================================================================= ==1==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7c9df9e22300 at pc 0x55679eb65638 bp 0x7bd9f2dc8130 sp 0x7bd9f2dc78f0 WRITE of size 1037401672 at 0x7c9df9e22300 thread T3 (ThreadPoolForeg) ==1==WARNING: invalid path to external symbolizer! ==1==WARNING: Failed to use and restart external symbolizer! #0 0x55679eb65637 in __asan_memmove ??:0:0 #1 0x5567a718673d in v8::internal::Assembler::GrowBuffer() ./../../v8/src/base/memcopy.h:0:0 #2 0x5567a7198fd3 in v8::internal::Assembler::j(v8::internal::Condition, v8::internal::Label*, v8::internal::Label::Distance) ./../../v8/src/codegen/x64/assembler-x64.h:3633:65 #3 0x5567a638cdef in v8::internal::baseline::BaselineCompiler::JumpIfToBoolean(bool, v8::internal::Label*, v8::internal::Label::Distance) ./../../v8/src/baseline/x64/baseline-assembler-x64-inl.h:230:6 #4 0x5567a6380cd5 in v8::internal::baseline::BaselineCompiler::VisitToBooleanLogicalNot() ./../../v8/src/baseline/baseline-compiler.cc:1394:27 #5 0x5567a6375c18 in v8::internal::baseline::BaselineCompiler::GenerateCode() ./../../v8/src/baseline/baseline-compiler.cc:338:7 #6 0x5567a6371606 in v8::internal::baseline::BaselineCompilerTask::Compile(v8::internal::LocalIsolate*) ./../../v8/src/baseline/baseline-batch-compiler.cc:50:14 #7 0x5567a63708db in v8::internal::baseline::ConcurrentBaselineCompiler::JobDispatcher::Run(v8::JobDelegate*) ./../../v8/src/baseline/baseline-batch-compiler.cc:129:12 #8 0x5567be3342bf in base::internal::Invoker>, v8::SourceLocation const&)::$_0 const&, std::__Cr::unique_ptr> const&>, base::internal::BindState>, v8::SourceLocation const&)::$_0, std::__Cr::unique_ptr>>, void (base::JobDelegate*)>::Run(base::internal::BindStateBase*, base::JobDelegate*) ./../../gin/v8_platform.cc:301:23 #9 0x5567b6beb6cf in base::RepeatingCallback::Run(base::JobDelegate*) const & ./../../base/functional/callback.h:346:12 #10 0x5567b6becf69 in base::internal::Invoker, base::RepeatingCallback, base::internal::PooledTaskRunnerDelegate*)::$_0 const&, base::internal::JobTaskSource*>, base::internal::BindState, base::RepeatingCallback, base::internal::PooledTaskRunnerDelegate*)::$_0, base::internal::UnretainedWrapper>, void ()>::Run(base::internal::BindStateBase*) ./../../base/task/thread_pool/job_task_source.cc:114:32 #11 0x5567b6b56326 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) ./../../base/functional/callback.h:155:12 #12 0x5567b6bf5502 in base::internal::TaskTracker::RunTaskImpl(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) ./../../base/task/common/task_annotator.h:112:5 #13 0x5567b6bf574c in base::internal::TaskTracker::RunSkipOnShutdown(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) ./../../base/task/thread_pool/task_tracker.cc:675:3 #14 0x5567b6bf3d39 in base::internal::TaskTracker::RunTask(base::internal::Task, base::internal::TaskSource*, base::TaskTraits const&, base::ThreadType) ./../../base/task/thread_pool/task_tracker.cc:705:7 #15 0x5567b6bf2fc2 in base::internal::TaskTracker::RunAndPopNextTask(base::internal::RegisteredTaskSource) ./../../base/task/thread_pool/task_tracker.cc:393:5 #16 0x5567b6c37cf3 in base::internal::WorkerThread::RunWorker() ./../../base/task/thread_pool/worker_thread.cc:473:36 #17 0x5567b6c36e34 in base::internal::WorkerThread::RunPooledWorker() ./../../base/task/thread_pool/worker_thread.cc:359:3 #18 0x5567b6c3689b in base::internal::WorkerThread::ThreadMain() ./../../base/task/thread_pool/worker_thread.cc:339:7 #19 0x5567b6cbfbee in base::(anonymous namespace)::ThreadFunc(void*) ./../../base/threading/platform_thread_posix.cc:102:13 #20 0x55679eb64c46 