================================================================= ==25884==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x1211da001800 at pc 0x7ffabf0f6ae5 bp 0x00650bbfd6b0 sp 0x00650bbfd6f8 READ of size 4 at 0x1211da001800 thread T0 ==25884==*** WARNING: Failed to initialize DbgHelp! *** ==25884==*** Most likely this means that the app is already *** ==25884==*** using DbgHelp, possibly with incompatible flags. *** ==25884==*** Due to technical reasons, symbolization might crash *** ==25884==*** or produce wrong results. *** [5908:21516:0323/045638.730:ERROR:google_apis\gcm\engine\registration_request.cc:291] Registration response error message: DEPRECATED_ENDPOINT #0 0x7ffabf0f6ae4 in angle::LoadToNativeByte3To4Impl D:\src\chromium\src\third_party\angle\src\image_util\loadimage.inc:198 #1 0x7ffabf0f5e2f in angle::LoadToNative3To4 D:\src\chromium\src\third_party\angle\src\image_util\loadimage.inc:243 #2 0x7ffabf25e691 in rx::TextureStorage11::setData D:\src\chromium\src\third_party\angle\src\libANGLE\renderer\d3d\d3d11\TextureStorage11.cpp:921 #3 0x7ffabf315ab0 in rx::TextureD3D::subImage D:\src\chromium\src\third_party\angle\src\libANGLE\renderer\d3d\TextureD3D.cpp:375 #4 0x7ffabf31dd77 in rx::TextureD3D_2D::setSubImage D:\src\chromium\src\third_party\angle\src\libANGLE\renderer\d3d\TextureD3D.cpp:1148 #5 0x7ffabf014b3c in gl::Texture::setSubImage D:\src\chromium\src\third_party\angle\src\libANGLE\Texture.cpp:1441 #6 0x7ffabee80f1b in gl::Context::texSubImage2D D:\src\chromium\src\third_party\angle\src\libANGLE\Context.cpp:5652 #7 0x7ffabee81053 in gl::Context::texSubImage2DRobust D:\src\chromium\src\third_party\angle\src\libANGLE\Context.cpp:5668 #8 0x7ffabe9f00df in GL_TexSubImage2DRobustANGLE D:\src\chromium\src\third_party\angle\src\libGLESv2\entry_points_gles_ext_autogen.cpp:3423 #9 0x7ffa4e6e3d93 in gl::GLApiBase::glTexSubImage2DRobustANGLEFn D:\src\chromium\src\ui\gl\gl_bindings_autogen_gl.cc:4254 #10 0x7ffa53a7308c in gpu::gles2::GLES2DecoderPassthroughImpl::DoTexSubImage2D D:\src\chromium\src\gpu\command_buffer\service\gles2_cmd_decoder_passthrough_doers.cc:3034 #11 0x7ffa53aadcef in gpu::gles2::GLES2DecoderPassthroughImpl::HandleTexSubImage2D D:\src\chromium\src\gpu\command_buffer\service\gles2_cmd_decoder_passthrough_handlers.cc:1135 #12 0x7ffa4eecbc9c in gpu::gles2::GLES2DecoderPassthroughImpl::DoCommandsImpl<0> D:\src\chromium\src\gpu\command_buffer\service\gles2_cmd_decoder_passthrough.cc:742 #13 0x7ffa324856bb in gpu::CommandBufferService::Flush D:\src\chromium\src\gpu\command_buffer\service\command_buffer_service.cc:267 #14 0x7ffa44824e21 in gpu::CommandBufferStub::OnAsyncFlush D:\src\chromium\src\gpu\ipc\service\command_buffer_stub.cc:504 #15 0x7ffa44823d33 in gpu::CommandBufferStub::ExecuteDeferredRequest D:\src\chromium\src\gpu\ipc\service\command_buffer_stub.cc:173 #16 0x7ffa4a184ca1 in gpu::GpuChannel::ExecuteDeferredRequest D:\src\chromium\src\gpu\ipc\service\gpu_channel.cc:833 #17 0x7ffa4a19480f in base::internal::Invoker, gpu::FenceSyncReleaseDelegate *),base::WeakPtr &&,mojo::StructPtr &&>,base::internal::BindState<1,1,0,void (gpu::GpuChannel::*)(mojo::StructPtr, gpu::FenceSyncReleaseDelegate *),base::WeakPtr,mojo::StructPtr >,void (gpu::FenceSyncReleaseDelegate *)>::RunOnce D:\src\chromium\src\base\functional\bind_internal.h:982 #18 0x7ffa324c785b in base::internal::Invoker &&,gpu::FenceSyncReleaseDelegate *>,base::internal::BindState<0,1,1,base::OnceCallback,base::internal::UnretainedWrapper >,void ()>::RunImpl,std::__Cr::tuple >,0> D:\src\chromium\src\base\functional\bind_internal.h:1069 #19 0x7ffa3249b682 in gpu::Scheduler::ExecuteSequence D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:707 #20 0x7ffa324997b0 in gpu::Scheduler::RunNextTask D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:625 #21 0x7ffa3249e334 in base::internal::Invoker,base::internal::BindState<1,1,0,void (gpu::Scheduler::*)(),base::internal::UnretainedWrapper >,void ()>::RunOnce D:\src\chromium\src\base\functional\bind_internal.h:982 #22 0x7ffa433b56a8 in base::TaskAnnotator::RunTaskImpl D:\src\chromium\src\base\task\common\task_annotator.cc:229 #23 0x7ffa48b9a751 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl D:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:475 #24 0x7ffa48b995b3 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork D:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:346 #25 0x7ffa48be21f7 in base::MessagePumpDefault::Run D:\src\chromium\src\base\message_loop\message_pump_default.cc:42 #26 0x7ffa48b9c49f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run D:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:650 #27 0x7ffa4342a62c in base::RunLoop::Run D:\src\chromium\src\base\run_loop.cc:135 #28 0x7ffa469df2a5 in content::GpuMain D:\src\chromium\src\content\gpu\gpu_main.cc:485 #29 0x7ffa3fc43ddf in content::RunOtherNamedProcessTypeMain D:\src\chromium\src\content\app\content_main_runner_impl.cc:762 #30 0x7ffa3fc4654b in content::ContentMainRunnerImpl::Run D:\src\chromium\src\content\app\content_main_runner_impl.cc:1152 #31 0x7ffa3fc3a33f in content::RunContentProcess D:\src\chromium\src\content\app\content_main.cc:358 #32 0x7ffa3fc3aae2 in content::ContentMain D:\src\chromium\src\content\app\content_main.cc:371 #33 0x7ffa2f892b06 in ChromeMain D:\src\chromium\src\chrome\app\chrome_main.cc:191 #34 0x7ff71c3a4807 in MainDllLoader::Launch D:\src\chromium\src\chrome\app\main_dll_loader_win.cc:204 #35 0x7ff71c3a2074 in main D:\src\chromium\src\chrome\app\chrome_exe_main_win.cc:351 #36 0x7ff71c89e583 in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288 #37 0x7ffb4006e8d6 in BaseThreadInitThunk+0x16 (C:\Windows\System32\KERNEL32.DLL+0x18002e8d6) #38 0x7ffb4218c48b in RtlUserThreadStart+0x2b (C:\Windows\SYSTEM32\ntdll.dll+0x18008c48b) 0x1211da001800 is located 0 bytes after 196608-byte region [0x1211d9fd1800,0x1211da001800) allocated by thread T0 here: #0 0x7ffac77cc93f in _asan_wrap_memcpy+0x73f (D:\src\chromium\src\out\asan\clang_rt.asan_dynamic-x86_64.dll+0x18004c93f) #1 0x7ffabe9823c3 in _malloc_base C:\b\s\w\ir\cache\builder\src\third_party\llvm\compiler-rt\lib\asan\asan_malloc_win_thunk.cpp:64 #2 0x7ffac05791fc in angle::MemoryBuffer::resize D:\src\chromium\src\third_party\angle\src\common\MemoryBuffer.cpp:40 #3 0x7ffabf1b4014 in rx::Buffer11::SystemMemoryStorage::resize D:\src\chromium\src\third_party\angle\src\libANGLE\renderer\d3d\d3d11\Buffer11.cpp:1691 #4 0x7ffabf1a99b4 in rx::Buffer11::getData D:\src\chromium\src\third_party\angle\src\libANGLE\renderer\d3d\d3d11\Buffer11.cpp:375 #5 0x7ffabf315628 in rx::TextureD3D::subImage D:\src\chromium\src\third_party\angle\src\libANGLE\renderer\d3d\TextureD3D.cpp:366 #6 0x7ffabf31dd77 in rx::TextureD3D_2D::setSubImage D:\src\chromium\src\third_party\angle\src\libANGLE\renderer\d3d\TextureD3D.cpp:1148 #7 0x7ffabf014b3c in gl::Texture::setSubImage D:\src\chromium\src\third_party\angle\src\libANGLE\Texture.cpp:1441 #8 0x7ffabee80f1b in gl::Context::texSubImage2D D:\src\chromium\src\third_party\angle\src\libANGLE\Context.cpp:5652 #9 0x7ffabee81053 in gl::Context::texSubImage2DRobust D:\src\chromium\src\third_party\angle\src\libANGLE\Context.cpp:5668 #10 0x7ffabe9f00df in GL_TexSubImage2DRobustANGLE D:\src\chromium\src\third_party\angle\src\libGLESv2\entry_points_gles_ext_autogen.cpp:3423 #11 0x7ffa4e6e3d93 in gl::GLApiBase::glTexSubImage2DRobustANGLEFn D:\src\chromium\src\ui\gl\gl_bindings_autogen_gl.cc:4254 #12 0x7ffa53a7308c in gpu::gles2::GLES2DecoderPassthroughImpl::DoTexSubImage2D D:\src\chromium\src\gpu\command_buffer\service\gles2_cmd_decoder_passthrough_doers.cc:3034 #13 0x7ffa53aadcef in gpu::gles2::GLES2DecoderPassthroughImpl::HandleTexSubImage2D D:\src\chromium\src\gpu\command_buffer\service\gles2_cmd_decoder_passthrough_handlers.cc:1135 #14 0x7ffa4eecbc9c in gpu::gles2::GLES2DecoderPassthroughImpl::DoCommandsImpl<0> D:\src\chromium\src\gpu\command_buffer\service\gles2_cmd_decoder_passthrough.cc:742 #15 0x7ffa324856bb in gpu::CommandBufferService::Flush D:\src\chromium\src\gpu\command_buffer\service\command_buffer_service.cc:267 #16 0x7ffa44824e21 in gpu::CommandBufferStub::OnAsyncFlush D:\src\chromium\src\gpu\ipc\service\command_buffer_stub.cc:504 #17 0x7ffa44823d33 in gpu::CommandBufferStub::ExecuteDeferredRequest D:\src\chromium\src\gpu\ipc\service\command_buffer_stub.cc:173 #18 0x7ffa4a184ca1 in gpu::GpuChannel::ExecuteDeferredRequest D:\src\chromium\src\gpu\ipc\service\gpu_channel.cc:833 #19 0x7ffa4a19480f in base::internal::Invoker, gpu::FenceSyncReleaseDelegate *),base::WeakPtr &&,mojo::StructPtr &&>,base::internal::BindState<1,1,0,void (gpu::GpuChannel::*)(mojo::StructPtr, gpu::FenceSyncReleaseDelegate *),base::WeakPtr,mojo::StructPtr >,void (gpu::FenceSyncReleaseDelegate *)>::RunOnce D:\src\chromium\src\base\functional\bind_internal.h:982 #20 0x7ffa324c785b in base::internal::Invoker &&,gpu::FenceSyncReleaseDelegate *>,base::internal::BindState<0,1,1,base::OnceCallback,base::internal::UnretainedWrapper >,void ()>::RunImpl,std::__Cr::tuple >,0> D:\src\chromium\src\base\functional\bind_internal.h:1069 #21 0x7ffa3249b682 in gpu::Scheduler::ExecuteSequence D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:707 #22 0x7ffa324997b0 in gpu::Scheduler::RunNextTask D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:625 #23 0x7ffa3249e334 in base::internal::Invoker,base::internal::BindState<1,1,0,void (gpu::Scheduler::*)(),base::internal::UnretainedWrapper >,void ()>::RunOnce D:\src\chromium\src\base\functional\bind_internal.h:982 #24 0x7ffa433b56a8 in base::TaskAnnotator::RunTaskImpl D:\src\chromium\src\base\task\common\task_annotator.cc:229 #25 0x7ffa48b9a751 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl D:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:475 #26 0x7ffa48b995b3 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork D:\src\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:346 #27 0x7ffa48be21f7 in base::MessagePumpDefault::Run D:\src\chromium\src\base\message_loop\message_pump_default.cc:42 SUMMARY: AddressSanitizer: heap-buffer-overflow D:\src\chromium\src\third_party\angle\src\image_util\loadimage.inc:198 in angle::LoadToNativeByte3To4Impl Shadow bytes around the buggy address: 0x1211da001580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1211da001600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1211da001680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1211da001700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x1211da001780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x1211da001800:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1211da001880: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1211da001900: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1211da001980: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1211da001a00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1211da001a80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==25884==ADDITIONAL INFO ==25884==Note: Please include this section with the ASan report. Task trace: #0 0x7ffa32499c33 in gpu::Scheduler::RunNextTask D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:647 #1 0x7ffa32499c33 in gpu::Scheduler::RunNextTask D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:647 #2 0x7ffa32499c33 in gpu::Scheduler::RunNextTask D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:647 #3 0x7ffa32494968 in gpu::Scheduler::TryScheduleSequence D:\src\chromium\src\gpu\command_buffer\service\scheduler.cc:432 ==25884==END OF ADDITIONAL INFO ==25884==ABORTING [5908:5240:0323/045638.904:ERROR:content\browser\gpu\gpu_process_host.cc:999] GPU process exited unexpectedly: exit_code=1