Note: Google Test filter = DesktopWindowTreeHostPlatformTest.MaximizeSurvivesSynchronousCloseDuringBoundsChange
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from DesktopWindowTreeHostPlatformTest
[ RUN      ] DesktopWindowTreeHostPlatformTest.MaximizeSurvivesSynchronousCloseDuringBoundsChange

(views_unittests:958): dbind-WARNING **: 01:50:22.824: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory
=================================================================
==958==ERROR: AddressSanitizer: heap-use-after-free on address 0x77bb6fdefc80 at pc 0x5fedd69ffa88 bp 0x7ffd1e2fb610 sp 0x7ffd1e2fb608
READ of size 8 at 0x77bb6fdefc80 thread T0
    #0 0x5fedd69ffa87 in views::DesktopWindowTreeHostPlatform::Maximize() ui/views/widget/desktop_aura/desktop_window_tree_host_platform.cc:648:7
    #1 0x5fedc79b3346 in views::DesktopWindowTreeHostPlatformTest_MaximizeSurvivesSynchronousCloseDuringBoundsChange_Test::TestBody() ui/views/widget/desktop_aura/desktop_window_tree_host_platform_unittest.cc:785:18
    #2 0x5fedc7c8799b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x5fedc7c8a507 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x5fedc7c8c583 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x5fedc7cbafd4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x5fedc7cb9b4a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5fedd6e13950 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x5fedc7a72591 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), views::ViewsTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<views::ViewsTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x5fedd6e1ae9b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x5fedd6e1a7bb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x5fedc7a71d5d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10
    #12 0x5fedc71836e4 in main ui/views/run_all_unittests_main.cc:10:44
    #13 0x7a3b71445249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x77bb6fdefc80 is located 0 bytes inside of 800-byte region [0x77bb6fdefc80,0x77bb6fdeffa0)
freed by thread T0 here:
    #0 0x5fedc627fddd in operator delete(void*) (/chromium/chromium/src/out/asan/views_unittests+0x8924ddd) (BuildId: 8af9613f887d837e)
    #1 0x5fedd69ce7dc in views::DesktopNativeWidgetAura::OnHostClosed() gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x5fedd6a05261 in views::DesktopWindowTreeHostPlatform::OnClosed() ui/views/widget/desktop_aura/desktop_window_tree_host_platform.cc:1002:32
    #3 0x5fedd69fb8a0 in views::DesktopWindowTreeHostPlatform::CloseNow() ui/views/widget/desktop_aura/desktop_window_tree_host_platform.cc:433:22
    #4 0x5fedd68fd0a1 in views::Widget::CloseNow() ui/views/widget/widget.cc:1049:21
    #5 0x5fedd690c7ef in void base::ObserverList<views::WidgetObserver, false, (base::ObserverListReentrancyPolicy)1, base::internal::CheckedObserverAdapter>::Notify<void (views::WidgetObserver::*)(views::Widget*, gfx::Rect const&), views::Widget*, gfx::Rect>(T, views::Widget* const&, gfx::Rect const&) gen/third_party/libc++/src/include/__type_traits/invoke.h:90:27
    #6 0x5fedd690bfe2 in views::Widget::OnNativeWidgetMove() ui/views/widget/widget.cc:2060:14
    #7 0x5fedd69ddb54 in views::DesktopNativeWidgetAura::OnHostMovedInPixels(aura::WindowTreeHost*) ui/views/widget/desktop_aura/desktop_native_widget_aura.cc:1633:30
    #8 0x5fedd7abd6fb in void base::ObserverList<aura::WindowTreeHostObserver, false, (base::ObserverListReentrancyPolicy)1, base::internal::CheckedObserverAdapter>::Notify<void (aura::WindowTreeHostObserver::*)(aura::WindowTreeHost*), aura::WindowTreeHost*>(T, aura::WindowTreeHost* const&) gen/third_party/libc++/src/include/__type_traits/invoke.h:90:27
    #9 0x5fedd7abd055 in aura::WindowTreeHost::OnHostMovedInPixels() ui/aura/window_tree_host.cc:590:14
    #10 0x5fedd7ac6e97 in aura::WindowTreeHostPlatform::OnBoundsChanged(ui::PlatformWindowDelegate::BoundsChange const&) ui/aura/window_tree_host_platform.cc:276:5
    #11 0x5fedd69ea295 in views::DesktopWindowTreeHostLinux::OnBoundsChanged(ui::PlatformWindowDelegate::BoundsChange const&) ui/views/widget/desktop_aura/desktop_window_tree_host_linux.cc:420:34
    #12 0x5fedd69ff96c in views::DesktopWindowTreeHostPlatform::Maximize() ui/views/widget/desktop_aura/desktop_window_tree_host_platform.cc:647:22
    #13 0x5fedc79b3346 in views::DesktopWindowTreeHostPlatformTest_MaximizeSurvivesSynchronousCloseDuringBoundsChange_Test::TestBody() ui/views/widget/desktop_aura/desktop_window_tree_host_platform_unittest.cc:785:18
    #14 0x5fedc7c8799b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #15 0x5fedc7c8a507 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #16 0x5fedc7c8c583 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #17 0x5fedc7cbafd4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #18 0x5fedc7cb9b4a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #19 0x5fedd6e13950 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #20 0x5fedc7a72591 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), views::ViewsTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<views::ViewsTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #21 0x5fedd6e1ae9b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #22 0x5fedd6e1a7bb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #23 0x5fedc7a71d5d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10
    #24 0x5fedc71836e4 in main ui/views/run_all_unittests_main.cc:10:44
    #25 0x7a3b71445249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

