLoop::RunTask(base::PendingTask*) + 1391 33 browser_tests 0x00000001173b4f01 base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) + 497 34 browser_tests 0x00000001173b55c4 base::MessageLoop::DoWork() + 1444 35 browser_tests 0x00000001173bf44d base::MessagePumpCFRunLoopBase::RunWork() + 333 36 browser_tests 0x00000001173758ba base::mac::CallWithEHFrame(void () block_pointer) + 10 37 browser_tests 0x00000001173bda16 base::MessagePumpCFRunLoopBase::RunWorkSource(void*) + 374 38 CoreFoundation 0x00007fff3341ba21 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 17 39 CoreFoundation 0x00007fff334d326c __CFRunLoopDoSource0 + 108 40 CoreFoundation 0x00007fff333feab0 __CFRunLoopDoSources0 + 208 41 CoreFoundation 0x00007fff333fdf2d __CFRunLoopRun + 1293 42 CoreFoundation 0x00007fff333fd787 CFRunLoopRunSpecific + 487 43 HIToolbox 0x00007fff3270ae26 RunCurrentEventLoopInMode + 286 44 HIToolbox 0x00007fff3270ab96 ReceiveNextEventCommon + 613 45 HIToolbox 0x00007fff3270a914 _BlockUntilNextEventMatchingListInModeWithFilter + 64 46 AppKit 0x00007fff309d5f5f _DPSNextEvent + 2085 47 AppKit 0x00007fff3116bb4c -[NSApplication(NSEvent) _nextEventMatchingEventMask:untilDate:inMode:dequeue:] + 3044 48 browser_tests 0x0000000117803ea1 __71-[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:]_block_invoke + 401 49 browser_tests 0x00000001173758ba base::mac::CallWithEHFrame(void () block_pointer) + 10 50 browser_tests 0x0000000117803a52 -[BrowserCrApplication nextEventMatchingMask:untilDate:inMode:dequeue:] + 770 51 AppKit 0x00007fff309cad6d -[NSApplication run] + 764 52 browser_tests 0x00000001173c1fe3 base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*) + 1011 53 browser_tests 0x00000001173bca41 base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*) + 401 54 browser_tests 0x00000001173b32b6 base::MessageLoop::Run(bool) + 422 55 browser_tests 0x000000011744f02d base::RunLoop::Run() + 685 56 browser_tests 0x000000011765f39c InProcessBrowserTest::QuitBrowsers() + 716 57 browser_tests 0x000000011765efdc InProcessBrowserTest::PostRunTestOnMainThread() + 236 58 browser_tests 0x0000000118b58bf7 content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() + 2423 59 browser_tests 0x0000000117816d8f ChromeBrowserMainParts::PreMainMessageLoopRunImpl() + 10463 60 browser_tests 0x000000011781405e ChromeBrowserMainParts::PreMainMessageLoopRun() + 270 61 browser_tests 0x000000011226ee43 content::BrowserMainLoop::PreMainMessageLoopRun() + 355 [end of stack trace]