crash log for renderer (pid 32077): STDOUT: CONSOLE WARNING: SVG's SMIL animations (, , etc.) are deprecated and will be removed. Please use CSS animations or Web animations instead. STDOUT: #CRASHED - renderer (pid 32077) STDERR: ================================================================= STDERR: ==4==ERROR: AddressSanitizer: use-after-poison on address 0x7eb4fc645ac9 at pc 0x0000053b130c bp 0x7fff5ed7e6a0 sp 0x7fff5ed7e698 STDERR: READ of size 1 at 0x7eb4fc645ac9 thread T0 (content_shell) STDERR: #0 0x53b130b in canThrottleRendering third_party/WebKit/Source/core/frame/FrameView.cpp:4009:12 STDERR: #1 0x53b130b in shouldThrottleRendering third_party/WebKit/Source/core/frame/FrameView.cpp:4002:0 STDERR: #2 0x45fc8b1 in scheduleLayoutTreeUpdate third_party/WebKit/Source/core/dom/Document.cpp:1527:10 STDERR: #3 0x46f8f84 in scheduleLayoutTreeUpdateIfNeeded third_party/WebKit/Source/core/dom/Document.h:1421:9 STDERR: #4 0x46f8f84 in markAncestorsWithChildNeedsStyleRecalc third_party/WebKit/Source/core/dom/Node.cpp:698:0 STDERR: #5 0x46f8f84 in setNeedsStyleRecalc third_party/WebKit/Source/core/dom/Node.cpp:719:0 STDERR: #6 0x637cca3 in removeCSSPropertyFromTarget third_party/WebKit/Source/core/svg/SVGAnimateElement.cpp:231:5 STDERR: #7 0x637cca3 in removeCSSPropertyFromTargetAndInstances third_party/WebKit/Source/core/svg/SVGAnimateElement.cpp:262:0 STDERR: #8 0x637c893 in clearAnimatedType third_party/WebKit/Source/core/svg/SVGAnimateElement.cpp:308:9 STDERR: #9 0x631f9ad in ?? third_party/WebKit/Source/core/svg/animation/SVGSMILElement.cpp:306:5 STDERR: #10 0x630e47a in setElapsed third_party/WebKit/Source/core/svg/animation/SMILTimeContainer.cpp:269:13 STDERR: #11 0x5304cd1 in allClientsRemoved third_party/WebKit/Source/core/fetch/ImageResource.cpp:156:9 STDERR: #12 0x532cd70 in removeClient third_party/WebKit/Source/core/fetch/Resource.cpp:687:13 STDERR: #13 0x6145366 in ~StyleFetchedImage third_party/WebKit/Source/core/style/StyleFetchedImage.cpp:46:5 STDERR: #14 0x21c26e4 in finalize third_party/WebKit/Source/platform/heap/HeapPage.cpp:104:9 STDERR: #15 0x21c26e4 in sweep third_party/WebKit/Source/platform/heap/HeapPage.cpp:1143:0 STDERR: #16 0x21bd2c0 in sweepUnsweptPage third_party/WebKit/Source/platform/heap/HeapPage.cpp:321:9 STDERR: #17 0x21bd2c0 in completeSweep third_party/WebKit/Source/platform/heap/HeapPage.cpp:362:0 STDERR: #18 0x21d84f1 in eagerSweep third_party/WebKit/Source/platform/heap/ThreadState.cpp:1088:5 STDERR: #19 0x21d84f1 in preSweep third_party/WebKit/Source/platform/heap/ThreadState.cpp:1036:0 STDERR: #20 0x21b662e in ~SafePointScope third_party/WebKit/Source/platform/heap/SafePoint.h:28:13 STDERR: #21 0x21b662e in collectGarbage third_party/WebKit/Source/platform/heap/Heap.cpp:462:0 STDERR: #22 0x21d901d in runScheduledGC third_party/WebKit/Source/platform/heap/ThreadState.cpp:947:9 STDERR: #23 0x21d901d in safePoint third_party/WebKit/Source/platform/heap/ThreadState.cpp:1208:0 STDERR: #24 0x7eef877 in ProcessTaskFromWorkQueue components/scheduler/base/task_queue_manager.cc:272:5 STDERR: #25 0x7eec400 in DoWork components/scheduler/base/task_queue_manager.cc:180:13 STDERR: #26 0x6f2f91 in Run base/callback.h:392:12 STDERR: #27 0x6f2f91 in RunTask base/debug/task_annotator.cc:51:0 STDERR: #28 0x625809 in RunTask base/message_loop/message_loop.cc:487:3 STDERR: #29 0x626b88 in DeferOrRunPendingTask base/message_loop/message_loop.cc:496:5 STDERR: #30 0x626b88 in DoWork base/message_loop/message_loop.cc:608:0 STDERR: #31 0x62d240 in Run base/message_loop/message_pump_default.cc:32:21 STDERR: #32 0x64c775 in Run base/run_loop.cc:55:3 STDERR: #33 0x623f7e in ?? base/message_loop/message_loop.cc:289:3 STDERR: #34 0x8006284 in RendererMain content/renderer/renderer_main.cc:228:7 STDERR: #35 0x5c34d1 in RunZygote content/app/content_main_runner.cc:303:14 STDERR: #36 0x5c562d in Run content/app/content_main_runner.cc:791:12 STDERR: #37 0x5c28ea in ContentMain content/app/content_main.cc:19:15 STDERR: #38 0x4fd482 in main content/shell/app/shell_main.cc:49:10 STDERR: #39 0x7f8d5c0e576c in __libc_start_main /build/buildd/eglibc-2.15/csu/libc-start.c:226:0 STDERR: STDERR: AddressSanitizer can not describe address in more detail (wild memory access suspected). STDERR: SUMMARY: AddressSanitizer: use-after-poison (/mnt/data/b/build/slave/WebKit_Linux_Oilpan_ASAN/build/src/out/Release/content_shell+0x53b130b) STDERR: Shadow bytes around the buggy address: STDERR: 0x0fd71f8c0b00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b10: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b20: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b30: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b40: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: =>0x0fd71f8c0b50: f7 f7 f7 f7 f7 f7 f7 f7 f7[f7]f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b60: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b70: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0b90: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: 0x0fd71f8c0ba0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 STDERR: Shadow byte legend (one shadow byte represents 8 application bytes): STDERR: Addressable: 00 STDERR: Partially addressable: 01 02 03 04 05 06 07 STDERR: Heap left redzone: fa STDERR: Heap right redzone: fb STDERR: Freed heap region: fd STDERR: Stack left redzone: f1 STDERR: Stack mid redzone: f2 STDERR: Stack right redzone: f3 STDERR: Stack partial redzone: f4 STDERR: Stack after return: f5 STDERR: Stack use after scope: f8 STDERR: Global redzone: f9 STDERR: Global init order: f6 STDERR: Poisoned by user: f7 STDERR: Container overflow: fc STDERR: Array cookie: ac STDERR: Intra object redzone: bb STDERR: ASan internal: fe STDERR: Left alloca redzone: ca STDERR: Right alloca redzone: cb STDERR: ==4==ABORTING