[.] Sanitizer coverage enabled. Counter map size: 11455121, Cmp map size: 262144 Note: Google Test filter = PageDiscardingHelperUAFTest.TabHandleUAFWhenReplacementClosedDuringDiscard [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from PageDiscardingHelperUAFTest, where TypeParam = [ RUN ] PageDiscardingHelperUAFTest.TabHandleUAFWhenReplacementClosedDuringDiscard [.] Sanitizer coverage enabled. Counter map size: 11455121, Cmp map size: 262144 [.] Sanitizer coverage enabled. Counter map size: 11455121, Cmp map size: 262144 [1465:1480:0515/154326.001273:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1465:1480:0515/154326.001525:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1465:1480:0515/154326.001647:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1465:1480:0515/154326.001716:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1465:1480:0515/154326.001772:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1465:1480:0515/154326.099872:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1499:1499:0515/154326.104572:WARNING:media/gpu/vaapi/vaapi_wrapper.cc:1587] drmGetDevices2() has not found any devices [1499:1499:0515/154326.114979:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. (browser_tests:1465): dbind-WARNING **: 15:43:26.155: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory [.] Sanitizer coverage enabled. Counter map size: 11455121, Cmp map size: 262144 [1465:1465:0515/154326.316656:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1465:0515/154326.316767:WARNING:device/bluetooth/dbus/bluez_dbus_manager.cc:209] Floss manager service not available, cannot set Floss enable/disable. [1465:1480:0515/154326.316821:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1465:1465:0515/154326.316835:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1480:0515/154326.316943:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1465:1465:0515/154326.326735:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1480:0515/154326.355613:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1465:1480:0515/154326.355688:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1465:1465:0515/154326.355775:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1465:0515/154326.355868:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1480:0515/154326.356038:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1465:1465:0515/154326.375520:WARNING:dbus/property.cc:94] Failed to connect to PropertiesChangedsignal. [1465:1465:0515/154326.375826:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: [1465:1465:0515/154326.375842:WARNING:dbus/property.cc:174] GetAll request failed for: org.freedesktop.UPower.Device [1465:1465:0515/154326.375880:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1480:0515/154326.376000:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1465:1465:0515/154326.412098:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1480:0515/154326.412234:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/104146510/bus: No such file or directory [1465:1465:0515/154326.441854:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1465:1465:0515/154326.441903:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used. [1465:1465:0515/154326.771281:WARNING:chrome/browser/performance_manager/policies/page_discarding_helper.cc:152] Discarding multiple pages with target (kb): 0, discard_protected_tabs: 0 ================================================================= ==1465==ERROR: AddressSanitizer: heap-use-after-free on address 0x7a52f882f2f0 at pc 0x577d413b0e59 bp 0x7ffd2069c710 sp 0x7ffd2069c708 READ of size 8 at 0x7a52f882f2f0 thread T0 (browser_tests) #0 0x577d413b0e58 in performance_manager::policies::PageDiscardingHelper::DiscardMultiplePagesImpl(std::__Cr::optional, bool, mojom::LifecycleUnitDiscardReason, base::TimeDelta) base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:1018:47 #1 0x577d413ae14f in performance_manager::policies::PageDiscardingHelper::DiscardAPage(mojom::LifecycleUnitDiscardReason, base::TimeDelta) chrome/browser/performance_manager/policies/page_discarding_helper.cc:120:10 #2 0x577d20bc6395 in performance_manager::policies::(anonymous namespace)::PageDiscardingHelperUAFTest_TabHandleUAFWhenReplacementClosedDuringDiscard_Test::RunTestOnMainThread() chrome/browser/performance_manager/policies/page_discarding_helper_browsertest.cc:818:11 #3 0x577d49157b5f in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #4 0x577d4915d6e1 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #5 0x577d3a54325a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #6 0x577d3a54bafc in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 #7 0x577d3a53a38c in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28 #8 0x577d41c529e1 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:697:10 #9 0x577d41c56b28 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10 #10 0x577d41c55fc0 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1162:12 #11 0x577d41c4f6f8 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36 #12 0x577d41c4fcfc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10 #13 0x577d491559cd in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34 #14 0x577d46b825d1 in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:560:20 #15 0x577d3f810211 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #16 0x577d3f8133f7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #17 0x577d3f815473 