================================================================= ==11072==ERROR: AddressSanitizer: heap-use-after-free on address 0x11f90ac4a4f0 at pc 0x7ffdc8b6a9fc bp 0x0021f1ffab70 sp 0x0021f1ffabb8 WRITE of size 4 at 0x11f90ac4a4f0 thread T0 #0 0x7ffdc8b6a9fb in PageInfoInfoBarDelegate::set_reload_type C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\page_info_infobar_delegate.h:31 #1 0x7ffdc8b6a9fb in ChromePageInfoDelegate::CreateInfoBarDelegate(enum content::ReloadType) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\chrome_page_info_delegate.cc:226:15 #2 0x7ffde101ffb0 in PageInfo::OnUIClosing(bool *) C:\b\s\w\ir\cache\builder\src\components\page_info\page_info.cc:796:20 #3 0x7ffdc94f5841 in PageInfoBubbleView::OnWidgetDestroying(class views::Widget *) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\views\page_info\page_info_bubble_view.cc:352:17 #4 0x7ffdcaecbb91 in std::__Cr::__invoke C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__type_traits\invoke.h:203 #5 0x7ffdcaecbb91 in std::__Cr::invoke C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__functional\invoke.h:29 #6 0x7ffdcaecbb91 in base::ObserverList::Notify(void (__cdecl views::WidgetObserver::*)(class views::Widget *), class views::Widget *const &) C:\b\s\w\ir\cache\builder\src\base\observer_list.h:398:7 #7 0x7ffdcaec04ab in views::Widget::HandleWidgetDestroying(void) C:\b\s\w\ir\cache\builder\src\ui\views\widget\widget.cc:2719:14 #8 0x7ffdcadeff52 in views::DesktopWindowTreeHostWin::HandleDestroying(void) C:\b\s\w\ir\cache\builder\src\ui\views\widget\desktop_aura\desktop_window_tree_host_win.cc:1052:30 #9 0x7ffdcae80324 in views::HWNDMessageHandler::OnDestroy(void) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.cc:1891:14 #10 0x7ffdcae74182 in views::HWNDMessageHandler::_ProcessWindowMessage(struct HWND__*, unsigned int, unsigned __int64, __int64, __int64 &, unsigned long) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.h:468:5 #11 0x7ffdcae7151d in views::HWNDMessageHandler::OnWndProc(unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.cc:1178:7 #12 0x7ffdcf592d7c in gfx::WindowImpl::WndProc(struct HWND__*, unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\ui\gfx\win\window_impl.cc:313:18 #13 0x7ffdcf59185e in base::win::WrappedWindowProc<&gfx::WindowImpl::WndProc(struct HWND__*, unsigned int, unsigned __int64, __int64)>(struct HWND__*, unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\base\win\wrapped_window_proc.h:74:10 #14 0x7ffedc787cf5 (C:\WINDOWS\System32\USER32.dll+0x180017cf5) #15 0x7ffedc78757b (C:\WINDOWS\System32\USER32.dll+0x18001757b) #16 0x7ffedc7b8562 (C:\WINDOWS\System32\USER32.dll+0x180048562) #17 0x7ffeddb47253 (C:\WINDOWS\SYSTEM32\ntdll.dll+0x180167253) #18 0x7ffedb182543 (C:\WINDOWS\System32\win32u.dll+0x180002543) #19 0x7ffdcae8c07f in base::internal::DecayedFunctorTraits &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731 #20 0x7ffdcae8c07f in base::internal::InvokeHelper<1,base::internal::FunctorTraits &&>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947 #21 0x7ffdcae8c07f in base::internal::Invoker &&>,base::internal::BindState<1,1,0,void (HWNDMessageHandler::*)(),base::WeakPtr >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060 #22 0x7ffdcae8c07f in base::internal::Invoker &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl views::HWNDMessageHandler::*)(void), class base::WeakPtr>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12 #23 0x7ffdcc859cb3 in base::OnceCallback::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156 #24 0x7ffdcc859cb3 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34 #25 0x7ffdcc82ceb9 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104 #26 0x7ffdcc82ceb9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:465:23 #27 0x7ffdcc82bd5f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:339:40 #28 0x7ffdcc6c8760 in base::MessagePumpForUI::DoRunLoop(void) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:260:67 #29 0x7ffdcc6c6128 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:87:3 #30 0x7ffdcc82ebf1 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, class base::TimeDelta) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:638:12 #31 0x7ffdcc8cb8be in base::RunLoop::Run(class base::Location const &) C:\b\s\w\ir\cache\builder\src\base\run_loop.cc:134:14 #32 0x7ffdc28a4bcd in content::BrowserMainLoop::RunMainMessageLoop(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_loop.cc:1109:18 #33 0x7ffdc28ac849 in content::BrowserMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_runner_impl.cc:156:15 #34 0x7ffdc289b3ec in content::BrowserMain(struct content::MainFunctionParams) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main.cc:32:28 #35 0x7ffdc8bd6e82 in content::RunBrowserProcessMain(struct content::MainFunctionParams, class content::ContentMainDelegate *) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:701:10 #36 0x7ffdc8bd9fcf in content::ContentMainRunnerImpl::RunBrowser(struct content::MainFunctionParams, bool) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1278:10 #37 0x7ffdc8bd97de in content::ContentMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\app\content_main_runner_impl.cc:1127:12 #38 0x7ffdc8bcd6b8 in content::RunContentProcess(struct content::ContentMainParams, class content::ContentMainRunner *) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:361:36 #39 0x7ffdc8bce27d in content::ContentMain(struct content::ContentMainParams) C:\b\s\w\ir\cache\builder\src\content\app\content_main.cc:374:10 #40 0x7ffdb98b2b0b in ChromeMain C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_main.cc:222:12 #41 0x7ff75c55479b in MainDllLoader::Launch(struct HINSTANCE__*, class base::TimeTicks) C:\b\s\w\ir\cache\builder\src\chrome\app\main_dll_loader_win.cc:201:12 #42 0x7ff75c55200c in main C:\b\s\w\ir\cache\builder\src\chrome\app\chrome_exe_main_win.cc:352:20 #43 0x7ff75ca0f77b in invoke_main D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:78 #44 0x7ff75ca0f77b in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288 #45 0x7ffedc26e8d6 (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6) #46 0x7ffedd9e8d9b (C:\WINDOWS\SYSTEM32\ntdll.dll+0x180008d9b) 0x11f90ac4a4f0 is located 80 bytes inside of 88-byte region [0x11f90ac4a4a0,0x11f90ac4a4f8) freed by thread T0 here: #0 0x7ffe4defc584 (D:\win64-release_d8-asan-win64-release-v8-component-100000\clang_rt.asan_dynamic-x86_64.dll+0x18005c584) #1 0x7ffdc8b71050 in PageInfoInfoBarDelegate::`scalar deleting dtor'(unsigned int) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\page_info_infobar_delegate.cc:30:51 #2 0x7ffdd5563f0b in std::__Cr::default_delete::operator() C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:77 #3 0x7ffdd5563f0b in std::__Cr::unique_ptr >::reset C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:290 #4 0x7ffdd5563f0b in std::__Cr::unique_ptr >::~unique_ptr C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:259 #5 0x7ffdd5563f0b in infobars::InfoBar::~InfoBar(void) C:\b\s\w\ir\cache\builder\src\components\infobars\core\infobar.cc:38:1 #6 0x7ffdc9b49f73 in ConfirmInfoBar::~ConfirmInfoBar C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\views\infobars\confirm_infobar.cc:74 #7 0x7ffdc9b49f73 in ConfirmInfoBar::`scalar deleting dtor'(unsigned int) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\views\infobars\confirm_infobar.cc:74:33 #8 0x7ffdd555d85e in std::__Cr::default_delete::operator() C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:77 #9 0x7ffdd555d85e in std::__Cr::unique_ptr >::reset C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:290 #10 