previously allocated by thread T0 here:
    #0 0x5fedc627f59d in operator new(unsigned long) (/chromium/chromium/src/out/asan/views_unittests+0x892459d) (BuildId: 8af9613f887d837e)
    #1 0x5fedd69eb2f3 in views::DesktopWindowTreeHost::Create(views::internal::NativeWidgetDelegate*, views::DesktopNativeWidgetAura*) ui/views/widget/desktop_aura/desktop_window_tree_host_platform.h:39:3
    #2 0x5fedd69d0d9d in views::DesktopNativeWidgetAura::InitNativeWidget(views::Widget::InitParams) ui/views/widget/desktop_aura/desktop_native_widget_aura.cc:593:11
    #3 0x5fedd68ecd47 in views::Widget::Init(views::Widget::InitParams) ui/views/widget/widget.cc:565:19
    #4 0x5fedc79a2f7d in views::(anonymous namespace)::CreateWidgetWithNativeWidget() ui/views/widget/desktop_aura/desktop_window_tree_host_platform_unittest.cc:130:11
    #5 0x5fedc79b3110 in views::DesktopWindowTreeHostPlatformTest_MaximizeSurvivesSynchronousCloseDuringBoundsChange_Test::TestBody() ui/views/widget/desktop_aura/desktop_window_tree_host_platform_unittest.cc:773:36
    #6 0x5fedc7c8799b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5fedc7c8a507 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #8 0x5fedc7c8c583 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #9 0x5fedc7cbafd4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #10 0x5fedc7cb9b4a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #11 0x5fedd6e13950 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #12 0x5fedc7a72591 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), views::ViewsTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<views::ViewsTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #13 0x5fedd6e1ae9b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #14 0x5fedd6e1a7bb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #15 0x5fedc7a71d5d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10
    #16 0x5fedc71836e4 in main ui/views/run_all_unittests_main.cc:10:44
    #17 0x7a3b71445249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

SUMMARY: AddressSanitizer: heap-use-after-free ui/views/widget/desktop_aura/desktop_window_tree_host_platform.cc:648:7 in views::DesktopWindowTreeHostPlatform::Maximize()
Shadow bytes around the buggy address:
  0x77bb6fdefa00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdefa80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdefb00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdefb80: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa
  0x77bb6fdefc00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x77bb6fdefc80:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdefd00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdefd80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdefe00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdefe80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x77bb6fdeff00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==958==ADDITIONAL INFO

==958==Note: Please include this section with the ASan report.
Task trace:


==958==END OF ADDITIONAL INFO

==958==ABORTING