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #18 0x577d3f8445f4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #19 0x577d3f84316a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #20 0x577d47093510 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #21 0x577d634f0be0 in ChromeTestSuiteRunner::RunTestSuite(int, char**) chrome/test/base/chrome_test_launcher.cc:101:22 #22 0x577d4935adc5 in content::LaunchTestsInternal(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:423:31 #23 0x577d4935b7c1 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) content/public/test/test_launcher.cc:518:10 #24 0x577d634f15f1 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) chrome/test/base/chrome_test_launcher.cc:360:10 #25 0x577d469a42bb in main chrome/test/base/browser_tests_main.cc:60:10 #26 0x7e32fa22b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7a52f882f2f0 is located 0 bytes inside of 8-byte region [0x7a52f882f2f0,0x7a52f882f2f8) freed by thread T0 (browser_tests) here: #0 0x577d1f355012 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x189fa012) (BuildId: 34db5b2d93912253) #1 0x577d489f096b in performance_manager::TabPageDecorator::Data::~Data() gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x577d48a88cf2 in std::__Cr::__tree>>, std::__Cr::__map_value_compare>>, std::__Cr::less>, std::__Cr::allocator>>>>::__tree_deleter::operator()(std::__Cr::__tree_node>>, void*>*) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #3 0x577d48a87eb2 in performance_manager::NodeAttachedDataStorage::~NodeAttachedDataStorage() gen/third_party/libc++/src/include/__tree:1430:64 #4 0x577d48aa38d3 in void std::__Cr::__memberwise_forward_assign, performance_manager::internal::SparseStorage, performance_manager::internal::SparseStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage>, std::__Cr::tuple, performance_manager::internal::SparseStorage, performance_manager::internal::SparseStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage>, performance_manager::internal::SparseStorage, performance_manager::internal::SparseStorage, performance_manager::internal::SparseStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, 0ul, 1ul, 2ul, 3ul, 4ul, 5ul, 6ul>(std::__Cr::tuple, performance_manager::internal::SparseStorage, performance_manager::internal::SparseStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage>&, std::__Cr::tuple, performance_manager::internal::SparseStorage, performance_manager::internal::SparseStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage>&&, std::__Cr::__type_list, performance_manager::internal::SparseStorage, performance_manager::internal::SparseStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage, performance_manager::internal::OptionalStorage>, std::__Cr::__integer_sequence) gen/third_party/libc++/src/include/optional:404:15 #5 0x577d48a9b655 in non-virtual thunk to performance_manager::PageNodeImpl::CleanUpNodeState() gen/third_party/libc++/src/include/tuple:884:5 #6 0x577d48a68aa8 in performance_manager::GraphImpl::RemoveNode(performance_manager::NodeBase*) components/performance_manager/graph/graph_impl.cc:422:9 #7 0x577d48ada7e9 in performance_manager::PerformanceManagerImpl::BatchDeleteNodes(std::__Cr::vector>, std::__Cr::allocator>>>) components/performance_manager/performance_manager_impl.cc:181:16 #8 0x577d48af8d64 in performance_manager::PerformanceManagerTabHelper::TearDownAndSelfDelete() components/performance_manager/performance_manager_tab_helper.cc:171:3 #9 0x577d3c353757 in void content::WebContentsImpl::WebContentsObserverList::NotifyObservers(void (content::WebContentsObserver::*)()) content/browser/web_contents/web_contents_impl.h:1846:9 #10 0x577d3c34f74a in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1480:14 #11 0x577d3c354313 in content::WebContentsImpl::~WebContentsImpl() content/browser/web_contents/web_contents_impl.cc:1366:37 #12 0x577d4241079c in tabs::TabModel::~TabModel() gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #13 0x577d42429a14 in TabStripModel::SendDetachWebContentsNotifications(TabStripModel::DetachNotifications*) gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #14 0x577d424433d3 in TabStripModel::CloseTabs(base::span, unsigned int) chrome/browser/ui/tabs/tab_strip_model.cc:3685:5 #15 0x577d42444f00 in TabStripModel::CloseWebContentsAt(int, unsigned int) chrome/browser/ui/tabs/tab_strip_model.cc:1325:3 #16 0x577d4244036b in TabStripModel::UpdateWebContentsStateAt(int, TabChangeType) chrome/browser/ui/tabs/tab_strip_model.cc:1255:14 #17 0x577d434c2806 in resource_coordinator::TabLifecycleUnitSource::TabLifecycleUnit::FinishDiscard(mojom::LifecycleUnitDiscardReason, unsigned long) chrome/browser/resource_coordinator/tab_lifecycle_unit.cc:318:21 #18 0x577d434c3379 in resource_coordinator::TabLifecycleUnitSource::TabLifecycleUnit::Discard(mojom::LifecycleUnitDiscardReason, unsigned long) chrome/browser/resource_coordinator/tab_lifecycle_unit.cc:400:5 #19 0x577d4139af32 in performance_manager::mechanism::PageDiscarder::DiscardPageNode(performance_manager::PageNode const*, mojom::LifecycleUnitDiscardReason) chrome/browser/performance_manager/mechanisms/page_discarder.cc:79:24 #20 0x577d413b05a2 in performance_manager::policies::PageDiscardingHelper::DiscardMultiplePagesImpl(std::__Cr::optional, bool, mojom::LifecycleUnitDiscardReason, base::TimeDelta) chrome/browser/performance_manager/policies/page_discarding_helper.cc:246:26 #21 0x577d413ae14f in performance_manager::policies::PageDiscardingHelper::DiscardAPage(mojom::LifecycleUnitDiscardReason, base::TimeDelta) chrome/browser/performance_manager/policies/page_discarding_helper.cc:120:10 #22 0x577d20bc6395 in performance_manager::policies::(anonymous namespace)::PageDiscardingHelperUAFTest_TabHandleUAFWhenReplacementClosedDuringDiscard_Test::RunTestOnMainThread() chrome/browser/performance_manager/policies/page_discarding_helper_browsertest.cc:818:11 #23 0x577d49157b5f in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #24 0x577d4915d6e1 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #25 0x577d3a54325a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #26 0x577d3a54bafc in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 #27 0x577d3a53a38c in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28 #28 0x577d41c529e1 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:697:10 #29 0x577d41c56b28 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10 previously allocated by thread T0 (browser_tests) here: #0 0x577d1f35440d in operator new(unsigned long) (/chromium/chromium/src/out/asan/browser_tests+0x189f940d) (BuildId: 34db5b2d93912253) #1 0x577d489ed5ee in performance_manager::TabPageDecorator::MaybeTabCreated(performance_manager::PageNode const*) components/performance_manager/decorators/tab_page_decorator.cc:22:38 #2 0x577d489efd8b in performance_manager::TabPageDecorator::OnTypeChanged(performance_manager::PageNode const*, performance_manager::PageType) components/performance_manager/decorators/tab_page_decorator.cc:156:3 #3 0x577d48a8eaec in bool performance_manager::ObservedPropertyImpl::NotifiesOnlyOnChangesWithPreviousValue>::SetAndMaybeNotify(performance_manager::PageNodeImpl*, performance_manager::PageType&) components/performance_manager/graph/properties.h:247:9 #4 0x577d48a8e536 in performance_manager::PageNodeImpl::SetType(performance_manager::PageType) components/performance_manager/graph/page_node_impl.cc:345:9 #5 0x577d60b38780 in TabHelpers::AttachTabHelpers(content::WebContents*) chrome/browser/ui/tab_helpers.cc:540:18 #6 0x577d4240fe35 in tabs::TabModel::TabModel(std::__Cr::unique_ptr>, TabStripModel*) chrome/browser/ui/tabs/tab_model.cc:58:3 #7 0x577d435afd4a in Navigate(NavigateParams*) gen/third_party/libc++/src/include/__memory/unique_ptr.h:756:30 #8 0x577d60c33f4b in Browser::OpenURLFromTab(content::WebContents*, content::OpenURLParams const&, base::OnceCallback) chrome/browser/ui/browser.cc:1955:7 #9 0x577d60c2cdb9 in Browser::OpenURL(content::OpenURLParams const&, base::OnceCallback) chrome/browser/ui/browser.cc:1468:10 #10 0x577d46b8f98a in ui_test_utils::NavigateToURLWithDispositionBlockUntilNavigationsComplete(BrowserWindowInterface*, GURL const&, int, WindowOpenDisposition, int) chrome/test/base/ui_test_utils.cc:345:46 #11 0x577d20bc5ebc in performance_manager::policies::(anonymous namespace)::PageDiscardingHelperUAFTest_TabHandleUAFWhenReplacementClosedDuringDiscard_Test::RunTestOnMainThread() chrome/browser/performance_manager/policies/page_discarding_helper_browsertest.cc:794:3 #12 0x577d49157b5f in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:1018:9 #13 0x577d4915d6e1 in base::internal::Invoker, base::internal::BindState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #14 0x577d3a54325a in content::BrowserMainLoop::RunMainMessageLoop() base/functional/callback.h:155:12 #15 0x577d3a54bafc in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:148:15 #16 0x577d3a53a38c in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:32:28 #17 0x577d41c529e1 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:697:10 #18 0x577d41c56b28 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1331:10 #19 0x577d41c55fc0 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1162:12 #20 0x577d41c4f6f8 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:356:36 #21 0x577d41c4fcfc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:369:10 #22 0x577d491559cd in content::BrowserTestBase::SetUp() content/public/test/browser_test_base.cc:615:34 #23 0x577d46b825d1 in InProcessBrowserTest::SetUp() chrome/test/base/in_process_browser_test.cc:560:20 #24 0x577d3f810211 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #25 0x577d3f8133f7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #26 0x577d3f815473 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #27 0x577d3f8445f4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #28 0x577d3f84316a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #29 0x577d47093510 in base::TestSuite::Run() base/test/test_suite.cc:440:16 Shadow bytes around the buggy address: 0x7a52f882f000: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa 0x7a52f882f080: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa 0x7a52f882f100: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa 0x7a52f882f180: f7 fa fd fa f7 fa fd fa f7 fa 00 fa f7 fa 00 fa 0x7a52f882f200: f7 fa fd fd f7 fa fd fa f7 fa fd fa f7 fa fd fa =>0x7a52f882f280: f7 fa fd fa f7 fa fd fd f7 fa fd fd f7 fa[fd]fa 0x7a52f882f300: f7 fa 00 fa f7 fa fd fa f7 fa fd fa f7 fa fd fa 0x7a52f882f380: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fd 0x7a52f882f400: f7 fa fd fd f7 fa fd fa f7 fa fd fa f7 fa fd fa 0x7a52f882f480: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa 0x7a52f882f500: f7 fa fd fa f7 fa fd fd f7 fa fd fa f7 fa fd fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb