IMPORTANT DEBUGGING NOTE: batches of tests are run inside their
own process. For debugging a test inside a debugger, use the
--gtest_filter=<your_test_name> flag along with
--single-process-tests.
Using sharding settings from environment. This is shard 0/1
Using 1 parallel jobs.
Note: Google Test filter = X11WindowOzoneTest.SetBoundsInPixelsUseAfterFreeViaGeometryCache
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from X11WindowOzoneTest
[ RUN      ] X11WindowOzoneTest.SetBoundsInPixelsUseAfterFreeViaGeometryCache
=================================================================
==1096==ERROR: AddressSanitizer: heap-use-after-free on address 0x79e168fe6c80 at pc 0x58a44ae36097 bp 0x7ffd5bdda1f0 sp 0x7ffd5bdda1e8
READ of size 8 at 0x79e168fe6c80 thread T0
    #0 0x58a44ae36096 in ui::X11Window::SetBoundsInPixels(gfx::Rect const&) ui/ozone/platform/x11/x11_window.cc:546:7
    #1 0x58a4498292b1 in ui::X11WindowOzoneTest_SetBoundsInPixelsUseAfterFreeViaGeometryCache_Test::TestBody() ui/ozone/platform/x11/x11_window_ozone_unittest.cc:363:8
    #2 0x58a44a099c0b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x58a44a09bdd7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x58a44a09ded3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x58a44a0cd31a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x58a44a0cbdee in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x58a44b9a8ddc in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x58a44977bf51 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x58a44b9b0bcb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x58a44b9b04eb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x58a44977b80b in main mojo/core/test/run_all_unittests.cc:30:10
    #12 0x7c816a917249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x79e168fe6c80 is located 0 bytes inside of 600-byte region [0x79e168fe6c80,0x79e168fe6ed8)
freed by thread T0 here:
    #0 0x58a44977ad56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x28f8d56) (BuildId: 4c9da14d20f48460)
    #1 0x58a44983bdd4 in testing::internal::FunctionMocker<void (ui::PlatformWindowDelegate::BoundsChange const&)>::InvokeWith(std::__Cr::tuple<ui::PlatformWindowDelegate::BoundsChange const&>&&) third_party/libc++/src/include/__functional/function.h:502:12
    #2 0x58a449831c92 in ui::MockPlatformWindowDelegate::OnBoundsChanged(ui::PlatformWindowDelegate::BoundsChange const&) third_party/googletest/src/googlemock/include/gmock/gmock-spec-builders.h:1548:12
    #3 0x58a44ae4ceb8 in ui::X11Window::OnBoundsChanged(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&) ui/ozone/platform/x11/x11_window.cc:2560:30
    #4 0x58a44ae55165 in base::internal::Invoker<base::internal::FunctorTraits<void (ui::X11Window::* const&)(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&), ui::X11Window*>, base::internal::BindState<true, true, false, void (ui::X11Window::*)(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&), base::internal::UnretainedWrapper<ui::X11Window, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void (std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&)>::Run(base::internal::BindStateBase*, std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&) base/functional/bind_internal.h:740:12
    #5 0x58a44f222f82 in base::RepeatingCallback<void (std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&)>::Run(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&) const & base/functional/callback.h:346:12
    #6 0x58a44f222cbe in x11::GeometryCache::NotifyGeometryChanged() ui/gfx/x/geometry_cache.cc:131:28
    #7 0x58a44f224410 in base::internal::Invoker<base::internal::FunctorTraits<void (x11::GeometryCache::* const&)(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&), base::WeakPtr<x11::GeometryCache> const&>, base::internal::BindState<true, true, false, void (x11::GeometryCache::*)(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&), base::WeakPtr<x11::GeometryCache>>, void (std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&)>::Run(base::internal::BindStateBase*, std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&) base/functional/bind_internal.h:740:12
    #8 0x58a44f222f82 in base::RepeatingCallback<void (std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&)>::Run(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&) const & base/functional/callback.h:346:12
    #9 0x58a44f222cbe in x11::GeometryCache::NotifyGeometryChanged() ui/gfx/x/geometry_cache.cc:131:28
    #10 0x58a44f224410 in base::internal::Invoker<base::internal::FunctorTraits<void (x11::GeometryCache::* const&)(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&), base::WeakPtr<x11::GeometryCache> const&>, base::internal::BindState<true, true, false, void (x11::GeometryCache::*)(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&), base::WeakPtr<x11::GeometryCache>>, void (std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&)>::Run(base::internal::BindStateBase*, std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&) base/functional/bind_internal.h:740:12
    #11 0x58a44f222f82 in base::RepeatingCallback<void (std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&)>::Run(std::__Cr::optional<gfx::Rect> const&, gfx::Rect const&) const & base/functional/callback.h:346:12
    #12 0x58a44f222cbe in x11::GeometryCache::NotifyGeometryChanged() ui/gfx/x/geometry_cache.cc:131:28
    #13 0x58a44f2215c3 in x11::GeometryCache::OnGetGeometryResponse(x11::Response<x11::GetGeometryReply>) ui/gfx/x/geometry_cache.cc:101:3
    #14 0x58a44f22406c in base::internal::Invoker<base::internal::FunctorTraits<void (x11::GeometryCache::*&&)(x11::Response<x11::GetGeometryReply>), base::WeakPtr<x11::GeometryCache>&&>, base::internal::BindState<true, true, false, void (x11::GeometryCache::*)(x11::Response<x11::GetGeometryReply>), base::WeakPtr<x11::GeometryCache>>, void (x11::Response<x11::GetGeometryReply>)>::RunOnce(base::internal::BindStateBase*, x11::Response<x11::GetGeometryReply>&&) base/functional/bind_internal.h:740:12
    #15 0x58a44f225295 in base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>::Run(x11::Response<x11::GetGeometryReply>) && base/functional/callback.h:155:12
    #16 0x58a44f225a29 in x11::Future<x11::GetGeometryReply>::OnResponse(base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>)::'lambda'(base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>, scoped_refptr<x11::UnsizedRefCountedMemory>, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>)::operator()(base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>, scoped_refptr<x11::UnsizedRefCountedMemory>, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>) const ui/gfx/x/future.h:142:27
    #17 0x58a44f225732 in base::internal::Invoker<base::internal::FunctorTraits<x11::Future<x11::GetGeometryReply>::OnResponse(base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>)::'lambda'(base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>, scoped_refptr<x11::UnsizedRefCountedMemory>, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>)&&, base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>&&>, base::internal::BindState<false, false, false, x11::Future<x11::GetGeometryReply>::OnResponse(base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>)::'lambda'(base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>, scoped_refptr<x11::UnsizedRefCountedMemory>, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>), base::OnceCallback<void (x11::Response<x11::GetGeometryReply>)>>, void (scoped_refptr<x11::UnsizedRefCountedMemory>, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>)>::RunOnce(base::internal::BindStateBase*, scoped_refptr<x11::UnsizedRefCountedMemory>&&, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>&&) base/functional/bind_internal.h:658:12
    #18 0x58a44f203842 in base::OnceCallback<void (scoped_refptr<x11::UnsizedRefCountedMemory>, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>)>::Run(scoped_refptr<x11::UnsizedRefCountedMemory>, std::__Cr::unique_ptr<x11::Error, std::__Cr::default_delete<x11::Error>>) && base/functional/callback.h:155:12
    #19 0x58a44f21ec8d in x11::FutureImpl::ProcessResponse() ui/gfx/x/future.cc:62:8
    #20 0x58a44f2201fe in x11::FutureBase::DispatchNow() ui/gfx/x/future.cc:27:3
    #21 0x58a44f221c8b in x11::GeometryCache::GetBoundsPx() ui/gfx/x/geometry_cache.cc:46:22
    #22 0x58a44f221d0f in x11::GeometryCache::GetBoundsPx() ui/gfx/x/geometry_cache.cc:56:33
    #23 0x58a44f221d0f in x11::GeometryCache::GetBoundsPx() ui/gfx/x/geometry_cache.cc:56:33
    #24 0x58a44ae359a5 in ui::X11Window::SetBoundsInPixels(gfx::Rect const&) ui/ozone/platform/x11/x11_window.cc:544:7
    #25 0x58a4498292b1 in ui::X11WindowOzoneTest_SetBoundsInPixelsUseAfterFreeViaGeometryCache_Test::TestBody() ui/ozone/platform/x11/x11_window_ozone_unittest.cc:363:8
    #26 0x58a44a099c0b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #27 0x58a44a09bdd7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #28 0x58a44a09ded3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #29 0x58a44a0cd31a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44

previously allocated by thread T0 here:
    #0 0x58a44977a151 in operator new(unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x28f8151) (BuildId: 4c9da14d20f48460)
    #1 0x58a449823af4 in ui::X11WindowOzoneTest::CreatePlatformWindow(ui::MockPlatformWindowDelegate*, gfx::Rect const&, unsigned int*, ui::X11ExtensionDelegate*) third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x58a449828cb0 in ui::X11WindowOzoneTest_SetBoundsInPixelsUseAfterFreeViaGeometryCache_Test::TestBody() ui/ozone/platform/x11/x11_window_ozone_unittest.cc:297:7
    #3 0x58a44a099c0b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #4 0x58a44a09bdd7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #5 0x58a44a09ded3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #6 0x58a44a0cd31a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #7 0x58a44a0cbdee in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #8 0x58a44b9a8ddc in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #9 0x58a44977bf51 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #10 0x58a44b9b0bcb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #11 0x58a44b9b04eb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #12 0x58a44977b80b in main mojo/core/test/run_all_unittests.cc:30:10
    #13 0x7c816a917249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

SUMMARY: AddressSanitizer: heap-use-after-free ui/ozone/platform/x11/x11_window.cc:546:7 in ui::X11Window::SetBoundsInPixels(gfx::Rect const&)
Shadow bytes around the buggy address:
  0x79e168fe6a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x79e168fe6a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x79e168fe6b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x79e168fe6b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa
  0x79e168fe6c00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x79e168fe6c80:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x79e168fe6d00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x79e168fe6d80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x79e168fe6e00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x79e168fe6e80: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa
  0x79e168fe6f00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==1096==ADDITIONAL INFO

==1096==Note: Please include this section with the ASan report.
Task trace:


==1096==END OF ADDITIONAL INFO

==1096==ABORTING
[1/1] X11WindowOzoneTest.SetBoundsInPixelsUseAfterFreeViaGeometryCache (CRASHED)
1 test crashed:
    X11WindowOzoneTest.SetBoundsInPixelsUseAfterFreeViaGeometryCache (../../ui/ozone/platform/x11/x11_window_ozone_unittest.cc:292)
Tests took 0 seconds.