IMPORTANT DEBUGGING NOTE: batches of tests are run inside their
own process. For debugging a test inside a debugger, use the
--gtest_filter=<your_test_name> flag along with
--single-process-tests.
Using sharding settings from environment. This is shard 0/1
Using 1 parallel jobs.
Note: Google Test filter = HeadlessWindowUAFTest.SetFullscreenAfterDestroyInOnBoundsChanged:HeadlessWindowUAFTest.MinimizeAfterDestroyInOnWindowStateChanged
[==========] Running 2 tests from 1 test suite.
[----------] Global test environment set-up.
[----------] 2 tests from HeadlessWindowUAFTest
[ RUN      ] HeadlessWindowUAFTest.SetFullscreenAfterDestroyInOnBoundsChanged
=================================================================
==1033==ERROR: AddressSanitizer: heap-use-after-free on address 0x76e5849e78ec at pc 0x64cb86f3888f bp 0x7ffc45b19c10 sp 0x7ffc45b19c08
READ of size 4 at 0x76e5849e78ec thread T0
    #0 0x64cb86f3888e in ui::HeadlessWindow::SetFullscreen(bool, long) ui/ozone/platform/headless/headless_window.cc:205:27
    #1 0x64cb852551d4 in ui::(anonymous namespace)::HeadlessWindowUAFTest_SetFullscreenAfterDestroyInOnBoundsChanged_Test::TestBody() ui/ozone/platform/headless/headless_window_unittest.cc:111:15
    #2 0x64cb861340eb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x64cb86136d47 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x64cb86138e43 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x64cb8616828a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x64cb86166d5e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x64cb880a878c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x64cb8524da51 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x64cb8831f03b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x64cb8831e95b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x64cb8524d30b in main mojo/core/test/run_all_unittests.cc:30:10
    #12 0x7a3586099249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x76e5849e78ec is located 92 bytes inside of 104-byte region [0x76e5849e7890,0x76e5849e78f8)
freed by thread T0 here:
    #0 0x64cb8524c856 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/ozone_unittests+0x2a8b856) (BuildId: 6949a4af44665d89)
    #1 0x64cb86f38d3b in ui::HeadlessWindow::ZoomWindowBounds() ui/ozone/platform/headless/headless_window.cc:199:14
    #2 0x64cb86f385cf in ui::HeadlessWindow::SetFullscreen(bool, long) ui/ozone/platform/headless/headless_window.cc:86:5
    #3 0x64cb852551d4 in ui::(anonymous namespace)::HeadlessWindowUAFTest_SetFullscreenAfterDestroyInOnBoundsChanged_Test::TestBody() ui/ozone/platform/headless/headless_window_unittest.cc:111:15
    #4 0x64cb861340eb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #5 0x64cb86136d47 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #6 0x64cb86138e43 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #7 0x64cb8616828a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #8 0x64cb86166d5e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #9 0x64cb880a878c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #10 0x64cb8524da51 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #11 0x64cb8831f03b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #12 0x64cb8831e95b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #13 0x64cb8524d30b in main mojo/core/test/run_all_unittests.cc:30:10
    #14 0x7a3586099249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

previously allocated by thread T0 here:
    #0 0x64cb8524bc51 in operator new(unsigned long) (/chromium/chromium/src/out/asan/ozone_unittests+0x2a8ac51) (BuildId: 6949a4af44665d89)
    #1 0x64cb8525511a in ui::(anonymous namespace)::HeadlessWindowUAFTest_SetFullscreenAfterDestroyInOnBoundsChanged_Test::TestBody() third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x64cb861340eb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x64cb86136d47 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x64cb86138e43 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x64cb8616828a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x64cb86166d5e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x64cb880a878c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x64cb8524da51 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x64cb8831f03b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x64cb8831e95b in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x64cb8524d30b in main mojo/core/test/run_all_unittests.cc:30:10
    #12 0x7a3586099249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

SUMMARY: AddressSanitizer: heap-use-after-free ui/ozone/platform/headless/headless_window.cc:205:27 in ui::HeadlessWindow::SetFullscreen(bool, long)
Shadow bytes around the buggy address:
  0x76e5849e7600: fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa fa
  0x76e5849e7680: fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa
  0x76e5849e7700: fa fa fa fa fa fa fd fd fd fd fd fd fd fd fd fd
  0x76e5849e7780: fd fd fd fd fa fa fa fa fa fa fa fa fd fd fd fd
  0x76e5849e7800: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
=>0x76e5849e7880: fa fa fd fd fd fd fd fd fd fd fd fd fd[fd]fd fa
  0x76e5849e7900: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x76e5849e7980: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x76e5849e7a00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x76e5849e7a80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x76e5849e7b00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==1033==ADDITIONAL INFO

==1033==Note: Please include this section with the ASan report.
Task trace:


==1033==END OF ADDITIONAL INFO

==1033==ABORTING
[0526/093607.609330:ERROR:base/test/launcher/test_launcher.cc:1318] no test result for HeadlessWindowUAFTest.MinimizeAfterDestroyInOnWindowStateChanged
[1/2] HeadlessWindowUAFTest.SetFullscreenAfterDestroyInOnBoundsChanged (CRASHED)
[2/2] HeadlessWindowUAFTest.MinimizeAfterDestroyInOnWindowStateChanged (SKIPPED)
1 test crashed:
    HeadlessWindowUAFTest.SetFullscreenAfterDestroyInOnBoundsChanged (../../ui/ozone/platform/headless/headless_window_unittest.cc:97)
1 test not run:
    HeadlessWindowUAFTest.MinimizeAfterDestroyInOnWindowStateChanged (../../ui/ozone/platform/headless/headless_window_unittest.cc:124)
Tests took 0 seconds.