Note: Google Test filter = X11WindowOzoneTest.DispatchUiEventSurvivesSynchronousCloseOnActivation [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from X11WindowOzoneTest [ RUN ] X11WindowOzoneTest.DispatchUiEventSurvivesSynchronousCloseOnActivation ================================================================= ==2121==ERROR: AddressSanitizer: heap-use-after-free on address 0x6dcf667e3e12 at pc 0x58191763de15 bp 0x7ffd38476370 sp 0x7ffd38476368 READ of size 1 at 0x6dcf667e3e12 thread T0 #0 0x58191763de14 in ui::X11Window::UpdateWMUserTime(ui::Event*) ui/ozone/platform/x11/x11_window.cc:1987:11 #1 0x58191763d61e in ui::X11Window::DispatchUiEvent(ui::Event*, x11::Event const&) ui/ozone/platform/x11/x11_window.cc:1424:3 #2 0x58191763cc23 in ui::X11Window::DispatchEvent(ui::Event* const&) ui/ozone/platform/x11/x11_window.cc:1376:3 #3 0x58191763d9e2 in non-virtual thunk to ui::X11Window::DispatchEvent(ui::Event* const&) ui/ozone/platform/x11/x11_window.cc #4 0x58191b979917 in ui::PlatformEventSource::DispatchEvent(ui::Event*) ui/events/platform/platform_event_source.cc:93:29 #5 0x58191bb97304 in ui::X11EventSource::OnEvent(x11::Event const&) ui/events/platform/x11/x11_event_source.cc:300:5 #6 0x58191b996c9a in void base::ObserverList>::NotifyAllowReentrancy(T, x11::Event const&) gen/third_party/libc++/src/include/__type_traits/invoke.h:90:27 #7 0x58191b99524b in x11::Connection::DispatchEvent(x11::Event const&) ui/gfx/x/connection.cc:588:20 #8 0x58191604f9ee in ui::X11WindowOzoneTest_DispatchUiEventSurvivesSynchronousCloseOnActivation_Test::TestBody() ui/ozone/platform/x11/x11_window_ozone_unittest.cc:345:27 #9 0x581916896c8b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x581916898da7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #11 0x58191689ae23 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #12 0x5819168c9874 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #13 0x5819168c83ea in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #14 0x581918190c40 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #15 0x581915fa55f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #16 0x5819181985bb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #17 0x581918197edb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #18 0x581915fa4e94 in main mojo/core/test/run_all_unittests.cc:30:10 #19 0x706f67e89249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x6dcf667e3e12 is located 402 bytes inside of 600-byte region [0x6dcf667e3c80,0x6dcf667e3ed8) freed by thread T0 here: #0 0x581915fa4422 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x2866422) (BuildId: ab148279f7568d57) #1 0x581916094948 in testing::internal::FunctionMocker::InvokeWith(std::__Cr::tuple&&) gen/third_party/libc++/src/include/__functional/function.h:502:12 #2 0x581916058fb3 in ui::MockPlatformWindowDelegate::OnActivationChanged(bool) third_party/googletest/src/googlemock/include/gmock/gmock-spec-builders.h:1548:12 #3 0x58191763b191 in ui::X11Window::HandleEvent(x11::Event const&) ui/ozone/platform/x11/x11_window.cc:2168:3 #4 0x58191763cee6 in ui::X11Window::DispatchUiEvent(ui::Event*, x11::Event const&) ui/ozone/platform/x11/x11_window.cc:1385:3 #5 0x58191763cc23 in ui::X11Window::DispatchEvent(ui::Event* const&) ui/ozone/platform/x11/x11_window.cc:1376:3 #6 0x58191763d9e2 in non-virtual thunk to ui::X11Window::DispatchEvent(ui::Event* const&) ui/ozone/platform/x11/x11_window.cc #7 0x58191b979917 in ui::PlatformEventSource::DispatchEvent(ui::Event*) ui/events/platform/platform_event_source.cc:93:29 #8 0x58191bb97304 in ui::X11EventSource::OnEvent(x11::Event const&) ui/events/platform/x11/x11_event_source.cc:300:5 #9 0x58191b996c9a in void base::ObserverList>::NotifyAllowReentrancy(T, x11::Event const&) gen/third_party/libc++/src/include/__type_traits/invoke.h:90:27 #10 0x58191b99524b in x11::Connection::DispatchEvent(x11::Event const&) ui/gfx/x/connection.cc:588:20 #11 0x58191604f9ee in ui::X11WindowOzoneTest_DispatchUiEventSurvivesSynchronousCloseOnActivation_Test::TestBody() ui/ozone/platform/x11/x11_window_ozone_unittest.cc:345:27 #12 0x581916896c8b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #13 0x581916898da7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #14 0x58191689ae23 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #15 0x5819168c9874 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #16 0x5819168c83ea in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #17 0x581918190c40 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #18 0x581915fa55f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #19 0x5819181985bb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #20 0x581918197edb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #21 0x581915fa4e94 in main mojo/core/test/run_all_unittests.cc:30:10 #22 0x706f67e89249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x581915fa381d in operator new(unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x286581d) (BuildId: ab148279f7568d57) #1 0x58191604a244 in ui::X11WindowOzoneTest::CreatePlatformWindow(ui::MockPlatformWindowDelegate*, gfx::Rect const&, unsigned int*, ui::X11ExtensionDelegate*) gen/third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x58191604f631 in ui::X11WindowOzoneTest_DispatchUiEventSurvivesSynchronousCloseOnActivation_Test::TestBody() ui/ozone/platform/x11/x11_window_ozone_unittest.cc:319:17 #3 0x581916896c8b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x581916898da7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x58191689ae23 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x5819168c9874 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x5819168c83ea in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x581918190c40 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x581915fa55f1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x5819181985bb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x581918197edb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x581915fa4e94 in main mojo/core/test/run_all_unittests.cc:30:10 #13 0x706f67e89249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-use-after-free ui/ozone/platform/x11/x11_window.cc:1987:11 in ui::X11Window::UpdateWMUserTime(ui::Event*) Shadow bytes around the buggy address: 0x6dcf667e3b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa 0x6dcf667e3c00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x6dcf667e3c80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x6dcf667e3d00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x6dcf667e3d80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd =>0x6dcf667e3e00: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd 0x6dcf667e3e80: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa 0x6dcf667e3f00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x6dcf667e3f80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x6dcf667e4000: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x6dcf667e4080: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==2121==ADDITIONAL INFO ==2121==Note: Please include this section with the ASan report. Task trace: ==2121==END OF ADDITIONAL INFO ==2121==ABORTING