in asan_thread_start(void*) asan_interceptors.cpp:0:0 0x7c9df9e22300 is located 0 bytes after 128-byte region [0x7c9df9e22280,0x7c9df9e22300) allocated by thread T3 (ThreadPoolForeg) here: #0 0x55679eba050d in operator new[](unsigned long) ??:0:0 #1 0x5567a4ae6aa6 in v8::internal::(anonymous namespace)::DefaultAssemblerBuffer::Grow(int) ./gen/third_party/libc++/src/include/__memory/unique_ptr.h:780:55 #2 0x5567a718644e in v8::internal::Assembler::GrowBuffer() ./../../v8/src/codegen/x64/assembler-x64.cc:738:58 #3 0x5567a7198fd3 in v8::internal::Assembler::j(v8::internal::Condition, v8::internal::Label*, v8::internal::Label::Distance) ./../../v8/src/codegen/x64/assembler-x64.h:3633:65 #4 0x5567a638cdef in v8::internal::baseline::BaselineCompiler::JumpIfToBoolean(bool, v8::internal::Label*, v8::internal::Label::Distance) ./../../v8/src/baseline/x64/baseline-assembler-x64-inl.h:230:6 #5 0x5567a6380cd5 in v8::internal::baseline::BaselineCompiler::VisitToBooleanLogicalNot() ./../../v8/src/baseline/baseline-compiler.cc:1394:27 #6 0x5567a6375c18 in v8::internal::baseline::BaselineCompiler::GenerateCode() ./../../v8/src/baseline/baseline-compiler.cc:338:7 #7 0x5567a6371606 in v8::internal::baseline::BaselineCompilerTask::Compile(v8::internal::LocalIsolate*) ./../../v8/src/baseline/baseline-batch-compiler.cc:50:14 #8 0x5567a63708db in v8::internal::baseline::ConcurrentBaselineCompiler::JobDispatcher::Run(v8::JobDelegate*) ./../../v8/src/baseline/baseline-batch-compiler.cc:129:12 #9 0x5567be3342bf in base::internal::Invoker>, v8::SourceLocation const&)::$_0 const&, std::__Cr::unique_ptr> const&>, base::internal::BindState>, v8::SourceLocation const&)::$_0, std::__Cr::unique_ptr>>, void (base::JobDelegate*)>::Run(base::internal::BindStateBase*, base::JobDelegate*) ./../../gin/v8_platform.cc:301:23 #10 0x5567b6beb6cf in base::RepeatingCallback::Run(base::JobDelegate*) const & ./../../base/functional/callback.h:346:12 #11 0x5567b6becf69 in base::internal::Invoker, base::RepeatingCallback, base::internal::PooledTaskRunnerDelegate*)::$_0 const&, base::internal::JobTaskSource*>, base::internal::BindState, base::RepeatingCallback, base::internal::PooledTaskRunnerDelegate*)::$_0, base::internal::UnretainedWrapper>, void ()>::Run(base::internal::BindStateBase*) ./../../base/task/thread_pool/job_task_source.cc:114:32 #12 0x5567b6b56326 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) ./../../base/functional/callback.h:155:12 #13 0x5567b6bf5502 in base::internal::TaskTracker::RunTaskImpl(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) ./../../base/task/common/task_annotator.h:112:5 #14 0x5567b6bf574c in base::internal::TaskTracker::RunSkipOnShutdown(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) ./../../base/task/thread_pool/task_tracker.cc:675:3 #15 0x5567b6bf3d39 in base::internal::TaskTracker::RunTask(base::internal::Task, base::internal::TaskSource*, base::TaskTraits const&, base::ThreadType) ./../../base/task/thread_pool/task_tracker.cc:705:7 #16 0x5567b6bf2fc2 in base::internal::TaskTracker::RunAndPopNextTask(base::internal::RegisteredTaskSource) ./../../base/task/thread_pool/task_tracker.cc:393:5 #17 0x5567b6c37cf3 in base::internal::WorkerThread::RunWorker() ./../../base/task/thread_pool/worker_thread.cc:473:36 #18 0x5567b6c36e34 in base::internal::WorkerThread::RunPooledWorker() ./../../base/task/thread_pool/worker_thread.cc:359:3 #19 0x5567b6c3689b in base::internal::WorkerThread::ThreadMain() ./../../base/task/thread_pool/worker_thread.cc:339:7 #20 0x5567b6cbfbee in base::(anonymous namespace)::ThreadFunc(void*) ./../../base/threading/platform_thread_posix.cc:102:13 #21 0x55679eb64c46 in asan_thread_start(void*) asan_interceptors.cpp:0:0 Thread T3 (ThreadPoolForeg) created by T0 (chrome) here: #0 0x55679eb4aa71 in ___interceptor_pthread_create ??:0:0 #1 0x5567b6cbf242 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThreadBase::Delegate*, base::PlatformThreadHandle*, base::ThreadType, base::MessagePumpType) ./../../base/threading/platform_thread_posix.cc:153:13 #2 0x5567b6c355e4 in base::internal::WorkerThread::Start(scoped_refptr, base::WorkerThreadObserver*) ./../../base/task/thread_pool/worker_thread.cc:185:3 #3 0x5567b6c2cbd5 in base::internal::ThreadGroup::BaseScopedCommandsExecutor::Flush() ./../../base/task/thread_pool/thread_group.cc:65:13 #4 0x5567b6c2c890 in base::internal::ThreadGroup::BaseScopedCommandsExecutor::~BaseScopedCommandsExecutor() ./../../base/task/thread_pool/thread_group.cc:56:3 #5 0x5567b6c22264 in base::internal::ThreadGroupImpl::Start(unsigned long, unsigned long, base::TimeDelta, scoped_refptr, base::WorkerThreadObserver*, base::internal::ThreadGroup::WorkerEnvironment, bool, std::__Cr::optional) ./../../base/task/thread_pool/thread_group_impl.cc:71:3 #6 0x5567b6bfb126 in base::internal::ThreadPoolImpl::Start(base::ThreadPoolInstance::InitParams const&, base::WorkerThreadObserver*) ./../../base/task/thread_pool/thread_pool_impl.cc:241:35 #7 0x5567c2c30dbe in content::ChildProcess::ChildProcess(base::ThreadType, std::__Cr::unique_ptr>, bool) ./../../content/child/child_process.cc:112:20 #8 0x5567c2db60a0 in content::RenderProcess::RenderProcess(std::__Cr::unique_ptr>) ./../../content/renderer/render_process.cc:18:7 #9 0x5567c2db58d8 in content::RenderProcessImpl::RenderProcessImpl() ./../../content/renderer/render_process_impl.cc:98:7 #10 0x5567c2db5e80 in content::RenderProcessImpl::Create() ./../../content/renderer/render_process_impl.cc:223:31 #11 0x5567c2e59e10 in content::RendererMain(content::MainFunctionParams) ./../../content/renderer/renderer_main.cc:274:53 #12 0x5567b266e6ef in content::RunZygote(content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:664:14 #13 0x5567b266fa1f in content::RunOtherNamedProcessTypeMain(std::__Cr::basic_string, std::__Cr::allocator> const&, content::MainFunctionParams, content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:771:12 #14 0x5567b2672728 in content::ContentMainRunnerImpl::Run() ./../../content/app/content_main_runner_impl.cc:1152:10 #15 0x5567b266c101 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) ./../../content/app/content_main.cc:358:36 #16 0x5567b266c6fc in content::ContentMain(content::ContentMainParams) ./../../content/app/content_main.cc:371:10 #17 0x55679eba1b39 in ChromeMain ./../../chrome/app/chrome_main.cc:191:12 #18 0x7fddfbc2b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-buffer-overflow in __asan_memmove ??:0:0 Shadow bytes around the buggy address: 0x7c9df9e22080: fd fd fd fd fd fd fd fd fa fa fa fa fa fa f7 fa 0x7c9df9e22100: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa 0x7c9df9e22180: fa fa fa fa fa fa f7 fa fd fd fd fd fd fd fd fd 0x7c9df9e22200: fd fd fd fd fd fd fd fd fa fa fa fa fa fa f7 fa 0x7c9df9e22280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x7c9df9e22300:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7c9df9e22380: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7c9df9e22400: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7c9df9e22480: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7c9df9e22500: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7c9df9e22580: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==1==ADDITIONAL INFO ==1==Note: Please include this section with the ASan report.