Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Crashing in release 833979, OS X Lion 10.7.5 #5

Closed
Ciombenu opened this issue Dec 7, 2020 · 1 comment
Closed

Crashing in release 833979, OS X Lion 10.7.5 #5

Ciombenu opened this issue Dec 7, 2020 · 1 comment

Comments

@Ciombenu
Copy link

Ciombenu commented Dec 7, 2020

Hi, thank you so much for creating this version of Chromium.

Starting with version 833979 - 89.0.4346.0 Chromium no longer works, crashing on launch. I tried all the versions until the last one from this moment 834207 and the same error. I use a macbook 4.1, mac os x lion 10.7.5. Before this error everything works perfectly, only google maps cannot be seen.

Thanks again for the help.

Chromium_2020-12-07-223222_Cristians-MacBook.crash.zip

@blueboxd
Copy link
Owner

blueboxd commented Dec 9, 2020

Thank you for reporting!
And, sorry for the inconvenience.
Chromium project begun removing code for 10.10, so many @available guarded code are now naked.
This should have been resolved for now, but some APIs may be still unguarded.
If crashing issue remains, please open a new issue.

@blueboxd blueboxd closed this as completed Dec 9, 2020
blueboxd pushed a commit that referenced this issue Dec 12, 2020
This reverts commit 3da5569.

Reason for revert: Suspected to be causing widespread failures in PPAPI/Pepper tests on Win and Linux dbg bots:

https://ci.chromium.org/p/chromium/builders/ci/Win7%20Tests%20%28dbg%29%281%29/87226
https://ci.chromium.org/p/chromium/builders/ci/Linux%20Tests%20%28dbg%29%281%29/93584

Sample failure output:

[ RUN      ] OutOfProcessPPAPITest.Instance_ExecuteScript
[18698:18698:1211/141847.386588:INFO:content_main_runner_impl.cc(1027)] Chrome is running in full browser mode.

DevTools listening on ws://127.0.0.1:37739/devtools/browser/565ba965-de40-4715-8905-11c22e1cfcca
[18698:18811:1211/141848.175888:WARNING:render_message_filter.cc(137)] Could not find tid
[18698:18811:1211/141848.265958:WARNING:render_message_filter.cc(137)] Could not find tid
[18698:18698:1211/141848.839793:INFO:CONSOLE(1)] "Uncaught Error: plugin exception", source: file:///b/s/w/ir/ppapi/tests/test_case.html?testcase=Instance_ExecuteScript (1)
[18698:18698:1211/141848.844552:INFO:CONSOLE(1)] "Uncaught TypeError: document.doesntExist is not a function", source: file:///b/s/w/ir/ppapi/tests/test_case.html?testcase=Instance_ExecuteScript (1)
[18698:18698:1211/141848.855716:INFO:CONSOLE(176)] "ExecuteScript finished in 0.073 seconds.", source: file:///b/s/w/ir/ppapi/tests/test_case.html?testcase=Instance_ExecuteScript (176)
Received signal 11 <unknown> 000000000000
#0 0x7f89c0dca89f base::debug::CollectStackTrace()
#1 0x7f89c0b5409a base::debug::StackTrace::StackTrace()
#2 0x7f89c0b54055 base::debug::StackTrace::StackTrace()
#3 0x7f89c0dca36b base::debug::(anonymous namespace)::StackDumpSignalHandler()
#4 0x7f8993ea2390 (/lib/x86_64-linux-gnu/libpthread-2.23.so+0x1138f)
#5 0x7f89b142c419 std::__Cr::default_delete<>::operator()()
#6 0x7f89b142c3ea std::__Cr::unique_ptr<>::reset()
#7 0x7f89b142c379 std::__Cr::unique_ptr<>::~unique_ptr()
#8 0x7f89b142c16d mojo::internal::AssociatedInterfacePtrState<>::~AssociatedInterfacePtrState()
#9 0x7f89b142cb95 mojo::AssociatedRemote<>::~AssociatedRemote()
#10 0x7f89b142afab content::PepperPluginInstance::~PepperPluginInstance()
#11 0x7f89b2587d8e content::PepperPluginInstanceImpl::~PepperPluginInstanceImpl()
#12 0x7f89b2587e69 content::PepperPluginInstanceImpl::~PepperPluginInstanceImpl()
#13 0x7f89b25350f8 base::RefCounted<>::DeleteInternal<>()
#14 0x7f89b25350c5 base::DefaultRefCountedTraits<>::Destruct()
#15 0x7f89b25350a3 base::RefCounted<>::Release()
#16 0x7f89b2535069 scoped_refptr<>::Release()
#17 0x7f89b253020a scoped_refptr<>::~scoped_refptr()
#18 0x7f89b25ce3f3 scoped_refptr<>::reset()
#19 0x7f89b25cd8dd _ZN13scoped_refptrIN7content24PepperPluginInstanceImplEEaSEDn
#20 0x7f89b25cbe83 content::PepperWebPluginImpl::Destroy()
#21 0x7f89a7414e41 blink::WebPluginContainerImpl::Dispose()
#22 0x7f89a593f32d blink::HTMLFrameOwnerElement::PluginDisposeSuspendScope::PerformDeferredPluginDispose()
#23 0x7f89a4f5d292 blink::HTMLFrameOwnerElement::PluginDisposeSuspendScope::~PluginDisposeSuspendScope()
#24 0x7f89a4f58862 blink::ContainerNode::RemoveChild()
#25 0x7f89a5111cbb blink::Node::removeChild()
#26 0x7f89a70daabe blink::(anonymous namespace)::RemoveChildOperationCallback()
#27 0x7f899e0c0780 v8::internal::FunctionCallbackArguments::Call()
#28 0x7f899e0bedcd v8::internal::(anonymous namespace)::HandleApiCallHelper<>()
#29 0x7f899e0bcfe5 v8::internal::Builtin_Impl_HandleApiCall()
#30 0x7f899e0bcaa9 v8::internal::Builtin_HandleApiCall()
#31 0x7f899dae513f Builtins_CEntry_Return1_DontSaveFPRegs_ArgvOnStack_BuiltinExit
  r8: 00000f84ee181f88  r9: 0000000000000000 r10: 0000000000000259 r11: 00007f8996194690
 r12: 00007f89a70da600 r13: 0000132400000000 r14: 00007ffc8c8eef10 r15: 00007ffc8c8eef10
  di: 00007f89b3e98918  si: 00007f89b3e98918  bp: 00007ffc8c8ee710  bx: 00007f89c0f52440
  dx: 00000f84ee181f90  ax: 00007f89b2587db0  cx: 0000000000000000  sp: 00007ffc8c8ee6f0
  ip: 00007f89b142c419 efl: 0000000000010206 cgf: 002b000000000033 erf: 0000000000000000
 trp: 000000000000000d msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
Calling _exit(1). Core file will not be generated.
../../content/public/test/no_renderer_crashes_assertion.cc:101: Failure
Failed
Unexpected termination of a renderer process; status: 1, exit_code: 256
Stack trace:
#0 0x55ec1877d394 content::NoRendererCrashesAssertion::Observe()
#1 0x7f3d4cf1ead6 content::NotificationServiceImpl::Notify()
#2 0x7f3d4d3a3986 content::RenderProcessHostImpl::ProcessDied()
#3 0x7f3d4d3a46be content::RenderProcessHostImpl::OnChannelError()
#4 0x7f3d60fa392d IPC::ChannelProxy::Context::OnDispatchError()
#5 0x7f3d60fa987f base::internal::FunctorTraits<>::Invoke<>()
#6 0x7f3d60fa97c1 base::internal::InvokeHelper<>::MakeItSo<>()
#7 0x7f3d60fa9742 _ZN4base8internal7InvokerINS0_9BindStateIMN3IPC12ChannelProxy7ContextEFvvEJ13scoped_refptrIS5_EEEEFvvEE7RunImplIS7_NSt4__Cr5tupleIJS9_EEEJLm0EEEEvOT_OT0_NSE_16integer_sequenceImJXspT1_EEEE
#8 0x7f3d60fa96ec base::internal::Invoker<>::RunOnce()
#9 0x7f3d5ca3c0d1 _ZNO4base12OnceCallbackIFvvEE3RunEv
#10 0x7f3d5cc03df2 base::TaskAnnotator::RunTask()
#11 0x7f3d5cc49eba base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl()
#12 0x7f3d5cc49685 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork()
#13 0x7f3d5cc4a119 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork()
#14 0x7f3d5caf69f1 base::MessagePumpGlib::HandleDispatch()
#15 0x7f3d5caf7141 base::(anonymous namespace)::WorkSourceDispatch()
#16 0x7f3d2f683197 g_main_context_dispatch
#17 0x7f3d2f6833f0 (/lib/x86_64-linux-gnu/libglib-2.0.so.0.4800.2+0x4a3ef)
#18 0x7f3d2f68349c g_main_context_iteration
#19 0x7f3d5caf6b00 base::MessagePumpGlib::Run()
#20 0x7f3d5cc4a740 base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run()
#21 0x7f3d5cb95d75 base::RunLoop::Run()
#22 0x55ec187b836a content::RunThisRunLoop()
#23 0x55ec187b831f content::RunMessageLoop()
#24 0x55ec18760320 content::JavascriptTestObserver::Run()
#25 0x55ec16a8b567 content::PPAPITestBase::RunTestURL()
#26 0x55ec16a8b48e content::PPAPITestBase::RunTest()
#27 0x55ec16a84f2a content::(anonymous namespace)::OutOfProcessPPAPITest_Instance_ExecuteScript_Test::RunTestOnMainThread()
#28 0x55ec18719264 content::BrowserTestBase::ProxyRunTestOnMainThreadLoop()
#29 0x55ec1871cf2a base::internal::FunctorTraits<>::Invoke<>()
#30 0x55ec1871cea1 base::internal::InvokeHelper<>::MakeItSo<>()
#31 0x55ec1871ce37 _ZN4base8internal7InvokerINS0_9BindStateIMN7content15BrowserTestBaseEFvvEJNS0_17UnretainedWrapperIS4_EEEEEFvvEE7RunImplIS6_NSt4__Cr5tupleIJS8_EEEJLm0EEEEvOT_OT0_NSD_16integer_sequenceImJXspT1_EEEE
#32 0x55ec1871cddc base::internal::Invoker<>::RunOnce()
#33 0x55ec157bbac1 _ZNO4base12OnceCallbackIFvvEE3RunEv
#34 0x55ec18a331cc content::ShellBrowserMainParts::PreMainMessageLoopRun()
#35 0x7f3d4c5f5282 content::BrowserMainLoop::PreMainMessageLoopRun()
chromium#36 0x7f3d4c5ff18a base::internal::FunctorTraits<>::Invoke<>()
#37 0x7f3d4c5ff0a1 base::internal::InvokeHelper<>::MakeItSo<>()
#38 0x7f3d4c5ff027 _ZN4base8internal7InvokerINS0_9BindStateIMN7content15BrowserMainLoopEFivEJNS0_17UnretainedWrapperIS4_EEEEEFivEE7RunImplIS6_NSt4__Cr5tupleIJS8_EEEJLm0EEEEiOT_OT0_NSD_16integer_sequenceImJXspT1_EEEE
chromium#39 0x7f3d4c5fefcc base::internal::Invoker<>::RunOnce()
#40 0x7f3d4c9d5b31 _ZNO4base12OnceCallbackIFivEE3RunEv
#41 0x7f3d4d812b16 content::StartupTaskRunner::RunAllTasksNow()
chromium#42 0x7f3d4c5f3b8a content::BrowserMainLoop::CreateStartupTasks()
#43 0x7f3d4c602df0 content::BrowserMainRunnerImpl::Initialize()
#44 0x7f3d4c5f0d64 content::BrowserMain()
#45 0x7f3d4e7bcbc6 content::RunBrowserProcessMain()
#46 0x7f3d4e7be1e9 content::ContentMainRunnerImpl::RunBrowser()
#47 0x7f3d4e7bdad7 content::ContentMainRunnerImpl::Run()
#48 0x7f3d4e7bae05 content::RunContentProcess()
#49 0x7f3d4e7bb79d content::ContentMain()
#50 0x55ec18718d5a content::BrowserTestBase::SetUp()
#51 0x55ec1865a9ac content::ContentBrowserTest::SetUp()
#52 0x55ec16a8ba95 content::OutOfProcessPPAPITest::SetUp()
#53 0x55ec17363a6b testing::internal::HandleSehExceptionsInMethodIfSupported<>()
#54 0x55ec173547f7 testing::internal::HandleExceptionsInMethodIfSupported<>()

Note the ~AssociatedRemote from ~PepperPluginInstanceImpl, which I think was introduced in this CL.  This also seems to be the only plugin-related change in the blamelist (https://chromium.googlesource.com/chromium/src/+log/6828ef78f2200e4bac3280186c7520ab65b2d7f8%5E..21468f4304510a432e3376d9d72ec67962f39723?pretty=fuller&n=)

Original change's description:
> Add mojo interfaces for pepper plugins.
>
> This adds some base plumbing for pepper plugin instance handling. The
> pepper renderer code allocates and manages the PepperPluginInstanceImpl,
> this creates the correct encapsulation moving code out of RenderFrameImpl.
>
> On the browser side a PepperPluginInstance is created to handle the
> messages and relay them to the WebContentsImpl which use to handle
> the processing of Pepper messages.
>
> BUG=1157519
>
> Change-Id: I24941bb7eecef56a90bbf961e6396101c8d3c785
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2585627
> Commit-Queue: Dave Tapuska <[email protected]>
> Reviewed-by: Arthur Sonzogni <[email protected]>
> Reviewed-by: Daniel Cheng <[email protected]>
> Reviewed-by: Bill Budge <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#836239}

[email protected],[email protected],[email protected],[email protected],[email protected]

Change-Id: Iddd93694ebe0611abef6c74b57667554b51e26fc
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 1157519
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2587769
Reviewed-by: Alex Moshchuk <[email protected]>
Commit-Queue: Alex Moshchuk <[email protected]>
Cr-Commit-Position: refs/heads/master@{#836330}
blueboxd pushed a commit that referenced this issue Dec 12, 2020
…ility bubbles."

This reverts commit 7ffd10d.

Reason for revert: [Sheriff] Suspected to be causing widespread accessibility test failures on MSAN bots due to use of uninitialized value in code that was added to CreateOrUpdateLayer in this CL (line 73, presumably for `stack_at_top`)

Build:
https://ci.chromium.org/p/chromium/builders/ci/Linux%20ChromiumOS%20MSan%20Tests/21677

Sample failure:

[ RUN      ] AccessibilityFocusRingControllerTest.FocusRingWorksOnMultipleDisplays
2020-12-11T22:10:55.266324Z 8322331852 ERROR ash_unittests[24691:24691]: [cras_audio_handler.cc(1611)] Failed to retrieve WBS mic deprioritized flag
==24691==WARNING: MemorySanitizer: use-of-uninitialized-value
    #0 0x5653d294dffa in ash::AccessibilityLayer::CreateOrUpdateLayer(aura::Window*, char const*, gfx::Rect const&, bool) ./../../ash/accessibility/accessibility_layer.cc:73:7
    #1 0x5653d294788e in ash::AccessibilityFocusRingLayer::Set(ash::AccessibilityFocusRing const&) ./../../ash/accessibility/accessibility_focus_ring_layer.cc:116:3
    #2 0x5653d29383cb in ash::AccessibilityFocusRingGroup::UpdateFocusRingsFromInfo(ash::AccessibilityLayerDelegate*) ./../../ash/accessibility/accessibility_focus_ring_group.cc:82:25
    #3 0x5653d293baa9 in ash::AccessibilityFocusRingGroup::UpdateFocusRing(std::__1::unique_ptr<ash::AccessibilityFocusRingInfo, std::__1::default_delete<ash::AccessibilityFocusRingInfo> >, ash::AccessibilityLayerDelegate*) ./../../ash/accessibility/accessibility_focus_ring_group.cc:152:3
    #4 0x5653d2932f04 in ash::AccessibilityFocusRingControllerImpl::SetFocusRing(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::unique_ptr<ash::AccessibilityFocusRingInfo, std::__1::default_delete<ash::AccessibilityFocusRingInfo> >) ./../../ash/accessibility/accessibility_focus_ring_controller_impl.cc:67:25
    #5 0x5653cda0dbe2 in ash::AccessibilityFocusRingControllerTest_FocusRingWorksOnMultipleDisplays_Test::TestBody() ./../../ash/accessibility/accessibility_focus_ring_controller_unittest.cc:106:15
    #6 0x5653d24cc4a7 in HandleExceptionsInMethodIfSupported<testing::Test, void> ./../../third_party/googletest/src/googletest/src/gtest.cc:0:0
    #7 0x5653d24cc4a7 in testing::Test::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2689:5
    #8 0x5653d24ceb57 in testing::TestInfo::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2866:11
    #9 0x5653d24d0e64 in testing::TestSuite::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:3020:28
    #10 0x5653d24fb28a in testing::internal::UnitTestImpl::RunAllTests() ./../../third_party/googletest/src/googletest/src/gtest.cc:5730:44
    #11 0x5653d24fa26c in HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool> ./../../third_party/googletest/src/googletest/src/gtest-internal-inl.h:0:10
    #12 0x5653d24fa26c in testing::UnitTest::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:5313:10
    #13 0x5653d3c13224 in RUN_ALL_TESTS ./../../third_party/googletest/src/googletest/include/gtest/gtest.h:2485:46
    #14 0x5653d3c13224 in base::TestSuite::Run() ./../../base/test/test_suite.cc:480:16
    #15 0x5653d3c1addf in Run ./../../base/callback.h:101:12
    #16 0x5653d3c1addf in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::OnceCallback<void ()>) ./../../base/test/launcher/unit_test_launcher.cc:179:38
    #17 0x5653d3c1a853 in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) ./../../base/test/launcher/unit_test_launcher.cc:249:10
    #18 0x5653cf8bc976 in main ./../../ash/test/ash_unittests.cc:25:10
    #19 0x7fe4936dd83f in __libc_start_main ??:0:0
    #20 0x5653cd7f7409 in _start ??:0:0

  Uninitialized value was created by a heap allocation
    #0 0x5653cd86a7c9 in operator new(unsigned long) /b/s/w/ir/cache/builder/src/third_party/llvm/compiler-rt/lib/msan/msan_new_delete.cpp:45:35
    #1 0x5653d2938051 in make_unique<ash::AccessibilityFocusRingLayer, ash::AccessibilityLayerDelegate *&> ./../../buildtools/third_party/libc++/trunk/include/memory:3043:28
    #2 0x5653d2938051 in ash::AccessibilityFocusRingGroup::UpdateFocusRingsFromInfo(ash::AccessibilityLayerDelegate*) ./../../ash/accessibility/accessibility_focus_ring_group.cc:69:11
    #3 0x5653d293baa9 in ash::AccessibilityFocusRingGroup::UpdateFocusRing(std::__1::unique_ptr<ash::AccessibilityFocusRingInfo, std::__1::default_delete<ash::AccessibilityFocusRingInfo> >, ash::AccessibilityLayerDelegate*) ./../../ash/accessibility/accessibility_focus_ring_group.cc:152:3
    #4 0x5653d2932f04 in ash::AccessibilityFocusRingControllerImpl::SetFocusRing(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, std::__1::unique_ptr<ash::AccessibilityFocusRingInfo, std::__1::default_delete<ash::AccessibilityFocusRingInfo> >) ./../../ash/accessibility/accessibility_focus_ring_controller_impl.cc:67:25
    #5 0x5653cda0dbe2 in ash::AccessibilityFocusRingControllerTest_FocusRingWorksOnMultipleDisplays_Test::TestBody() ./../../ash/accessibility/accessibility_focus_ring_controller_unittest.cc:106:15
    #6 0x5653d24cc4a7 in HandleExceptionsInMethodIfSupported<testing::Test, void> ./../../third_party/googletest/src/googletest/src/gtest.cc:0:0
    #7 0x5653d24cc4a7 in testing::Test::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2689:5
    #8 0x5653d24ceb57 in testing::TestInfo::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2866:11
    #9 0x5653d24d0e64 in testing::TestSuite::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:3020:28
    #10 0x5653d24fb28a in testing::internal::UnitTestImpl::RunAllTests() ./../../third_party/googletest/src/googletest/src/gtest.cc:5730:44
    #11 0x5653d24fa26c in HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool> ./../../third_party/googletest/src/googletest/src/gtest-internal-inl.h:0:10
    #12 0x5653d24fa26c in testing::UnitTest::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:5313:10
    #13 0x5653d3c13224 in RUN_ALL_TESTS ./../../third_party/googletest/src/googletest/include/gtest/gtest.h:2485:46
    #14 0x5653d3c13224 in base::TestSuite::Run() ./../../base/test/test_suite.cc:480:16
    #15 0x5653d3c1addf in Run ./../../base/callback.h:101:12
    #16 0x5653d3c1addf in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::OnceCallback<void ()>) ./../../base/test/launcher/unit_test_launcher.cc:179:38
    #17 0x5653d3c1a853 in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) ./../../base/test/launcher/unit_test_launcher.cc:249:10
    #18 0x5653cf8bc976 in main ./../../ash/test/ash_unittests.cc:25:10
    #19 0x7fe4936dd83f in __libc_start_main ??:0:0

SUMMARY: MemorySanitizer: use-of-uninitialized-value (/b/s/w/ir/out/Release/ash_unittests+0x65feffa)


Original change's description:
> Re-land: Move focus rings and highlight layers under accessibility bubbles.
>
> Original patch: http://crrev.com/c/2568547
> Revert: http://crrev.com/c/2583106
>
> Fix for issue where focus ring appears below switch access panel. Now clients can specify if they want their focus ring to appear above or below accessibility bubble panels. STS will specify they appear below, though other clients will (by default) specify they appear above all panels. This fixes an issue with the switch access focus ring didn't appear above the switch access panel.
>
> Original description:
>
> Move focus rings and highlight layers under accessibility bubbles.
>
> Will allow Select-to-speak panel UI to appear above focus ring and highlight layers. This also avoids the need to create more window containers.
>
> Bug: 1157261, 1143814
> Change-Id: Ibd8dd577ecd4fb5767b628c2eff679a2f6931b9c
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2582997
> Reviewed-by: Dominic Mazzoni <[email protected]>
> Reviewed-by: Xiyuan Xia <[email protected]>
> Commit-Queue: Joel Riley <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#836222}

[email protected],[email protected],[email protected],[email protected],[email protected]

Change-Id: I08b819849d13fb5d01f67c5bbd3083ed0e445e7e
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 1157261
Bug: 1143814
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2587604
Reviewed-by: Alex Moshchuk <[email protected]>
Commit-Queue: Alex Moshchuk <[email protected]>
Cr-Commit-Position: refs/heads/master@{#836386}
blueboxd pushed a commit that referenced this issue Jan 13, 2021
This change enables Chrome OS Chrome builds running on non-cros linux to
work with Espeak-ng.

On linux builds, dcheck always triggers an error in mojo.
Consequently, in TtsService, where the service makes mojo calls on a
Remote within the audio thread, a DCHECK was hit:

2021-01-11T22:46:32.666960Z FATAL chrome[2743839:2743847]: [sequence_checker.h(120)] Check failed: checker.CalledOnValidSequence().
#0 0x7f7ee68c681f base::debug::CollectStackTrace()
#1 0x7f7ee665fd8a base::debug::StackTrace::StackTrace()
#2 0x7f7ee665fd45 base::debug::StackTrace::StackTrace()
#3 0x7f7ee66a9057 logging::LogMessage::~LogMessage()
#4 0x7f7ee66a9769 logging::LogMessage::~LogMessage()
#5 0x7f7ee6620c1b logging::CheckError::~CheckError()
#6 0x7f7ee564e09c base::ScopedValidateSequenceChecker::ScopedValidateSequenceChecker()
#7 0x7f7ee566c068 mojo::InterfaceEndpointClient::SendMessage()
#8 0x7f7ee566c99f mojo::InterfaceEndpointClient::Accept()
#9 0x565159b53c29 chromeos::tts::mojom::TtsEventObserverProxy::OnStart()
#10 0x56515c4e3a5a chromeos::tts::TtsService::Render()
#11 0x7f7ed8648f02 media::AudioOutputDeviceThreadCallback::Process()
#12 0x7f7ed861fe9d media::AudioDeviceThread::ThreadMain()
#13 0x7f7ee68fb1ab base::(anonymous namespace)::ThreadFunc()
#14 0x7f7ea303fea7 start_thread
#15 0x7f7ea2baad8f clone

Fix this by queueing up already rendered audio buffers and processing
them on the main thread's task runner.

