========================================================================
== TEST: X11DragDropClientTest.ClientDestroyedDuringPerformDrop
========================================================================
Note: Google Test filter = X11DragDropClientTest.ClientDestroyedDuringPerformDrop
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from X11DragDropClientTest
[ RUN      ] X11DragDropClientTest.ClientDestroyedDuringPerformDrop
=================================================================
==1822==ERROR: AddressSanitizer: heap-use-after-free on address 0x7310f0be64d0 at pc 0x5fad0f250f60 bp 0x7ffdc17c2630 sp 0x7ffdc17c2628
READ of size 4 at 0x7310f0be64d0 thread T0
    #0 0x5fad0f250f5f in ui::XDragDropClient::OnXdndDrop(x11::ClientMessageEvent const&) ui/base/x/x11_drag_drop_client.cc:623:46
    #1 0x5fad0f24fa76 in ui::XDragDropClient::HandleXdndEvent(x11::ClientMessageEvent const&) ui/base/x/x11_drag_drop_client.cc:306:5
    #2 0x5fad07c63175 in ui::X11DragDropClientTest_ClientDestroyedDuringPerformDrop_Test::TestBody() ui/ozone/platform/x11/test/x11_drag_drop_client_unittest.cc:911:22
    #3 0x5fad0845d0fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #4 0x5fad0845f2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #5 0x5fad084613c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #6 0x5fad084908fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #7 0x5fad0848f3ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #8 0x5fad0b87b25c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #9 0x5fad07b22475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #10 0x5fad0b883094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #11 0x5fad0b8829bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #12 0x5fad07b21d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #13 0x75f0f25c7249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

0x7310f0be64d0 is located 16 bytes inside of 272-byte region [0x7310f0be64c0,0x7310f0be65d0)
freed by thread T0 here:
    #0 0x5fad07b21216 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x3547216) (BuildId: b60bd4b27bf5d1c1)
    #1 0x5fad07c6a139 in ui::(anonymous namespace)::OwningDelegate::PerformDrop() third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x5fad0f250e0a in ui::XDragDropClient::OnXdndDrop(x11::ClientMessageEvent const&) ui/base/x/x11_drag_drop_client.cc:440:45
    #3 0x5fad0f24fa76 in ui::XDragDropClient::HandleXdndEvent(x11::ClientMessageEvent const&) ui/base/x/x11_drag_drop_client.cc:306:5
    #4 0x5fad07c63175 in ui::X11DragDropClientTest_ClientDestroyedDuringPerformDrop_Test::TestBody() ui/ozone/platform/x11/test/x11_drag_drop_client_unittest.cc:911:22
    #5 0x5fad0845d0fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #6 0x5fad0845f2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #7 0x5fad084613c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #8 0x5fad084908fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #9 0x5fad0848f3ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #10 0x5fad0b87b25c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #11 0x5fad07b22475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #12 0x5fad0b883094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #13 0x5fad0b8829bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #14 0x5fad07b21d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #15 0x75f0f25c7249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

previously allocated by thread T0 here:
    #0 0x5fad07b205c1 in operator new(unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x35465c1) (BuildId: b60bd4b27bf5d1c1)
    #1 0x5fad07c630b2 in ui::X11DragDropClientTest_ClientDestroyedDuringPerformDrop_Test::TestBody() third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x5fad0845d0fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x5fad0845f2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x5fad084613c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x5fad084908fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x5fad0848f3ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5fad0b87b25c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x5fad07b22475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x5fad0b883094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x5fad0b8829bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x5fad07b21d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #12 0x75f0f25c7249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

SUMMARY: AddressSanitizer: heap-use-after-free ui/base/x/x11_drag_drop_client.cc:623:46 in ui::XDragDropClient::OnXdndDrop(x11::ClientMessageEvent const&)
Shadow bytes around the buggy address:
  0x7310f0be6200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7310f0be6280: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
  0x7310f0be6300: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x7310f0be6380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7310f0be6400: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa
=>0x7310f0be6480: fa fa fa fa fa fa fa fa fd fd[fd]fd fd fd fd fd
  0x7310f0be6500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7310f0be6580: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
  0x7310f0be6600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7310f0be6680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7310f0be6700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==1822==ADDITIONAL INFO

==1822==Note: Please include this section with the ASan report.
Task trace:


==1822==END OF ADDITIONAL INFO

==1822==ABORTING

========================================================================
== TEST: X11DragDropClientTest.ClientDestroyedDuringOnBeforeDragLeave
========================================================================
Note: Google Test filter = X11DragDropClientTest.ClientDestroyedDuringOnBeforeDragLeave
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from X11DragDropClientTest
[ RUN      ] X11DragDropClientTest.ClientDestroyedDuringOnBeforeDragLeave
=================================================================
==1828==ERROR: AddressSanitizer: heap-use-after-free on address 0x79daf3de64d8 at pc 0x58e764a55563 bp 0x7ffd3b051b80 sp 0x7ffd3b051b78
READ of size 8 at 0x79daf3de64d8 thread T0
    #0 0x58e764a55562 in ui::XDragDropClient::OnXdndLeave(x11::ClientMessageEvent const&) third_party/libc++/src/include/__memory/unique_ptr.h:266:112
    #1 0x58e764a54835 in ui::XDragDropClient::HandleXdndEvent(x11::ClientMessageEvent const&) ui/base/x/x11_drag_drop_client.cc:298:5
    #2 0x58e75d468551 in ui::X11DragDropClientTest_ClientDestroyedDuringOnBeforeDragLeave_Test::TestBody() ui/ozone/platform/x11/test/x11_drag_drop_client_unittest.cc:930:15
    #3 0x58e75dc620fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #4 0x58e75dc642c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #5 0x58e75dc663c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #6 0x58e75dc958fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #7 0x58e75dc943ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #8 0x58e76108025c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #9 0x58e75d327475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #10 0x58e761088094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #11 0x58e7610879bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #12 0x58e75d326d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #13 0x7cbaf5735249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

0x79daf3de64d8 is located 24 bytes inside of 272-byte region [0x79daf3de64c0,0x79daf3de65d0)
freed by thread T0 here:
    #0 0x58e75d326216 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x3547216) (BuildId: b60bd4b27bf5d1c1)
    #1 0x58e764a553f8 in ui::XDragDropClient::OnXdndLeave(x11::ClientMessageEvent const&) ui/base/x/x11_drag_drop_client.cc:431:14
    #2 0x58e764a54835 in ui::XDragDropClient::HandleXdndEvent(x11::ClientMessageEvent const&) ui/base/x/x11_drag_drop_client.cc:298:5
    #3 0x58e75d468551 in ui::X11DragDropClientTest_ClientDestroyedDuringOnBeforeDragLeave_Test::TestBody() ui/ozone/platform/x11/test/x11_drag_drop_client_unittest.cc:930:15
    #4 0x58e75dc620fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #5 0x58e75dc642c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #6 0x58e75dc663c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #7 0x58e75dc958fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #8 0x58e75dc943ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #9 0x58e76108025c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #10 0x58e75d327475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #11 0x58e761088094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #12 0x58e7610879bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #13 0x58e75d326d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #14 0x7cbaf5735249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

previously allocated by thread T0 here:
    #0 0x58e75d3255c1 in operator new(unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x35465c1) (BuildId: b60bd4b27bf5d1c1)
    #1 0x58e75d468429 in ui::X11DragDropClientTest_ClientDestroyedDuringOnBeforeDragLeave_Test::TestBody() third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x58e75dc620fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x58e75dc642c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x58e75dc663c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x58e75dc958fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x58e75dc943ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x58e76108025c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x58e75d327475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x58e761088094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x58e7610879bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x58e75d326d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #12 0x7cbaf5735249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

SUMMARY: AddressSanitizer: heap-use-after-free third_party/libc++/src/include/__memory/unique_ptr.h:266:112 in ui::XDragDropClient::OnXdndLeave(x11::ClientMessageEvent const&)
Shadow bytes around the buggy address:
  0x79daf3de6200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x79daf3de6280: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
  0x79daf3de6300: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x79daf3de6380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x79daf3de6400: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa
=>0x79daf3de6480: fa fa fa fa fa fa fa fa fd fd fd[fd]fd fd fd fd
  0x79daf3de6500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x79daf3de6580: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
  0x79daf3de6600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x79daf3de6680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x79daf3de6700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==1828==ADDITIONAL INFO

==1828==Note: Please include this section with the ASan report.
Task trace:


==1828==END OF ADDITIONAL INFO

==1828==ABORTING

========================================================================
== TEST: X11DragDropClientTest.ClientDestroyedDuringUpdateDrag
========================================================================
Note: Google Test filter = X11DragDropClientTest.ClientDestroyedDuringUpdateDrag
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from X11DragDropClientTest
[ RUN      ] X11DragDropClientTest.ClientDestroyedDuringUpdateDrag
=================================================================
==1834==ERROR: AddressSanitizer: heap-use-after-free on address 0x7934061e64d0 at pc 0x5cf3eabfe521 bp 0x7ffd0707ad10 sp 0x7ffd0707ad08
READ of size 4 at 0x7934061e64d0 thread T0
    #0 0x5cf3eabfe520 in ui::XDragDropClient::CompleteXdndPosition(x11::Window, gfx::Point const&) ui/base/x/x11_drag_drop_client.cc:623:46
    #1 0x5cf3e36137f2 in ui::X11DragDropClientTest_ClientDestroyedDuringUpdateDrag_Test::TestBody() ui/ozone/platform/x11/test/x11_drag_drop_client_unittest.cc:944:22
    #2 0x5cf3e3e0d0fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x5cf3e3e0f2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x5cf3e3e113c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x5cf3e3e408fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x5cf3e3e3f3ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5cf3e722b25c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x5cf3e34d2475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x5cf3e7233094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x5cf3e72329bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x5cf3e34d1d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #12 0x7c1407b5f249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

0x7934061e64d0 is located 16 bytes inside of 272-byte region [0x7934061e64c0,0x7934061e65d0)
freed by thread T0 here:
    #0 0x5cf3e34d1216 in operator delete(void*, unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x3547216) (BuildId: b60bd4b27bf5d1c1)
    #1 0x5cf3e3619f89 in ui::(anonymous namespace)::OwningDelegate::UpdateDrag(gfx::Point const&) third_party/libc++/src/include/__memory/unique_ptr.h:74:5
    #2 0x5cf3eabfe3e0 in ui::XDragDropClient::CompleteXdndPosition(x11::Window, gfx::Point const&) ui/base/x/x11_drag_drop_client.cc:238:41
    #3 0x5cf3e36137f2 in ui::X11DragDropClientTest_ClientDestroyedDuringUpdateDrag_Test::TestBody() ui/ozone/platform/x11/test/x11_drag_drop_client_unittest.cc:944:22
    #4 0x5cf3e3e0d0fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #5 0x5cf3e3e0f2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #6 0x5cf3e3e113c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #7 0x5cf3e3e408fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #8 0x5cf3e3e3f3ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #9 0x5cf3e722b25c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #10 0x5cf3e34d2475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #11 0x5cf3e7233094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #12 0x5cf3e72329bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #13 0x5cf3e34d1d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #14 0x7c1407b5f249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

previously allocated by thread T0 here:
    #0 0x5cf3e34d05c1 in operator new(unsigned long) (/chromium/chromium/src/out/asan/ozone_x11_unittests+0x35465c1) (BuildId: b60bd4b27bf5d1c1)
    #1 0x5cf3e3613764 in ui::X11DragDropClientTest_ClientDestroyedDuringUpdateDrag_Test::TestBody() third_party/libc++/src/include/__memory/unique_ptr.h:756:26
    #2 0x5cf3e3e0d0fb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x5cf3e3e0f2c7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x5cf3e3e113c3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x5cf3e3e408fa in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x5cf3e3e3f3ce in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x5cf3e722b25c in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x5cf3e34d2475 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), mojo::core::test::MojoTestSuiteBase*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<mojo::core::test::MojoTestSuiteBase, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x5cf3e7233094 in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x5cf3e72329bf in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x5cf3e34d1d2d in main mojo/core/test/run_all_unittests.cc:30:10
    #12 0x7c1407b5f249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 93ac61ec5a8eb1396f9fbd350e3169a558528a40)

SUMMARY: AddressSanitizer: heap-use-after-free ui/base/x/x11_drag_drop_client.cc:623:46 in ui::XDragDropClient::CompleteXdndPosition(x11::Window, gfx::Point const&)
Shadow bytes around the buggy address:
  0x7934061e6200: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7934061e6280: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
  0x7934061e6300: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x7934061e6380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7934061e6400: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa
=>0x7934061e6480: fa fa fa fa fa fa fa fa fd fd[fd]fd fd fd fd fd
  0x7934061e6500: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7934061e6580: fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa fa
  0x7934061e6600: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7934061e6680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7934061e6700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==1834==ADDITIONAL INFO

==1834==Note: Please include this section with the ASan report.
Task trace:


==1834==END OF ADDITIONAL INFO

==1834==ABORTING