[.] Sanitizer coverage enabled. Counter map size: 6116156, Cmp map size: 262144 Note: Google Test filter = ProxyResolverV8TracingTest.AtomicsWaitAsyncAfterContextDisposed [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from ProxyResolverV8TracingTest [ RUN ] ProxyResolverV8TracingTest.AtomicsWaitAsyncAfterContextDisposed ================================================================= ==3039==ERROR: AddressSanitizer: heap-use-after-free on address 0x7bd142086838 at pc 0x63e45b781293 bp 0x7b613a878250 sp 0x7b613a878248 READ of size 8 at 0x7bd142086838 thread T4 (Proxy Resolver) #0 0x63e45b781292 in proxy_resolver::ProxyResolverV8::Context::AlertCallback(v8::FunctionCallbackInfo const&) base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:1028:47 #1 0x63e4609a46d3 in Builtins_CallApiCallbackGeneric crtstuff.c #2 0x63e4609a2956 in Builtins_InterpreterEntryTrampoline crtstuff.c #3 0x63e460ae38a9 in Builtins_PromiseFulfillReactionJob crtstuff.c #4 0x63e4609d3e93 in Builtins_RunMicrotasks crtstuff.c #5 0x63e46099f62a in Builtins_JSRunMicrotasksEntry crtstuff.c #6 0x63e45bb8f4c9 in v8::internal::(anonymous namespace)::Invoke(v8::internal::Isolate*, v8::internal::(anonymous namespace)::InvokeParams const&) v8/src/execution/execution.cc:493:41 #7 0x63e45bb929fd in v8::internal::(anonymous namespace)::InvokeWithTryCatch(v8::internal::Isolate*, v8::internal::(anonymous namespace)::InvokeParams const&) v8/src/execution/execution.cc:535:18 #8 0x63e45bb92e15 in v8::internal::Execution::TryRunMicrotasks(v8::internal::Isolate*, v8::internal::MicrotaskQueue*) v8/src/execution/execution.cc:639:10 #9 0x63e45bc36b71 in v8::internal::MicrotaskQueue::RunMicrotasks(v8::internal::Isolate*) v8/src/execution/microtask-queue.cc:197:22 #10 0x63e45bc3671a in v8::internal::MicrotaskQueue::PerformCheckpointInternal(v8::Isolate*) v8/src/execution/microtask-queue.cc:141:3 #11 0x63e45bc00286 in v8::internal::Isolate::FireCallCompletedCallbackInternal(v8::internal::MicrotaskQueue*) v8/src/execution/microtask-queue.h:51:5 #12 0x63e45b81455a in v8::CallDepthScope::~CallDepthScope() v8/src/execution/isolate.h:1818:5 #13 0x63e45b7dfe2d in v8::Function::Call(v8::Isolate*, v8::Local, v8::Local, int, v8::Local*) v8/src/api/api-inl.h:259:20 #14 0x63e45b77cbd0 in proxy_resolver::ProxyResolverV8::Context::ResolveProxy(GURL const&, net::ProxyInfo*, proxy_resolver::ProxyResolverV8::JSBindings*) services/proxy_resolver/proxy_resolver_v8.cc:489:16 #15 0x63e45b790f16 in proxy_resolver::(anonymous namespace)::Job::ExecuteProxyResolver() services/proxy_resolver/proxy_resolver_v8_tracing.cc:603:31 #16 0x63e45b7909c4 in proxy_resolver::(anonymous namespace)::Job::ExecuteNonBlocking() services/proxy_resolver/proxy_resolver_v8_tracing.cc:574:16 #17 0x63e45b78f980 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #18 0x63e462ccad23 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #19 0x63e462d3970c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #20 0x63e462d385aa in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40 #21 0x63e462beee22 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_default.cc:65:55 #22 0x63e462d3adf4 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:640:12 #23 0x63e462c7f930 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #24 0x63e462dd1b4c in base::Thread::Run(base::RunLoop*) base/threading/thread.cc:356:13 #25 0x63e462dd20df in base::Thread::ThreadMain() base/threading/thread.cc:426:3 #26 0x63e462e32dae in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:102:13 #27 0x63e45257da4a in asan_thread_start(void*) asan_interceptors.cpp 0x7bd142086838 is located 40 bytes inside of 72-byte region [0x7bd142086810,0x7bd142086858) freed by thread T0 here: #0 0x63e4525bac56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/services_unittests+0xbcd2c56) (BuildId: ae7a89dfd7b352c0) #1 0x63e45b794d62 in proxy_resolver::(anonymous namespace)::ProxyResolverV8TracingImpl::~ProxyResolverV8TracingImpl() third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x63e45b794f73 in proxy_resolver::(anonymous namespace)::ProxyResolverV8TracingImpl::~ProxyResolverV8TracingImpl() services/proxy_resolver/proxy_resolver_v8_tracing.cc:953:59 #3 0x63e4554ef913 in proxy_resolver::(anonymous namespace)::ProxyResolverV8TracingTest_AtomicsWaitAsyncAfterContextDisposed_Test::TestBody() third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #4 0x63e45818915b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #5 0x63e45818c2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #6 0x63e45818e3c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #7 0x63e4581bdf8a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #8 0x63e4581bca5e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #9 0x63e4675ea1cc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #10 0x63e45428f0f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x63e4675f565b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x63e4675f4f7b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x63e45428e5c4 in main services/test/run_all_unittests.cc:95:10 #14 0x7f6143645249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T5 (Proxy Resolver) here: #0 0x63e4525ba051 in operator new(unsigned long) (/chromium/chromium/src/out/asan/services_unittests+0xbcd2051) (BuildId: ae7a89dfd7b352c0) #1 0x63e45b77d646 in proxy_resolver::ProxyResolverV8::Create(scoped_refptr const&, proxy_resolver::ProxyResolverV8::JSBindings*, std::__Cr::unique_ptr>*) services/proxy_resolver/proxy_resolver_v8.cc:897:7 #2 0x63e45b790f45 in proxy_resolver::(anonymous namespace)::Job::ExecuteProxyResolver() services/proxy_resolver/proxy_resolver_v8_tracing.cc:597:16 #3 0x63e45b791276 in proxy_resolver::(anonymous namespace)::Job::ExecuteBlocking() services/proxy_resolver/proxy_resolver_v8_tracing.cc:557:16 #4 0x63e45b78f980 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #5 0x63e462ccad23 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #6 0x63e462d3970c in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #7 0x63e462d385aa in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:336:40 #8 0x63e462beee22 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_default.cc:65:55 #9 0x63e462d3adf4 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:640:12 #10 0x63e462c7f930 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #11 0x63e462dd1b4c in base::Thread::Run(base::RunLoop*) base/threading/thread.cc:356:13 #12 0x63e462dd20df in base::Thread::ThreadMain() base/threading/thread.cc:426:3 #13 0x63e462e32dae in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:102:13 #14 0x63e45257da4a in asan_thread_start(void*) asan_interceptors.cpp Thread T4 (Proxy Resolver) created by T0 here: #0 0x63e452563775 in pthread_create (/chromium/chromium/src/out/asan/services_unittests+0xbc7b775) (BuildId: ae7a89dfd7b352c0) #1 0x63e462e32402 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThreadBase::Delegate*, base::PlatformThreadHandle*, base::ThreadType, base::MessagePumpType) base/threading/platform_thread_posix.cc:153:13 #2 0x63e462dd04fc in base::Thread::StartWithOptions(base::Thread::Options) base/threading/thread.cc:232:26 #3 0x63e462dd0037 in base::Thread::Start() base/threading/thread.cc:184:10 #4 0x63e45b78a61b in proxy_resolver::(anonymous namespace)::ProxyResolverV8TracingFactoryImpl::CreateProxyResolverV8Tracing(scoped_refptr const&, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>*, base::OnceCallback, std::__Cr::unique_ptr>*) services/proxy_resolver/proxy_resolver_v8_tracing.cc:1032:20 #5 0x63e4554c6158 in proxy_resolver::(anonymous namespace)::CreateResolverWithScriptData(std::__Cr::unique_ptr>, scoped_refptr) services/proxy_resolver/proxy_resolver_v8_tracing_unittest.cc:171:12 #6 0x63e4554eef9a in proxy_resolver::(anonymous namespace)::ProxyResolverV8TracingTest_AtomicsWaitAsyncAfterContextDisposed_Test::TestBody() services/proxy_resolver/proxy_resolver_v8_tracing_unittest.cc:1304:7 #7 0x63e45818915b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x63e45818c2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #9 0x63e45818e3c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #10 0x63e4581bdf8a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #11 0x63e4581bca5e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #12 