Test: manually on a linux chromeos build. Verify that web speech produces speech through Espeak.

Change-Id: I4b1e5b0a6e72e4e571b5a26fde731acc57936894
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2621983
Reviewed-by: Katie Dektar <[email protected]>
Commit-Queue: David Tseng <[email protected]>
Cr-Commit-Position: refs/heads/master@{#842622}
blueboxd pushed a commit that referenced this issue Jan 14, 2021
This reverts commit 8aca3b4.

Reason for revert: I suspect the CL caused WindowOpenApiTest.PopupBlockingExtension failure
https://ci.chromium.org/ui/p/chromium/builders/ci/linux-chromeos-dbg/22177/overview

[ RUN      ] WindowOpenApiTest.PopupBlockingExtension
2021-01-13T05:48:40.927570Z INFO browser_tests[28993:28993]: [content_main_runner_impl.cc(1055)] Chrome is running in full browser mode.
2021-01-13T05:48:41.111260Z WARNING browser_tests[28993:28993]: [audio_manager_linux.cc(69)] Falling back to ALSA for audio output. PulseAudio is not available or could not be initialized.
2021-01-13T05:48:41.147293Z ERROR browser_tests[28993:28993]: [cras_audio_handler.cc(1627)] Failed to retrieve WBS mic deprioritized flag
2021-01-13T05:48:41.148942Z WARNING browser_tests[28993:29172]: [statistics_provider.cc(321)] Finished loading statistics.
2021-01-13T05:48:41.786294Z WARNING browser_tests[28993:28993]: [user_policy_manager_builder_chromeos.cc(123)] No policy loaded for known non-enterprise user
2021-01-13T05:48:42.161192Z WARNING browser_tests[28993:28993]: [merge_session_throttling_utils.cc(143)] Loading content for a profile without session restore?
2021-01-13T05:48:42.192143Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:42.205962Z ERROR browser_tests[28993:28993]: [proximity_auth_profile_pref_manager.cc(192)] Failed to find local state prefs for current user.
2021-01-13T05:48:42.726389Z WARNING browser_tests[28993:28993]: [merge_session_throttling_utils.cc(143)] Loading content for a profile without session restore?
2021-01-13T05:48:43.054799Z WARNING browser_tests[28993:28993]: [wallpaper_controller_client.cc(377)] Cannot get wallpaper files id in RemovePolicyWallpaper. This should never happen under normal circumstances.
2021-01-13T05:48:43.218141Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:43.726830Z WARNING browser_tests[29202:29284]: [http_cache_transaction.cc(1192)] Unable to open or create cache entry
2021-01-13T05:48:44.322210Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:44.376219Z ERROR browser_tests[28993:28993]: [plugin_vm_manager_impl.cc(141)] New session has dispatcher unexpected already running. Perhaps Chrome crashed?
2021-01-13T05:48:44.859368Z INFO browser_tests[28993:28993]: [key_permissions_manager_impl.cc(495)] One-time key permissions migration started for token: 0.
2021-01-13T05:48:44.863796Z INFO browser_tests[28993:28993]: [android_sms_pairing_state_tracker_impl.cc(72)] No Pairing cookie found
2021-01-13T05:48:45.010359Z ERROR browser_tests[28993:29140]: [object_proxy.cc(621)] Failed to call method: org.chromium.U2F.IsUvpaa: object_path= /org/chromium/U2F: org.freedesktop.DBus.Error.ServiceUnknown: The name org.chromium.U2F was not provided by any .service files
2021-01-13T05:48:45.018258Z ERROR browser_tests[28993:29172]: [als_reader.cc(47)] Missing num of als
2021-01-13T05:48:45.681453Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:45.682492Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:45.685002Z INFO browser_tests[28993:28993]: [key_permissions_manager_impl.cc(520)] One-time key permissions migration succeeded for token: 0.
2021-01-13T05:48:45.768048Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:45.769933Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:46.230042Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
2021-01-13T05:48:50.078030Z ERROR browser_tests[28993:29172]: [object_proxy.cc(621)] Failed to call method: org.chromium.debugd.GetPerfOutputFd: object_path= /org/chromium/debugd: org.freedesktop.DBus.Error.ServiceUnknown: The name org.chromium.debugd was not provided by any .service files
2021-01-13T05:49:10.763123Z WARNING browser_tests[28993:29410]: [embedded_test_server.cc(668)] Request not handled. Returning 404: /favicon.ico
2021-01-13T05:49:10.833186Z WARNING browser_tests[28993:29410]: [embedded_test_server.cc(668)] Request not handled. Returning 404: /favicon.ico
../../chrome/browser/extensions/window_open_apitest.cc:91: Failure
Expected equality of these values:
  num_browsers
    Which is: 4
  chrome::GetBrowserCount(browser->profile())
    Which is: 2
Google Test trace:
../../chrome/browser/extensions/window_open_apitest.cc:76: WaitForTabsPopupsApps tabs:5, popups:2, app_popups:1
Stack trace:
#0 0x56363e71a458 extensions::WaitForTabsPopupsApps()
#1 0x56363e71c5aa extensions::WindowOpenApiTest_PopupBlockingExtension_Test::RunTestOnMainThread()
#2 0x563646f1d248 content::BrowserTestBase::ProxyRunTestOnMainThreadLoop()
#3 0x563646f207ca base::internal::FunctorTraits<>::Invoke<>()
#4 0x563646f20741 base::internal::InvokeHelper<>::MakeItSo<>()
#5 0x563646f206e7 _ZN4base8internal7InvokerINS0_9BindStateIMN7content15BrowserTestBaseEFvvEJNS0_17UnretainedWrapperIS4_EEEEEFvvEE7RunImplIS6_NSt4__Cr5tupleIJS8_EEEJLm0EEEEvOT_OT0_NSD_16integer_sequenceImJXspT1_EEEE
#6 0x563646f2068c base::internal::Invoker<>::RunOnce()
#7 0x56363c76ba61 _ZNO4base12OnceCallbackIFvvEE3RunEv
#8 0x563645c03021 ChromeBrowserMainParts::PreMainMessageLoopRunImpl()
#9 0x563645c01fc2 ChromeBrowserMainParts::PreMainMessageLoopRun()
#10 0x563640599fc6 chromeos::ChromeBrowserMainPartsChromeos::PreMainMessageLoopRun()
#11 0x7fb5dc82e9e5 content::BrowserMainLoop::PreMainMessageLoopRun()
#12 0x7fb5dc8383ca base::internal::FunctorTraits<>::Invoke<>()
#13 0x7fb5dc8382e1 base::internal::InvokeHelper<>::MakeItSo<>()
#14 0x7fb5dc838267 _ZN4base8internal7InvokerINS0_9BindStateIMN7content15BrowserMainLoopEFivEJNS0_17UnretainedWrapperIS4_EEEEEFivEE7RunImplIS6_NSt4__Cr5tupleIJS8_EEEJLm0EEEEiOT_OT0_NSD_16integer_sequenceImJXspT1_EEEE
#15 0x7fb5dc83820c base::internal::Invoker<>::RunOnce()
#16 0x7fb5dcc03581 _ZNO4base12OnceCallbackIFivEE3RunEv
#17 0x7fb5dda03df6 content::StartupTaskRunner::RunAllTasksNow()
#18 0x7fb5dc82d3ad content::BrowserMainLoop::CreateStartupTasks()
#19 0x7fb5dc83bfd3 content::BrowserMainRunnerImpl::Initialize()
#20 0x7fb5dc82a804 content::BrowserMain()
#21 0x7fb5de9aae56 content::RunBrowserProcessMain()
#22 0x7fb5de9ac3c9 content::ContentMainRunnerImpl::RunBrowser()
#23 0x7fb5de9abd27 content::ContentMainRunnerImpl::Run()
#24 0x7fb5de9a9106 content::RunContentProcess()
#25 0x7fb5de9a9a3d content::ContentMain()
#26 0x563646f1cb13 content::BrowserTestBase::SetUp()
#27 0x563645acb283 InProcessBrowserTest::SetUp()
#28 0x563645ab3802 extensions::ExtensionBrowserTest::SetUp()
#29 0x56364163b48b testing::internal::HandleSehExceptionsInMethodIfSupported<>()
#30 0x56364162ee67 testing::internal::HandleExceptionsInMethodIfSupported<>()



Original change's description:
> Support multiple receivers for Cros APIs.
>
> With this CL, most of Cros API starts to support multiple receivers.
> AshChromeService and LacrosChromeService are exceptions.
>
> Bug: 1148448
> Test: Build and run Lacros on a DUT.
> Change-Id: I1d1a0be111108ae15657d81ea747750a760bd2f8
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2624323
> Reviewed-by: James Cook <[email protected]>
> Commit-Queue: Hidehiko Abe <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#842869}

[email protected],[email protected],[email protected]

Change-Id: Id097eab1934d9a2afca29f249a007de57ef18d90
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 1148448
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2626229
Reviewed-by: Maxim Kolosovskiy  <[email protected]>
Commit-Queue: Maxim Kolosovskiy  <[email protected]>
Cr-Commit-Position: refs/heads/master@{#842943}
blueboxd pushed a commit that referenced this issue Jan 14, 2021
…vice"

This reverts commit 85753b0.

Reason for revert: I suspect this CL caused failures SubresourceRedirectLoggedInSitesBrowserTest.TestCancelBeforeImageLoadForLoggedInSite
https://ci.chromium.org/ui/p/chromium/builders/ci/linux-lacros-tester-rel/6414/overview
Fontconfig error: Cannot load default config file: No such file: (null)
BrowserTestBase received signal: Terminated. Backtrace:
#0 0x5596f4879789 base::debug::CollectStackTrace()
#1 0x5596f47e4163 base::debug::StackTrace::StackTrace()
#2 0x5596f4dcc0c6 content::(anonymous namespace)::DumpStackTraceSignalHandler()
#3 0x7f128ca544c0 (/lib/x86_64-linux-gnu/libc-2.23.so+0x354bf)
#4 0x7f12902ec9ff __libc_send
#5 0x5596f2a8598f mojo::core::ChannelPosix::WriteNoLock()
#6 0x5596f2a854b2 mojo::core::ChannelPosix::Write()
#7 0x5596f2a7370e mojo::core::NodeChannel::SendChannelMessage()
#8 0x5596f2a7808a mojo::core::NodeController::SendPeerEvent()
#9 0x5596f2a78707 mojo::core::NodeController::ForwardEvent()
#10 0x5596f6c728d2 mojo::core::ports::Node::SendUserMessageInternal()
#11 0x5596f6c72720 mojo::core::ports::Node::SendUserMessage()
#12 0x5596f2a768e1 mojo::core::NodeController::SendUserMessage()
#13 0x5596f2a71afe mojo::core::MessagePipeDispatcher::WriteMessage()
#14 0x5596f2a6744c mojo::core::Core::WriteMessage()
#15 0x5596f579b850 mojo::Connector::Accept()
#16 0x5596f579d9db mojo::InterfaceEndpointClient::SendMessageWithResponder()
#17 0x5596f579dd5f mojo::InterfaceEndpointClient::AcceptWithResponder()
#18 0x5596f26f4662 content::mojom::ChildHistogramFetcherProxy::GetChildNonPersistentHistogramData()
#19 0x5596f2d9b2aa content::HistogramController::GetHistogramData()
#20 0x5596f2d9c905 content::HistogramSynchronizer::RegisterAndNotifyAllProcesses()
#21 0x5596f2d9ca56 content::FetchHistogramsAsynchronously()
#22 0x5596f4dd4781 content::FetchHistogramsFromChildProcesses()
#23 0x5596f52f70fa subresource_redirect::RetryForHistogramUntilCountReached()
#24 0x5596f0f9d3d1 subresource_redirect::SubresourceRedirectLoggedInSitesBrowserTest_TestCancelBeforeImageLoadForLoggedInSite_Test::RunTestOnMainThread()
#25 0x5596f4dcb6e9 content::BrowserTestBase::ProxyRunTestOnMainThreadLoop()
#26 0x5596f491e0aa ChromeBrowserMainParts::PreMainMessageLoopRunImpl()
#27 0x5596f491cea5 ChromeBrowserMainParts::PreMainMessageLoopRun()
#28 0x5596f2c33516 content::BrowserMainLoop::PreMainMessageLoopRun()
#29 0x5596f30a1833 content::StartupTaskRunner::RunAllTasksNow()
#30 0x5596f2c324f9 content::BrowserMainLoop::CreateStartupTasks()
#31 0x5596f2c34e78 content::BrowserMainRunnerImpl::Initialize()
#32 0x5596f2c30c28 content::BrowserMain()
#33 0x5596f373dc93 content::ContentMainRunnerImpl::RunBrowser()
#34 0x5596f373d886 content::ContentMainRunnerImpl::Run()
#35 0x5596f373ad84 content::RunContentProcess()
chromium#36 0x5596f373b70c content::ContentMain()
#37 0x5596f4dcac68 content::BrowserTestBase::SetUp()
#38 0x5596f47d0edb InProcessBrowserTest::SetUp()
chromium#39 0x5596f0f9e065 subresource_redirect::SubresourceRedirectLoggedInSitesBrowserTest::SetUp()
#40 0x5596f1cf66e8 testing::Test::Run()
#41 0x5596f1cf757f testing::TestInfo::Run()
chromium#42 0x5596f1cf7f57 testing::TestSuite::Run()
#43 0x5596f1d05777 testing::internal::UnitTestImpl::RunAllTests()
#44 0x5596f1d050df testing::UnitTest::Run()
#45 0x5596f48d0724 base::TestSuite::Run()
#46 0x5596f47b935f ChromeTestSuiteRunner::RunTestSuite()
#47 0x5596f4dfaab7 content::LaunchTests()
#48 0x5596f47b9632 LaunchChromeTests()
#49 0x5596f47b6df4 main
#50 0x7f128ca3f840 __libc_start_main
#51 0x5596f008526a _start
[ RUN      ] SubresourceRedirectLoggedInSitesBrowserTest.TestCancelBeforeImageLoadForLoggedInSite

Original change's description:
> [Safe Browsing] Abstract signin dep from RealTimeUrlLookupService
>
> This CL continues with the abstraction of dependencies on signin and
> sync from //components/safe_browsing's access token fetching flow in
> order to enable reuse by WebLayer. The concrete step taken here is to
> abstract the dependencies on
> //components/safe_browsing/core/browser/sync from
> RealTimeUrlLookupService, passing these dependencies in via the
> constructor. There are no behavioral changes in this CL:
> - //chrome and //ios/chrome's factories glue the relevant parameters
>   from //components/safe_browsing/core/browser/sync
> - //weblayer's factory passes in values for the parameters such that
>   access token fetching for URL lookups continues to be disabled in
>   WebLayer
>
> Followup work will bring up support for access token fetching in
> WebLayer.
>
> Bug: 1080748
> Change-Id: I69fca4b2d04118088bb48596eb192beab7bafb4f
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2621301
> Reviewed-by: Sylvain Defresne <[email protected]>
> Reviewed-by: Xinghui Lu <[email protected]>
> Commit-Queue: Colin Blundell <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#842942}

[email protected],[email protected],[email protected],[email protected]

Change-Id: I9aa193871848c7e07353bb2bb428a2a39ba5cb00
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 1080748
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2627391
Reviewed-by: Maxim Kolosovskiy  <[email protected]>
Commit-Queue: Maxim Kolosovskiy  <[email protected]>
Cr-Commit-Position: refs/heads/master@{#842980}
blueboxd pushed a commit that referenced this issue Jan 20, 2021
This reverts commit 640009e.

Reason for revert: The original CL looks wrongly identified as a
cause of test breakage. Even without this CL, the test is flaky.

Original change's description:
> Revert "Support multiple receivers for Cros APIs."
>
> This reverts commit 8aca3b4.
>
> Reason for revert: I suspect the CL caused WindowOpenApiTest.PopupBlockingExtension failure
> https://ci.chromium.org/ui/p/chromium/builders/ci/linux-chromeos-dbg/22177/overview
>
> [ RUN      ] WindowOpenApiTest.PopupBlockingExtension
> 2021-01-13T05:48:40.927570Z INFO browser_tests[28993:28993]: [content_main_runner_impl.cc(1055)] Chrome is running in full browser mode.
> 2021-01-13T05:48:41.111260Z WARNING browser_tests[28993:28993]: [audio_manager_linux.cc(69)] Falling back to ALSA for audio output. PulseAudio is not available or could not be initialized.
> 2021-01-13T05:48:41.147293Z ERROR browser_tests[28993:28993]: [cras_audio_handler.cc(1627)] Failed to retrieve WBS mic deprioritized flag
> 2021-01-13T05:48:41.148942Z WARNING browser_tests[28993:29172]: [statistics_provider.cc(321)] Finished loading statistics.
> 2021-01-13T05:48:41.786294Z WARNING browser_tests[28993:28993]: [user_policy_manager_builder_chromeos.cc(123)] No policy loaded for known non-enterprise user
> 2021-01-13T05:48:42.161192Z WARNING browser_tests[28993:28993]: [merge_session_throttling_utils.cc(143)] Loading content for a profile without session restore?
> 2021-01-13T05:48:42.192143Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:42.205962Z ERROR browser_tests[28993:28993]: [proximity_auth_profile_pref_manager.cc(192)] Failed to find local state prefs for current user.
> 2021-01-13T05:48:42.726389Z WARNING browser_tests[28993:28993]: [merge_session_throttling_utils.cc(143)] Loading content for a profile without session restore?
> 2021-01-13T05:48:43.054799Z WARNING browser_tests[28993:28993]: [wallpaper_controller_client.cc(377)] Cannot get wallpaper files id in RemovePolicyWallpaper. This should never happen under normal circumstances.
> 2021-01-13T05:48:43.218141Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:43.726830Z WARNING browser_tests[29202:29284]: [http_cache_transaction.cc(1192)] Unable to open or create cache entry
> 2021-01-13T05:48:44.322210Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:44.376219Z ERROR browser_tests[28993:28993]: [plugin_vm_manager_impl.cc(141)] New session has dispatcher unexpected already running. Perhaps Chrome crashed?
> 2021-01-13T05:48:44.859368Z INFO browser_tests[28993:28993]: [key_permissions_manager_impl.cc(495)] One-time key permissions migration started for token: 0.
> 2021-01-13T05:48:44.863796Z INFO browser_tests[28993:28993]: [android_sms_pairing_state_tracker_impl.cc(72)] No Pairing cookie found
> 2021-01-13T05:48:45.010359Z ERROR browser_tests[28993:29140]: [object_proxy.cc(621)] Failed to call method: org.chromium.U2F.IsUvpaa: object_path= /org/chromium/U2F: org.freedesktop.DBus.Error.ServiceUnknown: The name org.chromium.U2F was not provided by any .service files
> 2021-01-13T05:48:45.018258Z ERROR browser_tests[28993:29172]: [als_reader.cc(47)] Missing num of als
> 2021-01-13T05:48:45.681453Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:45.682492Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:45.685002Z INFO browser_tests[28993:28993]: [key_permissions_manager_impl.cc(520)] One-time key permissions migration succeeded for token: 0.
> 2021-01-13T05:48:45.768048Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:45.769933Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:46.230042Z WARNING browser_tests[28993:28993]: [browser_util.cc(167)] Lacros-chrome is not supported
> 2021-01-13T05:48:50.078030Z ERROR browser_tests[28993:29172]: [object_proxy.cc(621)] Failed to call method: org.chromium.debugd.GetPerfOutputFd: object_path= /org/chromium/debugd: org.freedesktop.DBus.Error.ServiceUnknown: The name org.chromium.debugd was not provided by any .service files
> 2021-01-13T05:49:10.763123Z WARNING browser_tests[28993:29410]: [embedded_test_server.cc(668)] Request not handled. Returning 404: /favicon.ico
> 2021-01-13T05:49:10.833186Z WARNING browser_tests[28993:29410]: [embedded_test_server.cc(668)] Request not handled. Returning 404: /favicon.ico
> ../../chrome/browser/extensions/window_open_apitest.cc:91: Failure
> Expected equality of these values:
>   num_browsers
>     Which is: 4
>   chrome::GetBrowserCount(browser->profile())
>     Which is: 2
> Google Test trace:
> ../../chrome/browser/extensions/window_open_apitest.cc:76: WaitForTabsPopupsApps tabs:5, popups:2, app_popups:1
> Stack trace:
> #0 0x56363e71a458 extensions::WaitForTabsPopupsApps()
> #1 0x56363e71c5aa extensions::WindowOpenApiTest_PopupBlockingExtension_Test::RunTestOnMainThread()
> #2 0x563646f1d248 content::BrowserTestBase::ProxyRunTestOnMainThreadLoop()
> #3 0x563646f207ca base::internal::FunctorTraits<>::Invoke<>()
> #4 0x563646f20741 base::internal::InvokeHelper<>::MakeItSo<>()
> #5 0x563646f206e7 _ZN4base8internal7InvokerINS0_9BindStateIMN7content15BrowserTestBaseEFvvEJNS0_17UnretainedWrapperIS4_EEEEEFvvEE7RunImplIS6_NSt4__Cr5tupleIJS8_EEEJLm0EEEEvOT_OT0_NSD_16integer_sequenceImJXspT1_EEEE
> #6 0x563646f2068c base::internal::Invoker<>::RunOnce()
> #7 0x56363c76ba61 _ZNO4base12OnceCallbackIFvvEE3RunEv
> #8 0x563645c03021 ChromeBrowserMainParts::PreMainMessageLoopRunImpl()
> #9 0x563645c01fc2 ChromeBrowserMainParts::PreMainMessageLoopRun()
> #10 0x563640599fc6 chromeos::ChromeBrowserMainPartsChromeos::PreMainMessageLoopRun()
> #11 0x7fb5dc82e9e5 content::BrowserMainLoop::PreMainMessageLoopRun()
> #12 0x7fb5dc8383ca base::internal::FunctorTraits<>::Invoke<>()
> #13 0x7fb5dc8382e1 base::internal::InvokeHelper<>::MakeItSo<>()
> #14 0x7fb5dc838267 _ZN4base8internal7InvokerINS0_9BindStateIMN7content15BrowserMainLoopEFivEJNS0_17UnretainedWrapperIS4_EEEEEFivEE7RunImplIS6_NSt4__Cr5tupleIJS8_EEEJLm0EEEEiOT_OT0_NSD_16integer_sequenceImJXspT1_EEEE
> #15 0x7fb5dc83820c base::internal::Invoker<>::RunOnce()
> #16 0x7fb5dcc03581 _ZNO4base12OnceCallbackIFivEE3RunEv
> #17 0x7fb5dda03df6 content::StartupTaskRunner::RunAllTasksNow()
> #18 0x7fb5dc82d3ad content::BrowserMainLoop::CreateStartupTasks()
> #19 0x7fb5dc83bfd3 content::BrowserMainRunnerImpl::Initialize()
> #20 0x7fb5dc82a804 content::BrowserMain()
> #21 0x7fb5de9aae56 content::RunBrowserProcessMain()
> #22 0x7fb5de9ac3c9 content::ContentMainRunnerImpl::RunBrowser()
> #23 0x7fb5de9abd27 content::ContentMainRunnerImpl::Run()
> #24 0x7fb5de9a9106 content::RunContentProcess()
> #25 0x7fb5de9a9a3d content::ContentMain()
> #26 0x563646f1cb13 content::BrowserTestBase::SetUp()
> #27 0x563645acb283 InProcessBrowserTest::SetUp()
> #28 0x563645ab3802 extensions::ExtensionBrowserTest::SetUp()
> #29 0x56364163b48b testing::internal::HandleSehExceptionsInMethodIfSupported<>()
> #30 0x56364162ee67 testing::internal::HandleExceptionsInMethodIfSupported<>()
>
>
>
> Original change's description:
> > Support multiple receivers for Cros APIs.
> >
> > With this CL, most of Cros API starts to support multiple receivers.
> > AshChromeService and LacrosChromeService are exceptions.
> >
> > Bug: 1148448
> > Test: Build and run Lacros on a DUT.
> > Change-Id: I1d1a0be111108ae15657d81ea747750a760bd2f8
> > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2624323
> > Reviewed-by: James Cook <[email protected]>
> > Commit-Queue: Hidehiko Abe <[email protected]>
> > Cr-Commit-Position: refs/heads/master@{#842869}
>
> [email protected],[email protected],[email protected]
>
> Change-Id: Id097eab1934d9a2afca29f249a007de57ef18d90
> No-Presubmit: true
> No-Tree-Checks: true
> No-Try: true
> Bug: 1148448
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2626229
> Reviewed-by: Maxim Kolosovskiy  <[email protected]>
> Commit-Queue: Maxim Kolosovskiy  <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#842943}

[email protected],[email protected],[email protected],[email protected]

# Not skipping CQ checks because original CL landed > 1 day ago.

Bug: 1148448
Change-Id: Ic2ec65fa476b9b67a705497aad1cf3f1bffa0da2
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2633482
Reviewed-by: James Cook <[email protected]>
Reviewed-by: Maxim Kolosovskiy  <[email protected]>
Commit-Queue: Hidehiko Abe <[email protected]>
Cr-Commit-Position: refs/heads/master@{#844778}
blueboxd pushed a commit that referenced this issue Jan 22, 2021
In the attached bug, speech is triggered in a startup, fresh imaged
environment.

To replicate this,
`rm -rf /home/chronos/*`, then trigger some tts after boot.

The browser process hangs, e.g.
gdb attach <browser_pid>
...
bt

...
#5  0x000058e02342da8f in TtsExtensionEngine::GetVoices(content::BrowserContext*, std::__1::vector<content::VoiceData, std::__1::allocator<content::VoiceData> >*) ()
#6  0x000058e021612615 in content::TtsControllerImpl::SpeakNow(std::__1::unique_ptr<content::TtsUtterance, std::__1::default_delete<content::TtsUtterance> >) ()
#7  0x000058e021612e8f in content::TtsControllerImpl::SpeakNextUtterance() ()
#8  0x000058e01ff769d4 in content::TtsControllerImpl::VoicesChanged() ()
#9  0x000058e02342eeb4 in ExtensionTtsEngineUpdateVoicesFunction::Run() ()
#10 0x000058e02185ebe2 in ExtensionFunction::RunWithValidation() ()
#11 0x000058e021860c5d in extensions::ExtensionFunctionDispatcher::DispatchWithCallbackInternal(ExtensionHostMsg_Request_Params const&, content::RenderFrameHost*, int, base::RepeatingCallback<void (ExtensionFunction::ResponseType, base::ListValue const&, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)> const&) ()
#12 0x000058e021860773 in extensions::ExtensionFunctionDispatcher::Dispatch(ExtensionHostMsg_Request_Params const&, content::RenderFrameHost*, int) ()
#13 0x000058e0218818ea in bool IPC::MessageT<ExtensionHostMsg_Request_Meta, std::__1::tuple<ExtensionHostMsg_Request_Params>, void>::Dispatch<extensions::ExtensionWebContentsObserver, extensions::ExtensionWebContentsObserver, content::RenderFrameHost, void (extensions::ExtensionWebContentsObserver::*)(content::RenderFrameHost*, ExtensionHostMsg_Request_Params const&)>(IPC::Message const*, extensions::ExtensionWebContentsObserver*, extensions::ExtensionWebContentsObserver*, content::RenderFrameHost*, void (extensions::ExtensionWebContentsObserver::*)(content::RenderFrameHost*, ExtensionHostMsg_Request_Params const&)) ()

The hang:
TtsControllerImpl::SpeakNextUtterance ->
TtsControllerImpl::SpeakNow ->
TtsControllerImpl::OnSpeakFinished ->
enqueues the utterance back onto |utterance_list_| on failure.

which occurs all while(... !utterance_list_.empty()), leading to a
browser hang.

Solution:
The above utterance fails immediately because the voice is not yet
ready.  We fix this by never returning the voice in the first place, in
TtsControllerImpl::GetVoices.

Therefore, we never get to the point where an utterance matches against
a not yet initialized voice, leading to an attempt to speak, then to an
immediate failure, next to a re-enqueue, and finally a hang.

Bug: 1161107
Change-Id: I2d88c0c6e86bf79ad9ac5dc5240825848daa40ae
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2642746
Commit-Queue: David Tseng <[email protected]>
Reviewed-by: Dominic Mazzoni <[email protected]>
Cr-Commit-Position: refs/heads/master@{#845861}
blueboxd pushed a commit that referenced this issue Jan 23, 2021
This reverts commit d2adbc5.

Reason for revert: causing ~600 html failures on tests

Example stack trace

STDERR: Received signal 11 SEGV_MAPERR 000000000099
STDERR: #0 0x56419ad17d39 base::debug::CollectStackTrace()
STDERR: #1 0x56419ac8fc63 base::debug::StackTrace::StackTrace()
STDERR: #2 0x56419ad178e1 base::debug::(anonymous namespace)::StackDumpSignalHandler()
STDERR: #3 0x7f96ed01d390 (/lib/x86_64-linux-gnu/libpthread-2.23.so+0x1138f)
STDERR: #4 0x56419c8a9228 WTF::StaticSingleton<>::StaticSingleton<>()
STDERR: #5 0x56419c8a90cc blink::CounterStyleMap::GetUACounterStyleMap()
STDERR: #6 0x56419c8da407 blink::StyleEngine::FindCounterStyleAcrossScopes()
STDERR: #7 0x56419ce564a7 blink::ListMarker::GetCounterStyle()
STDERR: #8 0x56419ce5640e blink::ListMarker::GetListStyleCategory()
STDERR: #9 0x56419ce56d3e blink::ListMarker::InlineMarginsForInside()
STDERR: #10 0x56419c8846ae blink::StyleAdjuster::AdjustComputedStyle()
STDERR: #11 0x56419c877f3c blink::StyleResolver::PseudoStyleForElement()
STDERR: #12 0x56419c964063 blink::Element::StyleForPseudoElement()
STDERR: #13 0x56419c9a6bd9 blink::PseudoElement::CustomStyleForLayoutObject()
STDERR: #14 0x56419c95b52f blink::Element::StyleForLayoutObject()

etc

see e.g. https://ci.chromium.org/ui/p/chromium/builders/ci/WebKit%20Linux%20Leak/22892/test-results

Original change's description:
> Refactor counter style updates
>
> Currently, counter style updates is a phase in UpdateActiveStyles. This
> patch moves it out as a standalone phase of UpdateStyleAndLayoutTree,
> so that we update counter styles only when needed.
>
> This patch also adds MarkCounterStylesNeedUpdate() to indicate whether
> counter style updates are needed.
>
> Note: After refactoring, the framework of counter style updates looks
> almost identical to font updates. This is intentional. We will try to
> unify them in the future.
>
> Bug: 687225
> Change-Id: If07de2878ae5faa6800644a967029a569bef566a
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2639535
> Reviewed-by: Rune Lillesveen <[email protected]>
> Reviewed-by: Anders Hartvoll Ruud <[email protected]>
> Commit-Queue: Xiaocheng Hu <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#846203}

[email protected],[email protected],[email protected],[email protected]

Change-Id: I3c1e09dce14cd4edb366b911d3aaf5da66b2b100
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 687225
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2644742
Reviewed-by: Nina Satragno <[email protected]>
Commit-Queue: Nina Satragno <[email protected]>
Cr-Commit-Position: refs/heads/master@{#846262}
blueboxd pushed a commit that referenced this issue Jan 27, 2021
This reverts commit 0eb6b1e.

Reason for revert: Suspect causing ash_unittests failure on linux-chromeos-dbg

Builder:
https://ci.chromium.org/p/chromium/builders/ci/linux-chromeos-dbg
First build failure:
https://ci.chromium.org/p/chromium/builders/ci/linux-chromeos-dbg/22344

Sample stacktrace:
[1/5610] AcceleratorCommandsTest.ToggleMinimized (1848 ms)
[ RUN      ] AcceleratorCommandsTest.ToggleMaximized
[capture_mode_controller.cc(307)] Check failed: !message_center::MessageViewFactory::HasCustomNotificationViewFactory( kScreenCaptureNotificationType). 
#0 0x7f29bf492bbf base::debug::CollectStackTrace()
#1 0x7f29bf22770a base::debug::StackTrace::StackTrace()
#2 0x7f29bf2276c5 base::debug::StackTrace::StackTrace()
#3 0x7f29bf270d17 logging::LogMessage::~LogMessage()
#4 0x7f29bf271419 logging::LogMessage::~LogMessage()
#5 0x7f29bf1e80bb logging::CheckError::~CheckError()
#6 0x7f29c3a68b49 ash::CaptureModeController::CaptureModeController()
#7 0x7f29c3e2eceb std::__Cr::make_unique<>()
#8 0x7f29c3e1fa8b ash::Shell::Init()
#9 0x7f29c3e1f5de ash::Shell::CreateInstance()
#10 0x55fa098eea0e ash::AshTestHelper::SetUp()
#11 0x55fa098ebdc8 ash::AshTestBase::SetUp()
#12 0x55fa098ebc0e ash::AshTestBase::SetUp()


Original change's description:
> capture mode: implement customized image capture notification.
>
> Bug: 1159111
> Change-Id: I5a96480a929a05a7782f51ae6baea8ddc7c9df10
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2632390
> Reviewed-by: Evan Stade <[email protected]>
> Reviewed-by: Ahmed Fakhry <[email protected]>
> Commit-Queue: Xiaoqian Dai <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#846957}

[email protected],[email protected],[email protected],[email protected]

Change-Id: Id535618e328a75dbc829d8b662c8dc99dfe25f21
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 1159111
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2648987
Reviewed-by: Takashi Sakamoto <[email protected]>
Reviewed-by: Ahmed Fakhry <[email protected]>
Commit-Queue: Ahmed Fakhry <[email protected]>
Cr-Commit-Position: refs/heads/master@{#847060}
blueboxd pushed a commit that referenced this issue Jan 28, 2021
Use SequenceChecker::EnableStackLogging() to enable this logging.

When DCHECK() fails for a ThreadChecker or SequenceChecker, if the error
is not at the site of checking, it takes a great amount of knowledge and
persistence to figure out where the erroroneous thread/sequence-
attachment occurred. This is especially fun for a WeakPtr, which if
checked on the wrong thread becomes bound to the thread. Then if the
WeakPtrFactory is invalidated later, it's difficult to determine why it
believes it is on the wrong thread.

This adds a copy of the StackTrace in SequenceChecker and ThreadChecker
that is set whenever they are bound to a thread/sequence. Then on
failure the DCHECK() callers will get back a copy of the StackTrace and
include it in the log message. WeakPtr calls the SequenceChecker
manually instead of using the macros, since it has an additional
condition so we also add the StackTrace to the message there.

The StackTrace logging slows things down a bit, enough that we'd slow
bots down without good reason, so the logging is optional. You may use
SequenceChecker::EnableStackLogging() to enable this logging, or the
equivalent alias ThreadChecker::EnableStackLogging().

Example output with stack logging enabled:

[890744:1:1201/174351.878197:FATAL:weak_ptr.cc(23)] Check failed:
sequence_checker_.CalledOnValidSequence(&bound_at) || HasOneRef().
WeakPtrs must be invalidated on the same sequenced thread as where they
are bound. This was bound at:
#0 0x7fd813c8d369 base::debug::CollectStackTrace()
#1 0x7fd813b94103 base::debug::StackTrace::StackTrace()
#2 0x7fd813c70aef base::ThreadCheckerImpl::ThreadCheckerImpl()
#3 0x7fd813c02155 base::SequenceCheckerImpl::CalledOnValidSequence()
#4 0x7fd813ba4f55 base::ScopedValidateSequenceChecker::ScopedValidateSequenceChecker()
#5 0x7fd813bbfa4f base::internal::WeakReference::IsValid()
#6 0x7fd80acd0f36 blink::FrameWidgetInputHandlerImpl::FrameWidgetInputHandlerImpl()
[...]
Check failed at:
#0 0x7fd813c8d369 base::debug::CollectStackTrace()
#1 0x7fd813b94103 base::debug::StackTrace::StackTrace()
#2 0x7fd813bb3c53 logging::LogMessage::~LogMessage()
#3 0x7fd813bb45ae logging::LogMessage::~LogMessage()
#4 0x7fd813bbf91c base::internal::WeakReference::Flag::Invalidate()
#5 0x7fd813bbfc8c base::internal::WeakReferenceOwner::Invalidate()
#6 0x7fd80ca6eda7 blink::WebFrameWidgetImpl::Close()
#7 0x7fd80ff22359 content::RenderWidget::Close()
#8 0x7fd80ff21eff content::RenderWidget::CloseForFrame()
[...]

[email protected]

Change-Id: Id89c12eaedfba9788b3cd2624447c6a1616f0afa
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2568446
Commit-Queue: danakj <[email protected]>
Reviewed-by: Gabriel Charette <[email protected]>
Reviewed-by: Nico Weber <[email protected]>
Cr-Commit-Position: refs/heads/master@{#847805}
blueboxd pushed a commit that referenced this issue Feb 3, 2021
…by default"

This reverts commit ba96414.

Reason for revert: failing unit_tests on linux-chromeos-chrome with NOTREACHED(). Failing tests:
MediaToolbarButtonControllerTest.DoesNotDisableButtonIfDialogIsOpen
MediaToolbarButtonControllerTest.DoesNotHideIfMediaStartsPlayingWithinTimeout
MediaToolbarButtonControllerTest.HidesAfterTimeoutAndShowsAgainOnPlay

Example:
 RUN      ] MediaToolbarButtonControllerTest.HidesAfterTimeoutAndShowsAgainOnPlay
2021-02-03T04:04:47.546579Z 564170770 ERROR unit_tests[2535:2535]: [pref_change_registrar.cc(40)] NOTREACHED() hit.
Received signal 11 SEGV_MAPERR 000000000038
#0 0x5611b0dbfe29 base::debug::CollectStackTrace()
#1 0x5611b0d2f4d3 base::debug::StackTrace::StackTrace()
#2 0x5611b0dbf9d1 base::debug::(anonymous namespace)::StackDumpSignalHandler()
#3 0x7f9eb128f390 (/lib/x86_64-linux-gnu/libpthread-2.23.so+0x1138f)
#4 0x5611ac59c5fe std::__1::__hash_table<>::find<>()
#5 0x5611b1c25762 PrefService::FindPreference()
#6 0x5611b11a2169 media_router::GetCastAllowAllIPsPref()
#7 0x5611b2fd159b media_router::CastMediaSinkService::CreateImpl()
#8 0x5611b2fd138f media_router::CastMediaSinkService::Start()
#9 0x5611b2fad704 media_router::DualMediaSinkService::DualMediaSinkService()
#10 0x5611b2fad539 media_router::DualMediaSinkService::GetInstance()
#11 0x5611b2f93b44 media_router::MediaRouterDesktop::MediaRouterDesktop()
#12 0x5611b2f93030 media_router::ChromeMediaRouterFactory::BuildServiceInstanceFor()
#13 0x5611b2bdb30f BrowserContextKeyedServiceFactory::BuildServiceInstanceFor()
#14 0x5611b1cd2837 KeyedServiceFactory::GetServiceForContext()
#15 0x5611b37297b6 CastMediaNotificationProvider::CastMediaNotificationProvider()
#16 0x5611b372c274 MediaNotificationService::MediaNotificationService()
#17 0x5611abdba814 MediaToolbarButtonControllerTest::SetUp()

first failing build:
https://ci.chromium.org/ui/p/chrome/builders/ci/linux-chromeos-chrome/11825/overview

Original change's description:
> Enable GlobalMediaControlsForCast and CastMediaRouteProvider by default
>
> The features were enabled via a config change in M87 (CastMRP on CrOS
> will soon be enabled in M88). This change enables them by default.
>
> Bug: 1042330, 869214
> Change-Id: I111bd1f6d13bf70cf7557004205e7de1dc3e23ec
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2631191
> Reviewed-by: Peter Kasting <[email protected]>
> Reviewed-by: John Williams <[email protected]>
> Reviewed-by: Mounir Lamouri <[email protected]>
> Commit-Queue: Takumi Fujimoto <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#849910}

[email protected],[email protected],[email protected],[email protected],[email protected]

Change-Id: I215a231257e91dd81348577221892fb6b297677d
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Bug: 1042330
Bug: 869214
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2671781
Reviewed-by: Olga Sharonova <[email protected]>
Commit-Queue: Olga Sharonova <[email protected]>
Cr-Commit-Position: refs/heads/master@{#850027}
blueboxd pushed a commit that referenced this issue Feb 17, 2021
… Text"

This reverts commit 87004c0941db2881991388cd6c72cf4a3d1f31c2.

Reason for revert: 
As Sheriff, I'm reverting this change on suspicion of causing the MSan ChromeOS buildbot to think that we are referencing uninitialized memory.

Failing build
https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20ChromiumOS%20MSan%20Tests/22528/overview

Flakiness Dashboard
https://test-results.appspot.com/dashboards/flakiness_dashboard.html#tests=All%2FSharesheetBubbleViewBrowserTest.InvokeUi_Default%2F0&testType=browser_tests

Test failure:
[ RUN      ] All/SharesheetBubbleViewBrowserTest.InvokeUi_Default/0
2021-02-16T12:29:26.782807Z WARNING browser_tests[26720:26720]: [audio_manager_linux.cc(69)] Falling back to ALSA for audio output. PulseAudio is not available or could not be initialized.
2021-02-16T12:29:26.796127Z ERROR browser_tests[26720:26720]: [cras_audio_handler.cc(1628)] Failed to retrieve WBS mic deprioritized flag
2021-02-16T12:29:26.796914Z WARNING browser_tests[26720:26813]: [statistics_provider.cc(320)] Finished loading statistics.
2021-02-16T12:29:27.204718Z ERROR browser_tests[26720:26720]: [proximity_auth_profile_pref_manager.cc(194)] Failed to find local state prefs for current user.
2021-02-16T12:29:27.576009Z WARNING browser_tests[26720:26720]: [remote_commands_service.cc(183)] Client is not registered.
2021-02-16T12:29:27.621032Z WARNING browser_tests[26720:26720]: [wallpaper_controller_client.cc(376)] Cannot get wallpaper files id in RemovePolicyWallpaper. This should never happen under normal circumstances.
2021-02-16T12:29:28.217682Z ERROR browser_tests[26720:26720]: [plugin_vm_manager_impl.cc(141)] New session has dispatcher unexpected already running. Perhaps Chrome crashed?
2021-02-16T12:29:28.404958Z ERROR browser_tests[26720:26720]: [account_manager_migrator.cc(268)] Could not find a refresh token for the Device Account.
2021-02-16T12:29:28.421207Z INFO browser_tests[26720:26720]: [android_sms_pairing_state_tracker_impl.cc(72)] No Pairing cookie found
2021-02-16T12:29:28.421880Z INFO browser_tests[26720:26720]: [key_permissions_manager_impl.cc(495)] One-time key permissions migration started for token: 0.
2021-02-16T12:29:28.734078Z ERROR browser_tests[26720:26817]: [als_reader.cc(52)] Missing num of als
2021-02-16T12:29:28.742218Z ERROR browser_tests[26720:26817]: [object_proxy.cc(621)] Failed to call method: org.chromium.U2F.IsUvpaa: object_path= /org/chromium/U2F: org.freedesktop.DBus.Error.ServiceUnknown: The name org.chromium.U2F was not provided by any .service files
2021-02-16T12:29:28.841649Z WARNING browser_tests[26720:26720]: [drivefs_session.cc(62)] DriveFs mount failed with error: 3
2021-02-16T12:29:28.936983Z INFO browser_tests[26720:26720]: [key_permissions_manager_impl.cc(520)] One-time key permissions migration succeeded for token: 0.
==26720==WARNING: MemorySanitizer: use-of-uninitialized-value
    #0 0x5598549f2288 in views::NativeWidgetAura::CenterWindow(gfx::Size const&) ./../../ui/views/widget/native_widget_aura.cc:415:57
    #1 0x5598549793f1 in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:0:0
    #2 0x559854976649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #3 0x5598546bc0b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #4 0x5598546bc0b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #5 0x559863210ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #6 0x559851c5ead2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #7 0x559851c54d36 in sharesheet::SharesheetService::OnAppIconsLoaded(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >) ./../../chrome/browser/sharesheet/sharesheet_service.cc:245:13
    #8 0x559851c5a278 in void base::internal::FunctorTraits<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), void>::Invoke<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> > >(void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>&&, sharesheet::SharesheetServiceDelegate*&&, mojo::StructPtr<apps::mojom::Intent>&&, base::OnceCallback<void (sharesheet::SharesheetResult)>&&, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:498:12
    #9 0x559851c59e92 in MakeItSo<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo> > ./../../base/bind_internal.h:657:5
    #10 0x559851c59e92 in RunImpl<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), std::tuple<base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, 0, 1, 2, 3> ./../../base/bind_internal.h:710:12
    #11 0x559851c59e92 in base::internal::Invoker<base::internal::BindState<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>::RunOnce(base::internal::BindStateBase*, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:679:12
    #12 0x559851c52f7a in Run ./../../base/callback.h:101:12
    #13 0x559851c52f7a in sharesheet::SharesheetService::LoadAppIcons(std::__1::vector<apps::IntentLaunchInfo, std::__1::allocator<apps::IntentLaunchInfo> >, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, unsigned long, base::OnceCallback<void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:170:25
    #14 0x559851c506b5 in sharesheet::SharesheetService::ShowBubbleWithDelegate(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:270:3
    #15 0x559851c4f610 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:69:3
    #16 0x559851c4f2a5 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:57:3
    #17 0x55983e696304 in SharesheetBubbleViewBrowserTest::ShowUi() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:51:25
    #18 0x55983e6958d8 in SharesheetBubbleViewBrowserTest_InvokeUi_Default_Test::RunTestOnMainThread() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:91:3
    #19 0x5598526fa6e6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:805:5
    #20 0x559850dc31ed in Run ./../../base/callback.h:101:12
    #21 0x559850dc31ed in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ./../../chrome/browser/chrome_browser_main.cc:1688:38
    #22 0x559850dc03c0 in ChromeBrowserMainParts::PreMainMessageLoopRun() ./../../chrome/browser/chrome_browser_main.cc:1043:18
    #23 0x55983fce3e6f in chromeos::ChromeBrowserMainPartsChromeos::PreMainMessageLoopRun() ./../../chrome/browser/chromeos/chrome_browser_main_chromeos.cc:658:32
    #24 0x5598460cf517 in content::BrowserMainLoop::PreMainMessageLoopRun() ./../../content/browser/browser_main_loop.cc:944:13
    #25 0x5598475f80ac in Run ./../../base/callback.h:101:12
    #26 0x5598475f80ac in content::StartupTaskRunner::RunAllTasksNow() ./../../content/browser/startup_task_runner.cc:41:29
    #27 0x5598460ca995 in content::BrowserMainLoop::CreateStartupTasks() ./../../content/browser/browser_main_loop.cc:854:25
    #28 0x5598460d6b64 in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&) ./../../content/browser/browser_main_runner_impl.cc:129:15
    #29 0x5598460c37f2 in content::BrowserMain(content::MainFunctionParams const&) ./../../content/browser/browser_main.cc:43:32
    #30 0x55984a9b393f in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:517:10
    #31 0x55984a9b7a37 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams&, bool) ./../../content/app/content_main_runner_impl.cc:1001:10
    #32 0x55984a9b68b0 in content::ContentMainRunnerImpl::Run(bool) ./../../content/app/content_main_runner_impl.cc:876:12
    #33 0x55984a9ae481 in content::RunContentProcess(content::ContentMainParams const&, content::ContentMainRunner*) ./../../content/app/content_main.cc:372:36
    #34 0x55984a9aebb0 in content::ContentMain(content::ContentMainParams const&) ./../../content/app/content_main.cc:398:10
    #35 0x5598526f81ea in content::BrowserTestBase::SetUp() ./../../content/public/test/browser_test_base.cc:683:3
    #36 0x5598506cda3f in InProcessBrowserTest::SetUp() ./../../chrome/test/base/in_process_browser_test.cc:348:20
    #37 0x5598418d8c23 in HandleExceptionsInMethodIfSupported<testing::Test, void> ./../../third_party/googletest/src/googletest/src/gtest.cc:0:0
    #38 0x5598418d8c23 in testing::Test::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2684:3
    #39 0x5598418db9f9 in testing::TestInfo::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2866:11
    #40 0x5598418dda84 in testing::TestSuite::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:3020:28
    #41 0x559841907c54 in testing::internal::UnitTestImpl::RunAllTests() ./../../third_party/googletest/src/googletest/src/gtest.cc:5730:44
    #42 0x559841906c4e in HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool> ./../../third_party/googletest/src/googletest/src/gtest-internal-inl.h:0:10
    #43 0x559841906c4e in testing::UnitTest::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:5313:10
    #44 0x559850c79fd4 in RUN_ALL_TESTS ./../../third_party/googletest/src/googletest/include/gtest/gtest.h:2485:46
    #45 0x559850c79fd4 in base::TestSuite::Run() ./../../base/test/test_suite.cc:481:16
    #46 0x5598506276e3 in BrowserTestSuiteRunnerChromeOS::RunTestSuite(int, char**) ./../../chrome/test/base/browser_tests_main_chromeos.cc:35:23
    #47 0x5598527f8a74 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ./../../content/public/test/test_launcher.cc:376:31
    #48 0x559850633db9 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ./../../chrome/test/base/chrome_test_launcher.cc:269:10
    #49 0x5598506274ff in main ./../../chrome/test/base/browser_tests_main_chromeos.cc:47:10
    #50 0x7f9a676ee83f in __libc_start_main ??:0:0
    #51 0x55983729bd49 in _start ??:0:0

  Uninitialized value was stored to memory at
    #0 0x55985497952f in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:1602:40
    #1 0x559854976649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #2 0x5598546bc0b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #3 0x5598546bc0b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #4 0x559863210ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #5 0x559851c5ead2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #6 0x559851c54d36 in sharesheet::SharesheetService::OnAppIconsLoaded(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >) ./../../chrome/browser/sharesheet/sharesheet_service.cc:245:13
    #7 0x559851c5a278 in void base::internal::FunctorTraits<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), void>::Invoke<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> > >(void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>&&, sharesheet::SharesheetServiceDelegate*&&, mojo::StructPtr<apps::mojom::Intent>&&, base::OnceCallback<void (sharesheet::SharesheetResult)>&&, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:498:12
    #8 0x559851c59e92 in MakeItSo<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo> > ./../../base/bind_internal.h:657:5
    #9 0x559851c59e92 in RunImpl<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), std::tuple<base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, 0, 1, 2, 3> ./../../base/bind_internal.h:710:12
    #10 0x559851c59e92 in base::internal::Invoker<base::internal::BindState<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>::RunOnce(base::internal::BindStateBase*, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:679:12
    #11 0x559851c52f7a in Run ./../../base/callback.h:101:12
    #12 0x559851c52f7a in sharesheet::SharesheetService::LoadAppIcons(std::__1::vector<apps::IntentLaunchInfo, std::__1::allocator<apps::IntentLaunchInfo> >, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, unsigned long, base::OnceCallback<void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:170:25
    #13 0x559851c506b5 in sharesheet::SharesheetService::ShowBubbleWithDelegate(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:270:3
    #14 0x559851c4f610 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:69:3
    #15 0x559851c4f2a5 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:57:3
    #16 0x55983e696304 in SharesheetBubbleViewBrowserTest::ShowUi() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:51:25
    #17 0x55983e6958d8 in SharesheetBubbleViewBrowserTest_InvokeUi_Default_Test::RunTestOnMainThread() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:91:3
    #18 0x5598526fa6e6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:805:5
    #19 0x559850dc31ed in Run ./../../base/callback.h:101:12
    #20 0x559850dc31ed in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ./../../chrome/browser/chrome_browser_main.cc:1688:38
    #21 0x559850dc03c0 in ChromeBrowserMainParts::PreMainMessageLoopRun() ./../../chrome/browser/chrome_browser_main.cc:1043:18
    #22 0x55983fce3e6f in chromeos::ChromeBrowserMainPartsChromeos::PreMainMessageLoopRun() ./../../chrome/browser/chromeos/chrome_browser_main_chromeos.cc:658:32
    #23 0x5598460cf517 in content::BrowserMainLoop::PreMainMessageLoopRun() ./../../content/browser/browser_main_loop.cc:944:13
    #24 0x5598475f80ac in Run ./../../base/callback.h:101:12
    #25 0x5598475f80ac in content::StartupTaskRunner::RunAllTasksNow() ./../../content/browser/startup_task_runner.cc:41:29

  Uninitialized value was stored to memory at
    #0 0x5598546b68a3 in Rect ./../../ui/gfx/geometry/rect.h:43:47
    #1 0x5598546b68a3 in views::BubbleBorder::GetBounds(gfx::Rect const&, gfx::Size const&) const ./../../ui/views/bubble/bubble_border.cc:90:15
    #2 0x5598546d7ad3 in views::BubbleFrameView::GetWindowBoundsForClientBounds(gfx::Rect const&) const ./../../ui/views/bubble/bubble_frame_view.cc:186:26
    #3 0x5598549b8119 in GetWindowBoundsForClientBounds ./../../ui/views/window/non_client_view.cc:207:23
    #4 0x5598549b8119 in views::NonClientView::CalculatePreferredSize() const ./../../ui/views/window/non_client_view.cc:244:10
    #5 0x559854928c1d in views::View::GetPreferredSize() const ./../../ui/views/view.cc:497:10
    #6 0x559854979468 in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:1602:40
    #7 0x559854976649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #8 0x5598546bc0b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #9 0x5598546bc0b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #10 0x559863210ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #11 0x559851c5ead2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #12 0x559851c54d36 in sharesheet::SharesheetService::OnAppIconsLoaded(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >) ./../../chrome/browser/sharesheet/sharesheet_service.cc:245:13
    #13 0x559851c5a278 in void base::internal::FunctorTraits<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), void>::Invoke<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> > >(void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>&&, sharesheet::SharesheetServiceDelegate*&&, mojo::StructPtr<apps::mojom::Intent>&&, base::OnceCallback<void (sharesheet::SharesheetResult)>&&, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:498:12
    #14 0x559851c59e92 in MakeItSo<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo> > ./../../base/bind_internal.h:657:5
    #15 0x559851c59e92 in RunImpl<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), std::tuple<base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, 0, 1, 2, 3> ./../../base/bind_internal.h:710:12
    #16 0x559851c59e92 in base::internal::Invoker<base::internal::BindState<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>::RunOnce(base::internal::BindStateBase*, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:679:12
    #17 0x559851c52f7a in Run ./../../base/callback.h:101:12
    #18 0x559851c52f7a in sharesheet::SharesheetService::LoadAppIcons(std::__1::vector<apps::IntentLaunchInfo, std::__1::allocator<apps::IntentLaunchInfo> >, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, unsigned long, base::OnceCallback<void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:170:25
    #19 0x559851c506b5 in sharesheet::SharesheetService::ShowBubbleWithDelegate(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:270:3
    #20 0x559851c4f610 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:69:3
    #21 0x559851c4f2a5 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:57:3
    #22 0x55983e696304 in SharesheetBubbleViewBrowserTest::ShowUi() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:51:25
    #23 0x55983e6958d8 in SharesheetBubbleViewBrowserTest_InvokeUi_Default_Test::RunTestOnMainThread() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:91:3
    #24 0x5598526fa6e6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:805:5
    #25 0x559850dc31ed in Run ./../../base/callback.h:101:12
    #26 0x559850dc31ed in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ./../../chrome/browser/chrome_browser_main.cc:1688:38

  Uninitialized value was stored to memory at
    #0 0x5598546d7ae7 in views::BubbleFrameView::GetWindowBoundsForClientBounds(gfx::Rect const&) const ./../../ui/views/bubble/bubble_frame_view.cc:185:18
    #1 0x5598549b8119 in GetWindowBoundsForClientBounds ./../../ui/views/window/non_client_view.cc:207:23
    #2 0x5598549b8119 in views::NonClientView::CalculatePreferredSize() const ./../../ui/views/window/non_client_view.cc:244:10
    #3 0x559854928c1d in views::View::GetPreferredSize() const ./../../ui/views/view.cc:497:10
    #4 0x559854979468 in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:1602:40
    #5 0x559854976649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #6 0x5598546bc0b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #7 0x5598546bc0b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #8 0x559863210ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #9 0x559851c5ead2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #10 0x559851c54d36 in sharesheet::SharesheetService::OnAppIconsLoaded(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >) ./../../chrome/browser/sharesheet/sharesheet_service.cc:245:13
    #11 0x559851c5a278 in void base::internal::FunctorTraits<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), void>::Invoke<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> > >(void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>&&, sharesheet::SharesheetServiceDelegate*&&, mojo::StructPtr<apps::mojom::Intent>&&, base::OnceCallback<void (sharesheet::SharesheetResult)>&&, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:498:12
    #12 0x559851c59e92 in MakeItSo<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo> > ./../../base/bind_internal.h:657:5
    #13 0x559851c59e92 in RunImpl<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), std::tuple<base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, 0, 1, 2, 3> ./../../base/bind_internal.h:710:12
    #14 0x559851c59e92 in base::internal::Invoker<base::internal::BindState<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>::RunOnce(base::internal::BindStateBase*, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:679:12
    #15 0x559851c52f7a in Run ./../../base/callback.h:101:12
    #16 0x559851c52f7a in sharesheet::SharesheetService::LoadAppIcons(std::__1::vector<apps::IntentLaunchInfo, std::__1::allocator<apps::IntentLaunchInfo> >, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, unsigned long, base::OnceCallback<void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:170:25
    #17 0x559851c506b5 in sharesheet::SharesheetService::ShowBubbleWithDelegate(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:270:3
    #18 0x559851c4f610 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:69:3
    #19 0x559851c4f2a5 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:57:3
    #20 0x55983e696304 in SharesheetBubbleViewBrowserTest::ShowUi() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:51:25
    #21 0x55983e6958d8 in SharesheetBubbleViewBrowserTest_InvokeUi_Default_Test::RunTestOnMainThread() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:91:3
    #22 0x5598526fa6e6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:805:5
    #23 0x559850dc31ed in Run ./../../base/callback.h:101:12
    #24 0x559850dc31ed in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ./../../chrome/browser/chrome_browser_main.cc:1688:38
    #25 0x559850dc03c0 in ChromeBrowserMainParts::PreMainMessageLoopRun() ./../../chrome/browser/chrome_browser_main.cc:1043:18

  Uninitialized value was created by an allocation of 'retval' in the stack frame of function '_ZNK5views15BubbleFrameView25GetFrameSizeForClientSizeERKN3gfx4SizeE'
    #0 0x5598546d7b2a in views::BubbleFrameView::GetFrameSizeForClientSize(gfx::Size const&) const ./../../ui/views/bubble/bubble_frame_view.cc:834:0

SUMMARY: MemorySanitizer: use-of-uninitialized-value (/b/s/w/ir/out/Release/browser_tests+0x24ac3288)
Exiting
[ RUN      ] All/SharesheetBubbleViewBrowserTest.InvokeUi_Default/0
2021-02-16T12:36:26.583543Z WARNING browser_tests[30386:30386]: [audio_manager_linux.cc(69)] Falling back to ALSA for audio output. PulseAudio is not available or could not be initialized.
2021-02-16T12:36:26.592586Z ERROR browser_tests[30386:30386]: [cras_audio_handler.cc(1628)] Failed to retrieve WBS mic deprioritized flag
2021-02-16T12:36:26.593289Z WARNING browser_tests[30386:30401]: [statistics_provider.cc(320)] Finished loading statistics.
2021-02-16T12:36:26.860265Z ERROR browser_tests[30386:30386]: [proximity_auth_profile_pref_manager.cc(194)] Failed to find local state prefs for current user.
2021-02-16T12:36:27.035171Z WARNING browser_tests[30386:30386]: [remote_commands_service.cc(183)] Client is not registered.
2021-02-16T12:36:27.064652Z WARNING browser_tests[30386:30386]: [wallpaper_controller_client.cc(376)] Cannot get wallpaper files id in RemovePolicyWallpaper. This should never happen under normal circumstances.
2021-02-16T12:36:27.364592Z ERROR browser_tests[30386:30386]: [plugin_vm_manager_impl.cc(141)] New session has dispatcher unexpected already running. Perhaps Chrome crashed?
2021-02-16T12:36:27.421165Z ERROR browser_tests[30386:30386]: [account_manager_migrator.cc(268)] Could not find a refresh token for the Device Account.
2021-02-16T12:36:27.481536Z INFO browser_tests[30386:30386]: [key_permissions_manager_impl.cc(495)] One-time key permissions migration started for token: 0.
2021-02-16T12:36:27.484870Z INFO browser_tests[30386:30386]: [android_sms_pairing_state_tracker_impl.cc(72)] No Pairing cookie found
2021-02-16T12:36:27.638922Z ERROR browser_tests[30386:30401]: [als_reader.cc(52)] Missing num of als
2021-02-16T12:36:27.638945Z WARNING browser_tests[30386:30386]: [drivefs_session.cc(62)] DriveFs mount failed with error: 3
2021-02-16T12:36:27.644456Z ERROR browser_tests[30386:30401]: [object_proxy.cc(621)] Failed to call method: org.chromium.U2F.IsUvpaa: object_path= /org/chromium/U2F: org.freedesktop.DBus.Error.ServiceUnknown: The name org.chromium.U2F was not provided by any .service files
2021-02-16T12:36:27.699898Z INFO browser_tests[30386:30386]: [key_permissions_manager_impl.cc(520)] One-time key permissions migration succeeded for token: 0.
==30386==WARNING: MemorySanitizer: use-of-uninitialized-value
    #0 0x560b2e64a288 in views::NativeWidgetAura::CenterWindow(gfx::Size const&) ./../../ui/views/widget/native_widget_aura.cc:415:57
    #1 0x560b2e5d13f1 in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:0:0
    #2 0x560b2e5ce649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #3 0x560b2e3140b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #4 0x560b2e3140b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #5 0x560b3ce68ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #6 0x560b2b8b6ad2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #7 0x560b2b8acd36 in sharesheet::SharesheetService::OnAppIconsLoaded(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >) ./../../chrome/browser/sharesheet/sharesheet_service.cc:245:13
    #8 0x560b2b8b2278 in void base::internal::FunctorTraits<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), void>::Invoke<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> > >(void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>&&, sharesheet::SharesheetServiceDelegate*&&, mojo::StructPtr<apps::mojom::Intent>&&, base::OnceCallback<void (sharesheet::SharesheetResult)>&&, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:498:12
    #9 0x560b2b8b1e92 in MakeItSo<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo> > ./../../base/bind_internal.h:657:5
    #10 0x560b2b8b1e92 in RunImpl<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), std::tuple<base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, 0, 1, 2, 3> ./../../base/bind_internal.h:710:12
    #11 0x560b2b8b1e92 in base::internal::Invoker<base::internal::BindState<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>::RunOnce(base::internal::BindStateBase*, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:679:12
    #12 0x560b2b8aaf7a in Run ./../../base/callback.h:101:12
    #13 0x560b2b8aaf7a in sharesheet::SharesheetService::LoadAppIcons(std::__1::vector<apps::IntentLaunchInfo, std::__1::allocator<apps::IntentLaunchInfo> >, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, unsigned long, base::OnceCallback<void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:170:25
    #14 0x560b2b8a86b5 in sharesheet::SharesheetService::ShowBubbleWithDelegate(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:270:3
    #15 0x560b2b8a7610 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:69:3
    #16 0x560b2b8a72a5 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:57:3
    #17 0x560b182ee304 in SharesheetBubbleViewBrowserTest::ShowUi() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:51:25
    #18 0x560b182ed8d8 in SharesheetBubbleViewBrowserTest_InvokeUi_Default_Test::RunTestOnMainThread() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:91:3
    #19 0x560b2c3526e6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:805:5
    #20 0x560b2aa1b1ed in Run ./../../base/callback.h:101:12
    #21 0x560b2aa1b1ed in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ./../../chrome/browser/chrome_browser_main.cc:1688:38
    #22 0x560b2aa183c0 in ChromeBrowserMainParts::PreMainMessageLoopRun() ./../../chrome/browser/chrome_browser_main.cc:1043:18
    #23 0x560b1993be6f in chromeos::ChromeBrowserMainPartsChromeos::PreMainMessageLoopRun() ./../../chrome/browser/chromeos/chrome_browser_main_chromeos.cc:658:32
    #24 0x560b1fd27517 in content::BrowserMainLoop::PreMainMessageLoopRun() ./../../content/browser/browser_main_loop.cc:944:13
    #25 0x560b212500ac in Run ./../../base/callback.h:101:12
    #26 0x560b212500ac in content::StartupTaskRunner::RunAllTasksNow() ./../../content/browser/startup_task_runner.cc:41:29
    #27 0x560b1fd22995 in content::BrowserMainLoop::CreateStartupTasks() ./../../content/browser/browser_main_loop.cc:854:25
    #28 0x560b1fd2eb64 in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&) ./../../content/browser/browser_main_runner_impl.cc:129:15
    #29 0x560b1fd1b7f2 in content::BrowserMain(content::MainFunctionParams const&) ./../../content/browser/browser_main.cc:43:32
    #30 0x560b2460b93f in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:517:10
    #31 0x560b2460fa37 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams&, bool) ./../../content/app/content_main_runner_impl.cc:1001:10
    #32 0x560b2460e8b0 in content::ContentMainRunnerImpl::Run(bool) ./../../content/app/content_main_runner_impl.cc:876:12
    #33 0x560b24606481 in content::RunContentProcess(content::ContentMainParams const&, content::ContentMainRunner*) ./../../content/app/content_main.cc:372:36
    #34 0x560b24606bb0 in content::ContentMain(content::ContentMainParams const&) ./../../content/app/content_main.cc:398:10
    #35 0x560b2c3501ea in content::BrowserTestBase::SetUp() ./../../content/public/test/browser_test_base.cc:683:3
    #36 0x560b2a325a3f in InProcessBrowserTest::SetUp() ./../../chrome/test/base/in_process_browser_test.cc:348:20
    #37 0x560b1b530c23 in HandleExceptionsInMethodIfSupported<testing::Test, void> ./../../third_party/googletest/src/googletest/src/gtest.cc:0:0
    #38 0x560b1b530c23 in testing::Test::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2684:3
    #39 0x560b1b5339f9 in testing::TestInfo::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:2866:11
    #40 0x560b1b535a84 in testing::TestSuite::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:3020:28
    #41 0x560b1b55fc54 in testing::internal::UnitTestImpl::RunAllTests() ./../../third_party/googletest/src/googletest/src/gtest.cc:5730:44
    #42 0x560b1b55ec4e in HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool> ./../../third_party/googletest/src/googletest/src/gtest-internal-inl.h:0:10
    #43 0x560b1b55ec4e in testing::UnitTest::Run() ./../../third_party/googletest/src/googletest/src/gtest.cc:5313:10
    #44 0x560b2a8d1fd4 in RUN_ALL_TESTS ./../../third_party/googletest/src/googletest/include/gtest/gtest.h:2485:46
    #45 0x560b2a8d1fd4 in base::TestSuite::Run() ./../../base/test/test_suite.cc:481:16
    #46 0x560b2a27f6e3 in BrowserTestSuiteRunnerChromeOS::RunTestSuite(int, char**) ./../../chrome/test/base/browser_tests_main_chromeos.cc:35:23
    #47 0x560b2c450a74 in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ./../../content/public/test/test_launcher.cc:376:31
    #48 0x560b2a28bdb9 in LaunchChromeTests(unsigned long, content::TestLauncherDelegate*, int, char**) ./../../chrome/test/base/chrome_test_launcher.cc:269:10
    #49 0x560b2a27f4ff in main ./../../chrome/test/base/browser_tests_main_chromeos.cc:47:10
    #50 0x7f0d2d9dd83f in __libc_start_main ??:0:0
    #51 0x560b10ef3d49 in _start ??:0:0

  Uninitialized value was stored to memory at
    #0 0x560b2e5d152f in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:1602:40
    #1 0x560b2e5ce649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #2 0x560b2e3140b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #3 0x560b2e3140b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #4 0x560b3ce68ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #5 0x560b2b8b6ad2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #6 0x560b2b8acd36 in sharesheet::SharesheetService::OnAppIconsLoaded(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >) ./../../chrome/browser/sharesheet/sharesheet_service.cc:245:13
    #7 0x560b2b8b2278 in void base::internal::FunctorTraits<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), void>::Invoke<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> > >(void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>&&, sharesheet::SharesheetServiceDelegate*&&, mojo::StructPtr<apps::mojom::Intent>&&, base::OnceCallback<void (sharesheet::SharesheetResult)>&&, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:498:12
    #8 0x560b2b8b1e92 in MakeItSo<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo> > ./../../base/bind_internal.h:657:5
    #9 0x560b2b8b1e92 in RunImpl<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), std::tuple<base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, 0, 1, 2, 3> ./../../base/bind_internal.h:710:12
    #10 0x560b2b8b1e92 in base::internal::Invoker<base::internal::BindState<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>::RunOnce(base::internal::BindStateBase*, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:679:12
    #11 0x560b2b8aaf7a in Run ./../../base/callback.h:101:12
    #12 0x560b2b8aaf7a in sharesheet::SharesheetService::LoadAppIcons(std::__1::vector<apps::IntentLaunchInfo, std::__1::allocator<apps::IntentLaunchInfo> >, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, unsigned long, base::OnceCallback<void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:170:25
    #13 0x560b2b8a86b5 in sharesheet::SharesheetService::ShowBubbleWithDelegate(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:270:3
    #14 0x560b2b8a7610 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:69:3
    #15 0x560b2b8a72a5 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:57:3
    #16 0x560b182ee304 in SharesheetBubbleViewBrowserTest::ShowUi() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:51:25
    #17 0x560b182ed8d8 in SharesheetBubbleViewBrowserTest_InvokeUi_Default_Test::RunTestOnMainThread() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:91:3
    #18 0x560b2c3526e6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:805:5
    #19 0x560b2aa1b1ed in Run ./../../base/callback.h:101:12
    #20 0x560b2aa1b1ed in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ./../../chrome/browser/chrome_browser_main.cc:1688:38
    #21 0x560b2aa183c0 in ChromeBrowserMainParts::PreMainMessageLoopRun() ./../../chrome/browser/chrome_browser_main.cc:1043:18
    #22 0x560b1993be6f in chromeos::ChromeBrowserMainPartsChromeos::PreMainMessageLoopRun() ./../../chrome/browser/chromeos/chrome_browser_main_chromeos.cc:658:32
    #23 0x560b1fd27517 in content::BrowserMainLoop::PreMainMessageLoopRun() ./../../content/browser/browser_main_loop.cc:944:13
    #24 0x560b212500ac in Run ./../../base/callback.h:101:12
    #25 0x560b212500ac in content::StartupTaskRunner::RunAllTasksNow() ./../../content/browser/startup_task_runner.cc:41:29

  Uninitialized value was stored to memory at
    #0 0x560b2e30e8a3 in Rect ./../../ui/gfx/geometry/rect.h:43:47
    #1 0x560b2e30e8a3 in views::BubbleBorder::GetBounds(gfx::Rect const&, gfx::Size const&) const ./../../ui/views/bubble/bubble_border.cc:90:15
    #2 0x560b2e32fad3 in views::BubbleFrameView::GetWindowBoundsForClientBounds(gfx::Rect const&) const ./../../ui/views/bubble/bubble_frame_view.cc:186:26
    #3 0x560b2e610119 in GetWindowBoundsForClientBounds ./../../ui/views/window/non_client_view.cc:207:23
    #4 0x560b2e610119 in views::NonClientView::CalculatePreferredSize() const ./../../ui/views/window/non_client_view.cc:244:10
    #5 0x560b2e580c1d in views::View::GetPreferredSize() const ./../../ui/views/view.cc:497:10
    #6 0x560b2e5d1468 in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:1602:40
    #7 0x560b2e5ce649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #8 0x560b2e3140b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #9 0x560b2e3140b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #10 0x560b3ce68ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #11 0x560b2b8b6ad2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #12 0x560b2b8acd36 in sharesheet::SharesheetService::OnAppIconsLoaded(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >) ./../../chrome/browser/sharesheet/sharesheet_service.cc:245:13
    #13 0x560b2b8b2278 in void base::internal::FunctorTraits<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), void>::Invoke<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> > >(void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>&&, sharesheet::SharesheetServiceDelegate*&&, mojo::StructPtr<apps::mojom::Intent>&&, base::OnceCallback<void (sharesheet::SharesheetResult)>&&, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:498:12
    #14 0x560b2b8b1e92 in MakeItSo<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo> > ./../../base/bind_internal.h:657:5
    #15 0x560b2b8b1e92 in RunImpl<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::vector<sharesheet::TargetInfo>), std::tuple<base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate *, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, 0, 1, 2, 3> ./../../base/bind_internal.h:710:12
    #16 0x560b2b8b1e92 in base::internal::Invoker<base::internal::BindState<void (sharesheet::SharesheetService::*)(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >), base::WeakPtr<sharesheet::SharesheetService>, sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)> >, void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>::RunOnce(base::internal::BindStateBase*, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >&&) ./../../base/bind_internal.h:679:12
    #17 0x560b2b8aaf7a in Run ./../../base/callback.h:101:12
    #18 0x560b2b8aaf7a in sharesheet::SharesheetService::LoadAppIcons(std::__1::vector<apps::IntentLaunchInfo, std::__1::allocator<apps::IntentLaunchInfo> >, std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, unsigned long, base::OnceCallback<void (std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:170:25
    #19 0x560b2b8a86b5 in sharesheet::SharesheetService::ShowBubbleWithDelegate(sharesheet::SharesheetServiceDelegate*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:270:3
    #20 0x560b2b8a7610 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, bool, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:69:3
    #21 0x560b2b8a72a5 in sharesheet::SharesheetService::ShowBubble(content::WebContents*, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service.cc:57:3
    #22 0x560b182ee304 in SharesheetBubbleViewBrowserTest::ShowUi() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:51:25
    #23 0x560b182ed8d8 in SharesheetBubbleViewBrowserTest_InvokeUi_Default_Test::RunTestOnMainThread() ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view_browsertest.cc:91:3
    #24 0x560b2c3526e6 in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:805:5
    #25 0x560b2aa1b1ed in Run ./../../base/callback.h:101:12
    #26 0x560b2aa1b1ed in ChromeBrowserMainParts::PreMainMessageLoopRunImpl() ./../../chrome/browser/chrome_browser_main.cc:1688:38

  Uninitialized value was stored to memory at
    #0 0x560b2e32fae7 in views::BubbleFrameView::GetWindowBoundsForClientBounds(gfx::Rect const&) const ./../../ui/views/bubble/bubble_frame_view.cc:185:18
    #1 0x560b2e610119 in GetWindowBoundsForClientBounds ./../../ui/views/window/non_client_view.cc:207:23
    #2 0x560b2e610119 in views::NonClientView::CalculatePreferredSize() const ./../../ui/views/window/non_client_view.cc:244:10
    #3 0x560b2e580c1d in views::View::GetPreferredSize() const ./../../ui/views/view.cc:497:10
    #4 0x560b2e5d1468 in views::Widget::SetInitialBounds(gfx::Rect const&) ./../../ui/views/widget/widget.cc:1602:40
    #5 0x560b2e5ce649 in views::Widget::Init(views::Widget::InitParams) ./../../ui/views/widget/widget.cc:383:5
    #6 0x560b2e3140b8 in CreateBubbleWidget ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:132:18
    #7 0x560b2e3140b8 in views::BubbleDialogDelegate::CreateBubble(views::BubbleDialogDelegate*) ./../../ui/views/bubble/bubble_dialog_delegate_view.cc:326:27
    #8 0x560b3ce68ab5 in SharesheetBubbleView::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/ui/ash/sharesheet/sharesheet_bubble_view.cc:230:3
    #9 0x560b2b8b6ad2 in sharesheet::SharesheetServiceDelegate::ShowBubble(std::__1::vector<sharesheet::TargetInfo, std::__1::allocator<sharesheet::TargetInfo> >, mojo::StructPtr<apps::mojom::Intent>, base::OnceCallback<void (sharesheet::SharesheetResult)>) ./../../chrome/browser/sharesheet/sharesheet_service_delegate.cc:39:28
    #10 0x560b2b8acd36 in sharesheet::SharesheetService::OnAppIconsLoaded(shareshee…
blueboxd pushed a commit that referenced this issue Mar 3, 2021
This reverts commit 8cd3185.

Reason for revert: suspect causing browser_tests failure on linux-chromeos-rel

Failing tests:
AccessibilityPolicyTest.AutoclickEnabled
All/GestureNavigationScreenTest.ScreenSkippedWithAutoclickEnabled/1
AutoclickE2ETest.HighlightsRootWebAreaIfNotScrollable
AutoclickE2ETest.RemovesAndAddsAutoclick
ChromeOSInfoPrivateTest.TestGetAndSet

First test failure: https://ci.chromium.org/p/chromium/builders/ci/linux-chromeos-rel/45848

Sample log:
BrowserTestBase received signal: Segmentation fault. Backtrace:
...
#3 0x7fa7483ba4c0 (/lib/x86_64-linux-gnu/libc-2.23.so+0x354bf)
#4 0x5598f0b6ecce ash::CaptureModeController::IsActive()
#5 0x5598f0d32b28 ash::CollisionDetectionUtils::AvoidObstacles()
#6 0x5598f0d32296 ash::CollisionDetectionUtils::GetRestingPosition()
#7 0x5598f0c73a68 ash::AutoclickMenuBubbleController::SetPosition()
#8 0x5598f0d8c661 ash::WorkspaceLayoutManager::NotifySystemUiAreaChanged()

Original change's description:
> capture_mode: Capture bar does not intersect autoclick.
>
> Adds capture mode on the collision course for bubbles like PIP and
> autoclick, and triggers repositioning of the autoclick on enter or exit
> capture mode.
>
> Fixed: 1149758
> Test: manual
> Change-Id: I800b2b265374627718cd944d39d76dc4e94be7fb
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2597219
> Reviewed-by: Ahmed Fakhry <[email protected]>
> Commit-Queue: Sammie Quon <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#859045}

Change-Id: I2ee7dbd24ed3006a494b59b8dd93cbef86b0353a
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2730374
Bot-Commit: Rubber Stamper <[email protected]>
Reviewed-by: Takashi Sakamoto <[email protected]>
Commit-Queue: Takashi Sakamoto <[email protected]>
Cr-Commit-Position: refs/heads/master@{#859248}
blueboxd pushed a commit that referenced this issue Mar 15, 2021
…m_gtests

This CL moves the check that verifies readiness of x11::Connection
to InitializeUI that should be sufficient to stop execution of the
browser if it's not possible to connect to XDisplay.

In own turn, this allows to run such tests as vr_pixeltests,
which do not actually require XDisplay. Otherwise, the following
callstack results in a crash (when vr_pixeltests run).

[FATAL:ozone_platform_x11.cc(277)] Check failed: x11::Connection::Get()->Ready(). Missing X server or $DISPLAY
#0 0x557d0bc225f9 base::debug::CollectStackTrace()
#1 0x557d0bba3a53 base::debug::StackTrace::StackTrace()
#2 0x557d0bbad33f logging::LogMessage::~LogMessage()
#3 0x557d0bbadcee logging::LogMessage::~LogMessage()
#4 0x557d0bb0d498 ui::(anonymous namespace)::OzonePlatformX11::InitializeCommon()
#5 0x557d0bb0d2bc ui::(anonymous namespace)::OzonePlatformX11::InitializeGPU()
#6 0x557d0c358dd6 gl::GLImageTestSupport::InitializeGL()

Bug: 1177253
Change-Id: I435d03b4688e72b37c10f16d12ac2130cff90f58
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2700032
Reviewed-by: Dirk Pranke <[email protected]>
Reviewed-by: Nick Yamane <[email protected]>
Commit-Queue: Maksim Sisov <[email protected]>
Cr-Commit-Position: refs/heads/master@{#862870}
blueboxd pushed a commit that referenced this issue Mar 17, 2021
This CL tries again to switch the compile to use Python3
by default. Earlier attempts weren't actually testing against
Python3 because mb.py was overriding the GN dotfile.

This CL changes that, and a long series of fixes between that
discovery and now have landed, so I think we're ready to try
again.

Bug: 1112471
Change-Id: I2d6ffe36692574828be972d7f0bdd9bbf4d9ef83
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2645211
Commit-Queue: Dirk Pranke <[email protected]>
Reviewed-by: Bruce Dawson <[email protected]>
Cr-Commit-Position: refs/heads/master@{#863527}
blueboxd pushed a commit that referenced this issue Mar 17, 2021
This reverts commit 9ad088f.

Reason for revert: The GPU FYI builders are failing with python errors related to gpu/gles2_conform_support/generate_gles2_conform_tests.py and gpu/gles2_conform_support/generate_gles2_embedded_data.py:

Example: https://ci.chromium.org/p/chromium/builders/ci/GPU%20FYI%20Linux%20Builder%20%28dbg%29/126613

Original change's description:
> Reland #5 of "Force Python 3 to be used in build.""
>
> This CL tries again to switch the compile to use Python3
> by default. Earlier attempts weren't actually testing against
> Python3 because mb.py was overriding the GN dotfile.
>
> This CL changes that, and a long series of fixes between that
> discovery and now have landed, so I think we're ready to try
> again.
>
> Bug: 1112471
> Change-Id: I2d6ffe36692574828be972d7f0bdd9bbf4d9ef83
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2645211
> Commit-Queue: Dirk Pranke <[email protected]>
> Reviewed-by: Bruce Dawson <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#863527}

Bug: 1112471
Change-Id: I796466026c79abc231b4fdd0a17fcaca616ce82b
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2766146
Auto-Submit: James Darpinian <[email protected]>
Commit-Queue: Rubber Stamper <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Cr-Commit-Position: refs/heads/master@{#863549}
blueboxd pushed a commit that referenced this issue Mar 19, 2021
This reverts commit b2446a0

Reason for revert: Trying again w/ build fixes.

The two issues we saw yesterday with reland attempt #5
were fixed in
  https://crrev.com/c/2768998 (remoting linux installer)
  https://crrev.com/c/2768998 (GLES test scripts)

But the change wasn't in the tree for very long, so there may
well be more. Let's try again to see.

Bug: 1112471
Cq-Include-Trybots: luci.chromium.try:linux-angle-rel
Cq-Include-Trybots: luci.chrome.try:linux-chrome
Change-Id: Ie5483d1f6838deeaf0f9b7cddc0bb57a82960c29
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2769361
Bot-Commit: Rubber Stamper <[email protected]>
Commit-Queue: Dirk Pranke <[email protected]>
Cr-Commit-Position: refs/heads/master@{#864372}
blueboxd pushed a commit that referenced this issue Mar 20, 2021
This reverts commit d9caee7.

Reason for revert: I believe this causes failure on Builder win-chrome.

First failure:
https://ci.chromium.org/ui/p/chrome/builders/ci/win-chrome/19774/blamelist

Original change's description:
> Reland #6 of "Force Python 3 to be used in build."
>
> This reverts commit b2446a0
>
> Reason for revert: Trying again w/ build fixes.
>
> The two issues we saw yesterday with reland attempt #5
> were fixed in
>   https://crrev.com/c/2768998 (remoting linux installer)
>   https://crrev.com/c/2768998 (GLES test scripts)
>
> But the change wasn't in the tree for very long, so there may
> well be more. Let's try again to see.
>
> Bug: 1112471
> Cq-Include-Trybots: luci.chromium.try:linux-angle-rel
> Cq-Include-Trybots: luci.chrome.try:linux-chrome
> Change-Id: Ie5483d1f6838deeaf0f9b7cddc0bb57a82960c29
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2769361
> Bot-Commit: Rubber Stamper <[email protected]>
> Commit-Queue: Dirk Pranke <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#864372}

Bug: 1112471
Change-Id: I1458c5a5ee5dbb8e1e6cfe367998ff378b29ba53
Cq-Include-Trybots: luci.chromium.try:linux-angle-rel
Cq-Include-Trybots: luci.chrome.try:linux-chrome
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2774784
Auto-Submit: Owen Min <[email protected]>
Owners-Override: Owen Min <[email protected]>
Commit-Queue: Dirk Pranke <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Reviewed-by: Dirk Pranke <[email protected]>
Cr-Commit-Position: refs/heads/master@{#864764}
blueboxd pushed a commit that referenced this issue Mar 23, 2021
This CL fixes a segfault when a WaylandScreen is created after a
WaylandWindow..

Basically, when WaylandScreen is created, it gets the list of
existing outputs, which it uses to create displays. In its own turn,
it also checks what WaylandWindows are on those displays and
calls WaylandWindow::UpdateBufferScale. This operation also
results in SetBounds to be called, which calls to
PlatformWindowDelegate::GetMinimumSizeForWindow, which requires
ScreenOzone instance to have PlatformScreen (WaylandScreen in this
case) to be set.

But as long as creation of the screen, updating buffer scale, and
setting updated bounds based on new scale value happens in the
same sequence of calls, ScreenOzone just doesn't have the PlatformScreen
set, and it results in a crash. See the stacktrace below -

#3 0x7f9c30bba4c0 (/lib/x86_64-linux-gnu/libc-2.23.so+0x354bf)
#4 0x556900be4bad aura::ScreenOzone::GetPrimaryDisplay()
#5 0x5568ff6aebff views::DesktopWindowTreeHostPlatform::GetRootTransform()
#6 0x5568ff6af1ba views::DesktopWindowTreeHostPlatform::GetMinimumSizeForWindow()
#7 0x5568faeb9aaf ui::WaylandWindow::SetBounds()
#8 0x5568faeb961e ui::WaylandWindow::UpdateBufferScale()
#9 0x5568faeb473d ui::WaylandScreen::AddOrUpdateDisplay()
#10 0x5568faeb3023 ui::WaylandOutputManager::CreateWaylandScreen()
#11 0x5568faec7fa2 ui::(anonymous namespace)::OzonePlatformWayland::CreateScreen()
#12 0x556900be480a aura::ScreenOzone::ScreenOzone()
#13 0x5568ff6aa10e views::DesktopScreenOzone::DesktopScreenOzone()

This only happens in test environments (interactive_ui_tests, when
Ozone is initialized, WaylandWindows are created, but the screen
instance is created and set a bit later.

Thus, make WaylandWindow use existing information about preferred
outputs that it has.

Bug: 1134495
Change-Id: I3f2f9349adc85684d5cf4f5e2bca8497c326bb9b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2773276
Commit-Queue: Maksim Sisov <[email protected]>
Reviewed-by: Robert Kroeger <[email protected]>
Cr-Commit-Position: refs/heads/master@{#865569}
blueboxd pushed a commit that referenced this issue Apr 1, 2021
This is a reland of d9caee7.

A number of fixes have landed in between then and now, and I
think we're ready for another round.

Original change's description:
> Reland #6 of "Force Python 3 to be used in build."
>
> This reverts commit b2446a0
>
> Reason for revert: Trying again w/ build fixes.
>
> The two issues we saw yesterday with reland attempt #5
> were fixed in
>   https://crrev.com/c/2768998 (remoting linux installer)
>   https://crrev.com/c/2768998 (GLES test scripts)
>
> But the change wasn't in the tree for very long, so there may
> well be more. Let's try again to see.
>
> Bug: 1112471
> Cq-Include-Trybots: luci.chromium.try:linux-angle-rel
> Cq-Include-Trybots: luci.chrome.try:linux-chrome
> Change-Id: Ie5483d1f6838deeaf0f9b7cddc0bb57a82960c29
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2769361
> Bot-Commit: Rubber Stamper <[email protected]>
> Commit-Queue: Dirk Pranke <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#864372}

Bug: 1112471
Change-Id: Iccef0aa5d92c28fee1ce67e446b9b15a7cc0745a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2792623
Commit-Queue: Dirk Pranke <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Reviewed-by: Bruce Dawson <[email protected]>
Cr-Commit-Position: refs/heads/master@{#868187}
blueboxd pushed a commit that referenced this issue Apr 8, 2021
This reverts commit 0a70004.

Reason for revert:
https://crbug.com/1196930

Original change's description:
> Reland #7 of "Force Python 3 to be used in build."
>
> This is a reland of d9caee7.
>
> A number of fixes have landed in between then and now, and I
> think we're ready for another round.
>
> Original change's description:
> > Reland #6 of "Force Python 3 to be used in build."
> >
> > This reverts commit b2446a0
> >
> > Reason for revert: Trying again w/ build fixes.
> >
> > The two issues we saw yesterday with reland attempt #5
> > were fixed in
> >   https://crrev.com/c/2768998 (remoting linux installer)
> >   https://crrev.com/c/2768998 (GLES test scripts)
> >
> > But the change wasn't in the tree for very long, so there may
> > well be more. Let's try again to see.
> >
> > Bug: 1112471
> > Cq-Include-Trybots: luci.chromium.try:linux-angle-rel
> > Cq-Include-Trybots: luci.chrome.try:linux-chrome
> > Change-Id: Ie5483d1f6838deeaf0f9b7cddc0bb57a82960c29
> > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2769361
> > Bot-Commit: Rubber Stamper <[email protected]>
> > Commit-Queue: Dirk Pranke <[email protected]>
> > Cr-Commit-Position: refs/heads/master@{#864372}
>
> Bug: 1112471
> Change-Id: Iccef0aa5d92c28fee1ce67e446b9b15a7cc0745a
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2792623
> Commit-Queue: Dirk Pranke <[email protected]>
> Bot-Commit: Rubber Stamper <[email protected]>
> Reviewed-by: Bruce Dawson <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#868187}

Bug: 1112471, 1196930
Change-Id: I405a771ffc29ed40e74764008c9e0be1e4b9ef7e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2812719
Auto-Submit: Takuto Ikuta <[email protected]>
Commit-Queue: Rubber Stamper <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Cr-Commit-Position: refs/heads/master@{#870378}
blueboxd pushed a commit that referenced this issue Apr 9, 2021
This reverts commit c787d2a.

Reason for revert:

Causes flaky failures on some Linux bots, e.g., https://ci.chromium.org/p/chromium/builders/ci/Linux%20Ozone%20Tester%20%28Wayland%29
Example failure:
browser_tests_wayland failed because of:
ExtensionBackForwardCacheContentScriptDisabledBrowserTest.CSSDisallowed

pattern of failures on this bot:
https://screenshot.googleplex.com/87iSx5FiDVGZRmF

Failure error is
../../chrome/browser/extensions/back_forward_cache_browsertest.cc:110: Failure
Value of: delete_observer_rfh_a.deleted()
  Actual: false
Expected: true
Stack trace:
#0 0x563563bb7efc extensions::ExtensionBackForwardCacheContentScriptDisabledBrowserTest_CSSDisallowed_Test::RunTestOnMainThread()
#1 0x563567b440ce content::BrowserTestBase::ProxyRunTestOnMainThreadLoop()
#2 0x5635676da77d ChromeBrowserMainParts::PreMainMessageLoopRunImpl()
#3 0x5635676d9d54 ChromeBrowserMainParts::PreMainMessageLoopRun()
#4 0x56356561f0df content::BrowserMainLoop::PreMainMessageLoopRun()
#5 0x563565a4e6a3 content::StartupTaskRunner::RunAllTasksNow()
#6 0x56356561ed5d content::BrowserMainLoop::CreateStartupTasks()
#7 0x563565621228 content::BrowserMainRunnerImpl::Initialize()
#8 0x56356561d610 content::BrowserMain()
#9 0x563566297393 content::ContentMainRunnerImpl::RunBrowser()
#10 0x563566296f1d content::ContentMainRunnerImpl::Run()
#11 0x5635662944ad content::RunContentProcess()
#12 0x563566294e4d content::ContentMain()
#13 0x563567b43778 content::BrowserTestBase::SetUp()
#14 0x563567587576 InProcessBrowserTest::SetUp()

The same error appears on other bots when this fails too, e.g.,
https://ci.chromium.org/p/chromium/builders/ci/Linux%20Ozone%20Tester%20%28X11%29/29058 
https://logs.chromium.org/logs/chromium/buildbucket/cr-buildbucket.appspot.com/8850497656556318928/+/steps/browser_tests_x11/0/logs/Deterministic_failure:_ExtensionBackForwardCacheContentScriptDisabledBrowserTest.CSSDisallowed__status_FAILURE_/0

Original change's description:
> If an extension does a content injection disable bf cache.
>
> This code tracks whether a content injection (insertCSS, contentScript,
> executeScript) has occurred for a WebFrame. If so then turn off
> BFCache for the frame.
>
> BUG=1192785
>
> Change-Id: I682a9efb247aae358023e3a591368c84d47001ce
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2787195
> Reviewed-by: Reilly Grant <[email protected]>
> Reviewed-by: Takashi Toyoshima <[email protected]>
> Reviewed-by: Dave Tapuska <[email protected]>
> Reviewed-by: Avi Drissman <[email protected]>
> Reviewed-by: Kentaro Hara <[email protected]>
> Reviewed-by: Kouhei Ueno <[email protected]>
> Commit-Queue: Dave Tapuska <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#870582}

Bug: 1192785
Change-Id: Ib122b1d64155d85009038d961306ac620053564b
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2816001
Auto-Submit: Mark Pearson <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Commit-Queue: Mark Pearson <[email protected]>
Reviewed-by: Mark Pearson <[email protected]>
Reviewed-by: anthonyvd <[email protected]>
Owners-Override: Mark Pearson <[email protected]>
Cr-Commit-Position: refs/heads/master@{#870681}
blueboxd pushed a commit that referenced this issue Apr 14, 2021
This reverts commit 38b6a9a.

Reason for revert: The issues affecting the official win build
and the swarming dev instance have been fixed, so hopefully it's
safe to try Yet Again.

Original change's description:
> Revert "Reland #7 of "Force Python 3 to be used in build.""
>
> This reverts commit 0a70004.
>
> Reason for revert:
> https://crbug.com/1196930
>
> Original change's description:
> > Reland #7 of "Force Python 3 to be used in build."
> >
> > This is a reland of d9caee7.
> >
> > A number of fixes have landed in between then and now, and I
> > think we're ready for another round.
> >
> > Original change's description:
> > > Reland #6 of "Force Python 3 to be used in build."
> > >
> > > This reverts commit b2446a0
> > >
> > > Reason for revert: Trying again w/ build fixes.
> > >
> > > The two issues we saw yesterday with reland attempt #5
> > > were fixed in
> > >   https://crrev.com/c/2768998 (remoting linux installer)
> > >   https://crrev.com/c/2768998 (GLES test scripts)
> > >
> > > But the change wasn't in the tree for very long, so there may
> > > well be more. Let's try again to see.
> > >
> > > Bug: 1112471
> > > Cq-Include-Trybots: luci.chromium.try:linux-angle-rel
> > > Cq-Include-Trybots: luci.chrome.try:linux-chrome
> > > Change-Id: Ie5483d1f6838deeaf0f9b7cddc0bb57a82960c29
> > > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2769361
> > > Bot-Commit: Rubber Stamper <[email protected]>
> > > Commit-Queue: Dirk Pranke <[email protected]>
> > > Cr-Commit-Position: refs/heads/master@{#864372}
> >
> > Bug: 1112471
> > Change-Id: Iccef0aa5d92c28fee1ce67e446b9b15a7cc0745a
> > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2792623
> > Commit-Queue: Dirk Pranke <[email protected]>
> > Bot-Commit: Rubber Stamper <[email protected]>
> > Reviewed-by: Bruce Dawson <[email protected]>
> > Cr-Commit-Position: refs/heads/master@{#868187}
>
> Bug: 1112471, 1196930
> Change-Id: I405a771ffc29ed40e74764008c9e0be1e4b9ef7e
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2812719
> Auto-Submit: Takuto Ikuta <[email protected]>
> Commit-Queue: Rubber Stamper <[email protected]>
> Bot-Commit: Rubber Stamper <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#870378}

Bug: 1112471
Bug: 1196930
Change-Id: Ia8caaf2f7f962e7e413fdba47f9acb46150f10a1
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2824170
Bot-Commit: Rubber Stamper <[email protected]>
Reviewed-by: Erik Staab <[email protected]>
Reviewed-by: Garrett Beaty <[email protected]>
Reviewed-by: Michael Moss <[email protected]>
Commit-Queue: Dirk Pranke <[email protected]>
Cr-Commit-Position: refs/heads/master@{#872124}
blueboxd pushed a commit that referenced this issue Apr 19, 2021
This reverts commit 7ae3611.

Reason for revert: cast_shell+browsertests failing on Cast [Audio] Linux
 First failure https://ci.chromium.org/ui/p/chromium/builders/ci/Cast%20Audio%20Linux/103652/overview

Example crash stack
BrowserTestBase received signal: Segmentation fault. Backtrace:
#0 0x55bcce76b6a9 base::debug::CollectStackTrace()
#1 0x55bcce6dfda3 base::debug::StackTrace::StackTrace()
#2 0x55bcd0fb5cac content::(anonymous namespace)::DumpStackTraceSignalHandler()
#3 0x7fd872d664c0 (/lib/x86_64-linux-gnu/libc-2.23.so+0x354bf)
#4 0x55bcccba88b0 _ZNSt3__17find_ifINS_11__wrap_iterIPKN4base8internal24UncheckedObserverAdapterEEEZNS3_23ProjectedUnaryPredicateIZNKS2_12ObserverListIN3net16MDnsListenerImplELb0ELb1ES4_E11HasObserverEPKSB_EUlRKT_E_NS2_8identityEEEDaRSF_RT0_EUlOSF_E_EESF_SF_SF_SL_
#5 0x55bcccba889e _ZN4base6ranges7find_ifINSt3__111__wrap_iterIPKNS_8internal24UncheckedObserverAdapterEEEZNKS_12ObserverListIN3net16MDnsListenerImplELb0ELb1ES5_E11HasObserverEPKSB_EUlRKT_E_NS_8identityENS2_26random_access_iterator_tagEEEDaSF_SF_T0_T1_
#6 0x55bcccba6dca base::ObserverList<>::RemoveObserver()
#7 0x55bccd28a44e chromecast::DisplayConfiguratorObserver::~DisplayConfiguratorObserver()
#8 0x55bccd26fbcd chromecast::shell::CastBrowserMainParts::~CastBrowserMainParts()
#9 0x55bccd26fc7c chromecast::shell::CastBrowserMainParts::~CastBrowserMainParts()
#10 0x55bccd3a6836 content::BrowserMainLoop::~BrowserMainLoop()
#11 0x55bccd3a6920 content::BrowserMainLoop::~BrowserMainLoop()
#12 0x55bccd3a9c06 content::BrowserMainRunnerImpl::Shutdown()
#13 0x55bccd3a65aa content::BrowserMain()
#14 0x55bcce68bc80 content::RunBrowserProcessMain()
#15 0x55bcce68c9a6 content::ContentMainRunnerImpl::RunBrowser()
#16 0x55bcce68c62c content::ContentMainRunnerImpl::Run()
#17 0x55bcce68ad93 content::RunContentProcess()
#18 0x55bcce68b49a content::ContentMain()
#19 0x55bcd0fb50e1 content::BrowserTestBase::SetUp()
#20 0x55bccc9fdf90 chromecast::WebviewTest::SetUp()
#21 0x55bcce69a89c testing::Test::Run()
#22 0x55bcce69adb8 testing::TestInfo::Run()
#23 0x55bcce69b27d testing::TestSuite::Run()
#24 0x55bcce6a2233 testing::internal::UnitTestImpl::RunAllTests()
#25 0x55bcce6a1f87 testing::UnitTest::Run()
#26 0x55bcd0fa57ef base::TestSuite::Run()
#27 0x55bccc9de2a4 chromecast::shell::CastTestLauncherDelegate::RunTestSuite()
#28 0x55bcd0fb930e content::LaunchTests()
#29 0x55bccc9de23c main
#30 0x7fd872d51840 __libc_start_main
#31 0x55bccc9de12a _start

Original change's description:
> Add display change observer.
>
> Centralize the logic to force a repaint post display changes in an
> observer. This way the complexity of refreshing the display is
> handled in the observer rather than in every piece of code that
> needs to update the display state.
>
> Bug: b/180040068
> Test: Ran cast_shell on the desktop to verify there are no crashes
> Change-Id: I022850322c8b9177463bdc0526121016ebf0f330
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2727577
> Reviewed-by: Daniel Nicoara <[email protected]>
> Commit-Queue: Shiv Sakhuja <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#873512}

Bug: b/180040068
Change-Id: Id01a6e537f2285a9c35ce90acc9eba81b0ea6c1f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2835019
Owners-Override: Olga Sharonova <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Commit-Queue: Olga Sharonova <[email protected]>
Cr-Commit-Position: refs/heads/master@{#873746}
blueboxd pushed a commit that referenced this issue Apr 27, 2021
This reverts commit 59bae41.

Reason for revert: Broken on Linux Chromium OS ASan LSan Tests (1)
https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20Chromium%20OS%20ASan%20LSan%20Tests%20(1)/39927/

<div><pre>[ RUN      ] PrerenderBrowserTest.PrerenderBlankIframe
2021-04-26T19:40:32.221868Z INFO content_browsertests[5132:5132]: [content_main_runner_impl.cc(1077)] Chrome is running in full browser mode.

DevTools listening on ws://127.0.0.1:36659/devtools/browser/21b92715-e642-49fe-98ef-4b69eea3f8b2
2021-04-26T19:40:32.847975Z ERROR content_browsertests[5132:5132]: [browser_test_utils.cc(837)] No committed entry.
2021-04-26T19:40:34.078783Z WARNING content_browsertests[5132:5132]: [render_frame_host_impl.cc(977)] InterfaceRequest was dropped, the document is no longer active: blink.mojom.AppCacheBackend
2021-04-26T19:40:34.281683Z FATAL content_browsertests[5285:1]: [document.cc(8103)] Check failed: is_prerendering_.
    #0 0x55b148a133cb in backtrace /b/s/w/ir/cache/builder/src/third_party/llvm/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc:4205:13
    #1 0x55b1586bd249 in base::debug::CollectStackTrace(void**, unsigned long) ./../../base/debug/stack_trace_posix.cc:840:39
    #2 0x55b1583f3f03 in StackTrace ./../../base/debug/stack_trace.cc:198:12
    #3 0x55b1583f3f03 in base::debug::StackTrace::StackTrace() ./../../base/debug/stack_trace.cc:195:28
    #4 0x55b158448eb2 in logging::LogMessage::~LogMessage() ./../../base/logging.cc:589:29
    #5 0x55b15844adde in logging::LogMessage::~LogMessage() ./../../base/logging.cc:583:27
    #6 0x55b15e0d8fa6 in blink::Document::ActivateForPrerendering() ./../../third_party/blink/renderer/core/dom/document.cc:8103:3
    #7 0x55b15392c60c in Run ./../../base/callback.h:101:12
    #8 0x55b15392c60c in RunInternal ./../../third_party/blink/renderer/platform/wtf/functional.h:221:33
    #9 0x55b15392c60c in WTF::ThreadCheckingCallbackWrapper<base::OnceCallback<void ()>, void ()>::Run() ./../../third_party/blink/renderer/platform/wtf/functional.h:206:12
    #10 0x55b1585795fa in Run ./../../base/callback.h:101:12
    #11 0x55b1585795fa in base::TaskAnnotator::RunTask(char const*, base::PendingTask*) ./../../base/task/common/task_annotator.cc:173:33
    #12 0x55b1585e197a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::sequence_manager::LazyNow*) ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:351:25
    #13 0x55b1585e071f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:264:36
    #14 0x55b158468934 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ./../../base/message_loop/message_pump_default.cc:39:55
    #15 0x55b1585e36d9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:460:12
    #16 0x55b158503839 in base::RunLoop::Run(base::Location const&) ./../../base/run_loop.cc:133:14
    #17 0x55b1671389dc in content::RendererMain(content::MainFunctionParams const&) ./../../content/renderer/renderer_main.cc:261:16
    #18 0x55b15003c45a in content::RunZygote(content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:572:14
    #19 0x55b15003f244 in content::ContentMainRunnerImpl::Run(bool) ./../../content/app/content_main_runner_impl.cc:958:10
    #20 0x55b150039a30 in content::RunContentProcess(content::ContentMainParams const&, content::ContentMainRunner*) ./../../content/app/content_main.cc:372:36
    #21 0x55b150039f11 in content::ContentMain(content::ContentMainParams const&) ./../../content/app/content_main.cc:398:10
    #22 0x55b157438e9c in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ./../../content/public/test/test_launcher.cc:372:12
    #23 0x55b1572a1d21 in main ./../../content/test/content_test_launcher.cc:91:10
    #24 0x7f772d1ad840 in __libc_start_main ??:0:0
    #25 0x55b1489dcaaa in _start ??:0:0
Task trace:
    #0 0x55b15ea7ff11 in blink::LocalFrame::ActivateForPrerendering() ./../../third_party/blink/renderer/core/frame/local_frame.cc:3766:18
    #1 0x55b15780d116 in IPC::(anonymous namespace)::ChannelAssociatedGroupController::Accept(mojo::Message*) ./../../ipc/ipc_mojo_bootstrap.cc:904:13
IPC message handler context: 0xA60C9B35

Received signal 6
    #0 0x55b148a133cb in backtrace /b/s/w/ir/cache/builder/src/third_party/llvm/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc:4205:13
    #1 0x55b1586bd249 in base::debug::CollectStackTrace(void**, unsigned long) ./../../base/debug/stack_trace_posix.cc:840:39
    #2 0x55b1583f3f03 in StackTrace ./../../base/debug/stack_trace.cc:198:12
    #3 0x55b1583f3f03 in base::debug::StackTrace::StackTrace() ./../../base/debug/stack_trace.cc:195:28
    #4 0x55b1586bbd47 in base::debug::(anonymous namespace)::StackDumpSignalHandler(int, siginfo_t*, void*) ./../../base/debug/stack_trace_posix.cc:345:3
    #5 0x7f7730097390 in __funlockfile ??:?
    #6 0x7f7730097390 in ?? ??:0
    #7 0x7f772d1c2438 in raise ??:0:0
    #8 0x7f772d1c403a in abort ??:0:0
    #9 0x55b1586b9f6a in base::debug::BreakDebugger() ./../../base/debug/debugger_posix.cc:326:3
    #10 0x55b158449863 in logging::LogMessage::~LogMessage() ./../../base/logging.cc:891:7
    #11 0x55b15844adde in logging::LogMessage::~LogMessage() ./../../base/logging.cc:583:27
    #12 0x55b15e0d8fa6 in blink::Document::ActivateForPrerendering() ./../../third_party/blink/renderer/core/dom/document.cc:8103:3
    #13 0x55b15392c60c in Run ./../../base/callback.h:101:12
    #14 0x55b15392c60c in RunInternal ./../../third_party/blink/renderer/platform/wtf/functional.h:221:33
    #15 0x55b15392c60c in WTF::ThreadCheckingCallbackWrapper<base::OnceCallback<void ()>, void ()>::Run() ./../../third_party/blink/renderer/platform/wtf/functional.h:206:12
    #16 0x55b1585795fa in Run ./../../base/callback.h:101:12
    #17 0x55b1585795fa in base::TaskAnnotator::RunTask(char const*, base::PendingTask*) ./../../base/task/common/task_annotator.cc:173:33
    #18 0x55b1585e197a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::sequence_manager::LazyNow*) ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:351:25
    #19 0x55b1585e071f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:264:36
    #20 0x55b158468934 in base::MessagePumpDefault::Run(base::MessagePump::Delegate*) ./../../base/message_loop/message_pump_default.cc:39:55
    #21 0x55b1585e36d9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:460:12
    #22 0x55b158503839 in base::RunLoop::Run(base::Location const&) ./../../base/run_loop.cc:133:14
    #23 0x55b1671389dc in content::RendererMain(content::MainFunctionParams const&) ./../../content/renderer/renderer_main.cc:261:16
    #24 0x55b15003c45a in content::RunZygote(content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:572:14
    #25 0x55b15003f244 in content::ContentMainRunnerImpl::Run(bool) ./../../content/app/content_main_runner_impl.cc:958:10
    #26 0x55b150039a30 in content::RunContentProcess(content::ContentMainParams const&, content::ContentMainRunner*) ./../../content/app/content_main.cc:372:36
    #27 0x55b150039f11 in content::ContentMain(content::ContentMainParams const&) ./../../content/app/content_main.cc:398:10
    #28 0x55b157438e9c in content::LaunchTests(content::TestLauncherDelegate*, unsigned long, int, char**) ./../../content/public/test/test_launcher.cc:372:12
    #29 0x55b1572a1d21 in main ./../../content/test/content_test_launcher.cc:91:10
    #30 0x7f772d1ad840 in __libc_start_main ??:0:0
    #31 0x55b1489dcaaa in _start ??:0:0
  r8: 0000000000003000  r9: 00000feee51a2840 r10: 0000000000000008 r11: 0000000000000202
 r12: 00000fef65260c00 r13: 00000feee5268e48 r14: 00007f7729347230 r15: 00007f77293472b0
  di: 0000000000000001  si: 0000000000000001  bp: 00007ffcf0a97110  bx: 00007ffcf0a97120
  dx: 0000000000000006  ax: 0000000000000000  cx: 00007f772d1c2438  sp: 00007ffcf0a96fd8
  ip: 00007f772d1c2438 efl: 0000000000000202 cgf: 002b000000000033 erf: 0000000000000000
 trp: 0000000000000000 msk: 0000000000000000 cr2: 0000000000000000
[end of stack trace]
Calling _exit(EXIT_FAILURE). Core file will not be generated.
../../content/public/test/no_renderer_crashes_assertion.cc:101: Failure
Failed
Unexpected termination of a renderer process; status: 1, exit_code: 256
Stack trace:
    #0 0x556300884c70 in content::NoRendererCrashesAssertion::Observe(int, content::NotificationSource const&, content::NotificationDetails const&) ./../../content/public/test/no_renderer_crashes_assertion.cc:101:5
    #1 0x5562fe8a511c in content::NotificationServiceImpl::Notify(int, content::NotificationSource const&, content::NotificationDetails const&) ./../../content/browser/notification_service_impl.cc:123:16
    #2 0x5562fed854dc in content::RenderProcessHostImpl::ProcessDied(bool, content::ChildProcessTerminationInfo*) ./../../content/browser/renderer_host/render_process_host_impl.cc:4468:35
    #3 0x5562fed84d46 in content::RenderProcessHostImpl::FastShutdownIfPossible(unsigned long, bool) ./../../content/browser/renderer_host/render_process_host_impl.cc:3480:3
    #4 0x5563007096fd in content::ContentBrowserTest::PostRunTestOnMainThread() ./../../content/public/test/content_browser_test.cc:159:26
    #5 0x55630081ddfd in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() ./../../content/public/test/browser_test_base.cc:833:3
    #6 0x5562f23f595a in base::OnceCallback<void ()>::Run() && ./../../base/callback.h:101:12
    #7 0x556300a86450 in content::ShellBrowserMainParts::PreMainMessageLoopRun() ./../../content/shell/browser/shell_browser_main_parts.cc:200:37
    #8 0x5562fe06aed1 in content::BrowserMainLoop::PreMainMessageLoopRun() ./../../content/browser/browser_main_loop.cc:961:28
    #9 0x5562f78e60d9 in base::OnceCallback<int ()>::Run() && ./../../base/callback.h:101:12
    #10 0x5562ff118ca5 in content::StartupTaskRunner::RunAllTasksNow() ./../../content/browser/startup_task_runner.cc:41:29
    #11 0x5562fe06a59d in content::BrowserMainLoop::CreateStartupTasks() ./../../content/browser/browser_main_loop.cc:869:25
    #12 0x5562fe0715f3 in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&) ./../../content/browser/browser_main_runner_impl.cc:131:15
    #13 0x5562fe066342 in content::BrowserMain(content::MainFunctionParams const&) ./../../content/browser/browser_main.cc:43:32
    #14 0x5562f94bb63d in content::RunBrowserProcessMain(content::MainFunctionParams const&, content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:598:10
    #15 0x5562f94bded9 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams&, bool) ./../../content/app/content_main_runner_impl.cc:1081:10
    #16 0x5562f94bd258 in content::ContentMainRunnerImpl::Run(bool) ./../../content/app/content_main_runner_impl.cc:956:12
    #17 0x5562f94b7a30 in content::RunContentProcess(content::ContentMainParams const&, content::ContentMainRunner*) ./../../content/app/content_main.cc:372:36
    #18 0x5562f94b7f11 in content::ContentMain(content::ContentMainParams const&) ./../../content/app/content_main.cc:398:10
    #19 0x55630081c4bd in content::BrowserTestBase::SetUp() ./../../content/public/test/browser_test_base.cc:696:3

2021-04-26T19:40:34.692356Z WARNING content_browsertests[5132:5174]: [discardable_shared_memory_manager.cc(432)] Some MojoDiscardableSharedMemoryManagerImpls are still alive. They will be leaked.
[  FAILED  ] PrerenderBrowserTest.PrerenderBlankIframe, where TypeParam =  and GetParam() =  (2830 ms)

Original change's description:
> Prerender: Enable PrerenderBrowserTest.PrerenderBlankIframe
>
> To sheriffs: Feel free to revert this CL if the test is flaky.
>
> The CL author tried to reproduce this on local environments but
> failed. For further investigation, this CL enables the test again to see
> how it works on the try bots.
>
> Bug: 1185965
> Change-Id: Ie7f65ef094a815e72b93091c8b3d0ab9b361e593
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2850329
> Reviewed-by: Lingqi Chi <[email protected]>
> Commit-Queue: Hiroki Nakagawa <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#876111}

Bug: 1185965
Change-Id: I245d5e5f2715c75ead3a50389cbd0e9a4ad49aed
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2853351
Auto-Submit: Thiemo Nagel <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Commit-Queue: Thiemo Nagel <[email protected]>
Owners-Override: Thiemo Nagel <[email protected]>
Cr-Commit-Position: refs/heads/master@{#876535}
blueboxd pushed a commit that referenced this issue May 4, 2021
This reverts commit cb50483.

Reason for revert: fails on UBSAN bot

https://ci.chromium.org/ui/p/chromium/builders/ci/linux-ubsan-vptr/3981/overview

Log is:

[ RUN      ] ReportClientTestSuite/ReportClientTest.CreatesReportQueue/1
../../base/bind_internal.h:509:12: runtime error: member call on address 0x1eb2009c7e00 which does not point to an object of type 'StorageInitContext'
0x1eb2009c7e00: note: object has invalid vptr
 00 00 00 00  00 00 1e b2 00 9c 7d 40  ff ff e1 4d ff 63 82 bf  20 0f 9b 01 b2 1e 00 00  80 e2 32 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              invalid vptr
    #0 0x556cc82b0ebc in Invoke<void (StorageInitContext::*)(reporting::StatusOr<std::unique_ptr<reporting::UploaderInterface> >), StorageInitContext *, reporting::StatusOr<std::unique_ptr<reporting::UploaderInterface> > > base/bind_internal.h:509:12
    #1 0x556cc82b0ebc in MakeItSo<void (StorageInitContext::*)(reporting::StatusOr<std::unique_ptr<reporting::UploaderInterface> >), StorageInitContext *, reporting::StatusOr<std::unique_ptr<reporting::UploaderInterface> > > base/bind_internal.h:648:12
    #2 0x556cc82b0ebc in RunImpl<void (StorageInitContext::*)(reporting::StatusOr<std::unique_ptr<reporting::UploaderInterface> >), std::tuple<base::internal::UnretainedWrapper<StorageInitContext> >, 0> base/bind_internal.h:721:12
    #3 0x556cc82b0ebc in base::internal::Invoker<base::internal::BindState<void (reporting::Storage::Create(reporting::StorageOptions const&, base::RepeatingCallback<void (reporting::Priority, bool, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>)>, scoped_refptr<reporting::EncryptionModuleInterface>, base::OnceCallback<void (reporting::StatusOr<scoped_refptr<reporting::Storage> >)>)::StorageInitContext::*)(reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >), base::internal::UnretainedWrapper<reporting::Storage::Create(reporting::StorageOptions const&, base::RepeatingCallback<void (reporting::Priority, bool, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>)>, scoped_refptr<reporting::EncryptionModuleInterface>, base::OnceCallback<void (reporting::StatusOr<scoped_refptr<reporting::Storage> >)>)::StorageInitContext> >, void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>::RunOnce(base::internal::BindStateBase*, reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >&&) base/bind_internal.h:690:12
    #4 0x556cc82b087a in Run base/callback.h:101:12
    #5 0x556cc82b087a in reporting::Storage::Create(reporting::StorageOptions const&, base::RepeatingCallback<void (reporting::Priority, bool, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>)>, scoped_refptr<reporting::EncryptionModuleInterface>, base::OnceCallback<void (reporting::StatusOr<scoped_refptr<reporting::Storage> >)>)::StorageInitContext::WrapInstantiatedKeyUploader(reporting::Priority, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>, reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >) components/reporting/storage/storage.cc:543:12
    #6 0x556cc82b0f8b in void base::internal::FunctorTraits<void (*)(reporting::Priority, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>, reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >), void>::Invoke<void (*)(reporting::Priority, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>, reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >), reporting::Priority, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>, reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > > >(void (*&&)(reporting::Priority, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>, reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >), reporting::Priority&&, base::OnceCallback<void (reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >)>&&, reporting::StatusOr<std::__1::unique_ptr<reporting::UploaderInterface, std::__1::default_delete<reporting::UploaderInterface> > >&&) base/bind_internal.h:404:12
    #7 0x556cc3c9dbaf in Run base/callback.h:101:12
    #8 0x556cc3c9dbaf in reporting::ReportingClient::FlushAsyncStartUploaderQueue() chrome/browser/policy/messaging_layer/public/report_client.cc:407:44

Original change's description:
> Fixed ReportClient
>
> Made encryption key delivery work.
> Extended unit test to handle encrypted case.
> Also modified the test to accept unique directory instead of "reporting"
>
> Bug: b:186460976
> Change-Id: Ibe0c4caad64b4e77c0d984138ce0a9ae027253a7
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2866305
> Commit-Queue: Leonid Baraz <[email protected]>
> Reviewed-by: Zach Trudo <[email protected]>
> Cr-Commit-Position: refs/heads/master@{#878713}

Bug: b:186460976
Change-Id: I059d13e662679816d63b219269b6f25c7acfb23f
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2871825
Auto-Submit: David Roger <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Commit-Queue: David Roger <[email protected]>
Owners-Override: David Roger <[email protected]>
Cr-Commit-Position: refs/heads/master@{#878809}
blueboxd pushed a commit that referenced this issue May 13, 2021
…frame.

This is attempt #5 to land this CL. The previous attempt caused some
instability (in the form of ClusterFuzz reports and crashes) that appear
to be caused by PCDF's cleanup being called on ContextDestroyed - since
many of the dependencies it owns are accessed by other threads, they may
be used after the context is destroyed on the main thread.


Changes from previous attempt:
PS1 is the result of `git revert` on crrev.com/c/2878256.
PS2:
- Move PeerConnectionDependencyFactory cleanup from ContextDestroyed to
  pre-finalizer. Since WebRTC uses some of the dependencies from other
  threads, some of those uses may occur after the context is detached,
  so those dependencies must be kept alive longer.
- Change IpcNetworkManager's NetworkListManager reference from weak to
  strong. Since the NetworkListManager is accessed in the dtor, which is
  invoked as part of a task posted from the PCDF pre-finalizer, using a
  CrossThreadWeakPersistent there causes a null dereference (weak
  references are invalidated before pre-finalizers are invoked).
PS9:
- The change to a strong reference in PS2 caused leaks, so this PS
  splits the PCDF cleanup to two parts: ContextDestroyed performs the
  IpcNetworkManager cleanup (without destroying it) and clears the CTP,
  while the pre-finalizer does the rest of the cleanup and destruction.


Original description: (crrev.com/c/2706367)
===========================================
We are currently in the process of attributing as many interfaces as
possible to specific frames/execution contexts, and as part of the work
on WebRTC-related interfaces, this CL binds P2PSocketManager per-EC.

Also in this CL:
- Make PeerConnectionDependencyFactory and P2PSocketDispatcher garbage
  collected.
- Make MojoBindingContext Supplementable.
- Make P2PSocketDispatcher supplement MojoBindingContext.
- P2PSocketDispatcherHost is still instantiated per RenderProcessHost,
  but now it manages sets of Receivers and Remotes.
- Plumb the appropriate NetworkIsolationKey when binding the socket
  manager.
- RTP dump now "broadcasts" start/stop dump messages to all interfaces
  associated with the RenderProcessHost.
===========================================

Attempt #2 description: (crrev.com/c/2789266)
===========================================
The original CL broke the build (together with crrev.com/c/2784218), so
this CL fixes that by explicitly initializing the Supplement with null
in the PeerConnectionDependencyFactory default ctor.
===========================================

Attempt #3 description: (crrev.com/c/2793204)
===========================================
Changes from the previous attempt include:
- P2PSocketDispatcher uses weak references to itself to post tasks.
- IpcPacketSocketFactory keeps a weak reference to the
  P2PSocketDispatcher, and DCHECKs it before use.
- WebRtcMediaStreamTrackAdapterMap keeps a weak reference to the
  PeerConnectionDependencyFactory. The pointer's validity is already
  DCHECKed.
- RTCPeerConnectionHandler resets its PeerConnectionDependencyFactory
  pointer when it is StopAndUnregister()-ed, and DCHECKs the pointer
  before use.
===========================================

Attempt #4 description: (crrev.com/c/2805110)
===========================================
This is attempt #4 to land this CL, attempting to address
leaks found by "WebKit Linux Leak" and a number of ClusterFuzz bugs.

Changes from previous attempt:
ClusterFuzz issues crbug.com/1195372, crbug.com/1195801
- Cache PeerConnectionDependencyFactory on ProcessedLocalAudioSource
  (see crrev.com/c/2804937 for more details).
WebKit Linux Leak layout tests:
- Change the CrossThreadPersistent on WebRtcMediaStreamTrackAdapter to
  CrossThreadWeakPersistent, so the adapter doesn't prevent the factory
  from being GC'd.
- Cache the WebRTC signaling thread task runner in the track adapter,
  for use when disposing of remote audio track.
- Remove thread check in WebRtcAudioDeviceImpl dtor - since the audio
  device is ref-counted, and some of the references are held (and
  released) by WebRTC, it is no longer guaranteed that it will be
  destroyed on the main thread. On the other hand, it does not appear to
  be doing anything that requires the main thread either.
Additional "anti-leak" changes (PS9-10):
- IpcNetworkManager and P2PSocketClientImpl's references to
  P2PSocketDispatcher were changed to CrossThreadWeakPersistent.
- P2PAsyncAddressResolver resets its P2PSocketDispatcher after it is
  used in Start().
===========================================

Change-Id: I4ed70c44f4cbc300754c00b1bdbe3dac9d31018d
Bug: 1178670
Bug: 1085022
Bug: 1067592
Cq-Include-Trybots: luci.chromium.try:layout_test_leak_detection
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2882778
Reviewed-by: Kentaro Hara <[email protected]>
Reviewed-by: Henrik Boström <[email protected]>
Reviewed-by: Guido Urdaneta <[email protected]>
Owners-Override: Kentaro Hara <[email protected]>
Commit-Queue: Tal Pressman <[email protected]>
Cr-Commit-Position: refs/heads/master@{#882476}
blueboxd pushed a commit that referenced this issue May 19, 2021
CL Chain
--------
This is the 5th CL in a chain. The expected length of the *core* of the
chain is 6-7 CLs. Extensions likely to follow. The first CL has a full
explanation of the feature and an outline of the chain:
https://chromium-review.googlesource.com/c/chromium/src/+/2887150/

Contents of this CL
-------------------
Pipe capture-handle updates received on the render-side from
MediaStreamDeviceObserver to WebPlatformMediaStreamSource::device_.
Once there, calls to MediaStreamTrack.getSettings() will pick up
the new value.

Bug: 1200910
Change-Id: I65c5e0ad55fb5ee4718a80b0b48c3d63bc633b1d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2896319
Commit-Queue: Elad Alon <[email protected]>
Reviewed-by: Guido Urdaneta <[email protected]>
Cr-Commit-Position: refs/heads/master@{#884470}
blueboxd pushed a commit that referenced this issue Sep 2, 2022
Enabling ozone_unittests on linux bots revealed some problems
with downcasting. In particular, linux-ubsan-vptr bot started to
fail with the following error message -

./../ui/ozone/platform/wayland/host/wayland_data_drag_controller.cc:515:10: runtime error: downcast of address 0x2ccc00349e00 which does not point to an object of type 'const WaylandExchangeDataProvider'
0x2ccc00349e00: note: object is of type 'ui::OSExchangeDataProviderNonBacked'
 00 00 00 00  28 3b f6 e3 f0 55 00 00  01 00 00 00 00 00 00 00  20 b1 26 00 cc 2c 00 00  28 00 00 00
              ^~~~~~~~~~~~~~~~~~~~~~~
              vptr for 'ui::OSExchangeDataProviderNonBacked'
    #0 0x55f0e331831c in GetOfferedExchangeDataProvider ui/ozone/platform/wayland/host/wayland_data_drag_controller.cc:515:10
    #1 0x55f0e331831c in ui::WaylandDataDragController::StartSession(ui::OSExchangeData const&, int, ui::mojom::DragEventSource) ui/ozone/platform/wayland/host/wayland_data_drag_controller.cc:133:23
    #2 0x55f0e3366bbc in ui::WaylandWindow::StartDrag(ui::OSExchangeData const&, int, ui::mojom::DragEventSource, ui::Cursor, bool, base::OnceCallback<void (ui::mojom::DragOperation)>, ui::WmDragHandler::LocationDelegate*) ui/ozone/platform/wayland/host/wayland_window.cc:227:45
    #3 0x55f0e2b28c32 in ui::WaylandDataDragControllerTest_AsyncNoopStartDrag_Test::TestBody() ui/ozone/platform/wayland/host/wayland_data_drag_controller_unittest.cc:973:28
    #4 0x55f0e2e26ab1 in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc:2670:5
    #5 0x55f0e2e28046 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2849:11
    #6 0x55f0e2e29beb in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3008:30
    #7 0x55f0e2e3fafe in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:5866:44
    #8 0x55f0e2e3e604 in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc:5440:10
    #9 0x55f0e34276d1 in RUN_ALL_TESTS third_party/googletest/src/googletest/include/gtest/gtest.h:2284:73
    #10 0x55f0e34276d1 in base::TestSuite::Run() base/test/test_suite.cc:463:16
    #11 0x55f0e342b9dc in Run base/callback.h:145:12
    #12 0x55f0e342b9dc in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/test/launcher/unit_test_launcher.cc:181:38
    #13 0x55f0e342b877 in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:272:10
    #14 0x55f0e2acc2cc in main mojo/core/test/run_all_unittests.cc:69:10
    #15 0x7ff7560d4082 in __libc_start_main /build/glibc-SzIz7B/glibc-2.31/csu/../csu/libc-start.c:308:16
    #16 0x55f0e2ab4169 in _start (/home/msisov/code/chromium/src/out/asan/ozone_unittests+0xb13169) (BuildId: 77bfee5b71bd92da)

It turned out that WaylandDataDragController was getting a non-backed provider
as a Wayland one wasn't set (it's set during OzonePlatformWayland initialization
in production). As a result, downcasting to WaylandExchangeDataProvider
was illegal in tests. It's unknown why tests didn't fail. Probably,
the result of the WaylandDataDragController::GetOfferedExchangeDataProvider
was never used. And the problem with downcasting was only caught with
this new bot.

Bug: 1358123
Change-Id: I4c8deb16a57b485de1fabd91fdcaab136d5da639
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3865512
Commit-Queue: Maksim Sisov <[email protected]>
Reviewed-by: Alexander Dunaev <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1041976}
blueboxd pushed a commit that referenced this issue Sep 2, 2022
This is a reland of commit ab1b9eb

Reason for revert#2: Added test BogusAXTree3 failing on multiple platforms. There was a copy/paste error that was undetected because the base try bots all have DCHECKs turned on for this test. I've added the Wayland trybot which failed after landing, and manually tested all accessibility_unittests without DCHECKs.

Reason for revert#1:
Reason for revert: BrowserAccessibilityManagerTest.TestOnNodeReparented fails on linux-bfcache-rel
with the log:
browser_accessibility_manager_unittest.cc(1639): Death test: manager->OnNodeReparented(manager->ax_tree(), &child3)
    Result: died but not with expected error.
  Expected: contains regular expression "Missing BrowserAccessibility"
Actual msg:
[  DEATH   ] [12431:12431:WARNING:check_is_test.cc(26)] Allowing special test code paths
[  DEATH   ] [12431:12431:WARNING:test_suite.cc(401)] Test launcher output path /b/s/w/ituvlt0wzf/.org.chromium.Chromium.dwmD3W/bSPbEk/test_results.xml exists. Not adding test launcher result printer.
[  DEATH   ] Received signal 11 SEGV_MAPERR 000000000007
[  DEATH   ] #0 0x55c499ee8c22 base::debug::CollectStackTrace()
[  DEATH   ] #1 0x55c499e5c223 base::debug::StackTrace::StackTrace()
[  DEATH   ] #2 0x55c499ee8751 base::debug::(anonymous namespace)::StackDumpSignalHandler()
[  DEATH   ] #3 0x7f01938db980 (/lib/x86_64-linux-gnu/libpthread-2.27.so+0x1297f)
[  DEATH   ] #4 0x55c49833003b ui::AXPlatformNodeDelegate::SetNode()
[  DEATH   ] #5 0x55c495cbf57e content::BrowserAccess...

https://ci.chromium.org/ui/p/chromium/builders/ci/linux-bfcache-rel/36793/test-results

Original change's description:
> GetNodeFromTree() shouldn't drop any BrowserAccessibilityNodes
>
> BrowserAccessibilityManager::GetNodeFromTree() should return AXNodes
> using its own map, not AXTree's map, because it contains a superset
> of the nodes in AXTree. A future change plans to combine both maps
> into a single map.
>
> This was discovered while adding a DCHECK to AXPosition() that disallowed creating a position with a null anchor. Some Mac code tried
> to get selection from a table column object, which is an "extra mac
> node". This node is not created from Blink but from AXTableInfo.
> However, these nodes do not exist in the AXTree because they aren't
> really part of the tree, and in fact could potentially mess up the
> AXTree's logic since they parent cells that are already parented by
> rows.
>
> Other discoveries were made via the new DCHECKs, and fixed:
> - BrowserAccessibilityAuraLinux::Create() should not to get a BrowserAccessibility* for the same backing id from the map -- it hasn't
> been created yet, so the result must be null. Fixed via CL:3851373.
> - The AXTree constructor was inserting a node with id kAXInvalidNodeID (0) into the map, which resulted in getting something for an invalid id in GetFromId().

Bug: 1356115
Change-Id: Idf31cce20b514a16328472efbc3951b79489acd5
Cq-Include-Trybots: luci.chromium.try:android-pie-arm64-dbg,linux-bfcache-rel,linux-wayland-rel
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3867493
Reviewed-by: Benjamin Beaudry <[email protected]>
Reviewed-by: Nico Weber <[email protected]>
Commit-Queue: Aaron Leventhal <[email protected]>
Reviewed-by: Wez <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1042146}
blueboxd pushed a commit that referenced this issue Sep 7, 2022
https://chromium.googlesource.com/openscreen.git/+log/3f47ffddac61..6c6480207675

2022-09-03 [email protected] [Libcast-in-Chrome #5.1] Clean up MessagePort interface

This patch includes a breaking change to the MessagePort interface, so
consumers of this interface in Chrome are also changed.

LOW_COVERAGE_REASON=this is a manual roll, not significant code changes.

Bug: chromium:1318499
Change-Id: I0d2b48224affeb35966658abaec156db0180d490
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3871590
Reviewed-by: Takumi Fujimoto <[email protected]>
Commit-Queue: Mark Foltz <[email protected]>
Reviewed-by: Mark Foltz <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1043357}
blueboxd pushed a commit that referenced this issue Sep 7, 2022
Patch:
This patch adds a new class called OpenscreenMessagePort, which
implements the openscreen::cast::MessagePort interface using
mojom::CastMessageChannel pipes.

For more context, see the reference patch that includes this plus other
changes:
https://chromium-review.googlesource.com/c/chromium/src/+/3868508.

Coming up next:
1. Add a SessionMessenger backed RpcDispatcher interface.

2. Backing code to allow getting the audio encoder's bitrate will be
added to the audio RTP stream.

3. A new class called OpenscreenSessionHost will be added to wrap an
openscreen::cast::SenderSession.

4. Metrics need to be added to make sure we don't introduce major
regressions.

5. Once these pieces are in place, extensive manual testing and
improving of the automated test suite needs to occur.

Overall feature:
Libcast-In-Chrome is a project with the goal of having libcast be the
backing implementation of cast streaming in Chrome.

Bug: 1318499, b/159352836
Change-Id: Ib70639645f11f1b6370ef44a177e1e6655d82bb5
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3868567
Commit-Queue: Jordan Bayles <[email protected]>
Reviewed-by: Mark Foltz <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1043655}
blueboxd pushed a commit that referenced this issue Sep 15, 2022
https://webrtc.googlesource.com/src.git/+log/80ed9b8eb9b0..024bd84ca1cf

2022-09-14 [email protected] Roll chromium_revision 6e61ef8..6ccdf1a (1046816:1046947)
2022-09-14 [email protected] Generalize MovingMedianFilter to MovingPercentileFilter
2022-09-14 [email protected] Make P2PTransportChannel implement IceAgentInterface (#5/n)
2022-09-14 [email protected] Keep state internally of connections added to P2PTransportChannel (#4/n)

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/webrtc-chromium-autoroll
Please CC [email protected] on the revert to ensure that a human
is aware of the problem.

To file a bug in WebRTC: https://bugs.chromium.org/p/webrtc/issues/entry
To file a bug in Chromium: https://bugs.chromium.org/p/chromium/issues/entry

To report a problem with the AutoRoller itself, please file a bug:
https://bugs.chromium.org/p/skia/issues/entry?template=Autoroller+Bug

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md

Bug: None
Tbr: [email protected]
Change-Id: I388b2b78285b60a9f24f5f002356f3942c54aa14
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3895516
Commit-Queue: chromium-autoroll <[email protected]>
Bot-Commit: chromium-autoroll <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1047184}
blueboxd pushed a commit that referenced this issue Sep 29, 2022
Disable DrDc on some gpus via gpudriverbugworkaround.

(cherry picked from commit 1e72014)

Bug: 1354201
Change-Id: Ia54ea2ae67bdd93d5085e81eca32b33433073eec
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3840470
Commit-Queue: vikas soni <[email protected]>
Reviewed-by: Vasiliy Telezhnikov <[email protected]>
Cr-Original-Commit-Position: refs/heads/main@{#1036894}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3842868
Reviewed-by: Krishna Govind <[email protected]>
Owners-Override: Krishna Govind <[email protected]>
Reviewed-by: vikas soni <[email protected]>
Cr-Commit-Position: refs/branch-heads/5249@{#5}
Cr-Branched-From: 4f7bea5-refs/heads/main@{#1036826}
blueboxd pushed a commit that referenced this issue Sep 29, 2022
This reverts commit c4a306d.

Reason for revert: crbug.com/1354945

Original change's description:
> [Dr-Dc] Disable DrDc on some gpus .
>
> Disable DrDc on some gpus via gpudriverbugworkaround.
>
> (cherry picked from commit 1e72014)
>
> Bug: 1354201
> Change-Id: Ia54ea2ae67bdd93d5085e81eca32b33433073eec
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3840470
> Commit-Queue: vikas soni <[email protected]>
> Reviewed-by: Vasiliy Telezhnikov <[email protected]>
> Cr-Original-Commit-Position: refs/heads/main@{#1036894}
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3842868
> Reviewed-by: Krishna Govind <[email protected]>
> Owners-Override: Krishna Govind <[email protected]>
> Reviewed-by: vikas soni <[email protected]>
> Cr-Commit-Position: refs/branch-heads/5249@{#5}
> Cr-Branched-From: 4f7bea5-refs/heads/main@{#1036826}

Bug: 1354201
Change-Id: I849932e2bf1766f849d52c25c426c923dedf296e
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3845891
Reviewed-by: Krishna Govind <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Owners-Override: Krishna Govind <[email protected]>
Commit-Queue: vikas soni <[email protected]>
Cr-Commit-Position: refs/branch-heads/5249@{#33}
Cr-Branched-From: 4f7bea5-refs/heads/main@{#1036826}
blueboxd pushed a commit that referenced this issue Oct 5, 2022
This is a multiple step work of removing all theme overlap added for tab
switcher theme. The goal is to inline all the styles into
tab_grid_card_item.xml

Step #5: Remove the unused divider in the new tab grid card layout.

Bug: 1251194
Change-Id: Id832335da8da3714a6b77a8efa1d0558571730de
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3885309
Commit-Queue: Yue Zhang <[email protected]>
Reviewed-by: Yue Zhang <[email protected]>
Auto-Submit: Wenyu Fu <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1054879}
blueboxd pushed a commit that referenced this issue Oct 7, 2022
This reverts commit b121781.

Reason for revert: breaks asan

see https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20ASan%20LSan%20Tests%20(1)/106685/test-results

=================================================================
==7990==ERROR: AddressSanitizer: heap-use-after-free on address 0x61500014a3c8 at pc 0x55bcdbc9090d bp 0x7ffe8c468ab0 sp 0x7ffe8c468aa8
READ of size 8 at 0x61500014a3c8 thread T0 (browser_tests)
    #0 0x55bcdbc9090c in begin buildtools/third_party/libc++/trunk/include/vector:1374:33
    #1 0x55bcdbc9090c in begin<std::Cr::vector<base::internal::UncheckedObserverAdapter, std::Cr::allocator<base::internal::UncheckedObserverAdapter> > &> base/ranges/ranges.h:44:37
    #2 0x55bcdbc9090c in begin<std::Cr::vector<base::internal::UncheckedObserverAdapter, std::Cr::allocator<base::internal::UncheckedObserverAdapter> > &> base/ranges/ranges.h:105:10
    #3 0x55bcdbc9090c in find_if<std::Cr::vector<base::internal::UncheckedObserverAdapter, std::Cr::allocator<base::internal::UncheckedObserverAdapter> > &, (lambda at ../../base/observer_list.h:287:21), base::identity, std::Cr::random_access_iterator_tag> base/ranges/algorithm.h:483:26
    #4 0x55bcdbc9090c in base::ObserverList<permissions::PermissionRequestManager::Observer, false, true, base::internal::UncheckedObserverAdapter>::RemoveObserver(permissions::PermissionRequestManager::Observer const*) base/observer_list.h:286:21
    #5 0x55bcdf91c380 in Reset base/scoped_observation.h:86:7
    #6 0x55bcdf91c380 in ~ScopedObservation base/scoped_observation.h:70:26
    #7 0x55bcdf91c380 in permissions::PermissionRequestObserver::~PermissionRequestObserver() components/permissions/test/permission_request_observer.cc:14:55
    #8 0x55bccbcd2629 in PermissionRequestChipGestureSensitiveBrowserTest_ShouldUpdateActiverPRMAndObservations_Test::RunTestOnMainThread() chrome/browser/ui/views/permissions/permission_request_chip_browsertest.cc:294:1
    #9 0x55bce299402f in content::BrowserTestBase::ProxyRunTestOnMainThreadLoop() content/public/test/browser_test_base.cc:883:7
    #10 0x55bce299accf in Invoke<void (content::BrowserTestBase::*)(), content::BrowserTestBase *> base/functional/bind_internal.h:643:12
    #11 0x55bce299accf in MakeItSo<void (content::BrowserTestBase::*)(), std::Cr::tuple<base::internal::UnretainedWrapper<content::BrowserTestBase, base::RawPtrBanDanglingIfSupported> > > base/functional/bind_internal.h:822:12
    #12 0x55bce299accf in RunImpl<void (content::BrowserTestBase::*)(), std::Cr::tuple<base::internal::UnretainedWrapper<content::BrowserTestBase, base::RawPtrBanDanglingIfSupported> >, 0UL> base/functional/bind_internal.h:916:12
    #13 0x55bce299accf in base::internal::Invoker<base::internal::BindState<void (content::BrowserTestBase::*)(), base::internal::UnretainedWrapper<content::BrowserTestBase, base::RawPtrBanDanglingIfSupported>>, void ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:867:12


Original change's description:
> Make confirmation chip independent of request chip
>
> See design doc: go/confirmation-chip
>
> Bug: 1364276
> Change-Id: Iab08a5bb96271d45101ba68c0134751b921b7667
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3921717
> Commit-Queue: Florian Jacky <[email protected]>
> Reviewed-by: Illia Klimov <[email protected]>
> Cr-Commit-Position: refs/heads/main@{#1055397}

Bug: 1364276
Change-Id: Iecf56cfafaf15a2ab8329138f7508de8afd0a341
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3937182
Bot-Commit: Rubber Stamper <[email protected]>
Commit-Queue: Avi Drissman <[email protected]>
Owners-Override: Avi Drissman <[email protected]>
Auto-Submit: Avi Drissman <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1055548}
blueboxd pushed a commit that referenced this issue Oct 7, 2022
Nodes are expected to know if they have a default action assigned, and
return that knowledge via HasDefaultActionVerb(). We found some cases
that, nonetheless, report false incorrectly on Windows platforms.

This causes serious regressions with JAWS, so we introduce a workaround
to expose the default action unconditionally.

(cherry picked from commit c287736)

Bug: 1370076
Change-Id: I108ea77b267258c4d7d4f2f285824577bc2f6470
AX-relnotes: Fix enter sometimes opening context menu in JAWS.
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3932984
Commit-Queue: Jacobo Aragunde Pérez <[email protected]>
Reviewed-by: Nektarios Paisios <[email protected]>
Commit-Queue: Nektarios Paisios <[email protected]>
Cr-Original-Commit-Position: refs/heads/main@{#1054857}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3936302
Reviewed-by: Krishna Govind <[email protected]>
Commit-Queue: Prudhvikumar Bommana <[email protected]>
Owners-Override: Prudhvikumar Bommana <[email protected]>
Cr-Commit-Position: refs/branch-heads/5249_91@{#5}
Cr-Branched-From: fa96d5f-refs/branch-heads/5249@{#707}
Cr-Branched-From: 4f7bea5-refs/heads/main@{#1036826}
blueboxd pushed a commit that referenced this issue Oct 13, 2022
This CL is fixing the bucket for ShutdownType2 for process
that do an early exit within BasicStartupComplete(...).

These cases can be repro on Linux with these commands:

1) ./chrome --version
2) ./chrome --product-version
3) ./chrome --credits
4) ./chrome --diagnostics

The ChromeMainDelegate must be robust for cases where the
BasicStartupComplete is not fully executed due to an error
(early exits).

The chrome logging was assuming it was initialized. This CL is
ensuring the code was initialized to call the corresponding
shutdown code.

[1004/174420.541708:FATAL:logging_chrome.cc(468)] Check failed: chrome_logging_initialized_. Attempted to clean up logging when it wasn't initialized.
#0 0x55a6a8cf8952 base::debug::CollectStackTrace()
#1 0x55a6a8be9cc3 base::debug::StackTrace::StackTrace()
#2 0x55a6a8c0468f logging::LogMessage::~LogMessage()
#3 0x55a6a8c0549e logging::LogMessage::~LogMessage()
#4 0x55a6ab92495b logging::CleanupChromeLogging()
#5 0x55a6a355f45b ChromeMainDelegate::ProcessExiting()
#6 0x55a6a85ed50d content::ContentMainRunnerImpl::Shutdown()
#7 0x55a6a85eaddb content::ContentMainRunnerImpl::~ContentMainRunnerImpl()
#8 0x55a6a85eaf1e content::ContentMainRunnerImpl::~ContentMainRunnerImpl()
#9 0x55a6a85e8bb0 content::ContentMain()
#10 0x55a6a355d236 ChromeMain
#11 0x7fc168e4781d __libc_start_main
#12 0x55a6a355d02a _start


Change-Id: I51c9d7b18535f69d6733a8d0b88d0a80111bdcb7
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3931775
Reviewed-by: Ken Rockot <[email protected]>
Reviewed-by: Scott Violet <[email protected]>
Reviewed-by: Rohit Rao <[email protected]>
Commit-Queue: Etienne Bergeron <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1058086}
blueboxd pushed a commit that referenced this issue Oct 21, 2022
`char16_t` (which `UChar` is defined as) cannot be used to alias general memory.
Yet we try to use it to read a `blink::QualifiedName::QualifiedNameImpl` among other things.

This is UB, and gcc -O2 misoptimizes it. When chromium is compiled with allocator shim, this manifests as an immediate crash:

  * frame #0: 0x0000556e1280927b electron`FreelistCorruptionDetected [inlined] operator() at partition_freelist_entry.h:31
    frame #1: 0x0000556e1280927a electron`FreelistCorruptionDetected(extra=48) at partition_freelist_entry.h:31
    frame #2: 0x0000556e129dd167 electron`partition_alloc::internal::PartitionBucket<true>::SlowPathAlloc(partition_alloc::PartitionRoot<true>*, unsigned int, unsigned long, unsigned long, bool*) at partition_freelist_entry.h:303
    frame #3: 0x0000556e129dd162 electron`partition_alloc::internal::PartitionBucket<true>::SlowPathAlloc(partition_alloc::PartitionRoot<true>*, unsigned int, unsigned long, unsigned long, bool*) [inlined] partition_alloc::internal::PartitionFreelistEntry::GetNext(unsigned long) const at partition_freelist_entry.h:328
    frame #4: 0x0000556e129dd162 electron`partition_alloc::internal::PartitionBucket<true>::SlowPathAlloc(partition_alloc::PartitionRoot<true>*, unsigned int, unsigned long, unsigned long, bool*) [inlined] partition_alloc::internal::SlotSpanMetadata<true>::PopForAlloc(unsigned long) at partition_page.h:739
    frame #5: 0x0000556e129dd162 electron`partition_alloc::internal::PartitionBucket<true>::SlowPathAlloc(this=0x0000556e19292598, root=0x0000556e19292500, flags=33, raw_size=<unavailable>, slot_span_alignment=48, is_already_zeroed=0x00007ffe8f1196f7) at partition_bucket.cc:1354
    frame #6: 0x0000556e129ddbc0 electron`partition_alloc::ThreadCache::FillBucket(unsigned long) at partition_root.h:1076
    frame #7: 0x0000556e129ddbbb electron`partition_alloc::ThreadCache::FillBucket(this=<unavailable>, bucket_index=5755259732000) at thread_cache.cc:607
    frame #8: 0x0000556e129dfd3a electron`base::internal::PartitionMalloc(base::allocator::AllocatorDispatch const*, unsigned long, void*) at thread_cache.h:525
    frame #9: 0x0000556e129dfd18 electron`base::internal::PartitionMalloc(base::allocator::AllocatorDispatch const*, unsigned long, void*) at partition_root.h:1742
    frame #10: 0x0000556e129dfb18 electron`base::internal::PartitionMalloc((null)=<unavailable>, size=40, context=<unavailable>) at allocator_shim_default_dispatch_to_partition_alloc.cc:304
    frame #11: 0x0000556e128dbe43 electron`::malloc(unsigned long) at allocator_shim.cc:201:37
    frame #12: 0x0000556e128dbe30 electron`::malloc(size=40) at allocator_shim_override_libc_symbols.h:35:20
    frame #13: 0x0000556e16c0f6e6 electron`WTF::HashTableAddResult<WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>, blink::QualifiedName::QualifiedNameImpl*> WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>::InsertPassingHashCode<WTF::HashSetTranslatorAdapter<blink::QNameComponentsTranslator>, blink::QualifiedNameData&, blink::QualifiedNameData&>(blink::QualifiedNameData&, blink::QualifiedNameData&) (.constprop.0) [inlined] WTF::RefCounted<blink::QualifiedName::QualifiedNameImpl, WTF::DefaultRefCountedTraits<blink::QualifiedName::QualifiedNameImpl>>::operator new(unsigned long) at ref_counted.h:44
    frame #14: 0x0000556e16c0f6e1 electron`WTF::HashTableAddResult<WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>, blink::QualifiedName::QualifiedNameImpl*> WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>::InsertPassingHashCode<WTF::HashSetTranslatorAdapter<blink::QNameComponentsTranslator>, blink::QualifiedNameData&, blink::QualifiedNameData&>(blink::QualifiedNameData&, blink::QualifiedNameData&) (.constprop.0) [inlined] blink::QualifiedName::QualifiedNameImpl::Create((null)=<unavailable>, (null)=<unavailable>, (null)=<unavailable>, (null)=<unavailable>) at qualified_name.h:62
    frame #15: 0x0000556e16c0f6dd electron`WTF::HashTableAddResult<WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>, blink::QualifiedName::QualifiedNameImpl*> WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>::InsertPassingHashCode<WTF::HashSetTranslatorAdapter<blink::QNameComponentsTranslator>, blink::QualifiedNameData&, blink::QualifiedNameData&>(blink::QualifiedNameData&, blink::QualifiedNameData&) (.constprop.0) at qualified_name.cc:69
    frame #16: 0x0000556e16c0f6ba electron`WTF::HashTableAddResult<WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>, blink::QualifiedName::QualifiedNameImpl*> WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>::InsertPassingHashCode<WTF::HashSetTranslatorAdapter<blink::QNameComponentsTranslator>, blink::QualifiedNameData&, blink::QualifiedNameData&>(blink::QualifiedNameData&, blink::QualifiedNameData&) (.constprop.0) [inlined] void WTF::HashSetTranslatorAdapter<blink::QNameComponentsTranslator>::Translate<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedNameData&, blink::QualifiedNameData>(blink::QualifiedName::QualifiedNameImpl*&, blink::QualifiedNameData&, blink::QualifiedNameData const&, unsigned int) at hash_set.h:184
    frame #17: 0x0000556e16c0f6ba electron`WTF::HashTableAddResult<WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>, blink::QualifiedName::QualifiedNameImpl*> WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>::InsertPassingHashCode<WTF::HashSetTranslatorAdapter<blink::QNameComponentsTranslator>, blink::QualifiedNameData&, blink::QualifiedNameData&>((null)=<unavailable>, (null)=<unavailable>, (null)=<unavailable>) (.constprop.0) at hash_table.h:1481
    frame #18: 0x0000556e1492f9cf electron`blink::QualifiedName::QualifiedName(WTF::AtomicString const&, WTF::AtomicString const&, WTF::AtomicString const&) [inlined] WTF::HashTableAddResult<WTF::HashTable<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedName::QualifiedNameImpl*, WTF::IdentityExtractor, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>, blink::QualifiedName::QualifiedNameImpl*> WTF::HashSet<blink::QualifiedName::QualifiedNameImpl*, blink::QualifiedNameHash, WTF::HashTraits<blink::QualifiedName::QualifiedNameImpl*>, WTF::PartitionAllocator>::AddWithTranslator<blink::QNameComponentsTranslator, blink::QualifiedNameData&>(blink::QualifiedNameData&) at hash_set.h:307
    frame #19: 0x0000556e1492f9ca electron`blink::QualifiedName::QualifiedName((null)=<unavailable>, (null)=<unavailable>, (null)=<unavailable>, (null)=<unavailable>) at qualified_name.cc:81

When chromium is compiled with system malloc, this manifests as graphical glitches, followed by a crash much later on.

It is worth noting that this exact code snippet was discussed on the GCC bugtracker in 2014
(predating the forking of Chromium from WebKit):
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=60546#c21

The corresponding code no longer exists in WebKit.

Attached patch makes the HashMemory function type-safe without changing the API for other users of StringHasher.

Bug: 819294
Change-Id: Iac11ec77501c2f1d6d01db85d5b9d544adeaf71d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3968507
Reviewed-by: Kentaro Hara <[email protected]>
Commit-Queue: Kentaro Hara <[email protected]>
Auto-Submit: Bruno Pitrus <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1061939}
blueboxd pushed a commit that referenced this issue Oct 29, 2022
This is a reland of CL:3964415 and supporting CLs, which
were reverted together with a number of supporting CLs,
in CL:3990067 because of crbug.com/1376991. The problematic code
is fixed in CL:3988990. Also fixes a flake in week pickers
reported in bug 1378062.

A11y is moved to the end of the document lifecycle, where it can
occur in parallel with other tasks.

Parts of the code that used to force layout updates in order to
update the AX tree now call UpdateAXForAllDocuments(), a new
method introduced in the previous CL, which first updates the
lifecycle and then manually updates the AX tree.

Additional code cleanups in AXObjectCacheImpl related to
popups were also now possible.

Test changes:
* Changes to css-display-expected-win.txt and content-editable-notifications.html were due to a subtle change in event ordering,
but are still correct.

Fixed: 1378062,1376991
NOTRY: true
Change-Id: I7fa925e12cfb7352cbaf9c2deed4b83e47ae084d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3991106
Commit-Queue: Chris Harrelson <[email protected]>
Reviewed-by: Chris Harrelson <[email protected]>
Commit-Queue: Aaron Leventhal <[email protected]>
Reviewed-by: Benjamin Beaudry <[email protected]>
Auto-Submit: Aaron Leventhal <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1064998}
blueboxd pushed a commit that referenced this issue Nov 1, 2022
Fixes HTTPTransport tests that fail with:
Uninitialized bytes in __interceptor_fopen64 at offset 0 inside [0x70200001ce60, 25)
==3342==WARNING: MemorySanitizer: use-of-uninitialized-value
    #0 0x7f115b1ef5d9 in BIO_new_file ??:0:0
    #1 0x7f115b22117d in COMP_CTX_get_type ??:?
    #2 0x7f115b22278c in CONF_modules_load_file ??:0:0
    #3 0x7f115b222a4f in OPENSSL_config ??:?
    #4 0x7f115b2b94f3 in HMAC_CTX_get_md ??:?
    #5 0x7f115ed084de in __pthread_once_slow ??:0:0
    #6 0x7f115b324aac in CRYPTO_THREAD_run_once ??:0:0
    #7 0x7f115b2b9b77 in OPENSSL_init_crypto ??:0:0
    #8 0x7f115dfa3574 in OPENSSL_init_ssl ??:0:0

R=thestig

Change-Id: Ie6aa3223df4d50dedcc59c2f757de62ff35ac1aa
Bug: 1260217
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3993372
Reviewed-by: Lei Zhang <[email protected]>
Commit-Queue: Thomas Anderson <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1065765}
blueboxd pushed a commit that referenced this issue Nov 6, 2022
This class removes the friend classes of ProfileDestroyer as they were
calling internal methods that bypassed the creation of
ProfileDestroyer objects and called DestroyOffTheRecordProfileNow
directly, which has led to crashes in the past (https://crbug.com/1337388#c11).

Note: This CL changes the behavior of ProfileDestroyer when
destroying an off-the-record profile immediately via
ProfileDestroyer::DestroyOTRProfileImmediately(). With the new
implementation, the CHECK in ~ProfileDestroyer() will trigger and we
may see an increase of crashes with this signature. Before this CL, the
app will still crash, but in a different code location (see test), with the stack trace below:
[456919:456919:FATAL:dependency_manager.cc(173)] Check failed: false. Attempted to access a context that was ShutDown(). This is most likely a heap smasher in progress. After KeyedService::Shutdown() completes, your service MUST NOT refer to depended services again.
#0 0x7fe99bc08932 base::debug::CollectStackTrace()
#1 0x7fe99bb348a3 base::debug::StackTrace::StackTrace()
#2 0x7fe99bb4fff3 logging::LogMessage::~LogMessage()
#3 0x7fe99bb50e9e logging::LogMessage::~LogMessage()
#4 0x7fe9992b7396 DependencyManager::AssertContextWasntDestroyed()
#5 0x7fe996fe7e32 BrowserContextKeyedServiceFactory::GetContextToUse()
#6 0x7fe9992b79af KeyedServiceFactory::GetServiceForContext()
#7 0x55c217195682 extensions::ChromeContentBrowserClientExtensionsPart::SiteInstanceDeleting()
#8 0x55c2162f1f9d ChromeContentBrowserClient::SiteInstanceDeleting()
#9 0x7fe99a5bc5af content::SiteInstanceImpl::~SiteInstanceImpl()
#10 0x7fe99a5bc6de content::SiteInstanceImpl::~SiteInstanceImpl()
#11 0x55c21327864f ProfileDestroyerTest::~ProfileDestroyerTest()


Bug: 1378254

Change-Id: Ib144ffe8d2344dc7efc7cd22360e8fce0b2beb7b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3978432
Reviewed-by: Alex Ilin <[email protected]>
Auto-Submit: Mihai Sardarescu <[email protected]>
Commit-Queue: Mihai Sardarescu <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1067599}
blueboxd pushed a commit that referenced this issue Nov 30, 2022
In View::HandleAccessibleAction, accessibility sends both a press and
release mouse event to the view instance.

Unfortunately, if the view deletes itself immediately after receiving
the mouse press event, the subsequent mouse release event causes a UAF.

e.g. for illustrative purposes, here's the flow:

bool HandleAccessibleAction(...) {
  view->OnEvent(mouse_press);
  // |view| is now deleted.
  view->OnEvent(mouse_release);
  // UAF.
}

Fix this by overriding HandleAccessibleAction in the self-deleting view.

Notes:
The deletion stack for the WindowCycleItemView is
    #3 0x560338183db8 in operator() buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:49:5
    #4 0x560338183db8 in reset buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:281:7
    #5 0x560338183db8 in ~unique_ptr buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:247:75
    #6 0x560338183db8 in views::View::DoRemoveChildView(views::View*, bool, bool, views::View*) ui/views/view.cc:2739:1
    #7 0x560338183fe4 in views::View::RemoveAllChildViews() ui/views/view.cc:341:5
    #8 0x560333f50cbb in ash::WindowCycleView::DestroyContents() ash/wm/window_cycle/window_cycle_view.cc:379:3
    #9 0x560333f4b3e7 in ash::WindowCycleList::~WindowCycleList() ash/wm/window_cycle/window_cycle_list.cc:139:18
    #10 0x560333f4b747 in ash::WindowCycleList::~WindowCycleList() ash/wm/window_cycle/window_cycle_list.cc:117:37
    #11 0x560333f475e8 in operator() buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:49:5
    #12 0x560333f475e8 in reset buildtools/third_party/libc++/trunk/include/__memory/unique_ptr.h:281:7
    #13 0x560333f475e8 in ash::WindowCycleController::StopCycling() ash/wm/window_cycle/window_cycle_controller.cc:421:22
    #14 0x560333f5944c in ash::WindowCycleItemView::OnMousePressed(ui::MouseEvent const&) ash/wm/window_cycle/window_cycle_item_view.cc:53:44
    #15 0x560338193ae2 in views::View::ProcessMousePressed(ui::MouseEvent const&) ui/views/view.cc:3109:23
    #16 0x56033819362d in views::View::OnMouseEvent(ui::MouseEvent*) ui/views/view.cc:1492:11

Bug: 1380602
Change-Id: I2533dc299c0f5f5bb32efa130e6d564cb70d4613
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4046647
Commit-Queue: David Tseng <[email protected]>
Reviewed-by: Xiaoqian Dai <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1076637}
blueboxd pushed a commit that referenced this issue Dec 8, 2022
Change-Id: I7ed1df68b615223037ad4ae43b88cca260630dd2
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4072450
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5359_71@{#5}
Cr-Branched-From: 1e0e386-refs/branch-heads/5359@{#1016}
Cr-Branched-From: 27d3765-refs/heads/main@{#1058933}
blueboxd pushed a commit that referenced this issue Jan 23, 2023
Add a new line between learn more description #4 and #5.

Bug: 1378703
Change-Id: I555428f62fe5e5c93085876843f49ed34b834ea5
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4180728
Reviewed-by: Nicola Tommasi <[email protected]>
Auto-Submit: Olesia Marukhno <[email protected]>
Commit-Queue: Nicola Tommasi <[email protected]>
Commit-Queue: Olesia Marukhno <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1095021}
blueboxd pushed a commit that referenced this issue Feb 8, 2023
Change-Id: I017b2cee44ecb140d18bcc53d6453046653689a7
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4111382
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5481@{#5}
Cr-Branched-From: 130f3e4-refs/heads/main@{#1084008}
blueboxd pushed a commit that referenced this issue Feb 21, 2023
https://chromium.googlesource.com/v8/v8.git/+log/dc183b6f8195..03124b7d0c8c

2023-02-10 v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com Version 11.0.226.14
2023-02-10 [email protected] Merged: [turbofan] Fix 32-to-64 bit spill slot moves

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/v8-chromium-release-1
Please CC [email protected],[email protected],[email protected] on the revert to ensure that a human
is aware of the problem.

To file a bug in v8 11.0: https://bugs.chromium.org/p/v8/issues/entry
To file a bug in Chromium m110: https://bugs.chromium.org/p/chromium/issues/entry

To report a problem with the AutoRoller itself, please file a bug:
https://bugs.chromium.org/p/skia/issues/entry?template=Autoroller+Bug

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md

(cherry picked from commit da6fc11)

Bug: None
Tbr: [email protected]
Change-Id: Id5c25a34cfcd4c6ed5310615c2a6caa9975a25fb
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4238898
Bot-Commit: Chrome Release Autoroll <[email protected]>
Commit-Queue: Chrome Release Autoroll <[email protected]>
Cr-Original-Commit-Position: refs/branch-heads/5481@{#1074}
Cr-Original-Branched-From: 130f3e4-refs/heads/main@{#1084008}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4241640
Commit-Queue: Srinivas Sista <[email protected]>
Commit-Queue: Prudhvikumar Bommana <[email protected]>
Reviewed-by: Prudhvikumar Bommana <[email protected]>
Owners-Override: Prudhvikumar Bommana <[email protected]>
Cr-Commit-Position: refs/branch-heads/5481_77@{#5}
Cr-Branched-From: 65ed616-refs/branch-heads/5481@{#839}
Cr-Branched-From: 130f3e4-refs/heads/main@{#1084008}
blueboxd pushed a commit that referenced this issue Mar 7, 2023
[email protected]

Change-Id: Idc40a5a0273f369b7ae86a4d7211c56051de3411
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4200846
Owners-Override: Gregory Guterman <[email protected]>
Commit-Queue: Prudhvikumar Bommana <[email protected]>
Reviewed-by: Gregory Guterman <[email protected]>
Cr-Commit-Position: refs/branch-heads/5563@{#5}
Cr-Branched-From: 3ac59a6-refs/heads/main@{#1097615}
blueboxd pushed a commit that referenced this issue Apr 14, 2023
Change-Id: I2daa2711efe12c1d49fe20715dfeb04c49a6096c
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4291873
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5615@{#5}
Cr-Branched-From: 9c6408e-refs/heads/main@{#1109224}
blueboxd pushed a commit that referenced this issue Apr 14, 2023
https://chromium.googlesource.com/v8/v8.git/+log/057195e26fc9..b52916fcce1c

2023-04-03 v8-ci-autoroll-builder@chops-service-accounts.iam.gserviceaccount.com Version 11.2.214.12
2023-04-03 [email protected] [builtins][pgo] Add Win{32,64} builder tests

If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/v8-chromium-release-1
Please CC [email protected],[email protected],[email protected] on the revert to ensure that a human
is aware of the problem.

To file a bug in v8 11.2: https://bugs.chromium.org/p/v8/issues/entry
To file a bug in Chromium m112: https://bugs.chromium.org/p/chromium/issues/entry

To report a problem with the AutoRoller itself, please file a bug:
https://bugs.chromium.org/p/skia/issues/entry?template=Autoroller+Bug

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md

(cherry picked from commit 7549d20)

Bug: None
Tbr: [email protected]
Change-Id: Ic0c4ed34b9d32967e54fb4b9edbac12c8d83066f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4391790
Commit-Queue: Chrome Release Autoroll <[email protected]>
Bot-Commit: Chrome Release Autoroll <[email protected]>
Cr-Original-Commit-Position: refs/branch-heads/5615@{#1070}
Cr-Original-Branched-From: 9c6408e-refs/heads/main@{#1109224}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4424871
Commit-Queue: Prudhvikumar Bommana <[email protected]>
Owners-Override: Prudhvikumar Bommana <[email protected]>
Reviewed-by: Prudhvikumar Bommana <[email protected]>
Cr-Commit-Position: refs/branch-heads/5615_51@{#5}
Cr-Branched-From: 86d49da-refs/branch-heads/5615@{#938}
Cr-Branched-From: 9c6408e-refs/heads/main@{#1109224}
blueboxd pushed a commit that referenced this issue May 9, 2023
Change-Id: I334b14165759c1d19ce40887426c71b47f5c2ec3
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4370758
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5672@{#5}
Cr-Branched-From: 5f2a724-refs/heads/main@{#1121455}
blueboxd pushed a commit that referenced this issue May 9, 2023
Change-Id: I4a42f39da0c1ba5920c613945364f9d1261565f0
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4503796
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5672_63@{#5}
Cr-Branched-From: 0e1a447-refs/branch-heads/5672@{#912}
Cr-Branched-From: 5f2a724-refs/heads/main@{#1121455}
blueboxd pushed a commit that referenced this issue May 27, 2023
…r notarization.""

This reverts commit 679f936.

Reason for revert: https://crbug.com/1440120

Original change's description:
> Reland "macOS Signing Scripts: Default to using notarytool for notarization."
>
> This is a reland of commit 741ed96
>
> Work has been done internally to enable re-landing this. This CL
> can still be safely reverted if it causes breakage.
>
> Original change's description:
> > macOS Signing Scripts: Default to using notarytool for notarization.
> >
> > This will switch official builds to use notarytool rather than altool.
> > The CL can be safely reverted if any unexpected errors are encountered.
> >
> > Bug: 1217659
> > Change-Id: If6ba33a93b135bb9ae9b1b04444380c8da900e5d
> > Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3557773
> > Reviewed-by: Mark Mentovai <[email protected]>
> > Commit-Queue: Robert Sesek <[email protected]>
> > Cr-Commit-Position: refs/heads/main@{#986708}
>
> Bug: 1217659
> Change-Id: Ica60e04c0c0eb1ca645a0a8fd7341d46490e25bd
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4476227
> Reviewed-by: Mark Mentovai <[email protected]>
> Commit-Queue: Robert Sesek <[email protected]>
> Cr-Commit-Position: refs/heads/main@{#1135543}

(cherry picked from commit e4fc831)

Bug: 1217659, 1440120
Change-Id: Ife167388274d2d8636f00b6450e712e64b01e1ec
No-Presubmit: true
No-Tree-Checks: true
No-Try: true
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4479989
Reviewed-by: Mark Mentovai <[email protected]>
Bot-Commit: Rubber Stamper <[email protected]>
Commit-Queue: Robert Sesek <[email protected]>
Cr-Original-Commit-Position: refs/heads/main@{#1135858}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4479935
Commit-Queue: Srinivas Sista <[email protected]>
Cr-Commit-Position: refs/branch-heads/5735@{#5}
Cr-Branched-From: 2f562e4-refs/heads/main@{#1135570}
blueboxd pushed a commit that referenced this issue Jun 8, 2023
Change-Id: I74bdfdbb767e09a09a4acb12e218dd47d09cc530
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4582334
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5735_90@{#5}
Cr-Branched-From: 386bc09-refs/branch-heads/5735@{#1052}
Cr-Branched-From: 2f562e4-refs/heads/main@{#1135570}
blueboxd pushed a commit that referenced this issue Jul 22, 2023
Change-Id: I970e803c6a9bb6945bba88717d5eee50248497b7
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4687758
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5790_90@{#5}
Cr-Branched-From: 86fb9d0-refs/branch-heads/5790@{#1583}
Cr-Branched-From: 1d71a33-refs/heads/main@{#1148114}
blueboxd pushed a commit that referenced this issue Sep 17, 2023
Change-Id: I3c1d8731e41fb38c4a79af55eb46d977518f39fb
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4864461
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/5938_62@{#5}
Cr-Branched-From: 25a7172-refs/branch-heads/5938@{#1146}
Cr-Branched-From: 2b50cb4-refs/heads/main@{#1181205}
blueboxd pushed a commit that referenced this issue Dec 10, 2023
Change-Id: I204c022d21c060793048b6e01335ef979b2fcdb3
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5077546
Bot-Commit: Chrome Release Bot (LUCI) <chrome-official-brancher@chops-service-accounts.iam.gserviceaccount.com>
Cr-Commit-Position: refs/branch-heads/6099_56@{#5}
Cr-Branched-From: 6c113a6-refs/branch-heads/6099@{#1192}
Cr-Branched-From: e6ee450-refs/heads/main@{#1217362}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants