Note: Google Test filter = RootViewTest.POC_DeleteEnteredSiblingDuringMouseExitDispatch [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from RootViewTest [ RUN ] RootViewTest.POC_DeleteEnteredSiblingDuringMouseExitDispatch (views_unittests:3352): dbind-WARNING **: 03:24:33.905: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/229127/at-spi/bus_20: No such file or directory ================================================================= ==3352==ERROR: AddressSanitizer: heap-use-after-free on address 0x7d22391e6780 at pc 0x557f5b6831eb bp 0x7ffcd82d1590 sp 0x7ffcd82d1588 READ of size 8 at 0x7d22391e6780 thread T0 #0 0x557f5b6831ea in views::View::Contains(views::View const*) const base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:1018:47 #1 0x557f5b6da3bb in views::internal::RootView::NotifyEnterExitOfDescendant(ui::MouseEvent const&, ui::EventType, views::View*, views::View*) ui/views/widget/root_view.cc:995:23 #2 0x557f5b6d9114 in views::internal::RootView::HandleMouseEnteredOrMoved(ui::MouseEvent const&) ui/views/widget/root_view.cc:905:30 #3 0x557f507f57c1 in views::test::RootViewTest_POC_DeleteEnteredSiblingDuringMouseExitDispatch_Test::TestBody() ui/views/widget/root_view_unittest.cc:804:14 #4 0x557f50f2d14b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #5 0x557f50f2fdf7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #6 0x557f50f31f03 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #7 0x557f50f61d5a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #8 0x557f50f607be in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #9 0x557f5bb6300c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #10 0x557f50eae1f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x557f5bb6b97b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x557f5bb6b29b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x557f50ead91d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #14 0x557f505e9014 in main ui/views/run_all_unittests_main.cc:10:44 #15 0x7fb23a845249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7d22391e6780 is located 384 bytes inside of 768-byte region [0x7d22391e6600,0x7d22391e6900) freed by thread T0 here: #0 0x557f4f523c3d in operator delete(void*) (/chromium/chromium/src/out/asan/views_unittests+0x6691c3d) (BuildId: fcff14df26287966) #1 0x557f50809ff0 in views::test::(anonymous namespace)::DeleteSiblingOnMouseExited::OnMouseExited(ui::MouseEvent const&) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x557f5f1342fa in ui::EventDispatcher::DispatchEvent(ui::EventHandler*, ui::Event*) ui/events/event_dispatcher.cc:189:12 #3 0x557f5f132d75 in ui::EventDispatcher::ProcessEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:138:5 #4 0x557f5f13238d in ui::EventDispatcherDelegate::DispatchEventToTarget(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:84:14 #5 0x557f5f131e47 in ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:56:15 #6 0x557f5b6d906a in views::internal::RootView::HandleMouseEnteredOrMoved(ui::MouseEvent const&) ui/views/widget/root_view.cc:892:13 #7 0x557f507f57c1 in views::test::RootViewTest_POC_DeleteEnteredSiblingDuringMouseExitDispatch_Test::TestBody() ui/views/widget/root_view_unittest.cc:804:14 #8 0x557f50f2d14b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #9 0x557f50f2fdf7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #10 0x557f50f31f03 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #11 0x557f50f61d5a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #12 0x557f50f607be in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #13 0x557f5bb6300c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #14 0x557f50eae1f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #15 0x557f5bb6b97b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #16 0x557f5bb6b29b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #17 0x557f50ead91d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #18 0x557f505e9014 in main ui/views/run_all_unittests_main.cc:10:44 #19 0x7fb23a845249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x557f4f5233fd in operator new(unsigned long) (/chromium/chromium/src/out/asan/views_unittests+0x66913fd) (BuildId: fcff14df26287966) #1 0x557f507f5449 in views::test::RootViewTest_POC_DeleteEnteredSiblingDuringMouseExitDispatch_Test::TestBody() ui/views/view.h:306:3 #2 0x557f50f2d14b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x557f50f2fdf7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x557f50f31f03 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x557f50f61d5a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x557f50f607be in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x557f5bb6300c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x557f50eae1f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #9 0x557f5bb6b97b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #10 0x557f5bb6b29b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #11 0x557f50ead91d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #12 0x557f505e9014 in main ui/views/run_all_unittests_main.cc:10:44 #13 0x7fb23a845249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-use-after-free base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:1018:47 in views::View::Contains(views::View const*) const Shadow bytes around the buggy address: 0x7d22391e6500: 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa 0x7d22391e6580: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7d22391e6600: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7d22391e6680: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7d22391e6700: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd =>0x7d22391e6780:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7d22391e6800: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7d22391e6880: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7d22391e6900: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7d22391e6980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7d22391e6a00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==3352==ADDITIONAL INFO ==3352==Note: Please include this section with the ASan report. Task trace: ==3352==END OF ADDITIONAL INFO ==3352==ABORTING