[1344:1344:0404/222542.798283:ERROR:content/browser/renderer_host/render_frame_host_impl.cc:11607] POC: BeginNavigation while waiting_for_init_; initiator_frame_token=set initiator_frame=NULL keep_alive_handle=valid -- dropping keep_alive_handle at early return [1344:1344:0404/222543.232117:ERROR:content/browser/renderer_host/navigation_policy_container_builder.cc:53] POC: VULNERABILITY CONFIRMED. Initiator PolicyContainerHost lost: initiator frame_token was provided but neither the RFH nor any NavigationStateKeepAlive remains. Downstream CSP form-action and Local Network Access checks will be silently bypassed. [0404/222543.329222:ERROR:third_party/crashpad/crashpad/util/linux/ptrace_client.cc:391] Broken pipe (32) [0404/222543.329264:ERROR:third_party/crashpad/crashpad/util/linux/scoped_ptrace_attach.cc:45] ptrace: No such process (3) Received signal 6 #0 0x55d8a4f439f6 (/chromium/chromium/src/out/asan/chrome+0x10d769f5) #1 0x55d8bd1581b8 (/chromium/chromium/src/out/asan/chrome+0x28f8b1b7) #2 0x55d8bd115a47 (/chromium/chromium/src/out/asan/chrome+0x28f48a46) #3 0x55d8bd1575bf (/chromium/chromium/src/out/asan/chrome+0x28f8a5be) #4 0x7fa623440050 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3c04f) #5 0x7fa62348eeec (/usr/lib/x86_64-linux-gnu/libc.so.6+0x8aeeb) #6 0x7fa62343ffb2 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x3bfb1) #7 0x7fa62342a472 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x26471) #8 0x55d8b1e7d8db (/chromium/chromium/src/out/asan/chrome+0x1dcb08da) #9 0x55d8b1e8c175 (/chromium/chromium/src/out/asan/chrome+0x1dcbf174) #10 0x55d8b1e8362f (/chromium/chromium/src/out/asan/chrome+0x1dcb662e) #11 0x55d8b1f5042f (/chromium/chromium/src/out/asan/chrome+0x1dd8342e) #12 0x55d8b1fbab5d (/chromium/chromium/src/out/asan/chrome+0x1ddedb5c) #13 0x55d8b28d02f7 (/chromium/chromium/src/out/asan/chrome+0x1e7032f6) #14 0x55d8b29617e1 (/chromium/chromium/src/out/asan/chrome+0x1e7947e0) #15 0x55d8bcf8ba47 (/chromium/chromium/src/out/asan/chrome+0x28dbea46) #16 0x55d8bd0030ea (/chromium/chromium/src/out/asan/chrome+0x28e360e9) #17 0x55d8bd001f5b (/chromium/chromium/src/out/asan/chrome+0x28e34f5a) #18 0x55d8bd1b0b09 (/chromium/chromium/src/out/asan/chrome+0x28fe3b08) #19 0x55d8bd1b40c9 (/chromium/chromium/src/out/asan/chrome+0x28fe70c8) #20 0x7fa62496d719 (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0.7400.6+0x54718) #21 0x7fa62496d9a8 (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0.7400.6+0x549a7) #22 0x7fa62496da3c (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.0.7400.6+0x54a3b) #23 0x55d8bd1b1124 (/chromium/chromium/src/out/asan/chrome+0x28fe4123) #24 0x55d8bd0047f8 (/chromium/chromium/src/out/asan/chrome+0x28e377f7) #25 0x55d8bcf063c1 (/chromium/chromium/src/out/asan/chrome+0x28d393c0) #26 0x55d8b0a0788d (/chromium/chromium/src/out/asan/chrome+0x1c83a88c) #27 0x55d8b0a0ff3d (/chromium/chromium/src/out/asan/chrome+0x1c842f3c) #28 0x55d8b09fe5bd (/chromium/chromium/src/out/asan/chrome+0x1c8315bc) #29 0x55d8b8aa4a00 (/chromium/chromium/src/out/asan/chrome+0x248d79ff) #30 0x55d8b8aa89e9 (/chromium/chromium/src/out/asan/chrome+0x248db9e8) #31 0x55d8b8aa7e7b (/chromium/chromium/src/out/asan/chrome+0x248dae7a) #32 0x55d8b8aa1822 (/chromium/chromium/src/out/asan/chrome+0x248d4821) #33 0x55d8b8aa1e1d (/chromium/chromium/src/out/asan/chrome+0x248d4e1c) #34 0x55d8a4fd6b3a (/chromium/chromium/src/out/asan/chrome+0x10e09b39) #35 0x7fa62342b24a (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27249) #36 0x7fa62342b305 (/usr/lib/x86_64-linux-gnu/libc.so.6+0x27304) #37 0x55d8a4efc02a (/chromium/chromium/src/out/asan/chrome+0x10d2f029) === Symbolized (llvm-symbolizer) === #8 content::NavigationPolicyContainerBuilder::NavigationPolicyContainerBuilder(...) ./../../base/immediate_crash.h:185:3 <-- ImmediateCrash() at GetInitiatorPolicies()==nullptr #9 content::NavigationRequest::NavigationRequest(...) #10 content::NavigationRequest::CreateRendererInitiated(...) ./../../content/browser/renderer_host/navigation_request.cc:1531:61 #11 content::Navigator::OnBeginNavigation(...) ./../../content/browser/renderer_host/navigator.cc:1366:7 #12 content::RenderFrameHostImpl::Init() ./../../content/browser/renderer_host/render_frame_host_impl.cc:4860:36 <-- consuming pending_navigate_ #13 content::WebContentsImpl::ResumeLoadingCreatedWebContents() ./../../content/browser/web_contents/web_contents_impl.cc:7484:28 #14 base::internal::Invoker<...>::RunOnce(...) <-- PostDelayedTask (deferred resume, Android-WebView simulation)