[.] Sanitizer coverage enabled. Counter map size: 8173150, Cmp map size: 262144 IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. [.] Sanitizer coverage enabled. Counter map size: 8173150, Cmp map size: 262144 Note: Google Test filter = DigitalIdentityRequestImplInterstitialAbortTest.AbortWhileInterstitialAbortCallbackDestroysWebContents [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from DigitalIdentityRequestImplInterstitialAbortTest [ RUN ] DigitalIdentityRequestImplInterstitialAbortTest.AbortWhileInterstitialAbortCallbackDestroysWebContents ================================================================= ==1037==ERROR: AddressSanitizer: heap-use-after-free on address 0x79cb3bc51430 at pc 0x57bfd0f8562f bp 0x7fff52950510 sp 0x7fff52950508 READ of size 8 at 0x79cb3bc51430 thread T0 #0 0x57bfd0f8562e in base::internal::WeakReferenceOwner::GetRef() const base/memory/scoped_refptr.h:260:62 #1 0x57bfcc24b808 in content::DigitalIdentityRequestImpl::CompleteRequestWithStatus(blink::mojom::RequestDigitalIdentityStatus, base::expected) base/memory/weak_ptr.h:382:45 #2 0x57bfcc2505fe in content::DigitalIdentityRequestImpl::Abort() content/browser/digital_credentials/digital_identity_request_impl.cc:643:3 #3 0x57bfb8c65e03 in content::DigitalIdentityRequestImplInterstitialAbortTest_AbortWhileInterstitialAbortCallbackDestroysWebContents_Test::TestBody() content/browser/digital_credentials/digital_identity_request_impl_unittest.cc:1270:9 #4 0x57bfc14bd0ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #5 0x57bfc14c0127 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #6 0x57bfc14c21a3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #7 0x57bfc14f1324 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #8 0x57bfc14efe9a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #9 0x57bfd134e570 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #10 0x57bfd0e10525 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #11 0x57bfd0a0f961 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #12 0x57bfd13a323b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #13 0x57bfd13a2b5b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #14 0x57bfd0a0f4d4 in main content/test/run_all_unittests.cc:17:10 #15 0x7d1b3da2b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x79cb3bc51430 is located 96 bytes inside of 112-byte region [0x79cb3bc513d0,0x79cb3bc51440) freed by thread T0 here: #0 0x57bfb7167012 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/content_unittests+0xf6b6012) (BuildId: 6b1660ecbd44e156) #1 0x57bfcc738da2 in content::DocumentAssociatedData::~DocumentAssociatedData() content/browser/renderer_host/document_associated_data.cc:70:14 #2 0x57bfccacf2be in content::RenderFrameHostImpl::~RenderFrameHostImpl() gen/third_party/libc++/src/include/optional:404:15 #3 0x57bfd0e84257 in content::TestRenderFrameHost::~TestRenderFrameHost() content/test/test_render_frame_host.cc:107:43 #4 0x57bfd0e84633 in content::TestRenderFrameHost::~TestRenderFrameHost() content/test/test_render_frame_host.cc:107:43 #5 0x57bfccc20514 in content::RenderFrameHostManager::~RenderFrameHostManager() gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #6 0x57bfcc76c0bc in content::FrameTreeNode::~FrameTreeNode() content/browser/renderer_host/frame_tree_node.cc:312:1 #7 0x57bfcc751bdf in content::FrameTree::~FrameTree() content/browser/renderer_host/frame_tree.cc:230:1 #8 0x57bfcd368267 in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1490:1 #9 0x57bfd0ea3a97 in content::TestWebContents::~TestWebContents() content/test/test_web_contents.cc:87:35 #10 0x57bfd0ea3d03 in content::TestWebContents::~TestWebContents() content/test/test_web_contents.cc:87:35 #11 0x57bfb8c7db71 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #12 0x57bfcc2505b4 in content::DigitalIdentityRequestImpl::Abort() base/functional/callback.h:155:12 #13 0x57bfb8c65e03 in content::DigitalIdentityRequestImplInterstitialAbortTest_AbortWhileInterstitialAbortCallbackDestroysWebContents_Test::TestBody() content/browser/digital_credentials/digital_identity_request_impl_unittest.cc:1270:9 #14 0x57bfc14bd0ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #15 0x57bfc14c0127 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #16 0x57bfc14c21a3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #17 0x57bfc14f1324 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #18 0x57bfc14efe9a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #19 0x57bfd134e570 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #20 0x57bfd0e10525 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #21 0x57bfd0a0f961 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #22 0x57bfd13a323b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #23 0x57bfd13a2b5b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #24 0x57bfd0a0f4d4 in main content/test/run_all_unittests.cc:17:10 #25 0x7d1b3da2b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x57bfb716640d in operator new(unsigned long) (/chromium/chromium/src/out/asan/content_unittests+0xf6b540d) (BuildId: 6b1660ecbd44e156) #1 0x57bfcc248103 in content::DigitalIdentityRequestImpl::CreateInstance(content::RenderFrameHost&, mojo::PendingReceiver) content/browser/digital_credentials/digital_identity_request_impl.cc:331:7 #2 0x57bfb8c655d7 in content::DigitalIdentityRequestImplInterstitialAbortTest_AbortWhileInterstitialAbortCallbackDestroysWebContents_Test::TestBody() content/browser/digital_credentials/digital_identity_request_impl_unittest.cc:1249:7 #3 0x57bfc14bd0ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x57bfc14c0127 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x57bfc14c21a3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x57bfc14f1324 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x57bfc14efe9a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x57bfd134e570 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x57bfd0e10525 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #10 0x57bfd0a0f961 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x57bfd13a323b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x57bfd13a2b5b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x57bfd0a0f4d4 in main content/test/run_all_unittests.cc:17:10 #14 0x7d1b3da2b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x79cb3bc51180: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x79cb3bc51200: 00 00 00 00 00 fa fa fa fa fa fa fa fa fa fd fd 0x79cb3bc51280: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa 0x79cb3bc51300: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 0x79cb3bc51380: 00 fa fa fa fa fa fa fa fa fa fd fd fd fd fd fd =>0x79cb3bc51400: fd fd fd fd fd fd[fd]fd fa fa fa fa fa fa fa fa 0x79cb3bc51480: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa 0x79cb3bc51500: fa fa fa fa fa fa fd fd fd fd fd fd fd fd fd fd 0x79cb3bc51580: fd fd fd fd fa fa fa fa fa fa fa fa fd fd fd fd 0x79cb3bc51600: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa 0x79cb3bc51680: fa fa fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1779220642.928823 1037 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1037==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779220642.928937 1037 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1037==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779220642.928972 1037 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779220642.929000 1037 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779220642.929030 1037 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1037==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779220642.929058 1037 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1037==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 [1/1] DigitalIdentityRequestImplInterstitialAbortTest.AbortWhileInterstitialAbortCallbackDestroysWebContents (CRASHED) 1 test crashed: DigitalIdentityRequestImplInterstitialAbortTest.AbortWhileInterstitialAbortCallbackDestroysWebContents (../../content/browser/digital_credentials/digital_identity_request_impl_unittest.cc:1246) Tests took 2 seconds.