==174275==ERROR: AddressSanitizer: heap-use-after-free on address 0x6100000294b8 at pc 0x55a5a4d6e5a6 bp 0x7ffce80bfc00 sp 0x7ffce80bfbf8 READ of size 8 at 0x6100000294b8 thread T0 (chrome) 2022-06-18T19:02:00.457953Z ERROR chrome[174275:174367]: [object_proxy.cc(623)] Failed to call method: org.chromium.debugd.GetPerfOutputV2: object_path= /org/chromium/debugd: org.freedesktop.DBus.Error.ServiceUnknown: The name org.chromium.debugd was not provided by any .service files #0 0x55a5a4d6e5a5 in std::Cr::vector >::begin() buildtools/third_party/libc++/trunk/include/vector:1427:30 #1 0x55a5a4d6e5a5 in decltype(std::forward >&>(fp).begin()) base::internal::begin >&>(std::Cr::vector >&, base::internal::priority_tag<1ul>) base/ranges/ranges.h:44:37 #2 0x55a5a4d6e5a5 in decltype(internal::begin(std::forward >&>(fp), (base::internal::priority_tag<2ul>)())) base::ranges::begin >&>(std::Cr::vector >&) base/ranges/ranges.h:105:10 #3 0x55a5a4d6e5a5 in auto base::ranges::find_if >&, base::ObserverList::RemoveObserver(ash::CalendarViewController::Observer const*)::'lambda'(auto const&), base::identity, std::Cr::random_access_iterator_tag>(auto&&, base::ObserverList::RemoveObserver(ash::CalendarViewController::Observer const*)::'lambda'(auto const&), base::identity) base/ranges/algorithm.h:483:26 #4 0x55a5a4d6e5a5 in base::ObserverList::RemoveObserver(ash::CalendarViewController::Observer const*) base/observer_list.h:286:21 #5 0x55a5a4d77e93 in base::ScopedObservation::Reset() base/scoped_observation.h:71:7 #6 0x55a5a4d77e93 in base::ScopedObservation::~ScopedObservation() base/scoped_observation.h:55:26 #7 0x55a5a4d77e93 in ash::CalendarEventListView::~CalendarEventListView() ash/system/time/calendar_event_list_view.cc:162:47 #8 0x55a5a4d78022 in ash::CalendarEventListView::~CalendarEventListView() ash/system/time/calendar_event_list_view.cc:162:47 #9 0x55a5a4d78022 in non-virtual thunk to ash::CalendarEventListView::~CalendarEventListView() ash/system/time/calendar_event_list_view.cc #10 0x55a5a43bf4f1 in views::View::~View() ui/views/view.cc:254:9 #11 0x55a5a4d5ce97 in ash::CalendarView::~CalendarView() ash/system/time/calendar_view.cc:497:1 #12 0x55a5a4d5e048 in ash::CalendarView::~CalendarView() ash/system/time/calendar_view.cc:477:31 #13 0x55a5a4d5e048 in non-virtual thunk to ash::CalendarView::~CalendarView() ash/system/time/calendar_view.cc #14 0x55a5a43bf4f1 in views::View::~View() ui/views/view.cc:254:9 #15 0x55a5a4d85d67 in ash::(anonymous namespace)::DetailedViewContainer::~DetailedViewContainer() ash/system/unified/unified_system_tray_view.cc:52:45 #16 0x55a5a43bf4f1 in views::View::~View() ui/views/view.cc:254:9 #17 0x55a5a4d838f1 in ash::UnifiedSystemTrayView::~UnifiedSystemTrayView() ash/system/unified/unified_system_tray_view.cc:235:47 #18 0x55a5a43c1804 in std::Cr::default_delete::operator()(views::View*) const buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:51:5 #19 0x55a5a43c1804 in std::Cr::unique_ptr >::reset(views::View*) buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:308:7 #20 0x55a5a43c1804 in std::Cr::unique_ptr >::~unique_ptr() buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:262:19 #21 0x55a5a43c1804 in views::View::DoRemoveChildView(views::View*, bool, bool, views::View*) ui/views/view.cc:2682:1 #22 0x55a5a43c1a43 in views::View::RemoveAllChildViews() ui/views/view.cc:329:5 #23 0x55a5a4ce5172 in ash::UnifiedSystemTrayBubble::~UnifiedSystemTrayBubble() ash/system/unified/unified_system_tray_bubble.cc:91:17 #24 0x55a5a4ce5483 in ash::UnifiedSystemTrayBubble::~UnifiedSystemTrayBubble() ash/system/unified/unified_system_tray_bubble.cc:78:53 #25 0x55a5a4cc2888 in ash::UnifiedSystemTray::HideBubbleInternal() ash/system/unified/unified_system_tray.cc:650:3 #26 0x55a5a4cc2888 in ash::UnifiedSystemTray::CloseBubble() ash/system/unified/unified_system_tray.cc:539:3 #27 0x55a5a4c948bf in ash::TrayEventFilter::ProcessPressedEvent(ui::LocatedEvent const&) ash/system/tray/tray_event_filter.cc:170:27 #28 0x55a5a09f8276 in ui::EventDispatcher::DispatchEvent(ui::EventHandler*, ui::Event*) ui/events/event_dispatcher.cc:190:12 #29 0x55a5a09f7f85 in ui::EventDispatcher::DispatchEventToEventHandlers(std::Cr::vector >*, ui::Event*) ui/events/event_dispatcher.cc:177:7 #30 0x55a5a09f75be in ui::EventDispatcher::ProcessEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:125:3 #31 0x55a5a09f7236 in ui::EventDispatcherDelegate::DispatchEventToTarget(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:83:14 #32 0x55a5a09f6fc6 in ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:55:15 #33 0x55a5a3fbeed9 in ui::EventProcessor::OnEventFromSource(ui::Event*) ui/events/event_processor.cc:49:17 #34 0x55a5a09fba88 in ui::EventSource::DeliverEventToSink(ui::Event*) ui/events/event_source.cc:118:16 #35 0x55a5a09fbf90 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:66:14 #36 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #37 0x55a593d63d23 in ui::EventRewriterChromeOS::RewriteMouseButtonEvent(ui::MouseEvent const&, base::WeakPtr) ui/chromeos/events/event_rewriter_chromeos.cc:1276:12 #38 0x55a593d64263 in ui::EventRewriterChromeOS::RewriteEvent(ui::Event const&, base::WeakPtr) ui/chromeos/events/event_rewriter_chromeos.cc:758:12 #39 0x55a5a09fbf40 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:67:32 #40 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #41 0x55a5a46e1880 in ash::KeyboardDrivenEventRewriter::RewriteEvent(ui::Event const&, base::WeakPtr) ash/events/keyboard_driven_event_rewriter.cc:31:12 #42 0x55a5a09fbf40 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:67:32 #43 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #44 0x55a5a46dd72c in ash::AccessibilityEventRewriter::RewriteEvent(ui::Event const&, base::WeakPtr) ash/events/accessibility_event_rewriter.cc #45 0x55a5a09fbf40 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:67:32 #46 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #47 0x55a5a44ac96e in ash::AutoclickDragEventRewriter::RewriteEvent(ui::Event const&, base::WeakPtr) ash/accessibility/autoclick/autoclick_drag_event_rewriter.cc #48 0x55a5a09fbf40 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:67:32 #49 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #50 0x55a5a44ba52b in ash::FullscreenMagnifierController::RewriteEvent(ui::Event const&, base::WeakPtr) ash/accessibility/magnifier/fullscreen_magnifier_controller.cc #51 0x55a5a09fb72b in ui::EventSource::SendEventToSinkFromRewriter(ui::Event const*, ui::EventRewriter const*) ui/events/event_source.cc:144:29 #52 0x55a5a4718fbb in aura::WindowTreeHostPlatform::DispatchEvent(ui::Event*) ui/aura/window_tree_host_platform.cc:229:38 #53 0x55a5a4720718 in ash::AshWindowTreeHostPlatform::DispatchEvent(ui::Event*) ash/host/ash_window_tree_host_platform.cc:207:40 #54 0x55a5a0a0a4f7 in base::OnceCallback::Run(ui::Event*) && base/callback.h:143:12 #55 0x55a5a0a0a4f7 in ui::DispatchEventFromNativeUiEvent(ui::Event* const&, base::OnceCallback) ui/events/ozone/events_ozone.cc:36:25 #56 0x55a590d39547 in ui::X11Window::DispatchUiEvent(ui::Event*, x11::Event const&) ui/ozone/platform/x11/x11_window.cc:1359:3 #57 0x55a590d38d99 in ui::X11Window::DispatchEvent(ui::Event* const&) ui/ozone/platform/x11/x11_window.cc:1312:3 #58 0x55a590d39882 in non-virtual thunk to ui::X11Window::DispatchEvent(ui::Event* const&) ui/ozone/platform/x11/x11_window.cc #59 0x55a5a09a03f1 in ui::PlatformEventSource::DispatchEvent(ui::Event*) ui/events/platform/platform_event_source.cc:99:29 #60 0x55a5a1135433 in ui::X11EventSource::OnEvent(x11::Event const&) ui/events/platform/x11/x11_event_source.cc:287:5 #61 0x55a590937dbd in x11::Connection::DispatchEvent(x11::Event const&) ui/gfx/x/connection.cc:457:14 #62 0x55a590937acb in x11::Connection::ProcessNextEvent() ui/gfx/x/connection.cc:508:3 #63 0x55a59093756b in x11::Connection::Dispatch() ui/gfx/x/connection.cc #64 0x55a5a113e533 in ui::X11EventWatcherFdWatch::OnFileCanReadWithoutBlocking(int) ui/events/platform/x11/x11_event_watcher_fdwatch.cc:64:15 #65 0x55a59e6f00dd in base::MessagePumpLibevent::OnLibeventNotification(int, short, void*) base/message_loop/message_pump_libevent.cc #66 0x55a59ea19dbb in event_process_active base/third_party/libevent/event.c:381:4 #67 0x55a59ea19dbb in event_base_loop base/third_party/libevent/event.c:521:4 #68 0x55a59e6f09ab in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) base/message_loop/message_pump_libevent.cc:217:5 #69 0x55a59e5e8f0d in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:554:12 #70 0x55a59e513f6f in base::RunLoop::Run(base::Location const&) base/run_loop.cc:141:14 #71 0x55a594aa6f60 in content::BrowserMainLoop::RunMainMessageLoop() content/browser/browser_main_loop.cc:1039:18 #72 0x55a594aab511 in content::BrowserMainRunnerImpl::Run() content/browser/browser_main_runner_impl.cc:157:15 #73 0x55a594aa111a in content::BrowserMain(content::MainFunctionParams) content/browser/browser_main.cc:30:28 #74 0x55a59e2e0d68 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) content/app/content_main_runner_impl.cc:678:10 #75 0x55a59e2e3911 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) content/app/content_main_runner_impl.cc:1188:10 #76 0x55a59e2e2d4f in content::ContentMainRunnerImpl::Run() content/app/content_main_runner_impl.cc:1059:12 #77 0x55a59e2dc606 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) content/app/content_main.cc:407:36 #78 0x55a59e2dd972 in content::ContentMain(content::ContentMainParams) content/app/content_main.cc:435:10 #79 0x55a58f8d91d0 in ChromeMain chrome/app/chrome_main.cc:182:12 #80 0x7fd615fc1082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16 0x6100000294b8 is located 120 bytes inside of 192-byte region [0x610000029440,0x610000029500) freed by thread T0 (chrome) here: 2022-06-18T19:02:03.953858Z ERROR chrome[174309:174353]: [ssl_client_socket_impl.cc(983)] handshake failed; returned -1, SSL error code 1, net_error -100 2022-06-18T19:02:04.201877Z ERROR chrome[174309:174353]: [ssl_client_socket_impl.cc(983)] handshake failed; returned -1, SSL error code 1, net_error -100 #0 0x55a58f8d726d in operator delete(void*) /b/s/w/ir/cache/builder/src/third_party/llvm/compiler-rt/lib/asan/asan_new_delete.cpp:152:3 #1 0x55a5a4d5ce8f in std::Cr::default_delete::operator()(ash::CalendarViewController*) const buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:51:5 #2 0x55a5a4d5ce8f in std::Cr::unique_ptr >::reset(ash::CalendarViewController*) buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:308:7 #3 0x55a5a4d5ce8f in std::Cr::unique_ptr >::~unique_ptr() buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:262:19 #4 0x55a5a4d5ce8f in ash::CalendarView::~CalendarView() ash/system/time/calendar_view.cc:497:1 #5 0x55a5a4d5e048 in ash::CalendarView::~CalendarView() ash/system/time/calendar_view.cc:477:31 #6 0x55a5a4d5e048 in non-virtual thunk to ash::CalendarView::~CalendarView() ash/system/time/calendar_view.cc #7 0x55a5a43bf4f1 in views::View::~View() ui/views/view.cc:254:9 #8 0x55a5a4d85d67 in ash::(anonymous namespace)::DetailedViewContainer::~DetailedViewContainer() ash/system/unified/unified_system_tray_view.cc:52:45 #9 0x55a5a43bf4f1 in views::View::~View() ui/views/view.cc:254:9 #10 0x55a5a4d838f1 in ash::UnifiedSystemTrayView::~UnifiedSystemTrayView() ash/system/unified/unified_system_tray_view.cc:235:47 #11 0x55a5a43c1804 in std::Cr::default_delete::operator()(views::View*) const buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:51:5 #12 0x55a5a43c1804 in std::Cr::unique_ptr >::reset(views::View*) buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:308:7 #13 0x55a5a43c1804 in std::Cr::unique_ptr >::~unique_ptr() buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:262:19 #14 0x55a5a43c1804 in views::View::DoRemoveChildView(views::View*, bool, bool, views::View*) ui/views/view.cc:2682:1 #15 0x55a5a43c1a43 in views::View::RemoveAllChildViews() ui/views/view.cc:329:5 #16 0x55a5a4ce5172 in ash::UnifiedSystemTrayBubble::~UnifiedSystemTrayBubble() ash/system/unified/unified_system_tray_bubble.cc:91:17 #17 0x55a5a4ce5483 in ash::UnifiedSystemTrayBubble::~UnifiedSystemTrayBubble() ash/system/unified/unified_system_tray_bubble.cc:78:53 #18 0x55a5a4cc2888 in ash::UnifiedSystemTray::HideBubbleInternal() ash/system/unified/unified_system_tray.cc:650:3 #19 0x55a5a4cc2888 in ash::UnifiedSystemTray::CloseBubble() ash/system/unified/unified_system_tray.cc:539:3 #20 0x55a5a4c948bf in ash::TrayEventFilter::ProcessPressedEvent(ui::LocatedEvent const&) ash/system/tray/tray_event_filter.cc:170:27 #21 0x55a5a09f8276 in ui::EventDispatcher::DispatchEvent(ui::EventHandler*, ui::Event*) ui/events/event_dispatcher.cc:190:12 #22 0x55a5a09f7f85 in ui::EventDispatcher::DispatchEventToEventHandlers(std::Cr::vector >*, ui::Event*) ui/events/event_dispatcher.cc:177:7 #23 0x55a5a09f75be in ui::EventDispatcher::ProcessEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:125:3 #24 0x55a5a09f7236 in ui::EventDispatcherDelegate::DispatchEventToTarget(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:83:14 #25 0x55a5a09f6fc6 in ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:55:15 #26 0x55a5a3fbeed9 in ui::EventProcessor::OnEventFromSource(ui::Event*) ui/events/event_processor.cc:49:17 #27 0x55a5a09fba88 in ui::EventSource::DeliverEventToSink(ui::Event*) ui/events/event_source.cc:118:16 #28 0x55a5a09fbf90 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:66:14 #29 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #30 0x55a593d63d23 in ui::EventRewriterChromeOS::RewriteMouseButtonEvent(ui::MouseEvent const&, base::WeakPtr) ui/chromeos/events/event_rewriter_chromeos.cc:1276:12 #31 0x55a593d64263 in ui::EventRewriterChromeOS::RewriteEvent(ui::Event const&, base::WeakPtr) ui/chromeos/events/event_rewriter_chromeos.cc:758:12 #32 0x55a5a09fbf40 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:67:32 #33 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #34 0x55a5a46e1880 in ash::KeyboardDrivenEventRewriter::RewriteEvent(ui::Event const&, base::WeakPtr) ash/events/keyboard_driven_event_rewriter.cc:31:12 #35 0x55a5a09fbf40 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:67:32 #36 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #37 0x55a5a46dd72c in ash::AccessibilityEventRewriter::RewriteEvent(ui::Event const&, base::WeakPtr) ash/events/accessibility_event_rewriter.cc previously allocated by thread T0 (chrome) here: #0 0x55a58f8d6a0d in operator new(unsigned long) /b/s/w/ir/cache/builder/src/third_party/llvm/compiler-rt/lib/asan/asan_new_delete.cpp:95:3 #1 0x55a5a4d59599 in std::Cr::__unique_if::__unique_single std::Cr::make_unique() buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:717:28 #2 0x55a5a4d59599 in ash::CalendarView::CalendarView(ash::DetailedViewDelegate*, ash::UnifiedSystemTrayController*) ash/system/time/calendar_view.cc:344:33 #3 0x55a5a4d579ae in ash::UnifiedCalendarViewController::CreateView() ash/system/time/unified_calendar_view_controller.cc:28:15 #4 0x55a5a4cea9c5 in ash::UnifiedSystemTrayController::ShowDetailedView(std::Cr::unique_ptr >) ash/system/unified/unified_system_tray_controller.cc:590:46 #5 0x55a5a4ceb4c9 in ash::UnifiedSystemTrayController::ShowCalendarView(ash::calendar_metrics::CalendarViewShowSource, ash::calendar_metrics::CalendarEventSource) ash/system/unified/unified_system_tray_controller.cc:422:3 #6 0x55a5a4caca7a