|
|
Created:
6 years, 5 months ago by Mike West Modified:
6 years, 5 months ago CC:
chromium-reviews, darin-cc_chromium.org, jam Base URL:
svn://svn.chromium.org/chrome/trunk/src Project:
chromium Visibility:
Public. |
DescriptionContentBrowserTestSanityTest.SingleProcess is failing on Mac ASan.
For example: http://build.chromium.org/p/chromium.memory/builders/Mac%20ASan%20Tests%20%281%29/builds/2843/steps/content_browsertests/logs/SingleProcess
BUG=394775
TBR=groby@chromium.org, gab@chromium.org
NOTRY=true
Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=283782
Patch Set 1 #
Messages
Total messages: 7 (0 generated)
The CQ bit was checked by mkwst@chromium.org
CQ is trying da patch. Follow status at https://chromium-status.appspot.com/cq/mkwst@chromium.org/402613007/1
Message was sent while issue was closed.
Change committed as 283782
Message was sent while issue was closed.
Explicitly adding folks to reviewers line and pasting bot output below (no symbols makes this impossible to diagnose IMO...): Apparent regression range r283720-r283732: http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=%2F... ContentBrowserTestSanityTest.SingleProcess (run #1): [ RUN ] ContentBrowserTestSanityTest.SingleProcess objc[13206]: Object 0x1105e6c0 of class NSPathStore2 autoreleased with no pool in place - just leaking - break on objc_autoreleaseNoPool() to debug objc[13206]: Object 0x1774a0b0 of class NSConcreteData autoreleased with no pool in place - just leaking - break on objc_autoreleaseNoPool() to debug [ OK ] ContentBrowserTestSanityTest.SingleProcess (369 ms) [----------] 1 test from ContentBrowserTestSanityTest (369 ms total) [----------] Global test environment tear-down [==========] 1 test from 1 test case ran. (369 ms total) [ PASSED ] 1 test. ================================================================= ==13206==ERROR: AddressSanitizer: heap-use-after-free on address 0x109928f8 at pc 0xab05c32 bp 0xbff2ac38 sp 0xbff2ac34 WRITE of size 4 at 0x109928f8 thread T0 #0 0xab05c31 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xaa31c31) #1 0x172d2a2 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x16592a2) #2 0x172c1d6 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x16581d6) #3 0x172c4f1 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x16584f1) #4 0x10b930a (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xfe530a) #5 0xeb5708 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xde1708) #6 0x106722f (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xf9322f) #7 0xeb5594 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xde1594) #8 0xd6f44 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x2f44) 0x109928f8 is located 40 bytes inside of 44-byte region [0x109928d0,0x109928fc) freed by thread T0 here: #0 0xef211fb (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/libclang_rt.asan_osx_dynamic.dylib+0x301fb) #1 0xab054f0 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xaa314f0) #2 0x17308f5 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x165c8f5) #3 0x1809c63 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x1735c63) #4 0x17d4ad4 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x1700ad4) #5 0x17d2fd6 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x16fefd6) #6 0xa42bca0 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa357ca0) #7 0xa416cbb (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa342cbb) #8 0xa416f50 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa342f50) #9 0xa42d4b2 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa3594b2) #10 0xec3428 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xdef428) #11 0xebdcb9 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xde9cb9) #12 0xa2e8234 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa214234) #13 0xa2ea04b (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa21604b) #14 0xa2e7b83 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa213b83) #15 0x103c6c0 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xf686c0) #16 0xeb6d61 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xde2d61) #17 0x14ff711 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x142b711) #18 0x1501f2d (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x142df2d) #19 0x1502deb (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x142edeb) #20 0x151a15e (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x144615e) #21 0x1518deb (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x1444deb) #22 0x10b8c55 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xfe4c55) #23 0xeb56fc (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xde16fc) #24 0x106722f (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xf9322f) #25 0xeb5594 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xde1594) #26 0xd6f44 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x2f44) previously allocated by thread T14 here: #0 0xef20c3b (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/libclang_rt.asan_osx_dynamic.dylib+0x2fc3b) #1 0xab05123 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xaa31123) #2 0xaa32fa8 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa95efa8) #3 0xa2ee5b4 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa21a5b4) #4 0x18d55fa (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x18015fa) #5 0x18b7b4e (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17e3b4e) #6 0x18b7f37 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17e3f37) #7 0x18bfe29 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17ebe29) #8 0x18bf773 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17eb773) #9 0x18b063b (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17dc63b) #10 0x18b0eac (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17dceac) #11 0x16ff83e (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x162b83e) #12 0x189b0ee (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17c70ee) #13 0x16ffec6 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x162bec6) #14 0x17d612f (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x170212f) #15 0x18225eb (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x174e5eb) #16 0x17d59e2 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x17019e2) #17 0x186eea0 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x179aea0) #18 0xa448212 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa374212) #19 0xa4485fa (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0xa3745fa) #20 0x186f42d (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x179b42d) #21 0x185f602 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/content_browsertests+0x178b602) #22 0xef2ab68 (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/out/Release/libclang_rt.asan_osx_dynamic.dylib+0x39b68) (...) SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ?? Shadow bytes around the buggy address: 0x221324c0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa 0x221324d0: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd fd 0x221324e0: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd 0x221324f0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa 0x22132500: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa =>0x22132510: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd[fd] 0x22132520: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd 0x22132530: fa fa fd fd fd fd fd fd fa fa 00 00 00 00 00 00 0x22132540: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 00 0x22132550: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd 0x22132560: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc ASan internal: fe ==13206==ABORTING
What's the regression range based on? On Thu, Jul 17, 2014 at 8:19 AM, <gab@chromium.org> wrote: > Explicitly adding folks to reviewers line and pasting bot output below (no > symbols makes this impossible to diagnose IMO...): > > Apparent regression range r283720-r283732: > http://build.chromium.org/f/chromium/perf/dashboard/ui/ > changelog.html?url=%2Ftrunk%2Fsrc&range=283720%3A283732&mode=html > > > ContentBrowserTestSanityTest.SingleProcess (run #1): > [ RUN ] ContentBrowserTestSanityTest.SingleProcess > objc[13206]: Object 0x1105e6c0 of class NSPathStore2 autoreleased with no > pool > in place - just leaking - break on objc_autoreleaseNoPool() to debug > objc[13206]: Object 0x1774a0b0 of class NSConcreteData autoreleased with > no pool > in place - just leaking - break on objc_autoreleaseNoPool() to debug > [ OK ] ContentBrowserTestSanityTest.SingleProcess (369 ms) > [----------] 1 test from ContentBrowserTestSanityTest (369 ms total) > > [----------] Global test environment tear-down > [==========] 1 test from 1 test case ran. (369 ms total) > [ PASSED ] 1 test. > ================================================================= > ==13206==ERROR: AddressSanitizer: heap-use-after-free on address > 0x109928f8 at > pc 0xab05c32 bp 0xbff2ac38 sp 0xbff2ac34 > WRITE of size 4 at 0x109928f8 thread T0 > #0 0xab05c31 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xaa31c31) > #1 0x172d2a2 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x16592a2) > #2 0x172c1d6 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x16581d6) > #3 0x172c4f1 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x16584f1) > #4 0x10b930a > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xfe530a) > #5 0xeb5708 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xde1708) > #6 0x106722f > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xf9322f) > #7 0xeb5594 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xde1594) > #8 0xd6f44 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x2f44) > > 0x109928f8 is located 40 bytes inside of 44-byte region > [0x109928d0,0x109928fc) > freed by thread T0 here: > #0 0xef211fb > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/libclang_rt.asan_osx_dynamic.dylib+0x301fb) > #1 0xab054f0 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xaa314f0) > #2 0x17308f5 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x165c8f5) > #3 0x1809c63 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x1735c63) > #4 0x17d4ad4 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x1700ad4) > #5 0x17d2fd6 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x16fefd6) > #6 0xa42bca0 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa357ca0) > #7 0xa416cbb > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa342cbb) > #8 0xa416f50 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa342f50) > #9 0xa42d4b2 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa3594b2) > #10 0xec3428 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xdef428) > #11 0xebdcb9 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xde9cb9) > #12 0xa2e8234 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa214234) > #13 0xa2ea04b > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa21604b) > #14 0xa2e7b83 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa213b83) > #15 0x103c6c0 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xf686c0) > #16 0xeb6d61 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xde2d61) > #17 0x14ff711 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x142b711) > #18 0x1501f2d > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x142df2d) > #19 0x1502deb > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x142edeb) > #20 0x151a15e > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x144615e) > #21 0x1518deb > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x1444deb) > #22 0x10b8c55 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xfe4c55) > #23 0xeb56fc > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xde16fc) > #24 0x106722f > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xf9322f) > #25 0xeb5594 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xde1594) > #26 