0x63e4675ea1cc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #13 0x63e45428f0f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #14 0x63e4675f565b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #15 0x63e4675f4f7b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #16 0x63e45428e5c4 in main services/test/run_all_unittests.cc:95:10 #17 0x7f6143645249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Thread T5 (Proxy Resolver) created by T0 here: #0 0x63e452563775 in pthread_create (/chromium/chromium/src/out/asan/services_unittests+0xbc7b775) (BuildId: ae7a89dfd7b352c0) #1 0x63e462e32402 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThreadBase::Delegate*, base::PlatformThreadHandle*, base::ThreadType, base::MessagePumpType) base/threading/platform_thread_posix.cc:153:13 #2 0x63e462dd04fc in base::Thread::StartWithOptions(base::Thread::Options) base/threading/thread.cc:232:26 #3 0x63e462dd0037 in base::Thread::Start() base/threading/thread.cc:184:10 #4 0x63e45b78a61b in proxy_resolver::(anonymous namespace)::ProxyResolverV8TracingFactoryImpl::CreateProxyResolverV8Tracing(scoped_refptr const&, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>*, base::OnceCallback, std::__Cr::unique_ptr>*) services/proxy_resolver/proxy_resolver_v8_tracing.cc:1032:20 #5 0x63e4554c6158 in proxy_resolver::(anonymous namespace)::CreateResolverWithScriptData(std::__Cr::unique_ptr>, scoped_refptr) services/proxy_resolver/proxy_resolver_v8_tracing_unittest.cc:171:12 #6 0x63e4554ef4d4 in proxy_resolver::(anonymous namespace)::ProxyResolverV8TracingTest_AtomicsWaitAsyncAfterContextDisposed_Test::TestBody() services/proxy_resolver/proxy_resolver_v8_tracing_unittest.cc:1332:7 #7 0x63e45818915b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x63e45818c2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #9 0x63e45818e3c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #10 0x63e4581bdf8a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #11 0x63e4581bca5e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #12 0x63e4675ea1cc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #13 0x63e45428f0f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #14 0x63e4675f565b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #15 0x63e4675f4f7b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #16 0x63e45428e5c4 in main services/test/run_all_unittests.cc:95:10 #17 0x7f6143645249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x7bd142086580: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7bd142086600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7bd142086680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7bd142086700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7bd142086780: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x7bd142086800: fa fa fd fd fd fd fd[fd]fd fd fd fa fa fa fa fa 0x7bd142086880: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fd fd 0x7bd142086900: fd fd fd fd fd fd fd fa fa fa fa fa fd fd fd fd 0x7bd142086980: fd fd fd fd fd fd fa fa fa fa 00 00 00 00 00 00 0x7bd142086a00: 00 00 00 00 fa fa fa fa fd fd fd fd fd fd fd fd 0x7bd142086a80: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1780092326.863289 3045 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==3039==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780092326.863383 3045 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==3039==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780092326.863419 3045 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780092326.863464 3045 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: #0 0x63e45b7902de in proxy_resolver::(anonymous namespace)::Job::OnDnsOperationComplete(int) services/proxy_resolver/proxy_resolver_v8_tracing.cc:804:9 === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780092326.863489 3045 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780092326.863512 3045 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==3039==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1780092326.863534 3045 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==3039==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31