AddressSanitizer:DEADLYSIGNAL ================================================================= ==4090==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x558981402926 bp 0x7ffe934eda70 sp 0x7ffe934ed9a0 T0) ==4090==The signal is caused by a READ memory access. ==4090==Hint: address points to the zero page. #0 0x558981402926 in blink::NetworkResourcesData::EnsureFreeSpace(unsigned long) base/memory/scoped_refptr.h:264 #1 0x558981400fa3 in blink::NetworkResourcesData::PrepareToAddResourceData(blink::String const&, unsigned long) third_party/blink/renderer/core/inspector/network_resources_data.cc:314:8 #2 0x558981402e2a in blink::NetworkResourcesData::MaybeAddResourceData(blink::String const&, base::span) third_party/blink/renderer/core/inspector/network_resources_data.cc:326:11 #3 0x5589810c6979 in blink::InspectorNetworkAgent::DidReceiveData(unsigned long, blink::DocumentLoader*, base::SpanOrSize) third_party/blink/renderer/core/inspector/inspector_network_agent.cc:1737:24 #4 0x558983ac8ef0 in blink::probe::DidReceiveDataImpl(blink::CoreProbeSink*, unsigned long, blink::DocumentLoader*, base::SpanOrSize) gen/third_party/blink/renderer/core/core_probes_impl.cc:1467:14 #5 0x558981eeb072 in blink::DocumentLoader::BodyDataReceivedImpl(blink::DocumentLoader::BodyData&) gen/third_party/blink/renderer/core/core_probes_inl.h:380:3 #6 0x558981eeb6c9 in non-virtual thunk to blink::DocumentLoader::BodyDataReceived(base::span) third_party/blink/renderer/core/loader/document_loader.cc:1285:3 #7 0x55896b6e7bb9 in blink::NavigationBodyLoader::MainThreadBodyReader::DataReceived(base::span) third_party/blink/renderer/platform/loader/fetch/url_loader/navigation_body_loader.cc:346:23 #8 0x55896b6dfd8f in blink::(anonymous namespace)::ReadFromDataPipeImpl(blink::(anonymous namespace)::BodyReader&, mojo::ScopedHandleBase&, mojo::SimpleWatcher&) third_party/blink/renderer/platform/loader/fetch/url_loader/navigation_body_loader.cc:147:17 #9 0x55896b6df693 in blink::NavigationBodyLoader::ReadFromDataPipe() third_party/blink/renderer/platform/loader/fetch/url_loader/navigation_body_loader.cc:548:3 #10 0x55896b6daafb in blink::NavigationBodyLoader::OnReadable(unsigned int) third_party/blink/renderer/platform/loader/fetch/url_loader/navigation_body_loader.cc:507:3 #11 0x55896b6ddb70 in blink::NavigationBodyLoader::BindURLLoaderAndStartLoadingResponseBodyIfPossible() third_party/blink/renderer/platform/loader/fetch/url_loader/navigation_body_loader.cc:605:3 #12 0x55896b6dd5bb in blink::NavigationBodyLoader::StartLoadingBody(blink::WebNavigationBodyLoader::Client*) third_party/blink/renderer/platform/loader/fetch/url_loader/navigation_body_loader.cc:452:3 #13 0x558981ef8cb3 in blink::DocumentLoader::CreateParserPostCommit() third_party/blink/renderer/core/loader/document_loader.cc:3343:19 #14 0x558981ef68ed in blink::DocumentLoader::StartLoadingResponse() third_party/blink/renderer/core/loader/document_loader.cc:2110:3 #15 0x558981f07125 in blink::DocumentLoader::CommitNavigation() third_party/blink/renderer/core/loader/document_loader.cc:3238:3 #16 0x558981f7b4fe in blink::FrameLoader::CommitDocumentLoader(blink::DocumentLoader*, blink::HistoryItem*, blink::CommitReason) third_party/blink/renderer/core/loader/frame_loader.cc:1477:21 #17 0x558981f872cb in blink::FrameLoader::CommitNavigation(std::__Cr::unique_ptr>, std::__Cr::unique_ptr>, blink::CommitReason) third_party/blink/renderer/core/loader/frame_loader.cc:1289:3 #18 0x5589808f2a68 in