Discussion:
[chromium-dev] asan content_shell signal 11 preventing local reproduction
'David Grogan' via Chromium-dev
2018-11-28 03:18:13 UTC
Permalink
I'm trying to reproduce a crash <https://crbug.com/909021> that
chromium.webkit/WebKit
Linux Trusty ASAN caught. But when I run a local asan content_shell it gets
signal 11 before it finds the use after free. Layout tests that the bot
approved also get signal 11. How can I debug my local asan setup?

the base_unittests example from the ancient
https://www.chromium.org/developers/testing/addresssanitizer
gets the buffer overrun.

I get the signal 11 with either of these 2 commands

$ ./third_party/blink/tools/run_web_tests.py --disable-breakpad -t asan
--clobber-old-results --no-retry-failures
virtual/layout_ng_experimental/css3/flexbox/flex-flow-padding.html
$ out/asan/content_shell --enable-blink-features=LayoutNGFlexBox
third_party/blink/web_tests/css3/flexbox/flex-flow-padding.html

My args.gn:

$ cat out/asan/args.gn
# Build arguments go here.
# See "gn args <out_dir> --list" for available build arguments.

enable_nacl = false
enable_pdf = false
enable_print_preview = false
google_api_key = ...
google_default_client_id = ...
google_default_client_secret = ...
is_component_build = true
use_goma = true
is_debug = false
dcheck_always_on = true
is_asan = true
--
--
Chromium Developers mailing list: chromium-***@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev+***@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/CAOZbSt3H_5X96pNEZHM96p7uH%2B%2BhpaMmcFQ0TKtZ6e4%2BAQxX%2BA%40mail.gmail.com.
Lei Zhang
2018-11-28 06:08:47 UTC
Permalink
Maybe flip is_debug to true, and run content_shell in gdb to see why
it is getting a SIGSEGV?
On Tue, Nov 27, 2018 at 7:19 PM 'David Grogan' via Chromium-dev
I'm trying to reproduce a crash that chromium.webkit/WebKit Linux Trusty ASAN caught. But when I run a local asan content_shell it gets signal 11 before it finds the use after free. Layout tests that the bot approved also get signal 11. How can I debug my local asan setup?
the base_unittests example from the ancient https://www.chromium.org/developers/testing/addresssanitizer gets the buffer overrun.
I get the signal 11 with either of these 2 commands
$ ./third_party/blink/tools/run_web_tests.py --disable-breakpad -t asan --clobber-old-results --no-retry-failures virtual/layout_ng_experimental/css3/flexbox/flex-flow-padding.html
$ out/asan/content_shell --enable-blink-features=LayoutNGFlexBox third_party/blink/web_tests/css3/flexbox/flex-flow-padding.html
$ cat out/asan/args.gn
# Build arguments go here.
# See "gn args <out_dir> --list" for available build arguments.
enable_nacl = false
enable_pdf = false
enable_print_preview = false
google_api_key = ...
google_default_client_id = ...
google_default_client_secret = ...
is_component_build = true
use_goma = true
is_debug = false
dcheck_always_on = true
is_asan = true
--
--
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/CAOZbSt3H_5X96pNEZHM96p7uH%2B%2BhpaMmcFQ0TKtZ6e4%2BAQxX%2BA%40mail.gmail.com.
--
--
Chromium Developers mailing list: chromium-***@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev+***@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/CACSHbcQ%3DwMMoJvmwrakVD7R%3D0pJXco1UiojBjk6vA232kRsnsQ%40mail.gmail.com.
'David Grogan' via Chromium-dev
2018-11-29 19:51:20 UTC
Permalink
Removing dcheck_always_on and is_component_build made asan work again
Post by Lei Zhang
Maybe flip is_debug to true, and run content_shell in gdb to see why
it is getting a SIGSEGV?
On Tue, Nov 27, 2018 at 7:19 PM 'David Grogan' via Chromium-dev
I'm trying to reproduce a crash that chromium.webkit/WebKit Linux Trusty
ASAN caught. But when I run a local asan content_shell it gets signal 11
before it finds the use after free. Layout tests that the bot approved also
get signal 11. How can I debug my local asan setup?
the base_unittests example from the ancient
https://www.chromium.org/developers/testing/addresssanitizer gets the
buffer overrun.
I get the signal 11 with either of these 2 commands
$ ./third_party/blink/tools/run_web_tests.py --disable-breakpad -t asan
--clobber-old-results --no-retry-failures
virtual/layout_ng_experimental/css3/flexbox/flex-flow-padding.html
$ out/asan/content_shell --enable-blink-features=LayoutNGFlexBox
third_party/blink/web_tests/css3/flexbox/flex-flow-padding.html
$ cat out/asan/args.gn
# Build arguments go here.
# See "gn args <out_dir> --list" for available build arguments.
enable_nacl = false
enable_pdf = false
enable_print_preview = false
google_api_key = ...
google_default_client_id = ...
google_default_client_secret = ...
is_component_build = true
use_goma = true
is_debug = false
dcheck_always_on = true
is_asan = true
--
--
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google
Groups "Chromium-dev" group.
To view this discussion on the web visit
https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/CAOZbSt3H_5X96pNEZHM96p7uH%2B%2BhpaMmcFQ0TKtZ6e4%2BAQxX%2BA%40mail.gmail.com
.
--
--
Chromium Developers mailing list: chromium-***@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev+***@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/CAOZbSt1aeum0r_OC0kUuxc%3DNFdnmEbtNQ-6MXWJd_GxD_dLXaA%40mail.gmail.com.
Loading...