11740==ERROR: AddressSanitizer: container-overflow on address 0x60800008dde8 at pc 0x00011a818ea8 bp 0x7000102c70e0 sp 0x7000102c6890 READ of size 24 at 0x60800008dde8 thread T16 ==11740==AddressSanitizer: while reporting a bug found another one. Ignoring. #0 0x11a818ea7 in __asan_memcpy (libclang_rt.asan_osx_dynamic.dylib:x86_64+0x4dea7) #1 0x1116520c1 in std::__1::vector, std::__1::allocator >, std::__1::allocator, std::__1::allocator > > >::__swap_out_circular_buffer(std::__1::__split_ buffer, std::__1::allocator >, std::__1::allocator, std::__1::allocator > >&>&) (QtWebEngineCore:x86_64+0x2d0c1) #2 0x11174a089 in void std::__1::vector, std::__1::allocator >, std::__1::allocator, std::__1::allocator > > >::__push_back_slow_path, std::__1::allocator > const&>(std::__1::basic_string, std::__1::allocator > const&&&) (QtWebEngineCore:x86_64+0x125089) #3 0x111862887 in mojo::StructTraits, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > >::interfaces(std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > const&) (QtWebEngineCore:x86_64+0x23d887) #4 0x111862769 in mojo::internal::Serializer, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > const>::PrepareToSerialize(std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > const&, mojo::internal::SerializationContext*) (QtWebEngineCore:x86_64+0x23d769) #5 0x111862718 in mojo::internal::Serializer, std::__1::map, std::__1::allocator >, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > > > > const>::PrepareToSerialize(std::__1::map, std::__1::allocator >, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > > > > const&, mojo::internal::SerializationContext*) (QtWebEngineCore:x86_64+0x23d718) #6 0x111862536 in mojo::internal::Serializer >::PrepareToSerialize(mojo::StructPtr&, mojo::internal::SerializationContext*) (QtWebEngineCore:x86_64+0x23d536) #7 0x1118618d4 in service_manager::mojom::Resolver_ResolveMojoName_ProxyTo Responder::Run(mojo::StructPtr) (QtWebEngineCore:x86_64+0x23c8d4) #8 0x11186231a in void base::internal::Invoker), base::internal::PassedWrapper > > >, void (mojo::StructPtr)>::RunImpl), std::__1::tup le > > > const&, 0ul>(void (service_manager::mojom::Resolver_ResolveMojoName_ProxyToResponder::* const&&&)(mojo::StructPtr), std::__1::t uple > > > const&&&, base::IndexSequence<0ul>, mojo::StructPtr&&) (QtWebEngineCore:x86_64+0x23d31a) #9 0x111ffd674 in catalog::Instance::OnReadManifest(base::WeakPtr, std::__1::basic_string, std::__1::allocator > const&, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, mojo::StructPtr) (QtWebEngineCore:x86_64+0x9d8674) #10 0x111fff440 in base::internal::Invoker, std::__1::basic_string, std::__1::allocator > const&, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, mojo::StructPtr), base::WeakPtr, std::__1::basic_string, std::__1::allocator >, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> >, void (mojo::Str uctPtr)>::Run(base::internal::BindState Base*, mojo::StructPtr&&) (QtWebEngineCore:x86_64+0x9da440) #11 0x11200010e in catalog::Reader::OnReadManifest(std::__1::map, std::__1::allocator >, std::__1::unique_ptr >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::unique_ptr > > > >*, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, std::__1::unique_ptr >) (QtWebEngineCore:x86_64+0x9db10e) #12 0x112000ef1 in base::internal::Invoker, std::__1::allocator >, std::__1::unique_ptr >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::unique_ptr > > > >*, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, std::__1::unique_ptr >), base::WeakPtr, std::__1::map, std::__1::allocator >, std::__1::unique_ptr >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::unique_ptr > > > >*, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> >, void (std::__1::unique_ptr >)>::Run(base::internal::BindStateBase*, std::__1::unique_ptr >&&) (QtWebEngineCore:x86_64+0x9dbef1) #13 0x112001222 in void base::internal::ReplyAdapter >, std::__1::unique_ptr > >(base::Callback >), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, std::__1::unique_ptr >*) (QtWebEngineCore:x86_64+0x9dc222) #14 0x1123cc757 in base::(anonymous namespace)::PostTaskAndReplyRelay::RunReplyAndSelfDestruct() (QtWebEngineCore:x86_64+0xda7757) #15 0x112350180 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) (QtWebEngineCore:x86_64+0xd2b180) #16 0x112379285 in base::MessageLoop::RunTask(base::PendingTask*) (QtWebEngineCore:x86_64+0xd54285) #17 0x11237955b in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) (QtWebEngineCore:x86_64+0xd5455b) #18 0x112379912 in base::MessageLoop::DoWork() (QtWebEngineCore:x86_64+0xd54912) #19 0x11237b764 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) (QtWebEngineCore:x86_64+0xd56764) #20 0x112378fed in base::MessageLoop::RunHandler() (QtWebEngineCore:x86_64+0xd53fed) #21 0x11239de12 in base::RunLoop::Run() (QtWebEngineCore:x86_64+0xd78e12) #22 0x111a35727 in content::BrowserThreadImpl::IOThreadRun(base::RunLoop*) (QtWebEngineCore:x86_64+0x410727) #23 0x111a358b5 in content::BrowserThreadImpl::Run(base::RunLoop*) (QtWebEngineCore:x86_64+0x4108b5) #24 0x1123d32e8 in base::Thread::ThreadMain() (QtWebEngineCore:x86_64+0xdae2e8) #25 0x1123cc506 in base::(anonymous namespace)::ThreadFunc(void*) (QtWebEngineCore:x86_64+0xda7506) #26 0x7fff57d406c0 in _pthread_body (libsystem_pthread.dylib:x86_64+0x36c0) #27 0x7fff57d4056c in _pthread_start (libsystem_pthread.dylib:x86_64+0x356c) #28 0x7fff57d3fc5c in thread_start (libsystem_pthread.dylib:x86_64+0x2c5c) 0x60800008dde8 is located 72 bytes inside of 96-byte region [0x60800008dda0,0x60800008de00) allocated by thread T16 here: #0 0x11a82bb4b in wrap__Znwm (libclang_rt.asan_osx_dynamic.dylib:x86_64+0x60b4b) #1 0x111749fbd in void std::__1::vector, std::__1::allocator >, std::__1::allocator, std::__1::allocator > > >::__push_back_slow_path, std::__1::allocator > const&>(std::__1::basic_string, std::__1::allocator > const&&&) (QtWebEngineCore:x86_64+0x124fbd) #2 0x111862887 in mojo::StructTraits, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > >::interfaces(std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > const&) (QtWebEngineCore:x86_64+0x23d887) #3 0x111862769 in mojo::internal::Serializer, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > const>::PrepareToSerialize(std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > const&, mojo::internal::SerializationContext*) (QtWebEngineCore:x86_64+0x23d769) #4 0x111862718 in mojo::internal::Serializer, std::__1::map, std::__1::allocator >, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > > > > const>::PrepareToSerialize(std::__1::map, std::__1::allocator >, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::set, std::__1::allocator >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > > > > > > const&, mojo::internal::SerializationContext*) (QtWebEngineCore:x86_64+0x23d718) #5 0x111862536 in mojo::internal::Serializer >::PrepareToSerialize(mojo::StructPtr&, mojo::internal::SerializationContext*) (QtWebEngineCore:x86_64+0x23d536) #6 0x1118618d4 in service_manager::mojom::Resolver_ResolveMojoName_ProxyTo Responder::Run(mojo::StructPtr) (QtWebEngineCore:x86_64+0x23c8d4) #7 0x11186231a in void base::internal::Invoker), base::internal::PassedWrapper > > >, void (mojo::StructPtr)>::RunImpl), std::__1::tup le > > > const&, 0ul>(void (service_manager::mojom::Resolver_ResolveMojoName_ProxyToResponder::* const&&&)(mojo::StructPtr), std::__1::t uple > > > const&&&, base::IndexSequence<0ul>, mojo::StructPtr&&) (QtWebEngineCore:x86_64+0x23d31a) #8 0x111ffd674 in catalog::Instance::OnReadManifest(base::WeakPtr, std::__1::basic_string, std::__1::allocator > const&, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, mojo::StructPtr) (QtWebEngineCore:x86_64+0x9d8674) #9 0x111fff440 in base::internal::Invoker, std::__1::basic_string, std::__1::allocator > const&, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, mojo::StructPtr), base::WeakPtr, std::__1::basic_string, std::__1::allocator >, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> >, void (mojo::Str uctPtr)>::Run(base::internal::BindState Base*, mojo::StructPtr&&) (QtWebEngineCore:x86_64+0x9da440) #10 0x11200010e in catalog::Reader::OnReadManifest(std::__1::map, std::__1::allocator >, std::__1::unique_ptr >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::unique_ptr > > > >*, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, std::__1::unique_ptr >) (QtWebEngineCore:x86_64+0x9db10e) #11 0x112000ef1 in base::internal::Invoker, std::__1::allocator >, std::__1::unique_ptr >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::unique_ptr > > > >*, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, std::__1::unique_ptr >), base::WeakPtr, std::__1::map, std::__1::allocator >, std::__1::unique_ptr >, std::__1::less, std::__1::allocator > >, std::__1::allocator, std::__1::allocator > const, std::__1::unique_ptr > > > >*, base::Callback), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> >, void (std::__1::unique_ptr >)>::Run(base::internal::BindStateBase*, std::__1::unique_ptr >&&) (QtWebEngineCore:x86_64+0x9dbef1) #12 0x112001222 in void base::internal::ReplyAdapter >, std::__1::unique_ptr > >(base::Callback >), (base::internal::CopyMode)1, (base::internal::RepeatMode)1> const&, std::__1::unique_ptr >*) (QtWebEngineCore:x86_64+0x9dc222) #13 0x1123cc757 in base::(anonymous namespace)::PostTaskAndReplyRelay::RunReplyAndSelfDestruct() (QtWebEngineCore:x86_64+0xda7757) #14 0x112350180 in base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask*) (QtWebEngineCore:x86_64+0xd2b180) #15 0x112379285 in base::MessageLoop::RunTask(base::PendingTask*) (QtWebEngineCore:x86_64+0xd54285) #16 0x11237955b in base::MessageLoop::DeferOrRunPendingTask(base::PendingTask) (QtWebEngineCore:x86_64+0xd5455b) #17 0x112379912 in base::MessageLoop::DoWork() (QtWebEngineCore:x86_64+0xd54912) #18 0x11237b764 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) (QtWebEngineCore:x86_64+0xd56764) #19 0x112378fed in base::MessageLoop::RunHandler() (QtWebEngineCore:x86_64+0xd53fed) #20 0x11239de12 in base::RunLoop::Run() (QtWebEngineCore:x86_64+0xd78e12) #21 0x111a35727 in content::BrowserThreadImpl::IOThreadRun(base::RunLoop*) (QtWebEngineCore:x86_64+0x410727) #22 0x111a358b5 in content::BrowserThreadImpl::Run(base::RunLoop*) (QtWebEngineCore:x86_64+0x4108b5) #23 0x1123d32e8 in base::Thread::ThreadMain() (QtWebEngineCore:x86_64+0xdae2e8) #24 0x1123cc506 in base::(anonymous namespace)::ThreadFunc(void*) (QtWebEngineCore:x86_64+0xda7506) #25 0x7fff57d406c0 in _pthread_body (libsystem_pthread.dylib:x86_64+0x36c0) #26 0x7fff57d4056c in _pthread_start (libsystem_pthread.dylib:x86_64+0x356c) #27 0x7fff57d3fc5c in thread_start (libsystem_pthread.dylib:x86_64+0x2c5c) Thread T16 created by T0 here: #0 0x11a818846 in wrap_pthread_create (libclang_rt.asan_osx_dynamic.dylib:x86_64+0x4d846) #1 0x1123cc282 in base::(anonymous namespace)::CreateThread(unsigned long, bool, base::PlatformThread::Delegate*, base::PlatformThreadHandle*, base::ThreadPriority) (QtWebEngineCore:x86_64+0xda7282) #2 0x1123d2c32 in base::Thread::StartWithOptions(base::Thread::Options const&) (QtWebEngineCore:x86_64+0xdadc32) #3 0x111a35c7a in content::BrowserThreadImpl::StartWithOptions(base::Thread::Options const&) (QtWebEngineCore:x86_64+0x410c7a) #4 0x111a28999 in content::BrowserMainLoop::CreateThreads() (QtWebEngineCore:x86_64+0x403999) #5 0x111d599d5 in content::StartupTaskRunner::RunAllTasksNow() (QtWebEngineCore:x86_64+0x7349d5) #6 0x111a28121 in content::BrowserMainLoop::CreateStartupTasks() (QtWebEngineCore:x86_64+0x403121) #7 0x111a2c09a in content::BrowserMainRunnerImpl::Initialize(content::MainFunctionParams const&) (QtWebEngineCore:x86_64+0x40709a) #8 0x11177d285 in QtWebEngineCore::WebEngineContext::WebEngineContext() (QtWebEngineCore:x86_64+0x158285) #9 0x1117789e7 in QtWebEngineCore::WebEngineContext::current() (QtWebEngineCore:x86_64+0x1539e7) #10 0x111641708 in QtWebEngineCore::BrowserContextAdapter::defaultContext() (QtWebEngineCore:x86_64+0x1c708) #11 0x10ddc1325 in QWebEngineProfile::defaultProfile() (QtWebEngineWidgets:x86_64+0x39325) #12 0x10ddcbd28 in QWebEngineSettings::defaultSettings() (QtWebEngineWidgets:x86_64+0x43d28) #13 0x10dc440f2 in main main.cpp:73 #14 0x7fff57ab6144 in start (libdyld.dylib:x86_64+0x1144) HINT: if you don't care about these errors you may set ASAN_OPTIONS=detect_container_overflow=0. If you suspect a false positive see also: https://github.com/google/sanitizers/wiki/AddressSanitizerContainerOverflow. SUMMARY: AddressSanitizer: container-overflow (libclang_rt.asan_osx_dynamic.dylib:x86_64+0x4dea7) in __asan_memcpy Shadow bytes around the buggy address: 0x1c1000011b60: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 0x1c1000011b70: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 0x1c1000011b80: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 fa 0x1c1000011b90: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 fa 0x1c1000011ba0: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 fa =>0x1c1000011bb0: fa fa fa fa 00 00 00 00 00 00 00 00 00[fc]fc fc 0x1c1000011bc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1c1000011bd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1c1000011be0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1c1000011bf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x1c1000011c00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==11740==ABORTING Abort trap: 6