blink::WebLocalFrameImpl::CommitNavigation(std::__Cr::unique_ptr>, std::__Cr::unique_ptr>) third_party/blink/renderer/core/frame/web_local_frame_impl.cc:2839:24 #19 0x55897edfe303 in content::RenderFrameImpl::CommitNavigationWithParams(mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>) content/renderer/render_frame_impl.cc:2969:11 #20 0x55897ee59ca2 in void base::internal::DecayedFunctorTraits, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>), base::WeakPtr&&, mojo::StructPtr&&, mojo::StructPtr&&, std::__Cr::unique_ptr>&&, std::__Cr::optional, std::__Cr::allocator>>>&&, mojo::StructPtr&&, mojo::StructPtr&&, mojo::PendingRemote&&, mojo::PendingRemote&&, mojo::PendingAssociatedRemote&&, mojo::PendingRemote&&, mojo::PendingRemote&&, mojo::StructPtr&&, mojo::StructPtr&&, std::__Cr::unique_ptr>&&>::Invoke, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>), base::WeakPtr const&, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>>(void (content::RenderFrameImpl::*)(mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>), base::WeakPtr const&, mojo::StructPtr&&, mojo::StructPtr&&, std::__Cr::unique_ptr>&&, std::__Cr::optional, std::__Cr::allocator>>>&&, mojo::StructPtr&&, mojo::StructPtr&&, mojo::PendingRemote&&, mojo::PendingRemote&&, mojo::PendingAssociatedRemote&&, mojo::PendingRemote&&, mojo::PendingRemote&&, mojo::StructPtr&&, mojo::StructPtr&&, std::__Cr::unique_ptr>&&, std::__Cr::unique_ptr>&&) base/functional/bind_internal.h:740:12 #21 0x55897ee5975b in base::internal::Invoker, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>), base::WeakPtr&&, mojo::StructPtr&&, mojo::StructPtr&&, std::__Cr::unique_ptr>&&, std::__Cr::optional, std::__Cr::allocator>>>&&, mojo::StructPtr&&, mojo::StructPtr&&, mojo::PendingRemote&&, mojo::PendingRemote&&, mojo::PendingAssociatedRemote&&, mojo::PendingRemote&&, mojo::PendingRemote&&, mojo::StructPtr&&, mojo::StructPtr&&, std::__Cr::unique_ptr>&&>, base::internal::BindState, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::unique_ptr>), base::WeakPtr, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, std::__Cr::unique_ptr>>, void (std::__Cr::unique_ptr>)>::RunOnce(base::internal::BindStateBase*, std::__Cr::unique_ptr>&&) base/functional/bind_internal.h:956:5 #22 0x55897edff4eb in base::OnceCallback>)>::Run(std::__Cr::unique_ptr>) && base/functional/callback.h:155:12 #23 0x55897edf8eec in content::RenderFrameImpl::CommitNavigation(mojo::StructPtr, mojo::StructPtr, mojo::StructPtr, mojo::ScopedHandleBase, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, base::TokenType const&, base::UnguessableToken const&, base::Uuid const&, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, base::OnceCallback, mojo::StructPtr)>) content/renderer/render_frame_impl.cc:2827:33 #24 0x55897eed675d in content::NavigationClient::CommitNavigation(mojo::StructPtr, mojo::StructPtr, mojo::StructPtr, mojo::ScopedHandleBase, mojo::StructPtr, std::__Cr::unique_ptr>, std::__Cr::optional, std::__Cr::allocator>>>, mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::PendingAssociatedRemote, base::TokenType const&, base::UnguessableToken const&, base::Uuid const&, mojo::StructPtr, mojo::PendingRemote, mojo::PendingRemote, mojo::StructPtr, mojo::StructPtr, base::OnceCallback, mojo::StructPtr)>) content/renderer/navigation_client.cc:87:18 #25 0x558960861f8c in content::mojom::NavigationClientStubDispatch::AcceptWithResponder(content::mojom::NavigationClient*, mojo::Message*, std::__Cr::unique_ptr>) gen/content/common/navigation_client.mojom.cc:1746:13 #26 0x558972a811b0 in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1036:56 #27 0x558972a9eef1 in mojo::MessageDispatcher::Accept(mojo::Message*) mojo/public/cpp/bindings/lib/message_dispatcher.cc:44:19 #28 0x558972a87513 in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:747:20 #29 0x5589769a77dd in IPC::ChannelAssociatedGroupController::AcceptOnEndpointThread(mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification) ipc/ipc_mojo_bootstrap.cc:1199:24 #30 0x5589769a9c65 in base::internal::Invoker, base::internal::BindState, mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #31 0x558972cc1326 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) base/functional/callback.h:155:12 #32 0x558972d389c9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) base/task/common/task_annotator.h:112:5 #33 0x558972d3783a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:340:40 #34 0x558972b7f927 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_default.cc:42:55 #35 0x558972d3a0d7 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:644:12 #36 0x558972c3bca0 in base::RunLoop::Run(base::Location const&) base/run_loop.cc:135:14 #37 0x55897efc51fb in content::RendererMain(content::MainFunctionParams) content/renderer/renderer_main.cc:337:16 #38 0x55896e7d96ef in content::RunZygote(content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:664:14 #39 0x55896e7daa1f in content::RunOtherNamedProcessTypeMain(std::__Cr::basic_string, std::__Cr::allocator> const&, content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:771:12 #40 0x55896e7dd728 in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1152:10 #41 0x55896e7d7101 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:358:36 #42 0x55896e7d76fc in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:371:10 #43 0x55895ad0cb39 in ChromeMain chrome/app/chrome_main.cc:191:12 #44 0x7f410ac2b249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) ==4090==Register values: rax = 0x0000000000000000 rbx = 0x00007ffe934ed9a0 rcx = 0x00000f6820f56744 rdx = 0x00007b4107ab3a00 rdi = 0x0000000000000000 rsi = 0x0000000000000fa0 rbp = 0x00007ffe934eda70 rsp = 0x00007ffe934ed9a0 r8 = 0x00007b4107ab3a20 r9 = 0x00007fffffffff01 r10 = 0x00007fffffffff01 r11 = 0xffffffffffffff01 r12 = 0x00007b2c02097948 r13 = 0x00000f6580412f2b r14 = 0x00007b4107ab3a40 r15 = 0x00000f6820f56740 AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV base/memory/scoped_refptr.h:264 in blink::NetworkResourcesData::EnsureFreeSpace(unsigned long) ==4090==ADDITIONAL INFO ==4090==Note: Please include this section with the ASan report. Task trace: #0 0x5589769a0df7 in IPC::ChannelAssociatedGroupController::Accept(mojo::Message*) ipc/ipc_mojo_bootstrap.cc:1138:13 Command line: `/proc/self/exe --type=renderer --crashpad-handler-pid=3976 --enable-crash-reporter=, --noerrdialogs --user-data-dir=/tmp/poc-profileF --change-stack-guard-on-fork=enable --disable-in-process-stack-traces --no-sandbox --remote-debugging-port=19222 --ozone-platform=headless --lang=en-US --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-1775927720986131 --launch-time-ticks=78093626137 --shared-files=v8_context_snapshot_data:100 --metrics-shmem-handle=4,i,8267938230839531873,6611484540117072309,2097152 --field-trial-handle=3,i,1318750926104585555,473932704861636906,262144 --variations-seed-version --pseudonymization-salt-handle=7,i,15072173408264637630,7162170322308415655,4 --trace-process-track-uuid=3190708991934122588` ==4090==END OF ADDITIONAL INFO ==4090==ABORTING