IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. Note: Google Test filter = DelegatingDesktopDisplayInfoMonitorUAF.UnderlyingOutlivesDelegating_NotifyAfterDestruction_UseAfterFree [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from DelegatingDesktopDisplayInfoMonitorUAF [ RUN ] DelegatingDesktopDisplayInfoMonitorUAF.UnderlyingOutlivesDelegating_NotifyAfterDestruction_UseAfterFree ================================================================= ==847==ERROR: AddressSanitizer: heap-use-after-free on address 0x7565f9e37568 at pc 0x561e7593edcc bp 0x7ffeba48c0f0 sp 0x7ffeba48c0e8 READ of size 8 at 0x7565f9e37568 thread T0 #0 0x561e7593edcb in void base::internal::CallbackListBase>::Notify<>() gen/third_party/libc++/src/include/list:531:34 #1 0x561e87915231 in base::internal::Invoker, base::internal::BindState>, void ()>::Run(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #2 0x561e75788aff in base::RepeatingCallback::Run() const & base/functional/callback.h:346:12 #3 0x561e7593ebb4 in void base::internal::CallbackListBase>::Notify<>() base/callback_list.h:382:9 #4 0x561e75f3a9a4 in remoting::DelegatingDesktopDisplayInfoMonitorUAF_UnderlyingOutlivesDelegating_NotifyAfterDestruction_UseAfterFree_Test::TestBody() remoting/host/delegating_desktop_display_info_monitor_unittest.cc:42:35 #5 0x561e77b6190b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x561e77b64477 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x561e77b664f3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x561e77b94f44 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x561e77b93aba in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x561e80dbe9f0 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x561e7b380ee1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #12 0x561e80dcccab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #13 0x561e80dcc5cb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #14 0x561e7b380ba4 in main remoting/base/run_all_unittests.cc:60:10 #15 0x78b5fb572249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7565f9e37568 is located 40 bytes inside of 104-byte region [0x7565f9e37540,0x7565f9e375a8) freed by thread T0 here: #0 0x561e757011a2 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/remoting_unittests+0x62011a2) (BuildId: aed29adf2d7f276f) #1 0x561e75f3a6aa in remoting::DelegatingDesktopDisplayInfoMonitorUAF_UnderlyingOutlivesDelegating_NotifyAfterDestruction_UseAfterFree_Test::TestBody() gen/third_party/libc++/src/include/__memory/unique_ptr.h:74:5 #2 0x561e77b6190b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x561e77b64477 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x561e77b664f3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x561e77b94f44 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x561e77b93aba in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x561e80dbe9f0 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x561e7b380ee1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #9 0x561e80dcccab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #10 0x561e80dcc5cb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #11 0x561e7b380ba4 in main remoting/base/run_all_unittests.cc:60:10 #12 0x78b5fb572249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x561e7570059d in operator new(unsigned long) (/chromium/chromium/src/out/asan/remoting_unittests+0x620059d) (BuildId: aed29adf2d7f276f) #1 0x561e75f3a534 in remoting::DelegatingDesktopDisplayInfoMonitorUAF_UnderlyingOutlivesDelegating_NotifyAfterDestruction_UseAfterFree_Test::TestBody() gen/third_party/libc++/src/include/__memory/unique_ptr.h:756:26 #2 0x561e77b6190b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x561e77b64477 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x561e77b664f3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x561e77b94f44 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x561e77b93aba in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x561e80dbe9f0 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x561e7b380ee1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #9 0x561e80dcccab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #10 0x561e80dcc5cb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #11 0x561e7b380ba4 in main remoting/base/run_all_unittests.cc:60:10 #12 0x78b5fb572249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-use-after-free gen/third_party/libc++/src/include/list:531:34 in void base::internal::CallbackListBase>::Notify<>() Shadow bytes around the buggy address: 0x7565f9e37280: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa 0x7565f9e37300: fa fa fa fa fa fa fd fd fd fd fd fd fd fd fd fd 0x7565f9e37380: fd fd fd fd fa fa fa fa fa fa fa fa fd fd fd fd 0x7565f9e37400: fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa fa 0x7565f9e37480: fa fa 00 00 00 00 00 00 00 00 00 00 00 00 00 fa =>0x7565f9e37500: fa fa fa fa fa fa fa fa fd fd fd fd fd[fd]fd fd 0x7565f9e37580: fd fd fd fd fd fa fa fa fa fa fa fa fa fa fa fa 0x7565f9e37600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7565f9e37680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7565f9e37700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7565f9e37780: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==847==ADDITIONAL INFO ==847==Note: Please include this section with the ASan report. Task trace: ==847==END OF ADDITIONAL INFO ==847==ABORTING [1/1] DelegatingDesktopDisplayInfoMonitorUAF.UnderlyingOutlivesDelegating_NotifyAfterDestruction_UseAfterFree (CRASHED) 1 test crashed: DelegatingDesktopDisplayInfoMonitorUAF.UnderlyingOutlivesDelegating_NotifyAfterDestruction_UseAfterFree (../../remoting/host/delegating_desktop_display_info_monitor_unittest.cc:164) Tests took 0 seconds.