[.] Sanitizer coverage enabled. Counter map size: 12439258, Cmp map size: 262144 IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. [.] Sanitizer coverage enabled. Counter map size: 12439258, Cmp map size: 262144 Note: Google Test filter = SecurePaymentConfirmationControllerSelfDeleteTest.OnCancel [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from SecurePaymentConfirmationControllerSelfDeleteTest [ RUN ] SecurePaymentConfirmationControllerSelfDeleteTest.OnCancel ================================================================= ==9496==ERROR: AddressSanitizer: heap-use-after-free on address 0x777719a2fba0 at pc 0x582c9306cedf bp 0x7ffc23dfa1a0 sp 0x7ffc23dfa198 READ of size 8 at 0x777719a2fba0 thread T0 #0 0x582c9306cede in base::internal::WeakReference::IsValid() const base/memory/scoped_refptr.h:319:43 #1 0x582cad7396bd in payments::SecurePaymentConfirmationController::OnCancel() base/memory/weak_ptr.h:238:32 #2 0x582c861182ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x582c8611b417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x582c8611d513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x582c8614d1ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x582c8614bc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x582c9be9861c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x582ca923b6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #9 0x582c8e202a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x582c9beb23f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x582c9beb1d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x7a171b9a8249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x777719a2fba0 is located 32 bytes inside of 528-byte region [0x777719a2fb80,0x777719a2fd90) freed by thread T0 here: #0 0x582c65c5bd56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785ad56) (BuildId: 5c0c70a231853b4e) #1 0x582c9131c200 in base::internal::Invoker, base::internal::BindState, void ()>::Run(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #2 0x582c9131bf73 in payments::(anonymous namespace)::FakeReentrantView::HideDialog() base/functional/callback.h:155:12 #3 0x582cad739a80 in payments::SecurePaymentConfirmationController::CloseDialog() components/payments/content/secure_payment_confirmation_controller.cc:79:12 #4 0x582cad7396b1 in payments::SecurePaymentConfirmationController::OnCancel() components/payments/content/secure_payment_confirmation_controller.cc:192:3 #5 0x582c861182ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x582c8611b417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x582c8611d513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x582c8614d1ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x582c8614bc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x582c9be9861c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x582ca923b6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #12 0x582c8e202a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #13 0x582c9beb23f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #14 0x582c9beb1d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #15 0x7a171b9a8249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x582c65c5b151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785a151) (BuildId: 5c0c70a231853b4e) #1 0x582c91318646 in payments::SecurePaymentConfirmationControllerSelfDeleteTest::SetUpController() third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x582c913184c3 in payments::SecurePaymentConfirmationControllerSelfDeleteTest_OnCancel_Test::TestBody() components/payments/content/secure_payment_confirmation_controller_unittest.cc:292:3 #3 0x582c861182ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x582c8611b417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x582c8611d513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x582c8614d1ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x582c8614bc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x582c9be9861c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x582ca923b6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #10 0x582c8e202a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x582c9beb23f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x582c9beb1d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x7a171b9a8249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x777719a2f900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x777719a2f980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x777719a2fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x777719a2fa80: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x777719a2fb00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x777719a2fb80: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd 0x777719a2fc00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x777719a2fc80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x777719a2fd00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x777719a2fd80: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x777719a2fe00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1781164915.177117 9496 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9496==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164915.177240 9496 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9496==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164915.177272 9496 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164915.177301 9496 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164915.177324 9496 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9496==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164915.177349 9496 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9496==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 [1/4] SecurePaymentConfirmationControllerSelfDeleteTest.OnCancel (CRASHED) [.] Sanitizer coverage enabled. Counter map size: 12439258, Cmp map size: 262144 Note: Google Test filter = SecurePaymentConfirmationControllerSelfDeleteTest.OnAnotherWay [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from SecurePaymentConfirmationControllerSelfDeleteTest [ RUN ] SecurePaymentConfirmationControllerSelfDeleteTest.OnAnotherWay ================================================================= ==9518==ERROR: AddressSanitizer: heap-use-after-free on address 0x6d87c522f2a0 at pc 0x5b756b18eedf bp 0x7ffc295d9c40 sp 0x7ffc295d9c38 READ of size 8 at 0x6d87c522f2a0 thread T0 #0 0x5b756b18eede in base::internal::WeakReference::IsValid() const base/memory/scoped_refptr.h:319:43 #1 0x5b758585c8e9 in payments::SecurePaymentConfirmationController::OnAnotherWay() base/memory/weak_ptr.h:238:32 #2 0x5b755e23a2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x5b755e23d417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x5b755e23f513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x5b755e26f1ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x5b755e26dc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x5b7573fba61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x5b758135d6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #9 0x5b7566324a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x5b7573fd43f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x5b7573fd3d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x7027c7245249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x6d87c522f2a0 is located 32 bytes inside of 528-byte region [0x6d87c522f280,0x6d87c522f490) freed by thread T0 here: #0 0x5b753dd7dd56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785ad56) (BuildId: 5c0c70a231853b4e) #1 0x5b756943e200 in base::internal::Invoker, base::internal::BindState, void ()>::Run(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #2 0x5b756943df73 in payments::(anonymous namespace)::FakeReentrantView::HideDialog() base/functional/callback.h:155:12 #3 0x5b758585ba80 in payments::SecurePaymentConfirmationController::CloseDialog() components/payments/content/secure_payment_confirmation_controller.cc:79:12 #4 0x5b758585c8dc in payments::SecurePaymentConfirmationController::OnAnotherWay() components/payments/content/secure_payment_confirmation_controller.cc:166:3 #5 0x5b755e23a2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x5b755e23d417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x5b755e23f513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x5b755e26f1ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x5b755e26dc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x5b7573fba61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x5b758135d6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #12 0x5b7566324a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #13 0x5b7573fd43f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #14 0x5b7573fd3d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #15 0x7027c7245249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x5b753dd7d151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785a151) (BuildId: 5c0c70a231853b4e) #1 0x5b756943a646 in payments::SecurePaymentConfirmationControllerSelfDeleteTest::SetUpController() third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x5b756943aac3 in payments::SecurePaymentConfirmationControllerSelfDeleteTest_OnAnotherWay_Test::TestBody() components/payments/content/secure_payment_confirmation_controller_unittest.cc:301:3 #3 0x5b755e23a2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x5b755e23d417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x5b755e23f513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x5b755e26f1ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x5b755e26dc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x5b7573fba61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x5b758135d6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #10 0x5b7566324a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x5b7573fd43f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x5b7573fd3d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x7027c7245249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x6d87c522f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x6d87c522f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x6d87c522f100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x6d87c522f180: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x6d87c522f200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x6d87c522f280: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd 0x6d87c522f300: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x6d87c522f380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x6d87c522f400: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x6d87c522f480: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x6d87c522f500: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1781164920.916252 9518 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9518==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164920.916378 9518 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9518==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164920.916411 9518 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164920.916437 9518 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164920.916460 9518 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9518==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164920.916487 9518 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9518==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 [2/4] SecurePaymentConfirmationControllerSelfDeleteTest.OnAnotherWay (CRASHED) [.] Sanitizer coverage enabled. Counter map size: 12439258, Cmp map size: 262144 Note: Google Test filter = SecurePaymentConfirmationControllerSelfDeleteTest.OnOptOut [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from SecurePaymentConfirmationControllerSelfDeleteTest [ RUN ] SecurePaymentConfirmationControllerSelfDeleteTest.OnOptOut ================================================================= ==9540==ERROR: AddressSanitizer: heap-use-after-free on address 0x733a9282f2a0 at pc 0x585701f10edf bp 0x7fff83627a60 sp 0x7fff83627a58 READ of size 8 at 0x733a9282f2a0 thread T0 #0 0x585701f10ede in base::internal::WeakReference::IsValid() const base/memory/scoped_refptr.h:319:43 #1 0x58571c5dec89 in payments::SecurePaymentConfirmationController::OnOptOut() base/memory/weak_ptr.h:238:32 #2 0x5856f4fbc2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x5856f4fbf417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x5856f4fc1513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x5856f4ff11ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x5856f4fefc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x58570ad3c61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x5857180df6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #9 0x5856fd0a6a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x58570ad563f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x58570ad55d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x75da94845249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x733a9282f2a0 is located 32 bytes inside of 528-byte region [0x733a9282f280,0x733a9282f490) freed by thread T0 here: #0 0x5856d4affd56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785ad56) (BuildId: 5c0c70a231853b4e) #1 0x5857001c0200 in base::internal::Invoker, base::internal::BindState, void ()>::Run(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #2 0x5857001bff73 in payments::(anonymous namespace)::FakeReentrantView::HideDialog() base/functional/callback.h:155:12 #3 0x58571c5dda80 in payments::SecurePaymentConfirmationController::CloseDialog() components/payments/content/secure_payment_confirmation_controller.cc:79:12 #4 0x58571c5dec7c in payments::SecurePaymentConfirmationController::OnOptOut() components/payments/content/secure_payment_confirmation_controller.cc:212:3 #5 0x5856f4fbc2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x5856f4fbf417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x5856f4fc1513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x5856f4ff11ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x5856f4fefc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x58570ad3c61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x5857180df6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #12 0x5856fd0a6a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #13 0x58570ad563f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #14 0x58570ad55d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #15 0x75da94845249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x5856d4aff151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785a151) (BuildId: 5c0c70a231853b4e) #1 0x5857001bc646 in payments::SecurePaymentConfirmationControllerSelfDeleteTest::SetUpController() third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x5857001bcb13 in payments::SecurePaymentConfirmationControllerSelfDeleteTest_OnOptOut_Test::TestBody() components/payments/content/secure_payment_confirmation_controller_unittest.cc:307:3 #3 0x5856f4fbc2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x5856f4fbf417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x5856f4fc1513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x5856f4ff11ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x5856f4fefc9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x58570ad3c61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x5857180df6e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #10 0x5856fd0a6a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x58570ad563f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x58570ad55d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x75da94845249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x733a9282f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x733a9282f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x733a9282f100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x733a9282f180: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x733a9282f200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x733a9282f280: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd 0x733a9282f300: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x733a9282f380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x733a9282f400: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x733a9282f480: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x733a9282f500: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1781164926.639582 9540 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9540==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164926.639719 9540 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9540==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164926.639753 9540 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164926.639779 9540 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164926.639805 9540 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9540==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164926.639829 9540 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9540==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 [3/4] SecurePaymentConfirmationControllerSelfDeleteTest.OnOptOut (CRASHED) [.] Sanitizer coverage enabled. Counter map size: 12439258, Cmp map size: 262144 Note: Google Test filter = SecurePaymentConfirmationControllerSelfDeleteTest.OnConfirmErrorDialog [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from SecurePaymentConfirmationControllerSelfDeleteTest [ RUN ] SecurePaymentConfirmationControllerSelfDeleteTest.OnConfirmErrorDialog ================================================================= ==9563==ERROR: AddressSanitizer: heap-use-after-free on address 0x769f3c02fba0 at pc 0x59d44be53edf bp 0x7ffceb530f80 sp 0x7ffceb530f78 READ of size 8 at 0x769f3c02fba0 thread T0 #0 0x59d44be53ede in base::internal::WeakReference::IsValid() const base/memory/scoped_refptr.h:319:43 #1 0x59d4665210b9 in payments::SecurePaymentConfirmationController::OnConfirm() base/memory/weak_ptr.h:238:32 #2 0x59d43eeff2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x59d43ef02417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x59d43ef04513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x59d43ef341ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x59d43ef32c9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x59d454c7f61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x59d4620226e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #9 0x59d446fe9a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x59d454c993f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x59d454c98d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x793f3e045249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x769f3c02fba0 is located 32 bytes inside of 528-byte region [0x769f3c02fb80,0x769f3c02fd90) freed by thread T0 here: #0 0x59d41ea42d56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785ad56) (BuildId: 5c0c70a231853b4e) #1 0x59d44a103200 in base::internal::Invoker, base::internal::BindState, void ()>::Run(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #2 0x59d44a102f73 in payments::(anonymous namespace)::FakeReentrantView::HideDialog() base/functional/callback.h:155:12 #3 0x59d466520a80 in payments::SecurePaymentConfirmationController::CloseDialog() components/payments/content/secure_payment_confirmation_controller.cc:79:12 #4 0x59d4665210ac in payments::SecurePaymentConfirmationController::OnConfirm() components/payments/content/secure_payment_confirmation_controller.cc:133:5 #5 0x59d43eeff2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x59d43ef02417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x59d43ef04513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x59d43ef341ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x59d43ef32c9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x59d454c7f61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x59d4620226e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #12 0x59d446fe9a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #13 0x59d454c993f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #14 0x59d454c98d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #15 0x793f3e045249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x59d41ea42151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x1785a151) (BuildId: 5c0c70a231853b4e) #1 0x59d44a0ff646 in payments::SecurePaymentConfirmationControllerSelfDeleteTest::SetUpController() third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x59d44a0ffb63 in payments::SecurePaymentConfirmationControllerSelfDeleteTest_OnConfirmErrorDialog_Test::TestBody() components/payments/content/secure_payment_confirmation_controller_unittest.cc:313:3 #3 0x59d43eeff2ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x59d43ef02417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x59d43ef04513 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x59d43ef341ca in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x59d43ef32c9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x59d454c7f61c in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x59d4620226e5 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #10 0x59d446fe9a70 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x59d454c993f4 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x59d454c98d1b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x793f3e045249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x769f3c02f900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x769f3c02f980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x769f3c02fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x769f3c02fa80: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x769f3c02fb00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x769f3c02fb80: fd fd fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd 0x769f3c02fc00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x769f3c02fc80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x769f3c02fd00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x769f3c02fd80: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x769f3c02fe00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1781164932.450706 9563 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9563==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164932.450837 9563 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9563==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164932.450869 9563 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164932.450893 9563 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164932.450944 9563 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9563==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1781164932.450971 9563 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==9563==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 [4/4] SecurePaymentConfirmationControllerSelfDeleteTest.OnConfirmErrorDialog (CRASHED) 4 tests crashed: SecurePaymentConfirmationControllerSelfDeleteTest.OnAnotherWay (../../components/payments/content/secure_payment_confirmation_controller_unittest.cc:300) SecurePaymentConfirmationControllerSelfDeleteTest.OnCancel (../../components/payments/content/secure_payment_confirmation_controller_unittest.cc:291) SecurePaymentConfirmationControllerSelfDeleteTest.OnConfirmErrorDialog (../../components/payments/content/secure_payment_confirmation_controller_unittest.cc:312) SecurePaymentConfirmationControllerSelfDeleteTest.OnOptOut (../../components/payments/content/secure_payment_confirmation_controller_unittest.cc:306) Tests took 23 seconds.