IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. Note: Google Test filter = ViewLayerTest.OrphanLayersUseAfterFreeWhenObserverFreesParent [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from ViewLayerTest [ RUN ] ViewLayerTest.OrphanLayersUseAfterFreeWhenObserverFreesParent (views_unittests:869): dbind-WARNING **: 20:57:47.079: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/104146510/at-spi/bus_20: No such file or directory ================================================================= ==869==ERROR: AddressSanitizer: heap-use-after-free on address 0x77a9693f3bd0 at pc 0x64b3c71b761f bp 0x7ffda2c98dd0 sp 0x7ffda2c98dc8 READ of size 8 at 0x77a9693f3bd0 thread T0 #0 0x64b3c71b761e in base::internal::WeakReferenceOwner::GetRef() const base/memory/scoped_refptr.h:260:62 #1 0x64b3cb452998 in ui::Layer::Remove(ui::Layer*) base/memory/weak_ptr.h:382:45 #2 0x64b3c6feed13 in views::View::OrphanLayers() ui/views/view.cc:3782:17 #3 0x64b3c6fc1377 in views::View::DoRemoveChildView(views::View*, bool, bool, views::View*) ui/views/view.cc:3372:9 #4 0x64b3b7a1148a in views::ViewLayerTest_OrphanLayersUseAfterFreeWhenObserverFreesParent_Test::TestBody() ui/views/view_unittest.cc:6415:14 #5 0x64b3b83c18ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x64b3b83c4417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x64b3b83c6493 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x64b3b83f4ee4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x64b3b83f3a5a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x64b3c754d740 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x64b3b81ac4a1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #12 0x64b3c7554c8b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #13 0x64b3c75545ab in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #14 0x64b3b81abc6d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #15 0x64b3b78bc6e4 in main ui/views/run_all_unittests_main.cc:10:44 #16 0x7a296aa45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x77a9693f3bd0 is located 848 bytes inside of 864-byte region [0x77a9693f3880,0x77a9693f3be0) freed by thread T0 here: #0 0x64b3b69b8ddd in operator delete(void*) (/chromium/chromium/src/out/asan/views_unittests+0x8924ddd) (BuildId: f81385bfc68d9ddc) #1 0x64b3cb486b6e in void base::ObserverList>::Notify(T, ui::LayerAnimationSequence* const&) gen/third_party/libc++/src/include/__type_traits/invoke.h:90:27 #2 0x64b3cb483f11 in ui::LayerAnimationSequence::ProgressToEnd(ui::LayerAnimationDelegate*) ui/compositor/layer_animation_sequence.cc #3 0x64b3cb494bf3 in ui::LayerAnimator::FinishAnimation(ui::LayerAnimationSequence*, bool) ui/compositor/layer_animator.cc:487:13 #4 0x64b3cb489ff1 in ui::LayerAnimator::StopAnimatingProperty(ui::LayerAnimationElement::AnimatableProperty) ui/compositor/layer_animator.cc:374:5 #5 0x64b3cb452b27 in ui::Layer::Remove(ui::Layer*) ui/compositor/layer.cc:432:21 #6 0x64b3c6feed13 in views::View::OrphanLayers() ui/views/view.cc:3782:17 #7 0x64b3c6fc1377 in views::View::DoRemoveChildView(views::View*, bool, bool, views::View*) ui/views/view.cc:3372:9 #8 0x64b3b7a1148a in views::ViewLayerTest_OrphanLayersUseAfterFreeWhenObserverFreesParent_Test::TestBody() ui/views/view_unittest.cc:6415:14 #9 0x64b3b83c18ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x64b3b83c4417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #11 0x64b3b83c6493 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #12 0x64b3b83f4ee4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #13 0x64b3b83f3a5a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #14 0x64b3c754d740 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #15 0x64b3b81ac4a1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #16 0x64b3c7554c8b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #17 0x64b3c75545ab in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #18 0x64b3b81abc6d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #19 0x64b3b78bc6e4 in main ui/views/run_all_unittests_main.cc:10:44 #20 0x7a296aa45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) previously allocated by thread T0 here: #0 0x64b3b69b859d in operator new(unsigned long) (/chromium/chromium/src/out/asan/views_unittests+0x892459d) (BuildId: f81385bfc68d9ddc) #1 0x64b3b7a1089a in views::ViewLayerTest_OrphanLayersUseAfterFreeWhenObserverFreesParent_Test::TestBody() ui/compositor/layer.h:76:3 #2 0x64b3b83c18ab in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x64b3b83c4417 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x64b3b83c6493 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x64b3b83f4ee4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x64b3b83f3a5a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x64b3c754d740 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x64b3b81ac4a1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #9 0x64b3c7554c8b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #10 0x64b3c75545ab in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #11 0x64b3b81abc6d in views::ViewsTestSuite::RunTests() ui/views/views_test_suite.cc:39:10 #12 0x64b3b78bc6e4 in main ui/views/run_all_unittests_main.cc:10:44 #13 0x7a296aa45249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-use-after-free base/memory/scoped_refptr.h:260:62 in base::internal::WeakReferenceOwner::GetRef() const Shadow bytes around the buggy address: 0x77a9693f3900: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x77a9693f3980: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x77a9693f3a00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x77a9693f3a80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x77a9693f3b00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd =>0x77a9693f3b80: fd fd fd fd fd fd fd fd fd fd[fd]fd fa fa fa fa 0x77a9693f3c00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x77a9693f3c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x77a9693f3d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x77a9693f3d80: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 0x77a9693f3e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==869==ADDITIONAL INFO ==869==Note: Please include this section with the ASan report. Task trace: ==869==END OF ADDITIONAL INFO ==869==ABORTING [1/1] ViewLayerTest.OrphanLayersUseAfterFreeWhenObserverFreesParent (CRASHED) 1 test crashed: ViewLayerTest.OrphanLayersUseAfterFreeWhenObserverFreesParent (../../ui/views/view_unittest.cc:6347) Tests took 0 seconds.