[.] Sanitizer coverage enabled. Counter map size: 12114808, Cmp map size: 262144 Note: Google Test filter = PaymentsNetworkInterfaceTest.GetBnplPaymentInstrumentForFetchingUrl_RiskDataUafOnDeferredOAuth [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from PaymentsNetworkInterfaceTest [ RUN ] PaymentsNetworkInterfaceTest.GetBnplPaymentInstrumentForFetchingUrl_RiskDataUafOnDeferredOAuth ================================================================= ==821==ERROR: AddressSanitizer: heap-use-after-free on address 0x7a41376d04c0 at pc 0x57339e86f865 bp 0x7ffe098f66b0 sp 0x7ffe098f5e70 READ of size 256 at 0x7a41376d04c0 thread T0 #0 0x57339e86f864 in __asan_memmove (/chromium/chromium/src/out/asan/components_unittests+0x1718b864) (BuildId: 7815d95408a9f641) #1 0x5733caeda651 in base::Value::Value(std::__Cr::basic_string_view>) gen/third_party/libc++/src/include/__string/constexpr_c_functions.h:227:5 #2 0x5733caee09cc in base::DictValue::Set(std::__Cr::basic_string_view>, std::__Cr::basic_string_view>) & base/values.cc:572:19 #3 0x5733d50012ad in autofill::payments::PaymentsRequest::BuildRiskDictionary(std::__Cr::basic_string_view>) components/autofill/core/browser/payments/payments_requests/payments_request.cc:65:13 #4 0x5733d4ff43c0 in autofill::payments::GetBnplPaymentInstrumentForFetchingUrlRequest::GetRequestContent() components/autofill/core/browser/payments/payments_requests/get_bnpl_payment_instrument_for_fetching_url_request.cc:55:16 #5 0x5733d4fe7d0b in autofill::payments::PaymentsNetworkInterfaceBase::SetOAuth2TokenAndStartRequest() components/autofill/core/browser/payments/payments_network_interface_base.cc:370:55 #6 0x5733d4fea0c2 in void base::internal::DecayedFunctorTraits::Invoke(void (autofill::payments::PaymentsNetworkInterfaceBase::*)(GoogleServiceAuthError, signin::AccessTokenInfo), autofill::payments::PaymentsNetworkInterfaceBase*&&, GoogleServiceAuthError&&, signin::AccessTokenInfo&&) base/functional/bind_internal.h:740:12 #7 0x5733d4fe9ec9 in base::internal::Invoker, base::internal::BindState>, void (GoogleServiceAuthError, signin::AccessTokenInfo)>::RunOnce(base::internal::BindStateBase*, GoogleServiceAuthError&&, signin::AccessTokenInfo&&) base/functional/bind_internal.h:932:12 #8 0x5733b38bc3fd in signin::AccessTokenFetcher::RunCallbackAndMaybeDie(GoogleServiceAuthError, signin::AccessTokenInfo) base/functional/callback.h:155:12 #9 0x5733b38bc04b in signin::AccessTokenFetcher::OnGetTokenSuccess(OAuth2AccessTokenManager::Request const*, OAuth2AccessTokenConsumer::TokenResponse const&) components/signin/public/identity_manager/access_token_fetcher.cc:237:3 #10 0x5733d487d06c in FakeOAuth2AccessTokenManager::CompleteRequests(CoreAccountId const&, bool, std::__Cr::set, std::__Cr::allocator>, std::__Cr::less, std::__Cr::allocator, std::__Cr::allocator>>> const&, GoogleServiceAuthError const&, OAuth2AccessTokenConsumer::TokenResponse const&) google_apis/gaia/fake_oauth2_access_token_manager.cc:151:24 #11 0x5733d487dd38 in FakeOAuth2AccessTokenManager::IssueTokenForAllPendingRequests(OAuth2AccessTokenConsumer::TokenResponse const&) google_apis/gaia/fake_oauth2_access_token_manager.cc:118:3 #12 0x5733be5195db in signin::IdentityTestEnvironment::WaitForAccessTokenRequestIfNecessaryAndRespondWithToken(std::__Cr::basic_string, std::__Cr::allocator> const&, base::Time const&, std::__Cr::basic_string, std::__Cr::allocator> const&) components/signin/public/identity_manager/identity_test_environment.cc:530:25 #13 0x5733d5c39c88 in autofill::payments::PaymentsNetworkInterfaceTestBase::IssueOAuthToken() components/autofill/core/browser/payments/payments_network_interface_test_base.cc:63:22 #14 0x5733a1de1c6d in autofill::payments::(anonymous namespace)::PaymentsNetworkInterfaceTest_GetBnplPaymentInstrumentForFetchingUrl_RiskDataUafOnDeferredOAuth_Test::TestBody() components/autofill/core/browser/payments/payments_network_interface_unittest.cc:2154:3 #15 0x5733be18579b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #16 0x5733be188817 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #17 0x5733be18a893 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #18 0x5733be1b9a14 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #19 0x5733be1b858a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #20 0x5733d39371e0 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #21 0x5733e08b2c15 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #22 0x5733c608b680 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #23 0x5733d395003b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #24 0x5733d394f95b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #25 0x7d2139645249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7a41376d04c0 is located 0 bytes inside of 264-byte region [0x7a41376d04c0,0x7a41376d05c8) freed by thread T0 here: #0 0x57339e8ab012 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x171c7012) (BuildId: 7815d95408a9f641) #1 0x5733a1de1c40 in autofill::payments::(anonymous namespace)::PaymentsNetworkInterfaceTest_GetBnplPaymentInstrumentForFetchingUrl_RiskDataUafOnDeferredOAuth_Test::TestBody() gen/third_party/libc++/src/include/__new/allocate.h:62:10 #2 0x5733be18579b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x5733be188817 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x5733be18a893 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x5733be1b9a14 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x5733be1b858a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x5733d39371e0 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x5733e08b2c15 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #9 0x5733c608b680 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x5733d395003b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x5733d394f95b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x7d2139645249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x57339e8aa40d in operator new(unsigned long) (/chromium/chromium/src/out/asan/components_unittests+0x171c640d) (BuildId: 7815d95408a9f641) #1 0x57339e8ac9bc in std::__Cr::basic_string, std::__Cr::allocator>::__init_internal_buffer(unsigned long) gen/third_party/libc++/src/include/__new/allocate.h:42:28 #2 0x5733a1de1736 in autofill::payments::(anonymous namespace)::PaymentsNetworkInterfaceTest_GetBnplPaymentInstrumentForFetchingUrl_RiskDataUafOnDeferredOAuth_Test::TestBody() gen/third_party/libc++/src/include/string:2683:17 #3 0x5733be18579b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x5733be188817 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x5733be18a893 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x5733be1b9a14 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x5733be1b858a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x5733d39371e0 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x5733e08b2c15 in content::UnitTestTestSuite::Run() content/public/test/unittest_test_suite.cc:193:23 #10 0x5733c608b680 in base::internal::Invoker>&&>, base::internal::BindState>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x5733d395003b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x5733d394f95b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x7d2139645249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) Shadow bytes around the buggy address: 0x7a41376d0200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7a41376d0280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa 0x7a41376d0300: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x7a41376d0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7a41376d0400: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa =>0x7a41376d0480: fa fa fa fa fa fa fa fa[fd]fd fd fd fd fd fd fd 0x7a41376d0500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x7a41376d0580: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa 0x7a41376d0600: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x7a41376d0680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7a41376d0700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb WARNING: All log messages before absl::InitializeLog() is called are written to STDERR E0000 00:00:1779240080.888454 821 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==821==ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779240080.888591 821 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==821==Note: Please include this section with the ASan report. === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779240080.888632 821 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779240080.888665 821 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779240080.888695 821 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==821==END OF ADDITIONAL INFO === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31 E0000 00:00:1779240080.888729 821 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: ==821==ABORTING === Source Location Trace: === ../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31