0x7ffdd555d85e in std::__Cr::unique_ptr >::~unique_ptr C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__memory\unique_ptr.h:259 #11 0x7ffdd555d85e in infobars::InfoBarManager::AddInfoBarInternal(class std::__Cr::unique_ptr>, bool) C:\b\s\w\ir\cache\builder\src\components\infobars\core\infobar_manager.cc:77:1 #12 0x7ffdc8b70db1 in infobars::InfoBarManager::AddInfoBar C:\b\s\w\ir\cache\builder\src\components\infobars\core\infobar_manager.h:64 #13 0x7ffdc8b70db1 in PageInfoInfoBarDelegate::Create(class infobars::ContentInfoBarManager *) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\page_info_infobar_delegate.cc:23:20 #14 0x7ffdc8b6a9c5 in ChromePageInfoDelegate::CreateInfoBarDelegate(enum content::ReloadType) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\chrome_page_info_delegate.cc:225:22 #15 0x7ffde101ffb0 in PageInfo::OnUIClosing(bool *) C:\b\s\w\ir\cache\builder\src\components\page_info\page_info.cc:796:20 #16 0x7ffdc94f5841 in PageInfoBubbleView::OnWidgetDestroying(class views::Widget *) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\views\page_info\page_info_bubble_view.cc:352:17 #17 0x7ffdcaecbb91 in std::__Cr::__invoke C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__type_traits\invoke.h:203 #18 0x7ffdcaecbb91 in std::__Cr::invoke C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__functional\invoke.h:29 #19 0x7ffdcaecbb91 in base::ObserverList::Notify(void (__cdecl views::WidgetObserver::*)(class views::Widget *), class views::Widget *const &) C:\b\s\w\ir\cache\builder\src\base\observer_list.h:398:7 #20 0x7ffdcaec04ab in views::Widget::HandleWidgetDestroying(void) C:\b\s\w\ir\cache\builder\src\ui\views\widget\widget.cc:2719:14 #21 0x7ffdcadeff52 in views::DesktopWindowTreeHostWin::HandleDestroying(void) C:\b\s\w\ir\cache\builder\src\ui\views\widget\desktop_aura\desktop_window_tree_host_win.cc:1052:30 #22 0x7ffdcae80324 in views::HWNDMessageHandler::OnDestroy(void) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.cc:1891:14 #23 0x7ffdcae74182 in views::HWNDMessageHandler::_ProcessWindowMessage(struct HWND__*, unsigned int, unsigned __int64, __int64, __int64 &, unsigned long) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.h:468:5 #24 0x7ffdcae7151d in views::HWNDMessageHandler::OnWndProc(unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.cc:1178:7 #25 0x7ffdcf592d7c in gfx::WindowImpl::WndProc(struct HWND__*, unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\ui\gfx\win\window_impl.cc:313:18 #26 0x7ffdcf59185e in base::win::WrappedWindowProc<&gfx::WindowImpl::WndProc(struct HWND__*, unsigned int, unsigned __int64, __int64)>(struct HWND__*, unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\base\win\wrapped_window_proc.h:74:10 #27 0x7ffedc787cf5 (C:\WINDOWS\System32\USER32.dll+0x180017cf5) #28 0x7ffedc78757b (C:\WINDOWS\System32\USER32.dll+0x18001757b) #29 0x7ffedc7b8562 (C:\WINDOWS\System32\USER32.dll+0x180048562) #30 0x7ffeddb47253 (C:\WINDOWS\SYSTEM32\ntdll.dll+0x180167253) #31 0x7ffedb182543 (C:\WINDOWS\System32\win32u.dll+0x180002543) #32 0x7ffdcae8c07f in base::internal::DecayedFunctorTraits &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731 #33 0x7ffdcae8c07f in base::internal::InvokeHelper<1,base::internal::FunctorTraits &&>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947 #34 0x7ffdcae8c07f in base::internal::Invoker &&>,base::internal::BindState<1,1,0,void (HWNDMessageHandler::*)(),base::WeakPtr >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060 #35 0x7ffdcae8c07f in base::internal::Invoker &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl views::HWNDMessageHandler::*)(void), class base::WeakPtr>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12 #36 0x7ffdcc859cb3 in base::OnceCallback::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156 #37 0x7ffdcc859cb3 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34 #38 0x7ffdcc82ceb9 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104 #39 0x7ffdcc82ceb9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:465:23 #40 0x7ffdcc82bd5f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:339:40 #41 0x7ffdcc6c8760 in base::MessagePumpForUI::DoRunLoop(void) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:260:67 #42 0x7ffdcc6c6128 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:87:3 previously allocated by thread T0 here: #0 0x7ffe4defb99d (D:\win64-release_d8-asan-win64-release-v8-component-100000\clang_rt.asan_dynamic-x86_64.dll+0x18005b99d) #1 0x7ffdc8b70d10 in PageInfoInfoBarDelegate::Create(class infobars::ContentInfoBarManager *) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\page_info_infobar_delegate.cc:22:20 #2 0x7ffdc8b6a9c5 in ChromePageInfoDelegate::CreateInfoBarDelegate(enum content::ReloadType) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\chrome_page_info_delegate.cc:225:22 #3 0x7ffde101ffb0 in PageInfo::OnUIClosing(bool *) C:\b\s\w\ir\cache\builder\src\components\page_info\page_info.cc:796:20 #4 0x7ffdc94f5841 in PageInfoBubbleView::OnWidgetDestroying(class views::Widget *) C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\views\page_info\page_info_bubble_view.cc:352:17 #5 0x7ffdcaecbb91 in std::__Cr::__invoke C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__type_traits\invoke.h:203 #6 0x7ffdcaecbb91 in std::__Cr::invoke C:\b\s\w\ir\cache\builder\src\third_party\libc++\src\include\__functional\invoke.h:29 #7 0x7ffdcaecbb91 in base::ObserverList::Notify(void (__cdecl views::WidgetObserver::*)(class views::Widget *), class views::Widget *const &) C:\b\s\w\ir\cache\builder\src\base\observer_list.h:398:7 #8 0x7ffdcaec04ab in views::Widget::HandleWidgetDestroying(void) C:\b\s\w\ir\cache\builder\src\ui\views\widget\widget.cc:2719:14 #9 0x7ffdcadeff52 in views::DesktopWindowTreeHostWin::HandleDestroying(void) C:\b\s\w\ir\cache\builder\src\ui\views\widget\desktop_aura\desktop_window_tree_host_win.cc:1052:30 #10 0x7ffdcae80324 in views::HWNDMessageHandler::OnDestroy(void) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.cc:1891:14 #11 0x7ffdcae74182 in views::HWNDMessageHandler::_ProcessWindowMessage(struct HWND__*, unsigned int, unsigned __int64, __int64, __int64 &, unsigned long) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.h:468:5 #12 0x7ffdcae7151d in views::HWNDMessageHandler::OnWndProc(unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.cc:1178:7 #13 0x7ffdcf592d7c in gfx::WindowImpl::WndProc(struct HWND__*, unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\ui\gfx\win\window_impl.cc:313:18 #14 0x7ffdcf59185e in base::win::WrappedWindowProc<&gfx::WindowImpl::WndProc(struct HWND__*, unsigned int, unsigned __int64, __int64)>(struct HWND__*, unsigned int, unsigned __int64, __int64) C:\b\s\w\ir\cache\builder\src\base\win\wrapped_window_proc.h:74:10 #15 0x7ffedc787cf5 (C:\WINDOWS\System32\USER32.dll+0x180017cf5) #16 0x7ffedc78757b (C:\WINDOWS\System32\USER32.dll+0x18001757b) #17 0x7ffedc7b8562 (C:\WINDOWS\System32\USER32.dll+0x180048562) #18 0x7ffeddb47253 (C:\WINDOWS\SYSTEM32\ntdll.dll+0x180167253) #19 0x7ffedb182543 (C:\WINDOWS\System32\win32u.dll+0x180002543) #20 0x7ffdcae8c07f in base::internal::DecayedFunctorTraits &&>::Invoke C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:731 #21 0x7ffdcae8c07f in base::internal::InvokeHelper<1,base::internal::FunctorTraits &&>,void,0>::MakeItSo C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:947 #22 0x7ffdcae8c07f in base::internal::Invoker &&>,base::internal::BindState<1,1,0,void (HWNDMessageHandler::*)(),base::WeakPtr >,void ()>::RunImpl C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:1060 #23 0x7ffdcae8c07f in base::internal::Invoker &&>, struct base::internal::BindState<1, 1, 0, void (__cdecl views::HWNDMessageHandler::*)(void), class base::WeakPtr>, (void)>::RunOnce(class base::internal::BindStateBase *) C:\b\s\w\ir\cache\builder\src\base\functional\bind_internal.h:973:12 #24 0x7ffdcc859cb3 in base::OnceCallback::Run C:\b\s\w\ir\cache\builder\src\base\functional\callback.h:156 #25 0x7ffdcc859cb3 in base::TaskAnnotator::RunTaskImpl(struct base::PendingTask &) C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.cc:207:34 #26 0x7ffdcc82ceb9 in base::TaskAnnotator::RunTask C:\b\s\w\ir\cache\builder\src\base\task\common\task_annotator.h:104 #27 0x7ffdcc82ceb9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(class base::LazyNow *) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:465:23 #28 0x7ffdcc82bd5f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork(void) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:339:40 #29 0x7ffdcc6c8760 in base::MessagePumpForUI::DoRunLoop(void) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:260:67 #30 0x7ffdcc6c6128 in base::MessagePumpWin::Run(class base::MessagePump::Delegate *) C:\b\s\w\ir\cache\builder\src\base\message_loop\message_pump_win.cc:87:3 #31 0x7ffdcc82ebf1 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, class base::TimeDelta) C:\b\s\w\ir\cache\builder\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:638:12 #32 0x7ffdcc8cb8be in base::RunLoop::Run(class base::Location const &) C:\b\s\w\ir\cache\builder\src\base\run_loop.cc:134:14 #33 0x7ffdc28a4bcd in content::BrowserMainLoop::RunMainMessageLoop(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_loop.cc:1109:18 #34 0x7ffdc28ac849 in content::BrowserMainRunnerImpl::Run(void) C:\b\s\w\ir\cache\builder\src\content\browser\browser_main_runner_impl.cc:156:15 SUMMARY: AddressSanitizer: heap-use-after-free C:\b\s\w\ir\cache\builder\src\chrome\browser\ui\page_info\page_info_infobar_delegate.h:31 in PageInfoInfoBarDelegate::set_reload_type Shadow bytes around the buggy address: 0x11f90ac4a200: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x11f90ac4a280: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd 0x11f90ac4a300: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd 0x11f90ac4a380: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd 0x11f90ac4a400: fa fa f7 fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x11f90ac4a480: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd[fd]fa 0x11f90ac4a500: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd 0x11f90ac4a580: fa fa f7 fa fa fa fa fa fa fa fa fa fa fa fa fa 0x11f90ac4a600: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd 0x11f90ac4a680: fa fa f7 fa fa fa fa fa fa fa fa fa fa fa fa fa 0x11f90ac4a700: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==11072==ADDITIONAL INFO ==11072==Note: Please include this section with the ASan report. Task trace: #0 0x7ffdcae698f0 in views::HWNDMessageHandler::Close(void) C:\b\s\w\ir\cache\builder\src\ui\views\win\hwnd_message_handler.cc:519:9 #1 0x7ffdd1b69b4c in cc::SingleThreadProxy::ScheduledActionSendBeginMainFrame(struct viz::BeginFrameArgs const &) C:\b\s\w\ir\cache\builder\src\cc\trees\single_thread_proxy.cc:1058:7 #2 0x7ffdccd70e78 in mojo::SimpleWatcher::Context::Notify(unsigned int, struct MojoHandleSignalsState, unsigned int) C:\b\s\w\ir\cache\builder\src\mojo\public\cpp\system\simple_watcher.cc:102:13 Command line: `chrome.exe --flag-switches-begin --flag-switches-end --file-url-path-alias="/gen=D:\win64-release_d8-asan-win64-release-v8-component-100000\gen"` MiraclePtr Status: NOT PROTECTED No raw_ptr access to this region was detected prior to this crash. This crash is still exploitable with MiraclePtr. Refer to https://chromium.googlesource.com/chromium/src/+/main/base/memory/raw_ptr.md for details. ==11072==END OF ADDITIONAL INFO ==11072==ABORTING