[.] Sanitizer coverage enabled. Counter map size: 12329379, Cmp map size: 262144 Note: Google Test filter = PasswordAutofillManagerTest.DidAcceptSuggestion_ManagerFreedDuringSyncReauth_UAF [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from PasswordAutofillManagerTest [ RUN ] PasswordAutofillManagerTest.DidAcceptSuggestion_ManagerFreedDuringSyncReauth_UAF GMOCK WARNING: Uninteresting mock function call - taking default action specified at: ../../components/password_manager/core/browser/password_autofill_manager_unittest.cc:371: Function call: IsActorTaskActive() Returns: false NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - taking default action specified at: ../../components/password_manager/core/browser/password_autofill_manager_unittest.cc:363: Function call: GetWebAuthnCredentialsDelegateForDriver(0x6f30b69c4d40) Returns: 0x7090b762b980 NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - taking default action specified at: ../../components/password_manager/core/browser/password_autofill_manager_unittest.cc:363: Function call: GetWebAuthnCredentialsDelegateForDriver(0x6f30b69c4d40) Returns: 0x7090b762b980 NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - taking default action specified at: ../../components/password_manager/core/browser/password_autofill_manager_unittest.cc:363: Function call: GetWebAuthnCredentialsDelegateForDriver(0x6f30b69c4d40) Returns: 0x7090b762b980 NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - returning default value. Function call: GetPasskeys() Returns: 16-byte object <00-00 00-00 00-00 00-00 00-00 00-00 00-00 00-00> NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - returning default value. Function call: IsSecurityKeyOrHybridFlowAvailable() Returns: false NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - taking default action specified at: ../../components/password_manager/core/browser/password_autofill_manager_unittest.cc:363: Function call: GetWebAuthnCredentialsDelegateForDriver(0x6f30b69c4d40) Returns: 0x7090b762b980 NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - taking default action specified at: ../../components/password_manager/core/browser/password_autofill_manager_unittest.cc:365: Function call: HasPendingPasskeySelection() Returns: false NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. GMOCK WARNING: Uninteresting mock function call - returning directly. Function call: SetSuggestionAvailability(0, kAutofillAvailable) NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/main/docs/gmock_cook_book.md#knowing-when-to-expect-useoncall for details. ================================================================= ==8251==ERROR: AddressSanitizer: heap-use-after-free on address 0x7070b762b888 at pc 0x63b57ddd53e7 bp 0x7ffda1afde10 sp 0x7ffda1afde08 READ of size 8 at 0x7070b762b888 thread T0 #0 0x63b57ddd53e6 in password_manager::PasswordAutofillManager::DidAcceptSuggestion(autofill::Suggestion const&, autofill::AutofillSuggestionDelegate::SuggestionMetadata const&) base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr.h:1012:48 #1 0x63b54c1f9e04 in password_manager::(anonymous namespace)::PasswordAutofillManagerTest_DidAcceptSuggestion_ManagerFreedDuringSyncReauth_UAF_Test::TestBody() components/password_manager/core/browser/password_autofill_manager_unittest.cc:1282:13 #2 0x63b564351b8b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x63b564354cf7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x63b564356df3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x63b5643869ba in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x63b56438548e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x63b579fb85dc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x63b5872c8455 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #9 0x63b56c3d2bc0 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x63b579fd255b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x63b579fd1e7b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x7330b9445249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7070b762b888 is located 72 bytes inside of 408-byte region [0x7070b762b840,0x7070b762b9d8) freed by thread T0 here: #0 0x63b544433c56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x178aec56) (BuildId: 8e3de785707a0232) #1 0x63b54c1fa9a8 in base::internal::Invoker>*&&>, base::internal::BindState>, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, void ()>::RunOnce(base::internal::BindStateBase*) third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x63b54c1fa6ac in password_manager::(anonymous namespace)::NestedLoopDestroysOwnerAuthenticator::AuthenticateWithMessage(std::__Cr::basic_string, std::__Cr::allocator> const&, base::OnceCallback) base/functional/callback.h:155:12 #3 0x63b57ddd64f0 in password_manager::PasswordAutofillManager::OnPasswordCredentialSuggestionAccepted(base::OnceCallback) components/password_manager/core/browser/password_autofill_manager.cc:892:19 #4 0x63b57ddd503b in password_manager::PasswordAutofillManager::DidAcceptSuggestion(autofill::Suggestion const&, autofill::AutofillSuggestionDelegate::SuggestionMetadata const&) components/password_manager/core/browser/password_autofill_manager.cc:427:9 #5 0x63b54c1f9e04 in password_manager::(anonymous namespace)::PasswordAutofillManagerTest_DidAcceptSuggestion_ManagerFreedDuringSyncReauth_UAF_Test::TestBody() components/password_manager/core/browser/password_autofill_manager_unittest.cc:1282:13 #6 0x63b564351b8b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x63b564354cf7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #8 0x63b564356df3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #9 0x63b5643869ba in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #10 0x63b56438548e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #11 0x63b579fb85dc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #12 0x63b5872c8455 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #13 0x63b56c3d2bc0 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #14 0x63b579fd255b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #15 0x63b579fd1e7b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #16 0x7330b9445249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x63b544433051 in operator new(unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x178ae051) (BuildId: 8e3de785707a0232) #1 0x63b54c1464f9 in password_manager::(anonymous namespace)::PasswordAutofillManagerTest::InitializePasswordAutofillManager(password_manager::(anonymous namespace)::TestPasswordManagerClient*, password_manager::(anonymous namespace)::MockAutofillClient*) third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x63b54c1f9591 in password_manager::(anonymous namespace)::PasswordAutofillManagerTest_DidAcceptSuggestion_ManagerFreedDuringSyncReauth_UAF_Test::TestBody() components/password_manager/core/browser/password_autofill_manager_unittest.cc:1258:3 #3 0x63b564351b8b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x63b564354cf7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x63b564356df3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x63b5643869ba in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x63b56438548e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x63b579fb85dc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x63b5872c8455 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #10 0x63b56c3d2bc0 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x63b579fd255b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x63b579fd1e7b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x7330b9445249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x7070b762b600: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x7070b762b680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7070b762b700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7070b762b780: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa 0x7070b762b800: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd =>0x7070b762b880: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7070b762b900: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7070b762b980: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa 0x7070b762ba00: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x7070b762ba80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7070b762bb00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1779871147.319583 8251 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==8251==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779871147.319726 8251 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==8251==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779871147.319766 8251 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779871147.319798 8251 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779871147.319830 8251 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==8251==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779871147.319862 8251 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==8251==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31