IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. Note: Google Test filter = LightweightDetectorOOB.CraftedTraceLen [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from LightweightDetectorOOB [ RUN ] LightweightDetectorOOB.CraftedTraceLen ================================================================= ==1971==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7cb457be54b8 at pc 0x55815ce21f1e bp 0x7fff2c5e58f0 sp 0x7fff2c5e58e8 READ of size 1 at 0x7cb457be54b8 thread T0 #0 0x55815ce21f1d in gwp_asan::internal::Unpack(unsigned char const*, unsigned long, unsigned long*, unsigned long) components/gwp_asan/common/pack_stack_trace.cc:35:50 #1 0x55815ce66df9 in gwp_asan::internal::CrashAnalyzer::ReadAllocationInfo(unsigned char const*, unsigned long, gwp_asan::internal::AllocationInfo const&, gwp_asan::Crash_AllocationInfo*) components/gwp_asan/crash_handler/crash_analyzer.cc:576:7 #2 0x55815ce65933 in gwp_asan::internal::CrashAnalyzer::AnalyzeLightweightDetectorCrash(crashpad::ProcessSnapshot const&, gwp_asan::Crash*) components/gwp_asan/crash_handler/crash_analyzer.cc:388:5 #3 0x55815b50dd57 in gwp_asan::internal::LightweightDetectorOOB_CraftedTraceLen_Test::TestBody() components/gwp_asan/crash_handler/crash_analyzer_unittest.cc:427:3 #4 0x55815bcd0a3b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #5 0x55815bcd36e7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #6 0x55815bcd57f3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #7 0x55815bd0564a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #8 0x55815bd040ae in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #9 0x55815be57f2c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #10 0x55815be39a51 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x55815be5ff2b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x55815be5f84b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x55815be39740 in main base/test/run_all_unittests.cc:79:10 #14 0x7ff4588c0249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7cb457be54b8 is located 0 bytes after 120-byte region [0x7cb457be5440,0x7cb457be54b8) allocated by thread T0 here: #0 0x55815b49348d in operator new[](unsigned long) (/chromium/chromium/src/out/asan/gwp_asan_unittests+0x114d48d) (BuildId: e4716404584507e3) #1 0x55815ce64ee7 in gwp_asan::internal::CrashAnalyzer::AnalyzeLightweightDetectorCrash(crashpad::ProcessSnapshot const&, gwp_asan::Crash*) gen/third_party/libc++/src/include/__memory/unique_ptr.h:762:55 #2 0x55815b50dd57 in gwp_asan::internal::LightweightDetectorOOB_CraftedTraceLen_Test::TestBody() components/gwp_asan/crash_handler/crash_analyzer_unittest.cc:427:3 #3 0x55815bcd0a3b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x55815bcd36e7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x55815bcd57f3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x55815bd0564a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x55815bd040ae in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x55815be57f2c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x55815be39a51 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x55815be5ff2b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x55815be5f84b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x55815be39740 in main base/test/run_all_unittests.cc:79:10 #13 0x7ff4588c0249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-buffer-overflow components/gwp_asan/common/pack_stack_trace.cc:35:50 in gwp_asan::internal::Unpack(unsigned char const*, unsigned long, unsigned long*, unsigned long) Shadow bytes around the buggy address: 0x7cb457be5200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa 0x7cb457be5280: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x7cb457be5300: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa 0x7cb457be5380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa 0x7cb457be5400: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 =>0x7cb457be5480: 00 00 00 00 00 00 00[fa]fa fa fa fa fa fa fa fa 0x7cb457be5500: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cb457be5580: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cb457be5600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cb457be5680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7cb457be5700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==1971==ADDITIONAL INFO ==1971==Note: Please include this section with the ASan report. Task trace: ==1971==END OF ADDITIONAL INFO ==1971==ABORTING [1/1] LightweightDetectorOOB.CraftedTraceLen (CRASHED) 1 test crashed: LightweightDetectorOOB.CraftedTraceLen (../../components/gwp_asan/crash_handler/crash_analyzer_unittest.cc:366) Tests took 1 seconds.