[.] Sanitizer coverage enabled. Counter map size: 12114996, Cmp map size: 262144 IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. [.] Sanitizer coverage enabled. Counter map size: 12114996, Cmp map size: 262144 Note: Google Test filter = CloudPolicyValidatorTest.POC_InitialKeySubstitutionBypass:CloudPolicyValidatorTest.POC_DeprecatedPathRejectsSubstitution [==========] Running 2 tests from 1 test suite. [----------] Global test environment set-up. [----------] 2 tests from CloudPolicyValidatorTest [ RUN ] CloudPolicyValidatorTest.POC_InitialKeySubstitutionBypass [1571:1571:ERROR:components/policy/core/common/cloud/cloud_policy_validator.cc:561] [policy_type=google/chrome/user] Key mismatch: root-certified key differs from supplied new_public_key. [1571:1571:ERROR:components/policy/core/common/cloud/cloud_policy_validator.cc:468] [policy_type=google/chrome/user] Signature verification failed, has data: 1 [1571:1571:ERROR:components/policy/core/common/cloud/cloud_policy_validator.cc:480] [policy_type=google/chrome/user] Policy is missing public_key_verification_signature [1571:1571:ERROR:components/policy/core/common/cloud/cloud_policy_validator.cc:628] [policy_type=google/chrome/user] Initial policy root signature validation failed ../../components/policy/core/common/cloud/cloud_policy_validator_unittest.cc:728: Failure Expected equality of these values: CloudPolicyValidatorBase::VALIDATION_OK Which is: 0 validator->status() Which is: 12 BUG: forged response with substituted key was accepted Stack trace: #0 0x6151a4e5e864 (/chromium/chromium/src/out/asan/components_unittests+0x20c2e863) ../../components/policy/core/common/cloud/cloud_policy_validator_unittest.cc:730: Failure Value of: validator->success() Actual: false Expected: true Stack trace: #0 0x6151a4e5e9c4 (/chromium/chromium/src/out/asan/components_unittests+0x20c2e9c3) ========================================================= POC: KEY-SUBSTITUTION BYPASS CONFIRMED Root certified K_legit (94 bytes) Response carried K_evil (294 bytes) K_legit != K_evil : YES Validator status : 12 (VALIDATION_OK=0) ========================================================= [ FAILED ] CloudPolicyValidatorTest.POC_InitialKeySubstitutionBypass (66 ms) [ RUN ] CloudPolicyValidatorTest.POC_DeprecatedPathRejectsSubstitution [1571:1571:ERROR:components/policy/core/common/cloud/cloud_policy_validator.cc:468] [policy_type=] Signature verification failed, has data: 0 [1571:1571:ERROR:components/policy/core/common/cloud/cloud_policy_validator.cc:491] [policy_type=] [Deprecated] Signature verification failed [1571:1571:ERROR:components/policy/core/common/cloud/cloud_policy_validator.cc:628] [policy_type=] Initial policy root signature validation failed [ OK ] CloudPolicyValidatorTest.POC_DeprecatedPathRejectsSubstitution (110 ms) [----------] 2 tests from CloudPolicyValidatorTest (283 ms total) [----------] Global test environment tear-down [==========] 2 tests from 1 test suite ran. (322 ms total) [ PASSED ] 1 test. [ FAILED ] 1 test, listed below: [ FAILED ] CloudPolicyValidatorTest.POC_InitialKeySubstitutionBypass 1 FAILED TEST [1/2] CloudPolicyValidatorTest.POC_InitialKeySubstitutionBypass (66 ms) [2/2] CloudPolicyValidatorTest.POC_DeprecatedPathRejectsSubstitution (110 ms) 1 test failed: CloudPolicyValidatorTest.POC_InitialKeySubstitutionBypass (../../components/policy/core/common/cloud/cloud_policy_validator_unittest.cc:623) Tests took 2 seconds.