IMPORTANT DEBUGGING NOTE: batches of tests are run inside their
own process. For debugging a test inside a debugger, use the
--gtest_filter=<your_test_name> flag along with
--single-process-tests.
Using sharding settings from environment. This is shard 0/1
Using 1 parallel jobs.
Note: Google Test filter = MenuControllerTest.OnMousePressedDestroyedDuringSetHotTrackedButton
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from MenuControllerTest
[ RUN      ] MenuControllerTest.OnMousePressedDestroyedDuringSetHotTrackedButton

(views_unittests:1483): dbind-WARNING **: 07:45:48.783: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory
=================================================================
==1483==ERROR: AddressSanitizer: heap-use-after-free on address 0x7b8c6d619c48 at pc 0x5fc7612e8aff bp 0x7ffc56ad6610 sp 0x7ffc56ad6608
READ of size 8 at 0x7b8c6d619c48 thread T0
    #0 0x5fc7612e8afe in base::internal::WeakReferenceOwner::GetRef() const base/memory/scoped_refptr.h:260:62
    #1 0x5fc760ec9528 in views::MenuController::OnMousePressed(views::SubmenuView*, ui::MouseEvent const&) base/memory/weak_ptr.h:382:45
    #2 0x5fc750d66fd4 in views::MenuControllerTest::ProcessMousePressed(views::SubmenuView*, ui::MouseEvent const&) ui/views/controls/menu/menu_controller_unittest.cc:916:28
    #3 0x5fc750db399a in views::MenuControllerTest_OnMousePressedDestroyedDuringSetHotTrackedButton_Test::TestBody() ui/views/controls/menu/menu_controller_unittest.cc:3095:3
    #4 0x5fc75232934b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #5 0x5fc75232bfa7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #6 0x5fc75232e0a3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #7 0x5fc75235d4ea in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #8 0x5fc75235bfbe in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #9 0x5fc76168c71c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #10 0x5fc7520ecee1 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), views::ViewsTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<views::ViewsTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #11 0x5fc7616940db in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #12 0x5fc7616939fb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #13 0x5fc7520ec60d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10
    #14 0x5fc7517f33a4 in main ui/views/run_all_unittests_main.cc:10:44
    #15 0x7dfc6ea45249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x7b8c6d619c48 is located 968 bytes inside of 984-byte region [0x7b8c6d619880,0x7b8c6d619c58)
freed by thread T0 here:
    #0 0x5fc7508d2e56 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/views_unittests+0x8ab5e56) (BuildId: bd190686ffde3aca)
    #1 0x5fc750d6259a in views::MenuControllerTest::DestroyMenuController() ui/views/controls/menu/menu_controller_unittest.cc:1013:3
    #2 0x5fc750e12e2a in base::internal::Invoker<base::internal::FunctorTraits<void (* const&)(views::MenuControllerTest_OnMousePressedDestroyedDuringSetHotTrackedButton_Test::TestBody()::$_0 const&, ui::AXPlatformNodeDelegate const*, ax::mojom::Event), views::MenuControllerTest_OnMousePressedDestroyedDuringSetHotTrackedButton_Test::TestBody()::$_0 const&>, base::internal::BindState<false, true, false, void (*)(views::MenuControllerTest_OnMousePressedDestroyedDuringSetHotTrackedButton_Test::TestBody()::$_0 const&, ui::AXPlatformNodeDelegate const*, ax::mojom::Event), views::MenuControllerTest_OnMousePressedDestroyedDuringSetHotTrackedButton_Test::TestBody()::$_0>, void (ui::AXPlatformNodeDelegate const*, ax::mojom::Event)>::Run(base::internal::BindStateBase*, ui::AXPlatformNodeDelegate const*, ax::mojom::Event) base/functional/bind_internal.h:673:12
    #3 0x5fc760cf45f1 in base::RepeatingCallback<void (ui::AXPlatformNodeDelegate const*, ax::mojom::Event)>::Run(ui::AXPlatformNodeDelegate const*, ax::mojom::Event) const & base/functional/callback.h:346:12
    #4 0x5fc76127dd85 in views::ViewAXPlatformNodeDelegate::FireNativeEvent(ax::mojom::Event) ui/views/accessibility/view_ax_platform_node_delegate.cc:281:36
    #5 0x5fc760d255fc in views::ViewAccessibility::NotifyEvent(ax::mojom::Event, bool) ui/views/accessibility/view_accessibility.cc:263:5
    #6 0x5fc760ec93d3 in views::MenuController::OnMousePressed(views::SubmenuView*, ui::MouseEvent const&) ui/views/controls/menu/menu_controller.cc:911:7
    #7 0x5fc750d66fd4 in views::MenuControllerTest::ProcessMousePressed(views::SubmenuView*, ui::MouseEvent const&) ui/views/controls/menu/menu_controller_unittest.cc:916:28
    #8 0x5fc750db399a in views::MenuControllerTest_OnMousePressedDestroyedDuringSetHotTrackedButton_Test::TestBody() ui/views/controls/menu/menu_controller_unittest.cc:3095:3
    #9 0x5fc75232934b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #10 0x5fc75232bfa7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #11 0x5fc75232e0a3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #12 0x5fc75235d4ea in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #13 0x5fc75235bfbe in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #14 0x5fc76168c71c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #15 0x5fc7520ecee1 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), views::ViewsTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<views::ViewsTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #16 0x5fc7616940db in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #17 0x5fc7616939fb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #18 0x5fc7520ec60d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10
    #19 0x5fc7517f33a4 in main ui/views/run_all_unittests_main.cc:10:44
    #20 0x7dfc6ea45249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

previously allocated by thread T0 here:
    #0 0x5fc7508d2251 in operator new(unsigned long) (/chromium/chromium/src/out/asan/views_unittests+0x8ab5251) (BuildId: bd190686ffde3aca)
    #1 0x5fc750d615e1 in views::MenuControllerTest::SetUp() ui/views/controls/menu/menu_controller_unittest.cc:575:7
    #2 0x5fc7523291e1 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x5fc75232bfa7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x5fc75232e0a3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x5fc75235d4ea in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x5fc75235bfbe in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5fc76168c71c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x5fc7520ecee1 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), views::ViewsTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<views::ViewsTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x5fc7616940db in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x5fc7616939fb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x5fc7520ec60d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10
    #12 0x5fc7517f33a4 in main ui/views/run_all_unittests_main.cc:10:44
    #13 0x7dfc6ea45249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

SUMMARY: AddressSanitizer: heap-use-after-free base/memory/scoped_refptr.h:260:62 in base::internal::WeakReferenceOwner::GetRef() const
Shadow bytes around the buggy address:
  0x7b8c6d619980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7b8c6d619a00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7b8c6d619a80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7b8c6d619b00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7b8c6d619b80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x7b8c6d619c00: fd fd fd fd fd fd fd fd fd[fd]fd fa fa fa fa fa
  0x7b8c6d619c80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7b8c6d619d00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7b8c6d619d80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7b8c6d619e00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7b8c6d619e80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==1483==ADDITIONAL INFO

==1483==Note: Please include this section with the ASan report.
Task trace:


==1483==END OF ADDITIONAL INFO

==1483==ABORTING
[1/1] MenuControllerTest.OnMousePressedDestroyedDuringSetHotTrackedButton (CRASHED)
1 test crashed:
    MenuControllerTest.OnMousePressedDestroyedDuringSetHotTrackedButton (../../ui/views/controls/menu/menu_controller_unittest.cc:3055)
Tests took 0 seconds.