0xd6f44 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x2f44) > > previously allocated by thread T14 here: > #0 0xef20c3b > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/libclang_rt.asan_osx_dynamic.dylib+0x2fc3b) > #1 0xab05123 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xaa31123) > #2 0xaa32fa8 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa95efa8) > #3 0xa2ee5b4 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa21a5b4) > #4 0x18d55fa > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x18015fa) > #5 0x18b7b4e > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17e3b4e) > #6 0x18b7f37 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17e3f37) > #7 0x18bfe29 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17ebe29) > #8 0x18bf773 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17eb773) > #9 0x18b063b > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17dc63b) > #10 0x18b0eac > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17dceac) > #11 0x16ff83e > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x162b83e) > #12 0x189b0ee > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17c70ee) > #13 0x16ffec6 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x162bec6) > #14 0x17d612f > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x170212f) > #15 0x18225eb > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x174e5eb) > #16 0x17d59e2 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x17019e2) > #17 0x186eea0 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x179aea0) > #18 0xa448212 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa374212) > #19 0xa4485fa > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0xa3745fa) > #20 0x186f42d > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x179b42d) > #21 0x185f602 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/content_browsertests+0x178b602) > #22 0xef2ab68 > (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ > out/Release/libclang_rt.asan_osx_dynamic.dylib+0x39b68) > > (...) > > SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ?? > Shadow bytes around the buggy address: > 0x221324c0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa > 0x221324d0: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd fd > 0x221324e0: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd > 0x221324f0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa > 0x22132500: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa > =>0x22132510: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd[fd] > 0x22132520: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd > 0x22132530: fa fa fd fd fd fd fd fd fa fa 00 00 00 00 00 00 > 0x22132540: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 00 > 0x22132550: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd > 0x22132560: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd > Shadow byte legend (one shadow byte represents 8 application bytes): > Addressable: 00 > Partially addressable: 01 02 03 04 05 06 07 > Heap left redzone: fa > Heap right redzone: fb > Freed heap region: fd > Stack left redzone: f1 > Stack mid redzone: f2 > Stack right redzone: f3 > Stack partial redzone: f4 > Stack after return: f5 > Stack use after scope: f8 > Global redzone: f9 > Global init order: f6 > Poisoned by user: f7 > Container overflow: fc > ASan internal: fe > ==13206==ABORTING > > > https://codereview.chromium.org/402613007/ > To unsubscribe from this group and stop receiving emails from it, send an email to chromium-reviews+unsubscribe@chromium.org.
http://build.chromium.org/p/chromium.memory/builders/Mac%20ASan%20Tests%20(1) Last known good is r283720, first failure is r283732 (so actually the regression shouldn't include r283720 so it's http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=%2F... ) On Thu, Jul 17, 2014 at 1:47 PM, Rachel Blum <groby@chromium.org> wrote: > What's the regression range based on? > > > On Thu, Jul 17, 2014 at 8:19 AM, <gab@chromium.org> wrote: > >> Explicitly adding folks to reviewers line and pasting bot output below (no >> symbols makes this impossible to diagnose IMO...): >> >> Apparent regression range r283720-r283732: >> http://build.chromium.org/f/chromium/perf/dashboard/ui/ >> changelog.html?url=%2Ftrunk%2Fsrc&range=283720%3A283732&mode=html >> >> >> ContentBrowserTestSanityTest.SingleProcess (run #1): >> [ RUN ] ContentBrowserTestSanityTest.SingleProcess >> objc[13206]: Object 0x1105e6c0 of class NSPathStore2 autoreleased with no >> pool >> in place - just leaking - break on objc_autoreleaseNoPool() to debug >> objc[13206]: Object 0x1774a0b0 of class NSConcreteData autoreleased with >> no pool >> in place - just leaking - break on objc_autoreleaseNoPool() to debug >> [ OK ] ContentBrowserTestSanityTest.SingleProcess (369 ms) >> [----------] 1 test from ContentBrowserTestSanityTest (369 ms total) >> >> [----------] Global test environment tear-down >> [==========] 1 test from 1 test case ran. (369 ms total) >> [ PASSED ] 1 test. >> ================================================================= >> ==13206==ERROR: AddressSanitizer: heap-use-after-free on address >> 0x109928f8 at >> pc 0xab05c32 bp 0xbff2ac38 sp 0xbff2ac34 >> WRITE of size 4 at 0x109928f8 thread T0 >> #0 0xab05c31 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xaa31c31) >> #1 0x172d2a2 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x16592a2) >> #2 0x172c1d6 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x16581d6) >> #3 0x172c4f1 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x16584f1) >> #4 0x10b930a >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xfe530a) >> #5 0xeb5708 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xde1708) >> #6 0x106722f >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xf9322f) >> #7 0xeb5594 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xde1594) >> #8 0xd6f44 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x2f44) >> >> 0x109928f8 is located 40 bytes inside of 44-byte region >> [0x109928d0,0x109928fc) >> freed by thread T0 here: >> #0 0xef211fb >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/libclang_rt.asan_osx_dynamic.dylib+0x301fb) >> #1 0xab054f0 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xaa314f0) >> #2 0x17308f5 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x165c8f5) >> #3 0x1809c63 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x1735c63) >> #4 0x17d4ad4 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x1700ad4) >> #5 0x17d2fd6 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x16fefd6) >> #6 0xa42bca0 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa357ca0) >> #7 0xa416cbb >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa342cbb) >> #8 0xa416f50 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa342f50) >> #9 0xa42d4b2 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa3594b2) >> #10 0xec3428 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xdef428) >> #11 0xebdcb9 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xde9cb9) >> #12 0xa2e8234 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa214234) >> #13 0xa2ea04b >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa21604b) >> #14 0xa2e7b83 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa213b83) >> #15 0x103c6c0 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xf686c0) >> #16 0xeb6d61 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xde2d61) >> #17 0x14ff711 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x142b711) >> #18 0x1501f2d >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x142df2d) >> #19 0x1502deb >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x142edeb) >> #20 0x151a15e >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x144615e) >> #21 0x1518deb >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x1444deb) >> #22 0x10b8c55 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xfe4c55) >> #23 0xeb56fc >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xde16fc) >> #24 0x106722f >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xf9322f) >> #25 0xeb5594 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xde1594) >> #26 0xd6f44 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x2f44) >> >> previously allocated by thread T14 here: >> #0 0xef20c3b >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/libclang_rt.asan_osx_dynamic.dylib+0x2fc3b) >> #1 0xab05123 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xaa31123) >> #2 0xaa32fa8 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa95efa8) >> #3 0xa2ee5b4 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa21a5b4) >> #4 0x18d55fa >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x18015fa) >> #5 0x18b7b4e >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17e3b4e) >> #6 0x18b7f37 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17e3f37) >> #7 0x18bfe29 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17ebe29) >> #8 0x18bf773 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17eb773) >> #9 0x18b063b >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17dc63b) >> #10 0x18b0eac >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17dceac) >> #11 0x16ff83e >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x162b83e) >> #12 0x189b0ee >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17c70ee) >> #13 0x16ffec6 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x162bec6) >> #14 0x17d612f >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x170212f) >> #15 0x18225eb >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x174e5eb) >> #16 0x17d59e2 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x17019e2) >> #17 0x186eea0 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x179aea0) >> #18 0xa448212 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa374212) >> #19 0xa4485fa >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0xa3745fa) >> #20 0x186f42d >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x179b42d) >> #21 0x185f602 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/content_browsertests+0x178b602) >> #22 0xef2ab68 >> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >> out/Release/libclang_rt.asan_osx_dynamic.dylib+0x39b68) >> >> (...) >> >> SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ?? >> Shadow bytes around the buggy address: >> 0x221324c0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa >> 0x221324d0: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd fd >> 0x221324e0: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >> 0x221324f0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa >> 0x22132500: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa >> =>0x22132510: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd[fd] >> 0x22132520: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >> 0x22132530: fa fa fd fd fd fd fd fd fa fa 00 00 00 00 00 00 >> 0x22132540: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 00 >> 0x22132550: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >> 0x22132560: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >> Shadow byte legend (one shadow byte represents 8 application bytes): >> Addressable: 00 >> Partially addressable: 01 02 03 04 05 06 07 >> Heap left redzone: fa >> Heap right redzone: fb >> Freed heap region: fd >> Stack left redzone: f1 >> Stack mid redzone: f2 >> Stack right redzone: f3 >> Stack partial redzone: f4 >> Stack after return: f5 >> Stack use after scope: f8 >> Global redzone: f9 >> Global init order: f6 >> Poisoned by user: f7 >> Container overflow: fc >> ASan internal: fe >> ==13206==ABORTING >> >> >> https://codereview.chromium.org/402613007/ >> > > To unsubscribe from this group and stop receiving emails from it, send an email to chromium-reviews+unsubscribe@chromium.org.
Ah, thanks (bug was filed with build 2842 instead of 2840, so I made the erroneous assumption that was the first occurrence) On Thu, Jul 17, 2014 at 10:52 AM, Gabriel Charette <gab@chromium.org> wrote: > > http://build.chromium.org/p/chromium.memory/builders/Mac%20ASan%20Tests%20(1) > > Last known good is r283720, first failure is r283732 (so actually the > regression shouldn't include r283720 so it's > http://build.chromium.org/f/chromium/perf/dashboard/ui/changelog.html?url=%2F... > ) > > > On Thu, Jul 17, 2014 at 1:47 PM, Rachel Blum <groby@chromium.org> wrote: > >> What's the regression range based on? >> >> >> On Thu, Jul 17, 2014 at 8:19 AM, <gab@chromium.org> wrote: >> >>> Explicitly adding folks to reviewers line and pasting bot output below >>> (no >>> symbols makes this impossible to diagnose IMO...): >>> >>> Apparent regression range r283720-r283732: >>> http://build.chromium.org/f/chromium/perf/dashboard/ui/ >>> changelog.html?url=%2Ftrunk%2Fsrc&range=283720%3A283732&mode=html >>> >>> >>> ContentBrowserTestSanityTest.SingleProcess (run #1): >>> [ RUN ] ContentBrowserTestSanityTest.SingleProcess >>> objc[13206]: Object 0x1105e6c0 of class NSPathStore2 autoreleased with >>> no pool >>> in place - just leaking - break on objc_autoreleaseNoPool() to debug >>> objc[13206]: Object 0x1774a0b0 of class NSConcreteData autoreleased with >>> no pool >>> in place - just leaking - break on objc_autoreleaseNoPool() to debug >>> [ OK ] ContentBrowserTestSanityTest.SingleProcess (369 ms) >>> [----------] 1 test from ContentBrowserTestSanityTest (369 ms total) >>> >>> [----------] Global test environment tear-down >>> [==========] 1 test from 1 test case ran. (369 ms total) >>> [ PASSED ] 1 test. >>> ================================================================= >>> ==13206==ERROR: AddressSanitizer: heap-use-after-free on address >>> 0x109928f8 at >>> pc 0xab05c32 bp 0xbff2ac38 sp 0xbff2ac34 >>> WRITE of size 4 at 0x109928f8 thread T0 >>> #0 0xab05c31 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xaa31c31) >>> #1 0x172d2a2 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x16592a2) >>> #2 0x172c1d6 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x16581d6) >>> #3 0x172c4f1 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x16584f1) >>> #4 0x10b930a >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xfe530a) >>> #5 0xeb5708 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xde1708) >>> #6 0x106722f >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xf9322f) >>> #7 0xeb5594 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xde1594) >>> #8 0xd6f44 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x2f44) >>> >>> 0x109928f8 is located 40 bytes inside of 44-byte region >>> [0x109928d0,0x109928fc) >>> freed by thread T0 here: >>> #0 0xef211fb >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/libclang_rt.asan_osx_dynamic.dylib+0x301fb) >>> #1 0xab054f0 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xaa314f0) >>> #2 0x17308f5 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x165c8f5) >>> #3 0x1809c63 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x1735c63) >>> #4 0x17d4ad4 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x1700ad4) >>> #5 0x17d2fd6 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x16fefd6) >>> #6 0xa42bca0 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa357ca0) >>> #7 0xa416cbb >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa342cbb) >>> #8 0xa416f50 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa342f50) >>> #9 0xa42d4b2 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa3594b2) >>> #10 0xec3428 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xdef428) >>> #11 0xebdcb9 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xde9cb9) >>> #12 0xa2e8234 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa214234) >>> #13 0xa2ea04b >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa21604b) >>> #14 0xa2e7b83 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa213b83) >>> #15 0x103c6c0 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xf686c0) >>> #16 0xeb6d61 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xde2d61) >>> #17 0x14ff711 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x142b711) >>> #18 0x1501f2d >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x142df2d) >>> #19 0x1502deb >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x142edeb) >>> #20 0x151a15e >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x144615e) >>> #21 0x1518deb >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x1444deb) >>> #22 0x10b8c55 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xfe4c55) >>> #23 0xeb56fc >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xde16fc) >>> #24 0x106722f >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xf9322f) >>> #25 0xeb5594 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xde1594) >>> #26 0xd6f44 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x2f44) >>> >>> previously allocated by thread T14 here: >>> #0 0xef20c3b >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/libclang_rt.asan_osx_dynamic.dylib+0x2fc3b) >>> #1 0xab05123 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xaa31123) >>> #2 0xaa32fa8 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa95efa8) >>> #3 0xa2ee5b4 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa21a5b4) >>> #4 0x18d55fa >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x18015fa) >>> #5 0x18b7b4e >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17e3b4e) >>> #6 0x18b7f37 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17e3f37) >>> #7 0x18bfe29 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17ebe29) >>> #8 0x18bf773 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17eb773) >>> #9 0x18b063b >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17dc63b) >>> #10 0x18b0eac >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17dceac) >>> #11 0x16ff83e >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x162b83e) >>> #12 0x189b0ee >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17c70ee) >>> #13 0x16ffec6 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x162bec6) >>> #14 0x17d612f >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x170212f) >>> #15 0x18225eb >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x174e5eb) >>> #16 0x17d59e2 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x17019e2) >>> #17 0x186eea0 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x179aea0) >>> #18 0xa448212 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa374212) >>> #19 0xa4485fa >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0xa3745fa) >>> #20 0x186f42d >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x179b42d) >>> #21 0x185f602 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/content_browsertests+0x178b602) >>> #22 0xef2ab68 >>> (/Volumes/data/b/build/slave/Mac_ASan_Tests__1_/build/src/ >>> out/Release/libclang_rt.asan_osx_dynamic.dylib+0x39b68) >>> >>> (...) >>> >>> SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ?? >>> Shadow bytes around the buggy address: >>> 0x221324c0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa >>> 0x221324d0: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd fd >>> 0x221324e0: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >>> 0x221324f0: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa >>> 0x22132500: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 04 fa >>> =>0x22132510: fa fa 00 00 00 00 04 fa fa fa fd fd fd fd fd[fd] >>> 0x22132520: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >>> 0x22132530: fa fa fd fd fd fd fd fd fa fa 00 00 00 00 00 00 >>> 0x22132540: fa fa 00 00 00 00 00 00 fa fa 00 00 00 00 00 00 >>> 0x22132550: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >>> 0x22132560: fa fa fd fd fd fd fd fd fa fa fd fd fd fd fd fd >>> Shadow byte legend (one shadow byte represents 8 application bytes): >>> Addressable: 00 >>> Partially addressable: 01 02 03 04 05 06 07 >>> Heap left redzone: fa >>> Heap right redzone: fb >>> Freed heap region: fd >>> Stack left redzone: f1 >>> Stack mid redzone: f2 >>> Stack right redzone: f3 >>> Stack partial redzone: f4 >>> Stack after return: f5 >>> Stack use after scope: f8 >>> Global redzone: f9 >>> Global init order: f6 >>> Poisoned by user: f7 >>> Container overflow: fc >>> ASan internal: fe >>> ==13206==ABORTING >>> >>> >>> https://codereview.chromium.org/402613007/ >>> >> >> > To unsubscribe from this group and stop receiving emails from it, send an email to chromium-reviews+unsubscribe@chromium.org. |