[1361:1376:0407/044357.388097:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1361:1376:0407/044357.403486:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1376:0407/044357.403823:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1361:1376:0407/044357.404208:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory Fontconfig error: No writable cache directories /var/cache/fontconfig /usr/local/google/home/vmiura/.cache/fontconfig /usr/local/google/home/vmiura/.fontconfig Fontconfig error: No writable cache directories /var/cache/fontconfig /usr/local/google/home/vmiura/.cache/fontconfig /usr/local/google/home/vmiura/.fontconfig Fontconfig error: No writable cache directories /var/cache/fontconfig /usr/local/google/home/vmiura/.cache/fontconfig /usr/local/google/home/vmiura/.fontconfig Fontconfig error: No writable cache directories /var/cache/fontconfig /usr/local/google/home/vmiura/.cache/fontconfig /usr/local/google/home/vmiura/.fontconfig [1361:1376:0407/044357.501392:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1361:0407/044357.521835:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1361:0407/044357.524065:WARNING:components/os_crypt/sync/key_storage_linux.cc:166] OSCrypt tried Libsecret but couldn't initialise. [1361:1361:0407/044357.621269:WARNING:chrome/browser/signin/account_consistency_mode_manager.cc:74] Desktop Identity Consistency cannot be enabled as no OAuth client ID and client secret have been configured. [1361:1376:0407/044357.639330:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1376:0407/044357.726738:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1361:0407/044357.743102:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1361:0407/044357.743324:WARNING:device/bluetooth/dbus/bluez_dbus_manager.cc:209] Floss manager service not available, cannot set Floss enable/disable. [1361:1376:0407/044357.743515:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1361:0407/044357.744860:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1361:0407/044357.763768:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1361:0407/044357.773672:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1376:0407/044357.774295:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory (div>:1361): dbind-WARNING **: 04:43:57.790: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/229127/at-spi/bus_20: No such file or directory [1361:1361:0407/044358.271456:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1376:0407/044358.271416:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1361:1376:0407/044358.271671:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1395:1395:0407/044358.278057:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. [1361:1361:0407/044358.279121:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1376:0407/044358.279482:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1361:0407/044358.311976:WARNING:dbus/property.cc:94] Failed to connect to PropertiesChangedsignal. [1361:1361:0407/044358.314302:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: [1361:1361:0407/044358.314355:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device [1361:1361:0407/044358.322729:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1376:0407/044358.323168:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1378:0407/044358.390527:ERROR:crypto/nss_util.cc:79] Failed to create /usr/local/google/home/vmiura/.local/share/pki/nssdb directory. [1361:1361:0407/044358.391686:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1376:0407/044358.392296:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1361:1361:0407/044358.431941:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1361:1361:0407/044358.432044:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used. [1395:1395:0407/044358.522888:INFO:third_party/skia/src/core/SkTypeface_remote.cpp:51] GlyphCacheMiss generateImage: Rec textsize 0x1.4p+5 prescale 0x1p+0 preskew 0x0p+0 post [0x1p+0 0x0p+0 0x0p+0 0x1p+0] frame -1 miter 0 format 1 join 0 cap 0 flags 0x2094 lum bits ff000000, device gamma 76, contrast 51 foreground color 0 [1395:1395:0407/044358.523363:INFO:third_party/skia/src/core/SkTypeface_remote.cpp:66] [POC] SkScalerContextProxy::generateImage NO-OP on 840 uninitialized bytes at 0x7d484da1e241 (glyph 36, 28x30) -- poisoning for ASAN ================================================================= ==1395==ERROR: AddressSanitizer: use-after-poison on address 0x7d484da1e241 at pc 0x5568856fe00b bp 0x7fffae836e10 sp 0x7fffae8365d0 READ of size 840 at 0x7d484da1e241 thread T0 (chrome) [1361:1376:0407/044400.709114:ERROR:google_apis/gcm/engine/registration_request.cc:291] Registration response error message: DEPRECATED_ENDPOINT #0 0x5568856fe00a in __asan_memcpy (/chromium/chromium/src/out/asan/chrome+0x10dcd00a) (BuildId: 88393a6d8aeb214c) #1 0x55689fd981fd in GrAtlasManager::addGlyphToAtlas(SkGlyph const&, skgpu::ganesh::GlyphEntry*, int, GrResourceProvider*, GrDeferredUploadTarget*) third_party/skia/src/gpu/ganesh/text/GrAtlasManager.cpp:98:17 #2 0x55689fd90d9f in skgpu::ganesh::GlyphData::regenerateAtlas(int, int, sktext::gpu::GlyphVector&, skgpu::MaskFormat, int, GrMeshDrawTarget*) third_party/skia/src/gpu/ganesh/text/GlyphData.cpp:207:43 #3 0x55689fc0c9a3 in skgpu::ganesh::AtlasTextOp::onPrepareDraws(GrMeshDrawTarget*) third_party/skia/src/gpu/ganesh/ops/AtlasTextOp.cpp:559:54 #4 0x55689fc67be2 in GrOp::prepare(GrOpFlushState*) third_party/skia/src/gpu/ganesh/ops/GrOp.cpp:59:11 #5 0x55689fca6a8a in skgpu::ganesh::OpsTask::onPrepare(GrOpFlushState*) third_party/skia/src/gpu/ganesh/ops/OpsTask.cpp:548:27 #6 0x55689fa8e32a in GrRenderTask::prepare(GrOpFlushState*) third_party/skia/src/gpu/ganesh/GrRenderTask.cpp:111:11 #7 0x55689fa2859b in GrDrawingManager::executeRenderTasks(GrOpFlushState*) third_party/skia/src/gpu/ganesh/GrDrawingManager.cpp:266:21 #8 0x55689fa26a43 in GrDrawingManager::flush(SkSpan, SkSurfaces::BackendSurfaceAccess, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDrawingManager.cpp:209:34 #9 0x55689fa29a00 in GrDrawingManager::flushSurfaces(SkSpan, SkSurfaces::BackendSurfaceAccess, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDrawingManager.cpp:540:27 #10 0x55689fa220d9 in GrDirectContextPriv::flushSurfaces(SkSpan, SkSurfaces::BackendSurfaceAccess, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDirectContextPriv.cpp:91:47 #11 0x55689f9c4d4b in GrDirectContext::flush(SkSurface*, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDirectContextPriv.h:106:22 #12 0x55689fd4ab57 in skgpu::ganesh::Flush(SkSurface*) third_party/skia/src/gpu/ganesh/surface/SkSurface_Ganesh.cpp:759:45 #13 0x5568a718cb4f in gpu::SharedContextState::FlushWriteAccess(gpu::SkiaImageRepresentation::ScopedWriteAccess*) gpu/command_buffer/service/shared_context_state.cc:860:9 #14 0x5568a7450197 in gpu::raster::RasterDecoderImpl::DoEndRasterCHROMIUM() gpu/command_buffer/service/raster_decoder.cc:3100:30 #15 0x5568a744a59e in gpu::raster::RasterDecoderImpl::HandleEndRasterCHROMIUM(unsigned int, void const volatile*) gpu/command_buffer/service/raster_decoder_autogen.h:151:3 #16 0x5568a745526b in gpu::error::Error gpu::raster::RasterDecoderImpl::DoCommandsImpl(unsigned int, void const volatile*, int, int*) gpu/command_buffer/service/raster_decoder.cc:1510:18 #17 0x55689085a814 in gpu::CommandBufferService::Flush(int, gpu::AsyncAPIInterface*) gpu/command_buffer/service/command_buffer_service.cc:267:35 #18 0x5568a6bbf2ab in gpu::CommandBufferStub::OnAsyncFlush(int, unsigned int, std::__Cr::vector> const&) gpu/ipc/service/command_buffer_stub.cc:504:22 #19 0x5568a6bbe511 in gpu::CommandBufferStub::ExecuteDeferredRequest(gpu::mojom::DeferredCommandBufferRequestParams&, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/command_buffer_stub.cc:173:7 #20 0x5568a6be15fc in gpu::GpuChannel::ExecuteDeferredRequest(mojo::StructPtr, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/gpu_channel.cc:833:13 #21 0x5568a6bef5e7 in void base::internal::DecayedFunctorTraits, gpu::FenceSyncReleaseDelegate*), base::WeakPtr&&, mojo::StructPtr&&>::Invoke, gpu::FenceSyncReleaseDelegate*), base::WeakPtr const&, mojo::StructPtr, gpu::FenceSyncReleaseDelegate*>(void (gpu::GpuChannel::*)(mojo::StructPtr, gpu::FenceSyncReleaseDelegate*), base::WeakPtr const&, mojo::StructPtr&&, gpu::FenceSyncReleaseDelegate*&&) base/functional/bind_internal.h:740:12 #22 0x5568a6bef3c9 in base::internal::Invoker, gpu::FenceSyncReleaseDelegate*), base::WeakPtr&&, mojo::StructPtr&&>, base::internal::BindState, gpu::FenceSyncReleaseDelegate*), base::WeakPtr, mojo::StructPtr>, void (gpu::FenceSyncReleaseDelegate*)>::RunOnce(base::internal::BindStateBase*, gpu::FenceSyncReleaseDelegate*) base/functional/bind_internal.h:956:5 #23 0x55689089d211 in void base::internal::Invoker&&, gpu::FenceSyncReleaseDelegate*>, base::internal::BindState, base::internal::UnretainedWrapper>, void ()>::RunImpl, std::__Cr::tuple>, 0ul>(base::OnceCallback&&, std::__Cr::tuple>&&, std::__Cr::integer_sequence) base/functional/callback.h:155:12 #24 0x556890871957 in gpu::Scheduler::ExecuteSequence(base::IdType) base/functional/callback.h:155:12 #25 0x55689086f988 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:625:3 #26 0x556890873571 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #27 0x55689d6ef326 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #28 0x55689d7669c9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #29 0x55689d76583a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:340:40 #30 0x55689d5ad927 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_default.cc:42:55 #31 0x55689d7680d7 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:644:12 #32 0x55689d669ca0 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #33 0x5568a8f59467 in content::GpuMain(content::MainFunctionParams) content/gpu/gpu_main.cc:484:14 #34 0x5568992076ef in content::RunZygote(content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:664:14 #35 0x556899208a1f in content::RunOtherNamedProcessTypeMain(std::__Cr::basic_string, std::__Cr::allocator> const&, content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:771:12 #36 0x55689920b728 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1152:10 #37 0x556899205101 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:358:36 #38 0x5568992056fc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:371:10 #39 0x55688573ab39 in ChromeMain chrome/app/chrome_main.cc:191:12 #40 0x7f784f80b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7d484da1e241 is located 961 bytes inside of 2048-byte region [0x7d484da1de80,0x7d484da1e680) allocated by thread T0 (chrome) here: #0 0x556885700324 in malloc (/chromium/chromium/src/out/asan/chrome+0x10dcf324) (BuildId: 88393a6d8aeb214c) #1 0x55689d85a0a3 in base::UncheckedMalloc(unsigned long, void**) base/process/memory_linux.cc:131:13 #2 0x55689f7556d6 in sk_malloc_flags(unsigned long, unsigned int) skia/ext/SkMemory_new_handler.cpp:115:17 #3 0x5568862c4606 in SkArenaAlloc::ensureSpace(unsigned int, unsigned int) third_party/skia/include/private/base/SkMalloc.h:68:12 #4 0x5568862c4970 in SkArenaAlloc::allocObjectWithFooter(unsigned int, unsigned int) third_party/skia/src/base/SkArenaAlloc.cpp #5 0x5568863d52b7 in SkGlyph::addPathFromBuffer(SkReadBuffer&, SkArenaAlloc*) third_party/skia/src/base/SkArenaAlloc.h:132:30 #6 0x5568865f3ca3 in SkStrike::mergeFromBuffer(SkReadBuffer&) third_party/skia/src/core/SkStrike.cpp:423:31 #7 0x55689fe1a130 in SkStrikeClientImpl::readStrikeData(void const volatile*, unsigned long) third_party/skia/src/text/gpu/SkChromeRemoteGlyphCache.cpp:754:22 #8 0x5568a746b937 in gpu::ServiceFontManager::Deserialize(base::span, std::__Cr::vector>*) gpu/command_buffer/service/service_font_manager.cc:66:25 #9 0x5568a7460c9f in gpu::raster::RasterDecoderImpl::DoRasterCHROMIUM(unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int) gpu/command_buffer/service/raster_decoder.cc:3007:27 #10 0x5568a744a4de in gpu::raster::RasterDecoderImpl::HandleRasterCHROMIUM(unsigned int, void const volatile*) gpu/command_buffer/service/raster_decoder.cc:3062:10 #11 0x5568a745526b in gpu::error::Error gpu::raster::RasterDecoderImpl::DoCommandsImpl(unsigned int, void const volatile*, int, int*) gpu/command_buffer/service/raster_decoder.cc:1510:18 #12 0x55689085a814 in gpu::CommandBufferService::Flush(int, gpu::AsyncAPIInterface*) gpu/command_buffer/service/command_buffer_service.cc:267:35 #13 0x5568a6bbf2ab in gpu::CommandBufferStub::OnAsyncFlush(int, unsigned int, std::__Cr::vector> const&) gpu/ipc/service/command_buffer_stub.cc:504:22 #14 0x5568a6bbe511 in gpu::CommandBufferStub::ExecuteDeferredRequest(gpu::mojom::DeferredCommandBufferRequestParams&, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/command_buffer_stub.cc:173:7 #15 0x5568a6be15fc in gpu::GpuChannel::ExecuteDeferredRequest(mojo::StructPtr, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/gpu_channel.cc:833:13 #16 0x5568a6bef5e7 in void base::internal::DecayedFunctorTraits, gpu::FenceSyncReleaseDelegate*), base::WeakPtr&&, mojo::StructPtr&&>::Invoke, gpu::FenceSyncReleaseDelegate*), base::WeakPtr const&, mojo::StructPtr, gpu::FenceSyncReleaseDelegate*>(void (gpu::GpuChannel::*)(mojo::StructPtr, gpu::FenceSyncReleaseDelegate*), base::WeakPtr const&, mojo::StructPtr&&, gpu::FenceSyncReleaseDelegate*&&) base/functional/bind_internal.h:740:12 #17 0x5568a6bef3c9 in base::internal::Invoker, gpu::FenceSyncReleaseDelegate*), base::WeakPtr&&, mojo::StructPtr&&>, base::internal::BindState, gpu::FenceSyncReleaseDelegate*), base::WeakPtr, mojo::StructPtr>, void (gpu::FenceSyncReleaseDelegate*)>::RunOnce(base::internal::BindStateBase*, gpu::FenceSyncReleaseDelegate*) base/functional/bind_internal.h:956:5 #18 0x55689089d211 in void base::internal::Invoker&&, gpu::FenceSyncReleaseDelegate*>, base::internal::BindState, base::internal::UnretainedWrapper>, void ()>::RunImpl, std::__Cr::tuple>, 0ul>(base::OnceCallback&&, std::__Cr::tuple>&&, std::__Cr::integer_sequence) base/functional/callback.h:155:12 #19 0x556890871957 in gpu::Scheduler::ExecuteSequence(base::IdType) base/functional/callback.h:155:12 #20 0x55689086f988 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:625:3 #21 0x556890873571 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #22 0x55689d6ef326 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #23 0x55689d7669c9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #24 0x55689d76583a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:340:40 #25 0x55689d5ad927 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_default.cc:42:55 #26 0x55689d7680d7 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:644:12 #27 0x55689d669ca0 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #28 0x5568a8f59467 in content::GpuMain(content::MainFunctionParams) content/gpu/gpu_main.cc:484:14 #29 0x5568992076ef in content::RunZygote(content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:664:14 SUMMARY: AddressSanitizer: use-after-poison (/chromium/chromium/src/out/asan/chrome+0x10dcd00a) (BuildId: 88393a6d8aeb214c) in __asan_memcpy Shadow bytes around the buggy address: 0x7d484da1df80: 00 00 00 00 01 00 00 00 00 00 00 00 05 00 00 00 0x7d484da1e000: 00 00 01 00 00 00 00 00 00 00 05 00 00 00 00 00 0x7d484da1e080: 01 00 00 00 00 00 00 00 05 00 00 00 00 00 01 00 0x7d484da1e100: 00 00 00 00 00 00 05 00 00 00 00 00 01 00 00 00 0x7d484da1e180: 00 00 00 00 05 00 00 00 00 00 01 00 00 00 00 00 =>0x7d484da1e200: 00 00 05 00 00 00 00 00[01]f7 f7 f7 f7 f7 f7 f7 0x7d484da1e280: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7d484da1e300: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7d484da1e380: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7d484da1e400: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x7d484da1e480: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb NOTE: the stack trace above identifies the code that *accessed* the poisoned memory. To identify the code that *poisoned* the memory, try the experimental setting ASAN_OPTIONS=poison_history_size=. ==1395==ADDITIONAL INFO ==1395==Note: Please include this section with the ASan report. Task trace: #0 0x55689086fe62 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:647:27 #1 0x55689086abb6 in gpu::Scheduler::TryScheduleSequence(gpu::Scheduler::Sequence*) gpu/command_buffer/service/scheduler.cc:432:29 Command line: `/proc/self/exe --type=gpu-process --no-sandbox --enable-gpu-rasterization --headless=new --ozone-platform=headless --use-angle=swiftshader --crashpad-handler-pid=1363 --enable-crash-reporter=, --noerrdialogs --user-data-dir=/tmp/chrome-poc-profile --disable-breakpad --change-stack-guard-on-fork=enable --gpu-preferences=UAAAAAAAAAAgAAAMAAAAAAAAAAAAAMAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAYAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=angle --shared-files --field-trial-handle=3,i,13862760108689199086,5143256410815554387,262144 --disable-features=PaintHolding --variations-seed-version --pseudonymization-salt-handle=7,i,15590058800688527723,6214206718550088375,4 --trace-process-track-uuid=3190708988185955192 --enable-logging=stderr` ==1395==END OF ADDITIONAL INFO ==1395==ABORTING [1361:1361:0407/044401.145827:ERROR:content/browser/gpu/gpu_process_host.cc:999] GPU process exited unexpectedly: exit_code=256 [1361:1361:0407/044401.145899:WARNING:content/browser/gpu/gpu_process_host.cc:1441] The GPU process has crashed 1 time(s) [1493:1493:0407/044401.292722:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. [1361:1361:0407/044401.310300:WARNING:content/browser/gpu/gpu_process_host.cc:1021] Reinitialized the GPU process after a crash. The reported initialization time was 130 ms [1493:1493:0407/044401.360777:INFO:third_party/skia/src/core/SkTypeface_remote.cpp:51] GlyphCacheMiss generateImage: Rec textsize 0x1.4p+5 prescale 0x1p+0 preskew 0x0p+0 post [0x1p+0 0x0p+0 0x0p+0 0x1p+0] frame -1 miter 0 format 1 join 0 cap 0 flags 0x2094 lum bits ff000000, device gamma 76, contrast 51 foreground color 0 [1493:1493:0407/044401.361373:INFO:third_party/skia/src/core/SkTypeface_remote.cpp:66] [POC] SkScalerContextProxy::generateImage NO-OP on 840 uninitialized bytes at 0x7d484da3f441 (glyph 36, 28x30) -- poisoning for ASAN ================================================================= ==1493==ERROR: AddressSanitizer: use-after-poison on address 0x7d484da3f441 at pc 0x5568856fe00b bp 0x7fffae836e10 sp 0x7fffae8365d0 READ of size 840 at 0x7d484da3f441 thread T0 (chrome) #0 0x5568856fe00a in __asan_memcpy (/chromium/chromium/src/out/asan/chrome+0x10dcd00a) (BuildId: 88393a6d8aeb214c) #1 0x55689fd981fd in GrAtlasManager::addGlyphToAtlas(SkGlyph const&, skgpu::ganesh::GlyphEntry*, int, GrResourceProvider*, GrDeferredUploadTarget*) third_party/skia/src/gpu/ganesh/text/GrAtlasManager.cpp:98:17 #2 0x55689fd90d9f in skgpu::ganesh::GlyphData::regenerateAtlas(int, int, sktext::gpu::GlyphVector&, skgpu::MaskFormat, int, GrMeshDrawTarget*) third_party/skia/src/gpu/ganesh/text/GlyphData.cpp:207:43 #3 0x55689fc0c9a3 in skgpu::ganesh::AtlasTextOp::onPrepareDraws(GrMeshDrawTarget*) third_party/skia/src/gpu/ganesh/ops/AtlasTextOp.cpp:559:54 #4 0x55689fc67be2 in GrOp::prepare(GrOpFlushState*) third_party/skia/src/gpu/ganesh/ops/GrOp.cpp:59:11 #5 0x55689fca6a8a in skgpu::ganesh::OpsTask::onPrepare(GrOpFlushState*) third_party/skia/src/gpu/ganesh/ops/OpsTask.cpp:548:27 #6 0x55689fa8e32a in GrRenderTask::prepare(GrOpFlushState*) third_party/skia/src/gpu/ganesh/GrRenderTask.cpp:111:11 #7 0x55689fa2859b in GrDrawingManager::executeRenderTasks(GrOpFlushState*) third_party/skia/src/gpu/ganesh/GrDrawingManager.cpp:266:21 #8 0x55689fa26a43 in GrDrawingManager::flush(SkSpan, SkSurfaces::BackendSurfaceAccess, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDrawingManager.cpp:209:34 #9 0x55689fa29a00 in GrDrawingManager::flushSurfaces(SkSpan, SkSurfaces::BackendSurfaceAccess, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDrawingManager.cpp:540:27 #10 0x55689fa220d9 in GrDirectContextPriv::flushSurfaces(SkSpan, SkSurfaces::BackendSurfaceAccess, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDirectContextPriv.cpp:91:47 #11 0x55689f9c4d4b in GrDirectContext::flush(SkSurface*, GrFlushInfo const&, skgpu::MutableTextureState const*) third_party/skia/src/gpu/ganesh/GrDirectContextPriv.h:106:22 #12 0x55689fd4ab57 in skgpu::ganesh::Flush(SkSurface*) third_party/skia/src/gpu/ganesh/surface/SkSurface_Ganesh.cpp:759:45 #13 0x5568a718cb4f in gpu::SharedContextState::FlushWriteAccess(gpu::SkiaImageRepresentation::ScopedWriteAccess*) gpu/command_buffer/service/shared_context_state.cc:860:9 #14 0x5568a7450197 in gpu::raster::RasterDecoderImpl::DoEndRasterCHROMIUM() gpu/command_buffer/service/raster_decoder.cc:3100:30 #15 0x5568a744a59e in gpu::raster::RasterDecoderImpl::HandleEndRasterCHROMIUM(unsigned int, void const volatile*) gpu/command_buffer/service/raster_decoder_autogen.h:151:3 #16 0x5568a745526b in gpu::error::Error gpu::raster::RasterDecoderImpl::DoCommandsImpl(unsigned int, void const volatile*, int, int*) gpu/command_buffer/service/raster_decoder.cc:1510:18 #17 0x55689085a814 in gpu::CommandBufferService::Flush(int, gpu::AsyncAPIInterface*) gpu/command_buffer/service/command_buffer_service.cc:267:35 #18 0x5568a6bbf2ab in gpu::CommandBufferStub::OnAsyncFlush(int, unsigned int, std::__Cr::vector> const&) gpu/ipc/service/command_buffer_stub.cc:504:22 #19 0x5568a6bbe511 in gpu::CommandBufferStub::ExecuteDeferredRequest(gpu::mojom::DeferredCommandBufferRequestParams&, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/command_buffer_stub.cc:173:7 #20 0x5568a6be15fc in gpu::GpuChannel::ExecuteDeferredRequest(mojo::StructPtr, gpu::FenceSyncReleaseDelegate*) gpu/ipc/service/gpu_channel.cc:833:13 #21 0x5568a6bef5e7 in void base::internal::DecayedFunctorTraits, gpu::FenceSyncReleaseDelegate*), base::WeakPtr&&, mojo::StructPtr&&>::Invoke, gpu::FenceSyncReleaseDelegate*), base::WeakPtr const&, mojo::StructPtr, gpu::FenceSyncReleaseDelegate*>(void (gpu::GpuChannel::*)(mojo::StructPtr, gpu::FenceSyncReleaseDelegate*), base::WeakPtr const&, mojo::StructPtr&&, gpu::FenceSyncReleaseDelegate*&&) base/functional/bind_internal.h:740:12 #22 0x5568a6bef3c9 in base::internal::Invoker, gpu::FenceSyncReleaseDelegate*), base::WeakPtr&&, mojo::StructPtr&&>, base::internal::BindState, gpu::FenceSyncReleaseDelegate*), base::WeakPtr, mojo::StructPtr>, void (gpu::FenceSyncReleaseDelegate*)>::RunOnce(base::internal::BindStateBase*, gpu::FenceSyncReleaseDelegate*) base/functional/bind_internal.h:956:5 #23 0x55689089d211 in void base::internal::Invoker&&, gpu::FenceSyncReleaseDelegate*>, base::internal::BindState, base::internal::UnretainedWrapper>, void ()>::RunImpl, std::__Cr::tuple>, 0ul>(base::OnceCallback&&, std::__Cr::tuple>&&, std::__Cr::integer_sequence) base/functional/callback.h:155:12 #24 0x556890871957 in gpu::Scheduler::ExecuteSequence(base::IdType) base/functional/callback.h:155:12 #25 0x55689086f988 in gpu::Scheduler::RunNextTask() gpu/command_buffer/service/scheduler.cc:625:3 #26 0x556890873571 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #27 0x55689d6ef326 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #28 0x55689d7669c9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #29 0x55689d76583a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:340:40 #30 0x55689d5ad927 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_default.cc:42:55 #31 0x55689d7680d7 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:644:12 #32 0x55689d669ca0 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #33 0x5568a8f59467 in content::GpuMain(content::MainFunctionParams) content/gpu/gpu_main.cc:484:14 #34 0x5568992076ef in content::RunZygote(content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:664:14 #35 0x556899208a1f in content::RunOtherNamedProcessTypeMain(std::__Cr::basic_string, std::__Cr::allocator> const&, content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:771:12 #36 0x55689920b728 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1152:10 #37 0x556899205101 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:358:36 #38 0x5568992056fc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:371:10 #39 0x55688573ab39 in ChromeMain chrome/app/chrome_main.cc:191:12 #40 0x7f784f80b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7d484da3f441 is located 961 bytes inside of 2048-byte region [0x7d484da3f080,0x7d484da3f880) allocated by thread T0 (chrome) here: