Note: Google Test filter = DiskCacheBackendTest.SimpleMassDoomSyncCallbackDeletesBackend [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from DiskCacheBackendTest [ RUN ] DiskCacheBackendTest.SimpleMassDoomSyncCallbackDeletesBackend ================================================================= ==1867==ERROR: AddressSanitizer: heap-use-after-free on address 0x7c2498799d98 at pc 0x7f14a21aab73 bp 0x7ffc55ade710 sp 0x7ffc55ade708 READ of size 8 at 0x7c2498799d98 thread T0 #0 0x7f14a21aab72 in disk_cache::SimpleBackendImpl::DoomEntriesComplete(std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::OnceCallback, int) base/memory/scoped_refptr.h:293:12 #1 0x7f14a21b522b in void base::internal::DecayedFunctorTraits>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr&&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>&&, base::RepeatingCallback&&>::Invoke>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr const&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::RepeatingCallback, int>(void (disk_cache::SimpleBackendImpl::*)(std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr const&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>&&, base::RepeatingCallback&&, int&&) base/functional/bind_internal.h:740:12 #2 0x7f14a21b4f5c in base::internal::Invoker>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr&&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>&&, base::RepeatingCallback&&>, base::internal::BindState>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::RepeatingCallback>, void (int)>::RunOnce(base::internal::BindStateBase*, int) base/functional/bind_internal.h:956:5 #3 0x7f14a21be15e in void base::internal::ReplyAdapter, int>(base::OnceCallback, std::__Cr::unique_ptr, std::__Cr::default_delete>>*) base/functional/callback.h:155:12 #4 0x7f14a21be86f in base::internal::Invoker, std::__Cr::unique_ptr, std::__Cr::default_delete>>*), base::OnceCallback&&, std::__Cr::unique_ptr, std::__Cr::default_delete>>*>, base::internal::BindState, std::__Cr::unique_ptr, std::__Cr::default_delete>>*), base::OnceCallback, base::internal::OwnedWrapper, std::__Cr::default_delete>>, std::__Cr::default_delete, std::__Cr::default_delete>>>>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #5 0x7f14a0dfee8f in base::internal::PostTaskAndReplyRelay::RunReply(base::internal::PostTaskAndReplyRelay) base/functional/callback.h:155:12 #6 0x7f14a0dfec28 in base::internal::Invoker, base::internal::BindState, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #7 0x7f14a0d6e11d in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #8 0x7f14a0de6bbe in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #9 0x7f14a0de5ae8 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:345:40 #10 0x7f14a0f941f0 in base::MessagePumpEpoll::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_epoll.cc:225:55 #11 0x7f14a0de82ab in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:660:12 #12 0x7f14a0cd9dd7 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #13 0x7f14a0cdbf06 in base::RunLoop::RunUntilIdle() base/run_loop.cc:144:3 #14 0x55c8881543e4 in base::test::TaskEnvironment::RunUntilIdle() base/test/task_environment.cc:773:51 #15 0x55c87ed95846 in DiskCacheBackendTest_SimpleMassDoomSyncCallbackDeletesBackend_Test::TestBody() net/test/test_with_task_environment.h:77:43 #16 0x55c88799b6c9 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #17 0x55c88799e243 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #18 0x55c8879a0146 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #19 0x55c8879caf86 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #20 0x55c8879c9c8a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #21 0x55c888164d2e in base::TestSuite::Run() base/test/test_suite.cc:440:16 #22 0x55c881c93866 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #23 0x55c88817d0ff in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #24 0x55c88817ca83 in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #25 0x55c881c93579 in main net/test/run_all_unittests.cc:53:10 #26 0x7f1498a45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40) 0x7c2498799d98 is located 152 bytes inside of 200-byte region [0x7c2498799d00,0x7c2498799dc8) freed by thread T0 here: #0 0x55c87db1cbb6 in operator delete(void*, unsigned long) (/home/awillia_google_com/chromium/src/out/asan/net_unittests+0x3bfbbb6) (BuildId: e9ad42fe82504e8d) #1 0x55c87edc6fc6 in base::internal::BindLambdaForTestingHelper::Run(DiskCacheBackendTest_SimpleMassDoomSyncCallbackDeletesBackend_Test::TestBody()::$_0 const&, disk_cache::EntryResult) third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x55c87edc71ea in base::internal::Invoker, base::internal::BindState, void (disk_cache::EntryResult)>::Run(base::internal::BindStateBase*, disk_cache::EntryResult&&) base/functional/bind_internal.h:673:12 #3 0x7f14a21b6a85 in base::internal::OnceCallbackHolder::Run(disk_cache::EntryResult) base/functional/callback.h:155:12 #4 0x7f14a21b6d32 in base::internal::Invoker::* const&)(disk_cache::EntryResult), std::__Cr::unique_ptr, std::__Cr::default_delete>> const&>, base::internal::BindState::*)(disk_cache::EntryResult), std::__Cr::unique_ptr, std::__Cr::default_delete>>>, void (disk_cache::EntryResult)>::Run(base::internal::BindStateBase*, disk_cache::EntryResult&&) base/functional/bind_internal.h:740:12 #5 0x7f14a21ac879 in disk_cache::(anonymous namespace)::RunEntryResultOperationAndCallback(base::WeakPtr, base::OnceCallback)>, base::OnceCallback) base/functional/callback.h:155:12 #6 0x7f14a21b6038 in base::internal::Invoker, base::OnceCallback)>, base::OnceCallback), base::WeakPtr&&, base::OnceCallback)>&&, base::OnceCallback&&>, base::internal::BindState, base::OnceCallback)>, base::OnceCallback), base::WeakPtr, base::OnceCallback)>, base::OnceCallback>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #7 0x7f14a21a23af in disk_cache::SimplePostOperationWaiterTable::OnOperationComplete(unsigned long) base/functional/callback.h:155:12 #8 0x7f14a21aa9dd in disk_cache::SimpleBackendImpl::DoomEntriesComplete(std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::OnceCallback, int) net/disk_cache/simple/simple_backend_impl.cc:917:25 #9 0x7f14a21b522b in void base::internal::DecayedFunctorTraits>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr&&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>&&, base::RepeatingCallback&&>::Invoke>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr const&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::RepeatingCallback, int>(void (disk_cache::SimpleBackendImpl::*)(std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr const&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>&&, base::RepeatingCallback&&, int&&) base/functional/bind_internal.h:740:12 #10 0x7f14a21b4f5c in base::internal::Invoker>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr&&, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>&&, base::RepeatingCallback&&>, base::internal::BindState>, std::__Cr::default_delete>>>, base::OnceCallback, int), base::WeakPtr, std::__Cr::unique_ptr>, std::__Cr::default_delete>>>, base::RepeatingCallback>, void (int)>::RunOnce(base::internal::BindStateBase*, int) base/functional/bind_internal.h:956:5 #11 0x7f14a21be15e in void base::internal::ReplyAdapter, int>(base::OnceCallback, std::__Cr::unique_ptr, std::__Cr::default_delete>>*) base/functional/callback.h:155:12 #12 0x7f14a21be86f in base::internal::Invoker, std::__Cr::unique_ptr, std::__Cr::default_delete>>*), base::OnceCallback&&, std::__Cr::unique_ptr, std::__Cr::default_delete>>*>, base::internal::BindState, std::__Cr::unique_ptr, std::__Cr::default_delete>>*), base::OnceCallback, base::internal::OwnedWrapper, std::__Cr::default_delete>>, std::__Cr::default_delete, std::__Cr::default_delete>>>>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #13 0x7f14a0dfee8f in base::internal::PostTaskAndReplyRelay::RunReply(base::internal::PostTaskAndReplyRelay) base/functional/callback.h:155:12 #14 0x7f14a0dfec28 in base::internal::Invoker, base::internal::BindState, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:673:12 #15 0x7f14a0d6e11d in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #16 0x7f14a0de6bbe in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #17 0x7f14a0de5ae8 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:345:40 #18 0x7f14a0f941f0 in base::MessagePumpEpoll::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_epoll.cc:225:55 #19 0x7f14a0de82ab in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:660:12 #20 0x7f14a0cd9dd7 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #21 0x7f14a0cdbf06 in base::RunLoop::RunUntilIdle() base/run_loop.cc:144:3 #22 0x55c8881543e4 in base::test::TaskEnvironment::RunUntilIdle() base/test/task_environment.cc:773:51 #23 0x55c87ed95846 in DiskCacheBackendTest_SimpleMassDoomSyncCallbackDeletesBackend_Test::TestBody() net/test/test_with_task_environment.h:77:43 #24 0x55c88799b6c9 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #25 0x55c88799e243 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #26 0x55c8879a0146 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #27 0x55c8879caf86 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #28 0x55c8879c9c8a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #29 0x55c888164d2e in base::TestSuite::Run() base/test/test_suite.cc:440:16 previously allocated by thread T0 here: #0 0x55c87db1bf61 in operator new(unsigned long) (/home/awillia_google_com/chromium/src/out/asan/net_unittests+0x3bfaf61) (BuildId: e9ad42fe82504e8d) #1 0x55c887c5a0c9 in DiskCacheTestWithCache::CreateBackend(unsigned int) third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x55c887c57d46 in DiskCacheTestWithCache::InitDiskCache() net/disk_cache/disk_cache_test_base.cc:448:3 #3 0x55c887c5729d in DiskCacheTestWithCache::InitCache() net/disk_cache/disk_cache_test_base.cc:120:5 #4 0x55c87ed9499a in DiskCacheBackendTest_SimpleMassDoomSyncCallbackDeletesBackend_Test::TestBody() net/disk_cache/backend_unittest.cc:5289:3 #5 0x55c88799b6c9 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x55c88799e243 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x55c8879a0146 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x55c8879caf86 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x55c8879c9c8a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x55c888164d2e in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x55c881c93866 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #12 0x55c88817d0ff in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #13 0x55c88817ca83 in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #14 0x55c881c93579 in main net/test/run_all_unittests.cc:53:10 #15 0x7f1498a45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40) Shadow bytes around the buggy address: 0x7c2498799b00: 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa 0x7c2498799b80: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x7c2498799c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7c2498799c80: 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7c2498799d00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd =>0x7c2498799d80: fd fd fd[fd]fd fd fd fd fd fa fa fa fa fa fa fa 0x7c2498799e00: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x7c2498799e80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7c2498799f00: fd fd fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7c2498799f80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7c249879a000: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1783627356.982660 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1867==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1783627356.982825 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1867==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1783627356.982868 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1783627356.982942 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: #0 0x7f14a21a8d17 in disk_cache::SimpleBackendImpl::DoomEntries(std::__Cr::vector>*, base::OnceCallback) net/disk_cache/simple/simple_backend_impl.cc:356:7 === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1783627356.982979 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: #1 0x7f14a21a8d17 in disk_cache::SimpleBackendImpl::DoomEntries(std::__Cr::vector>*, base::OnceCallback) net/disk_cache/simple/simple_backend_impl.cc:356:7 === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1783627356.982994 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1783627356.983017 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1867==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1783627356.983039 1867 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==1867==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31