================================================================= ==1993==ERROR: AddressSanitizer: heap-use-after-free on address 0x7b98eddd6858 at pc 0x557c9be6c9f0 bp 0x7b18a7e7acc0 sp 0x7b18a7e7acb8 READ of size 8 at 0x7b98eddd6858 thread T52 #0 0x557c9be6c9ef in std::__Cr::basic_string, std::__Cr::allocator>::__get_long_pointer() const gen/third_party/libc++/src/include/string:772:35 #1 0x557c9be6cb70 in std::__Cr::basic_string, std::__Cr::allocator>::basic_string(std::__Cr::basic_string, std::__Cr::allocator> const&) gen/third_party/libc++/src/include/string:1008:57 #2 0x557cb40044be in base::nix::GetFileMimeType(base::FilePath const&) base/nix/mime_util_xdg.cc:339:39 #3 0x557cb400676d in void* std::__Cr::__thread_proxy>, base::nix::GetFileMimeType(base::FilePath const&)::$_2::operator()() const::'lambda'()>>(void*) base/nix/mime_util_xdg.cc:288:17 #4 0x557c9be25c46 in asan_thread_start(void*) asan_interceptors.cpp 0x7b98eddd6858 is located 56 bytes inside of 88-byte region [0x7b98eddd6820,0x7b98eddd6878) freed by thread T50 here: #0 0x557c9be62002 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/chrome+0x10e14002) (BuildId: f100f3642587cba9) #1 0x557cb40094a8 in std::__Cr::__tree, std::__Cr::allocator>, base::nix::WeightedMime>, std::__Cr::__map_value_compare, std::__Cr::allocator>, std::__Cr::pair, std::__Cr::allocator> const, base::nix::WeightedMime>, std::__Cr::less>, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>::__tree_deleter::operator()(std::__Cr::__tree_node, std::__Cr::allocator>, base::nix::WeightedMime>, void*>*) gen/third_party/libc++/src/include/__new/allocate.h:63:10 #2 0x557cb400947a in std::__Cr::__tree, std::__Cr::allocator>, base::nix::WeightedMime>, std::__Cr::__map_value_compare, std::__Cr::allocator>, std::__Cr::pair, std::__Cr::allocator> const, base::nix::WeightedMime>, std::__Cr::less>, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>::__tree_deleter::operator()(std::__Cr::__tree_node, std::__Cr::allocator>, base::nix::WeightedMime>, void*>*) gen/third_party/libc++/src/include/__tree:1410:7 #3 0x557cb400947a in std::__Cr::__tree, std::__Cr::allocator>, base::nix::WeightedMime>, std::__Cr::__map_value_compare, std::__Cr::allocator>, std::__Cr::pair, std::__Cr::allocator> const, base::nix::WeightedMime>, std::__Cr::less>, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>::__tree_deleter::operator()(std::__Cr::__tree_node, std::__Cr::allocator>, base::nix::WeightedMime>, void*>*) gen/third_party/libc++/src/include/__tree:1410:7 #4 0x557cb400947a in std::__Cr::__tree, std::__Cr::allocator>, base::nix::WeightedMime>, std::__Cr::__map_value_compare, std::__Cr::allocator>, std::__Cr::pair, std::__Cr::allocator> const, base::nix::WeightedMime>, std::__Cr::less>, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>::__tree_deleter::operator()(std::__Cr::__tree_node, std::__Cr::allocator>, base::nix::WeightedMime>, void*>*) gen/third_party/libc++/src/include/__tree:1410:7 #5 0x557cb400947a in std::__Cr::__tree, std::__Cr::allocator>, base::nix::WeightedMime>, std::__Cr::__map_value_compare, std::__Cr::allocator>, std::__Cr::pair, std::__Cr::allocator> const, base::nix::WeightedMime>, std::__Cr::less>, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>::__tree_deleter::operator()(std::__Cr::__tree_node, std::__Cr::allocator>, base::nix::WeightedMime>, void*>*) gen/third_party/libc++/src/include/__tree:1410:7 #6 0x557cb400424f in base::nix::GetFileMimeType(base::FilePath const&) gen/third_party/libc++/src/include/__tree:1361:64 #7 0x557cb400676d in void* std::__Cr::__thread_proxy>, base::nix::GetFileMimeType(base::FilePath const&)::$_2::operator()() const::'lambda'()>>(void*) base/nix/mime_util_xdg.cc:288:17 #8 0x557c9be25c46 in asan_thread_start(void*) asan_interceptors.cpp previously allocated by thread T50 here: #0 0x557c9be613fd in operator new(unsigned long) (/chromium/chromium/src/out/asan/chrome+0x10e133fd) (BuildId: f100f3642587cba9) #1 0x557cb4009104 in std::__Cr::pair, std::__Cr::allocator>, base::nix::WeightedMime>, std::__Cr::__tree_node, std::__Cr::allocator>, base::nix::WeightedMime>, void*>*, long>, bool> std::__Cr::__tree, std::__Cr::allocator>, base::nix::WeightedMime>, std::__Cr::__map_value_compare, std::__Cr::allocator>, std::__Cr::pair, std::__Cr::allocator> const, base::nix::WeightedMime>, std::__Cr::less>, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>::__emplace_unique, std::__Cr::allocator>&&>, std::__Cr::tuple<>>(std::__Cr::piecewise_construct_t const&, std::__Cr::tuple, std::__Cr::allocator>&&>&&, std::__Cr::tuple<>&&)::'lambda'(std::__Cr::basic_string, std::__Cr::allocator> const&, std::__Cr::piecewise_construct_t const&, std::__Cr::tuple, std::__Cr::allocator>&&>&&, std::__Cr::tuple<>&&)::operator()(std::__Cr::basic_string, std::__Cr::allocator> const&, std::__Cr::piecewise_construct_t const&, std::__Cr::tuple, std::__Cr::allocator>&&>&&, std::__Cr::tuple<>&&) const gen/third_party/libc++/src/include/__new/allocate.h:43:28 #2 0x557cb4002d84 in base::nix::ParseMimeTypes(base::FilePath const&, std::__Cr::map, std::__Cr::allocator>, base::nix::WeightedMime, std::__Cr::less, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>&) gen/third_party/libc++/src/include/__utility/try_key_extraction.h:91:10 #3 0x557cb4004cf1 in base::nix::(anonymous namespace)::LoadAllMimeCacheFiles(std::__Cr::map, std::__Cr::allocator>, base::nix::WeightedMime, std::__Cr::less, std::__Cr::allocator, std::__Cr::allocator> const, base::nix::WeightedMime>>>&, std::__Cr::vector>&) base/nix/mime_util_xdg.cc:65:43 #4 0x557cb400430c in base::nix::GetFileMimeType(base::FilePath const&) base/nix/mime_util_xdg.cc:320:9 #5 0x557cb400676d in void* std::__Cr::__thread_proxy>, base::nix::GetFileMimeType(base::FilePath const&)::$_2::operator()() const::'lambda'()>>(void*) base/nix/mime_util_xdg.cc:288:17 #6 0x557c9be25c46 in asan_thread_start(void*) asan_interceptors.cpp Thread T52 created by T5 (ThreadPoolForeg) here: #0 0x557c9be0ba71 in pthread_create (/chromium/chromium/src/out/asan/chrome+0x10dbda71) (BuildId: f100f3642587cba9) #1 0x557cb40049c1 in base::nix::GetFileMimeType(base::FilePath const&)::$_2::operator()() const gen/third_party/libc++/src/include/__thread/support/pthread.h:182:10 #2 0x557cb40046e3 in base::nix::GetFileMimeType(base::FilePath const&) base/nix/mime_util_xdg.cc:276:26 #3 0x557cb52efe37 in net::PlatformMimeUtil::GetPlatformMimeTypeFromExtension(std::__Cr::basic_string, std::__Cr::allocator> const&, std::__Cr::basic_string, std::__Cr::allocator>*) const net/base/platform_mime_util_linux.cc:30:21 #4 0x557cb4ab9d63 in net::MimeUtil::GetMimeTypeFromExtensionHelper(std::__Cr::basic_string, std::__Cr::allocator> const&, bool, std::__Cr::basic_string, std::__Cr::allocator>*) const net/base/mime_util.cc:387:33 #5 0x557ca867c544 in content::MimeRegistryImpl::GetMimeTypeFromExtension(std::__Cr::basic_string, std::__Cr::allocator> const&, base::OnceCallback, std::__Cr::allocator> const&)>) content/browser/mime_registry_impl.cc:38:3 #6 0x557ca0da4c26 in blink::mojom::MimeRegistryStubDispatch::AcceptWithResponder(blink::mojom::MimeRegistry*, mojo::Message*, std::__Cr::unique_ptr>) gen/third_party/blink/public/mojom/mime/mime_registry.mojom.cc:487:13 #7 0x557cb3bd7a80 in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1036:56 #8 0x557cb3bf57c1 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:44:19 #9 0x557cb3bddde3 in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:747:20 #10 0x557cb3c05718 in mojo::internal::MultiplexRouter::ProcessIncomingMessage(mojo::internal::MultiplexRouter::MessageWrapper*, mojo::internal::MultiplexRouter::ClientCallBehavior, base::SequencedTaskRunner*) mojo/public/cpp/bindings/lib/multiplex_router.cc:1204:42 #11 0x557cb3c03bf8 in mojo::internal::MultiplexRouter::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/multiplex_router.cc:790:7 #12 0x557cb3bf57c1 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:44:19 #13 0x557cb3bce55a in mojo::Connector::DispatchMessage(mojo::ScopedHandleBase) mojo/public/cpp/bindings/lib/connector.cc:567:49 #14 0x557cb3bcfbe0 in mojo::Connector::ReadAllAvailableMessages() mojo/public/cpp/bindings/lib/connector.cc:628:14 #15 0x557cb3bcf639 in mojo::Connector::OnWatcherHandleReady(char const*, unsigned int) mojo/public/cpp/bindings/lib/connector.cc:453:3 #16 0x557cb3bd1494 in base::internal::Invoker, base::internal::BindState, base::internal::UnretainedWrapper>, void (unsigned int)>::Run(base::internal::BindStateBase*, unsigned int) base/functional/bind_internal.h:740:12 #17 0x557ca118d7ae in base::RepeatingCallback::Run(unsigned int) const & base/functional/callback.h:346:12 #18 0x557ca118d54a in base::internal::Invoker const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback const&>, base::internal::BindState const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback>, void (unsigned int, mojo::HandleSignalsState const&)>::Run(base::internal::BindStateBase*, unsigned int, mojo::HandleSignalsState const&) base/functional/bind_internal.h:673:12 #19 0x557cb4a68a80 in base::RepeatingCallback::Run(unsigned int, mojo::HandleSignalsState const&) const & base/functional/callback.h:346:12 #20 0x557cb4a683c0 in mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&) mojo/public/cpp/system/simple_watcher.cc:286:14 #21 0x557cb4a69587 in base::internal::Invoker&&, int&&, unsigned int&&, mojo::HandleSignalsState&&>, base::internal::BindState, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #22 0x557cb3e17bf6 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #23 0x557cb3eb6dd2 in base::internal::TaskTracker::RunTaskImpl(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) base/task/common/task_annotator.h:112:5 #24 0x557cb3eb701c in base::internal::TaskTracker::RunSkipOnShutdown(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) base/task/thread_pool/task_tracker.cc:675:3 #25 0x557cb3eb5609 in base::internal::TaskTracker::RunTask(base::internal::Task, base::internal::TaskSource*, base::TaskTraits const&, base::ThreadType) base/task/thread_pool/task_tracker.cc:705:7 #26 0x557cb3eb4892 in base::internal::TaskTracker::RunAndPopNextTask(base::internal::RegisteredTaskSource) base/task/thread_pool/task_tracker.cc:393:5 #27 0x557cb3ef95c3 in base::internal::WorkerThread::RunWorker() base/task/thread_pool/worker_thread.cc:473:36 #28 0x557cb3ef8704 in base::internal::WorkerThread::RunPooledWorker() base/task/thread_pool/worker_thread.cc:359:3 #29 0x557cb3ef816b in base::internal::WorkerThread::ThreadMain() base/task/thread_pool/worker_thread.cc:339:7 #30 0x557cb3f814be in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:102:13 #31 0x557c9be25c46 in asan_thread_start(void*) asan_interceptors.cpp Thread T5 (ThreadPoolForeg) created by T0 (chrome) here: #0 0x557c9be0ba71 in pthread_create (/chromium/chromium/src/out/asan/chrome+0x10dbda71) (BuildId: f100f3642587cba9) #1 0x557cb3f80b12 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThreadBase::Delegate*, base::PlatformThreadHandle*, base::ThreadType, base::MessagePumpType) base/threading/platform_thread_posix.cc:153:13 #2 0x557cb3ef6eb4 in base::internal::WorkerThread::Start(scoped_refptr, base::WorkerThreadObserver*) base/task/thread_pool/worker_thread.cc:185:3 #3 0x557cb3eee4a5 in base::internal::ThreadGroup::BaseScopedCommandsExecutor::Flush() base/task/thread_pool/thread_group.cc:65:13 #4 0x557cb3eee160 in base::internal::ThreadGroup::BaseScopedCommandsExecutor::~BaseScopedCommandsExecutor() base/task/thread_pool/thread_group.cc:56:3 #5 0x557cb3ee3b34 in base::internal::ThreadGroupImpl::Start(unsigned long, unsigned long, base::TimeDelta, scoped_refptr, base::WorkerThreadObserver*, base::internal::ThreadGroup::WorkerEnvironment, bool, std::__Cr::optional) base/task/thread_pool/thread_group_impl.cc:71:3 #6 0x557cb3ebc9f6 in base::internal::ThreadPoolImpl::Start(base::ThreadPoolInstance::InitParams const&, base::WorkerThreadObserver*) base/task/thread_pool/thread_pool_impl.cc:241:35 #7 0x557ca95948e4 in content::StartBrowserThreadPool() content/browser/startup_helper.cc:98:36 #8 0x557caf9349f3 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1248:7 #9 0x557caf933a9a in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1150:12 #10 0x557caf92d441 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:358:36 #11 0x557caf92da3c in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:371:10 #12 0x557c9be62b39 in ChromeMain chrome/app/chrome_main.cc:191:12 #13 0x7f18ef62b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Thread T50 created by T5 (ThreadPoolForeg) here: #0 0x557c9be0ba71 in pthread_create (/chromium/chromium/src/out/asan/chrome+0x10dbda71) (BuildId: f100f3642587cba9) #1 0x557cb40048ed in base::nix::GetFileMimeType(base::FilePath const&)::$_2::operator()() const gen/third_party/libc++/src/include/__thread/support/pthread.h:182:10 #2 0x557cb40046e3 in base::nix::GetFileMimeType(base::FilePath const&) base/nix/mime_util_xdg.cc:276:26 #3 0x557cb52efe37 in net::PlatformMimeUtil::GetPlatformMimeTypeFromExtension(std::__Cr::basic_string, std::__Cr::allocator> const&, std::__Cr::basic_string, std::__Cr::allocator>*) const net/base/platform_mime_util_linux.cc:30:21 #4 0x557cb4ab9d63 in net::MimeUtil::GetMimeTypeFromExtensionHelper(std::__Cr::basic_string, std::__Cr::allocator> const&, bool, std::__Cr::basic_string, std::__Cr::allocator>*) const net/base/mime_util.cc:387:33 #5 0x557ca867c544 in content::MimeRegistryImpl::GetMimeTypeFromExtension(std::__Cr::basic_string, std::__Cr::allocator> const&, base::OnceCallback, std::__Cr::allocator> const&)>) content/browser/mime_registry_impl.cc:38:3 #6 0x557ca0da4c26 in blink::mojom::MimeRegistryStubDispatch::AcceptWithResponder(blink::mojom::MimeRegistry*, mojo::Message*, std::__Cr::unique_ptr>) gen/third_party/blink/public/mojom/mime/mime_registry.mojom.cc:487:13 #7 0x557cb3bd7a80 in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1036:56 #8 0x557cb3bf57c1 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:44:19 #9 0x557cb3bddde3 in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:747:20 #10 0x557cb3c05718 in mojo::internal::MultiplexRouter::ProcessIncomingMessage(mojo::internal::MultiplexRouter::MessageWrapper*, mojo::internal::MultiplexRouter::ClientCallBehavior, base::SequencedTaskRunner*) mojo/public/cpp/bindings/lib/multiplex_router.cc:1204:42 #11 0x557cb3c03bf8 in mojo::internal::MultiplexRouter::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/multiplex_router.cc:790:7 #12 0x557cb3bf57c1 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:44:19 #13 0x557cb3bce55a in mojo::Connector::DispatchMessage(mojo::ScopedHandleBase) mojo/public/cpp/bindings/lib/connector.cc:567:49 #14 0x557cb3bcfbe0 in mojo::Connector::ReadAllAvailableMessages() mojo/public/cpp/bindings/lib/connector.cc:628:14 #15 0x557cb3bcf639 in mojo::Connector::OnWatcherHandleReady(char const*, unsigned int) mojo/public/cpp/bindings/lib/connector.cc:453:3 #16 0x557cb3bd1494 in base::internal::Invoker, base::internal::BindState, base::internal::UnretainedWrapper>, void (unsigned int)>::Run(base::internal::BindStateBase*, unsigned int) base/functional/bind_internal.h:740:12 #17 0x557ca118d7ae in base::RepeatingCallback::Run(unsigned int) const & base/functional/callback.h:346:12 #18 0x557ca118d54a in base::internal::Invoker const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback const&>, base::internal::BindState const&, unsigned int, mojo::HandleSignalsState const&), base::RepeatingCallback>, void (unsigned int, mojo::HandleSignalsState const&)>::Run(base::internal::BindStateBase*, unsigned int, mojo::HandleSignalsState const&) base/functional/bind_internal.h:673:12 #19 0x557cb4a68a80 in base::RepeatingCallback::Run(unsigned int, mojo::HandleSignalsState const&) const & base/functional/callback.h:346:12 #20 0x557cb4a683c0 in mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&) mojo/public/cpp/system/simple_watcher.cc:286:14 #21 0x557cb4a69587 in base::internal::Invoker&&, int&&, unsigned int&&, mojo::HandleSignalsState&&>, base::internal::BindState, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #22 0x557cb3e17bf6 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #23 0x557cb3eb6dd2 in base::internal::TaskTracker::RunTaskImpl(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) base/task/common/task_annotator.h:112:5 #24 0x557cb3eb701c in base::internal::TaskTracker::RunSkipOnShutdown(base::internal::Task&, base::TaskTraits const&, base::internal::TaskSource*, base::internal::SequenceToken const&) base/task/thread_pool/task_tracker.cc:675:3 #25 0x557cb3eb5609 in base::internal::TaskTracker::RunTask(base::internal::Task, base::internal::TaskSource*, base::TaskTraits const&, base::ThreadType) base/task/thread_pool/task_tracker.cc:705:7 #26 0x557cb3eb4892 in base::internal::TaskTracker::RunAndPopNextTask(base::internal::RegisteredTaskSource) base/task/thread_pool/task_tracker.cc:393:5 #27 0x557cb3ef95c3 in base::internal::WorkerThread::RunWorker() base/task/thread_pool/worker_thread.cc:473:36 #28 0x557cb3ef8704 in base::internal::WorkerThread::RunPooledWorker() base/task/thread_pool/worker_thread.cc:359:3 #29 0x557cb3ef816b in base::internal::WorkerThread::ThreadMain() base/task/thread_pool/worker_thread.cc:339:7 #30 0x557cb3f814be in base::(anonymous namespace)::ThreadFunc(void*) base/threading/platform_thread_posix.cc:102:13 #31 0x557c9be25c46 in asan_thread_start(void*) asan_interceptors.cpp SUMMARY: AddressSanitizer: heap-use-after-free gen/third_party/libc++/src/include/string:772:35 in std::__Cr::basic_string, std::__Cr::allocator>::__get_long_pointer() const Shadow bytes around the buggy address: 0x7b98eddd6580: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6600: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6680: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6700: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6780: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa =>0x7b98eddd6800: fa fa f7 fa fd fd fd fd fd fd fd[fd]fd fd fd fa 0x7b98eddd6880: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6900: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6980: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6a00: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa 0x7b98eddd6a80: fa fa f7 fa fd fd fd fd fd fd fd fd fd fd fd fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==1993==ADDITIONAL INFO ==1993==Note: Please include this section with the ASan report. Task trace: