Update UBSAN vptr blacklists to account for startup crashes.

tools/ubsan/blacklist.txt

 #############################################################################
 # UBSan vptr blacklist.
 # Function and type based blacklisting use a mangled name, and it is especially
 # tricky to represent C++ types. For now, any possible changes by name manglings
 # are simply represented as wildcard expressions of regexp, and thus it might be
 # over-blacklisted.
 
 #############################################################################
 # Identical layouts.
 # If base and derived classes have identifical memory layouts (i.e., the same
@@ skipping 29 matching lines @@
 fun:*content*RenderFrameObserverTracker*RenderFrame*
 
 # RenderViewObserverTracker<T>::RenderViewObserverTracker()
 fun:*content*RenderViewObserverTracker*RenderView*
 
 #############################################################################
 # Base class's destructor accesses a derived class.
 
 fun:*DatabaseContext*contextDestroyed*
 
+# FIXME: Cannot handle template function LifecycleObserver<>::setContext,
+# so exclude source file for now. 
+src:*LifecycleObserver.h*
+
 #############################################################################
 # static_cast into itself in the constructor.
 
 fun:*RefCountedGarbageCollected*makeKeepAlive*
 fun:*ThreadSafeRefCountedGarbageCollected*makeKeepAlive*
 
 #############################################################################
-# Accessing data in destructurors where the class has virtual inheritances.
+# Accessing data in destructors where the class has virtual inheritances.
 
 type:*content*RenderWidgetHost*
 
-# Mangled name for content::RenderViewHostImpl::~RenderViewHostImpl()
-fun:*content*RenderViewHostImpl*
+# Match mangled name for content::RenderViewHostImpl::~RenderViewHostImpl().
+fun:*content*RenderViewHostImplD*
+# Match mangled name for content::RenderThreadImpl::~RenderThreadImpl().
+fun:*content*RenderThreadImplD*
 
 #############################################################################
 # Using raw pointer values.
 #
 # A raw pointer value (16) is used to infer the field offset by
 # GOOGLE_PROTOBUF_GENERATED_MESSAGE_FIELD_OFFSET.
 
 src:*/third_party/protobuf/src/google/protobuf/compiler/plugin.pb.cc
 src:*/third_party/protobuf/src/google/protobuf/compiler/cpp/cpp_message.cc
 src:*/third_party/protobuf/src/google/protobuf/descriptor.pb.cc
@@ skipping 14 matching lines @@
 src:*/third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_text.cpp
 
 # obj/third_party/libwebm/libwebm.a(obj/third_party/libwebm/source/libwebm.mkvmuxer.o)(.data.rel..L__unnamed_2+0x18): error: undefined reference to 'typeinfo for mkvparser::IMkvReader'
 src:*/third_party/libwebm/source/mkvmuxer.cpp
 
 # obj/content/libcontent_renderer.a(obj/content/renderer/scheduler/content_renderer.renderer_scheduler_impl.o)(.data.rel..L__unnamed_399+0x18): error: undefined reference to '  typeinfo for cc::TestNowSource'
 type:*TestNowSource*
 
 #############################################################################
 # UBSan seems to be emit false positives when virtual base classes are
-# involved, see e.g. chromium:448102
+# involved, see e.g. crbug.com/448102.
 
 type:*v8*internal*OFStream*
+
+#############################################################################
+# UBsan is unable to handle static_cast<A*>(nullptr) and crashes on SIGSEGV.
+#
+
+# static_cast<StartPageService*> in StartPageServiceFactory::GetForProfile.
+type:*StartPageService*