Note: Google Test filter = X11WholeScreenMoveLoopTest.* [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from X11WholeScreenMoveLoopTest [ RUN ] X11WholeScreenMoveLoopTest.EndMoveLoopSurvivesSelfDeletion ================================================================= ==736==ERROR: AddressSanitizer: heap-use-after-free on address 0x71c8317e2bd0 at pc 0x57c41e83cb98 bp 0x7fff8df14a40 sp 0x7fff8df14a38 READ of size 8 at 0x71c8317e2bd0 thread T0 #0 0x57c41e83cb97 in x11::ScopedEventSelector::Reset() base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:685:14 #1 0x57c41e9d1520 in ui::X11WholeScreenMoveLoop::EndMoveLoop() ui/base/x/x11_whole_screen_move_loop.cc:241:29 #2 0x57c41ab504a5 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #3 0x57c41afd1489 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #4 0x57c41b040344 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:114:5 #5 0x57c41b03f0d5 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:341:40 #6 0x57c41b1c3a2a in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_glib.cc:778:48 #7 0x57c41b041adc in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:656:12 #8 0x57c41af974f8 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #9 0x57c41e9cfb1c in ui::X11WholeScreenMoveLoop::RunMoveLoop(bool, scoped_refptr, scoped_refptr, base::OnceCallback) ui/base/x/x11_whole_screen_move_loop.cc:200:12 #10 0x57c41ab4f394 in ui::X11WholeScreenMoveLoopTest_EndMoveLoopSurvivesSelfDeletion_Test::TestBody() ui/base/x/x11_whole_screen_move_loop_unittest.cc:87:22 #11 0x57c41795699b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #12 0x57c417958f97 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #13 0x57c41795b193 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #14 0x57c41798846a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #15 0x57c417986fb1 in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #16 0x57c41ae77bbb in base::TestSuite::Run() base/test/test_suite.cc:440:16 #17 0x57c416f9c305 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #18 0x57c41ae800d8 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #19 0x57c41ae7f96f in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #20 0x57c416f9be76 in main mojo/core/test/run_all_unittests.cc:30:10 #21 0x7518330e7249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40) 0x71c8317e2bd0 is located 64 bytes inside of 112-byte region [0x71c8317e2b90,0x71c8317e2c00) freed by thread T0 here: #0 0x57c416f9b316 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x35d3316) (BuildId: c5dabf7d47bbd4ea) #1 0x57c41e9d1513 in ui::X11WholeScreenMoveLoop::EndMoveLoop() ui/base/x/x11_whole_screen_move_loop.cc:240:14 #2 0x57c41ab504a5 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #3 0x57c41afd1489 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #4 0x57c41b040344 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:114:5 #5 0x57c41b03f0d5 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:341:40 #6 0x57c41b1c3a2a in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_glib.cc:778:48 #7 0x57c41b041adc in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:656:12 #8 0x57c41af974f8 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #9 0x57c41e9cfb1c in ui::X11WholeScreenMoveLoop::RunMoveLoop(bool, scoped_refptr, scoped_refptr, base::OnceCallback) ui/base/x/x11_whole_screen_move_loop.cc:200:12 #10 0x57c41ab4f394 in ui::X11WholeScreenMoveLoopTest_EndMoveLoopSurvivesSelfDeletion_Test::TestBody() ui/base/x/x11_whole_screen_move_loop_unittest.cc:87:22 #11 0x57c41795699b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #12 0x57c417958f97 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #13 0x57c41795b193 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #14 0x57c41798846a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #15 0x57c417986fb1 in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #16 0x57c41ae77bbb in base::TestSuite::Run() base/test/test_suite.cc:440:16 #17 0x57c416f9c305 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #18 0x57c41ae800d8 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #19 0x57c41ae7f96f in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #20 0x57c416f9be76 in main mojo/core/test/run_all_unittests.cc:30:10 #21 0x7518330e7249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40) previously allocated by thread T0 here: #0 0x57c416f9a6c1 in operator new(unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x35d26c1) (BuildId: c5dabf7d47bbd4ea) #1 0x57c41ab4f04f in ui::X11WholeScreenMoveLoopTest_EndMoveLoopSurvivesSelfDeletion_Test::TestBody() third_party/libc++/src/include/__memory/unique_ptr.h:763:26 #2 0x57c41795699b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x57c417958f97 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x57c41795b193 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x57c41798846a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x57c417986fb1 in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x57c41ae77bbb in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x57c416f9c305 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #9 0x57c41ae800d8 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #10 0x57c41ae7f96f in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #11 0x57c416f9be76 in main mojo/core/test/run_all_unittests.cc:30:10 #12 0x7518330e7249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40) SUMMARY: AddressSanitizer: heap-use-after-free base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:685:14 in x11::ScopedEventSelector::Reset() Shadow bytes around the buggy address: 0x71c8317e2900: 00 00 00 00 00 00 00 fa fa fa fa fa fa fa fa fa 0x71c8317e2980: 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa 0x71c8317e2a00: fa fa fa fa fa fa 00 00 00 00 00 00 00 00 00 00 0x71c8317e2a80: 00 00 04 fa fa fa fa fa fa fa fa fa 00 00 00 00 0x71c8317e2b00: 00 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa =>0x71c8317e2b80: fa fa fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd 0x71c8317e2c00: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x71c8317e2c80: fd fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa 0x71c8317e2d00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x71c8317e2d80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x71c8317e2e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==736==ADDITIONAL INFO ==736==Note: Please include this section with the ASan report. Task trace: #0 0x57c41ab4f132 in ui::X11WholeScreenMoveLoopTest_EndMoveLoopSurvivesSelfDeletion_Test::TestBody() ui/base/x/x11_whole_screen_move_loop_unittest.cc:82:7 ==736==END OF ADDITIONAL INFO ==736==ABORTING