in ash::DateTray::PerformAction(ui::Event const&) ash/system/unified/date_tray.cc:47:27 #7 0x55a5a4c6882d in ash::ActionableView::ButtonPressed(ui::Event const&) ash/system/tray/actionable_view.cc:83:33 #8 0x55a5a428740a in views::Button::DefaultButtonControllerDelegate::NotifyClick(ui::Event const&) ui/views/controls/button/button.cc:67:13 #9 0x55a5a428ee8e in views::ButtonController::OnMouseReleased(ui::MouseEvent const&) ui/views/controls/button/button_controller.cc #10 0x55a5a425a7b5 in ui::ScopedTargetHandler::OnEvent(ui::Event*) ui/events/scoped_target_handler.cc:28:24 #11 0x55a5a09f8276 in ui::EventDispatcher::DispatchEvent(ui::EventHandler*, ui::Event*) ui/events/event_dispatcher.cc:190:12 #12 0x55a5a09f7771 in ui::EventDispatcher::ProcessEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:139:5 #13 0x55a5a09f7236 in ui::EventDispatcherDelegate::DispatchEventToTarget(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:83:14 #14 0x55a5a09f6fc6 in ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:55:15 #15 0x55a5a43f1acd in views::internal::RootView::OnMouseReleased(ui::MouseEvent const&) ui/views/widget/root_view.cc:485:9 #16 0x55a5a44073d6 in views::Widget::OnMouseEvent(ui::MouseEvent*) ui/views/widget/widget.cc:1565:20 #17 0x55a5a4bc12ed in ash::StatusAreaWidget::OnMouseEvent(ui::MouseEvent*) ash/system/status_area_widget.cc:591:18 #18 0x55a5a09f8276 in ui::EventDispatcher::DispatchEvent(ui::EventHandler*, ui::Event*) ui/events/event_dispatcher.cc:190:12 #19 0x55a5a09f7771 in ui::EventDispatcher::ProcessEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:139:5 #20 0x55a5a09f7236 in ui::EventDispatcherDelegate::DispatchEventToTarget(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:83:14 #21 0x55a5a09f6fc6 in ui::EventDispatcherDelegate::DispatchEvent(ui::EventTarget*, ui::Event*) ui/events/event_dispatcher.cc:55:15 #22 0x55a5a3fbeed9 in ui::EventProcessor::OnEventFromSource(ui::Event*) ui/events/event_processor.cc:49:17 #23 0x55a5a09fba88 in ui::EventSource::DeliverEventToSink(ui::Event*) ui/events/event_source.cc:118:16 #24 0x55a5a09fbf90 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:66:14 #25 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #26 0x55a593d63d23 in ui::EventRewriterChromeOS::RewriteMouseButtonEvent(ui::MouseEvent const&, base::WeakPtr) ui/chromeos/events/event_rewriter_chromeos.cc:1276:12 #27 0x55a593d64263 in ui::EventRewriterChromeOS::RewriteEvent(ui::Event const&, base::WeakPtr) ui/chromeos/events/event_rewriter_chromeos.cc:758:12 #28 0x55a5a09fbf40 in ui::EventSource::EventRewriterContinuationImpl::SendEvent(ui::Event const*) ui/events/event_source.cc:67:32 #29 0x55a5a09fa673 in ui::EventRewriter::SendEvent(base::WeakPtr, ui::Event const*) ui/events/event_rewriter.cc:88:39 #30 0x55a5a46e1880 in ash::KeyboardDrivenEventRewriter::RewriteEvent(ui::Event const&, base::WeakPtr) ash/events/keyboard_driven_event_rewriter.cc:31:12 SUMMARY: AddressSanitizer: heap-use-after-free buildtools/third_party/libc++/trunk/include/vector:1427:30 in std::Cr::vector >::begin() Shadow bytes around the buggy address: 0x0c207fffd240: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c207fffd250: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c207fffd260: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c207fffd270: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c207fffd280: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd =>0x0c207fffd290: fd fd fd fd fd fd fd[fd]fd fd fd fd fd fd fd fd 0x0c207fffd2a0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c207fffd2b0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c207fffd2c0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd 0x0c207fffd2d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c207fffd2e0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==174275==ABORTING