IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. Note: Google Test filter = WidgetTest.SetCaptureSurvivesSelfDeletionDuringCaptureChange [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from WidgetTest [ RUN ] WidgetTest.SetCaptureSurvivesSelfDeletionDuringCaptureChange (views_unittests:790): dbind-WARNING **: 23:17:04.455: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory ================================================================= ==790==ERROR: AddressSanitizer: heap-use-after-free on address 0x7208397ecc60 at pc 0x609a06c0c30f bp 0x7ffdf3b84fc0 sp 0x7ffdf3b84fb8 READ of size 8 at 0x7208397ecc60 thread T0 #0 0x609a06c0c30e in base::internal::WeakReference::IsValid() const base/memory/scoped_refptr.h:319:43 #1 0x609a06a9394d in views::Widget::SetCapture(views::View*) base/memory/weak_ptr.h:250:16 #2 0x6099f7601da7 in views::test::WidgetTest_SetCaptureSurvivesSelfDeletionDuringCaptureChange_Test::TestBody() ui/views/widget/widget_unittest.cc:3542:13 #3 0x6099f7e1697b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x6099f7e194e7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x6099f7e1b563 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x6099f7e49fb4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x6099f7e48b2a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x609a06fa2950 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x6099f7c01571 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x609a06fa9e9b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x609a06fa97bb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x6099f7c00d3d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #13 0x6099f73106e4 in main ui/views/run_all_unittests_main.cc:10:44 #14 0x74983ae45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7208397ecc60 is located 224 bytes inside of 736-byte region [0x7208397ecb80,0x7208397ece60) freed by thread T0 here: #0 0x6099f640cddd in operator delete(void*) (/chromium/chromium/src/out/asan/views_unittests+0x8925ddd) (BuildId: 333387075dcfa0db) #1 0x609a06b4bb7d in views::NativeWidgetAura::~NativeWidgetAura() ui/views/widget/native_widget_aura.cc #2 0x609a06b4c023 in views::NativeWidgetAura::~NativeWidgetAura() ui/views/widget/native_widget_aura.cc:1430:39 #3 0x609a06b46183 in views::NativeWidgetAura::OnWindowDestroyed(aura::Window*) ui/views/widget/native_widget_aura.cc:1217:5 #4 0x609a07be7143 in aura::Window::~Window() ui/aura/window.cc:237:16 #5 0x609a07be9483 in aura::Window::~Window() ui/aura/window.cc:188:19 #6 0x609a06a8c0a1 in views::Widget::CloseNow() ui/views/widget/widget.cc:1049:21 #7 0x609a06a6c6c3 in views::internal::RootView::OnMouseCaptureLost() ui/views/widget/root_view.cc #8 0x609a06a9e1fb in views::Widget::OnMouseCaptureLost() ui/views/widget/widget.cc:2283:16 #9 0x609a06b45501 in non-virtual thunk to views::NativeWidgetAura::OnCaptureLost() ui/views/widget/native_widget_aura.cc:1172:16 #10 0x609a07c16f78 in aura::WindowEventDispatcher::UpdateCapture(aura::Window*, aura::Window*) ui/aura/window_event_dispatcher.cc:442:32 #11 0x609a07c7b04a in aura::client::DefaultCaptureClient::SetCapture(aura::Window*) ui/aura/client/default_capture_client.cc:57:21 #12 0x609a07bf97ea in aura::Window::SetCapture() ui/aura/window.cc:874:19 #13 0x609a06a9393d in views::Widget::SetCapture(views::View*) ui/views/widget/widget.cc:1618:21 #14 0x6099f7601da7 in views::test::WidgetTest_SetCaptureSurvivesSelfDeletionDuringCaptureChange_Test::TestBody() ui/views/widget/widget_unittest.cc:3542:13 #15 0x6099f7e1697b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #16 0x6099f7e194e7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #17 0x6099f7e1b563 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #18 0x6099f7e49fb4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #19 0x6099f7e48b2a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #20 0x609a06fa2950 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #21 0x6099f7c01571 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #22 0x609a06fa9e9b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #23 0x609a06fa97bb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #24 0x6099f7c00d3d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #25 0x6099f73106e4 in main ui/views/run_all_unittests_main.cc:10:44 #26 0x74983ae45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x6099f640c59d in operator new(unsigned long) (/chromium/chromium/src/out/asan/views_unittests+0x892559d) (BuildId: 333387075dcfa0db) #1 0x6099f7bfd6db in views::test::WidgetTest::CreateTopLevelNativeWidget(views::Widget::InitParams::Ownership) ui/views/widget/widget.h:161:3 #2 0x6099f7601a68 in views::test::WidgetTest_SetCaptureSurvivesSelfDeletionDuringCaptureChange_Test::TestBody() ui/views/widget/widget_unittest.cc:3524:22 #3 0x6099f7e1697b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x6099f7e194e7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x6099f7e1b563 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x6099f7e49fb4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x6099f7e48b2a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x609a06fa2950 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x6099f7c01571 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x609a06fa9e9b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x609a06fa97bb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x6099f7c00d3d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #13 0x6099f73106e4 in main ui/views/run_all_unittests_main.cc:10:44 #14 0x74983ae45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-use-after-free base/memory/scoped_refptr.h:319:43 in base::internal::WeakReference::IsValid() const Shadow bytes around the buggy address: 0x7208397ec980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7208397eca00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7208397eca80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7208397ecb00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7208397ecb80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd =>0x7208397ecc00: fd fd fd fd fd fd fd fd fd fd fd fd[fd]fd fd fd 0x7208397ecc80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7208397ecd00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7208397ecd80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7208397ece00: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa 0x7208397ece80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==790==ADDITIONAL INFO ==790==Note: Please include this section with the ASan report. Task trace: ==790==END OF ADDITIONAL INFO ==790==ABORTING [1/1] WidgetTest.SetCaptureSurvivesSelfDeletionDuringCaptureChange (CRASHED) 1 test crashed: WidgetTest.SetCaptureSurvivesSelfDeletionDuringCaptureChange (../../ui/views/widget/widget_unittest.cc:3517) Tests took 0 seconds.