=================================================================
==23096==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x123c578e2c89 at pc 0x7ff8314f2d98 bp 0x0076ecdfdfe0 sp 0x0076ecdfe028
READ of size 8 at 0x123c578e2c89 thread T8
    #0 0x7ff8314f2d97 in ec_GFp_simple_felem_from_bytes D:\chromium\src\third_party\boringssl\src\crypto\fipsmodule\ec\simple.cc.inc:271
    #1 0x7ff8314f2498 in ec_GFp_mont_felem_from_bytes D:\chromium\src\third_party\boringssl\src\crypto\fipsmodule\ec\ec_montgomery.cc.inc:67
    #2 0x7ff831501fe7 in ec_point_from_uncompressed D:\chromium\src\third_party\boringssl\src\crypto\fipsmodule\ec\oct.cc.inc:75
    #3 0x7ff8314efb18 in EC_POINT_oct2point D:\chromium\src\third_party\boringssl\src\crypto\fipsmodule\ec\oct.cc.inc:151
    #4 0x7ff835c77561 in trusted_vault::`anonymous namespace'::ECPublicKeyFromBytes D:\chromium\src\components\trusted_vault\securebox.cc:79
    #5 0x7ff835c773eb in trusted_vault::SecureBoxPublicKey::CreateByImport D:\chromium\src\components\trusted_vault\securebox.cc:338
    #6 0x7ff83b23a26b in trusted_vault::StandaloneTrustedVaultBackend::AddTrustedRecoveryMethod D:\chromium\src\components\trusted_vault\standalone_trusted_vault_backend.cc:562
    #7 0x7ff835e63702 in base::internal::Invoker<base::internal::FunctorTraits<void (StandaloneTrustedVaultBackend::*&&)(const GaiaId &, const std::__Cr::vector<unsigned char,std::__Cr::allocator<unsigned char> > &, int, base::OnceCallback<void ()>),scoped_refptr<trusted_vault::StandaloneTrustedVaultBackend> &&,GaiaId &&,std::__Cr::vector<unsigned char,std::__Cr::allocator<unsigned char> > &&,int &&,base::OnceCallback<void ()> &&>,base::internal::BindState<1,1,0,void (StandaloneTrustedVaultBackend::*)(const GaiaId &, const std::__Cr::vector<unsigned char,std::__Cr::allocator<unsigned char> > &, int, base::OnceCallback<void ()>),scoped_refptr<trusted_vault::StandaloneTrustedVaultBackend>,GaiaId,std::__Cr::vector<unsigned char,std::__Cr::allocator<unsigned char> >,int,base::OnceCallback<void ()> >,void ()>::RunOnce D:\chromium\src\base\functional\bind_internal.h:972
    #8 0x7ff8312b2c23 in base::TaskAnnotator::RunTaskImpl D:\chromium\src\base\task\common\task_annotator.cc:207
    #9 0x7ff83b6e2d1c in base::internal::TaskTracker::RunSkipOnShutdown D:\chromium\src\base\task\thread_pool\task_tracker.cc:671
    #10 0x7ff83b6e135a in base::internal::TaskTracker::RunTask D:\chromium\src\base\task\thread_pool\task_tracker.cc:501
    #11 0x7ff83b6e042e in base::internal::TaskTracker::RunAndPopNextTask D:\chromium\src\base\task\thread_pool\task_tracker.cc:391
    #12 0x7ff84095f625 in base::internal::WorkerThread::RunWorker D:\chromium\src\base\task\thread_pool\worker_thread.cc:473
    #13 0x7ff84095e48f in base::internal::WorkerThread::RunPooledWorker D:\chromium\src\base\task\thread_pool\worker_thread.cc:359
    #14 0x7ff8311c2cc3 in base::`anonymous namespace'::ThreadFunc D:\chromium\src\base\threading\platform_thread_win.cc:114
    #15 0x7ff8b597b18c in _asan_wrap_CreateThread+0x14c (D:\chromium\src\out\asan\clang_rt.asan_dynamic-x86_64.dll+0x18005b18c)
    #16 0x7ff91e65e8d6 in BaseThreadInitThunk+0x16 (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6)
    #17 0x7ff920608d9b in RtlUserThreadStart+0x2b (C:\WINDOWS\SYSTEM32\ntdll.dll+0x180008d9b)

0x123c578e2c89 is located 24 bytes after 1-byte region [0x123c578e2c70,0x123c578e2c71)
allocated by thread T0 here:
    #0 0x7ff8b597b99d in operator new+0x8d (D:\chromium\src\out\asan\clang_rt.asan_dynamic-x86_64.dll+0x18005b99d)
    #1 0x7ff81f2722c9 in std::__Cr::vector<unsigned char,std::__Cr::allocator<unsigned char> >::__init_with_size<unsigned char *,unsigned char *> D:\chromium\src\third_party\libc++\src\include\__vector\vector.h:601
    #2 0x7ff835e63b6f in std::__Cr::__tuple_impl<std::__Cr::__integer_sequence<unsigned long long,0,1,2,3,4>,scoped_refptr<trusted_vault::StandaloneTrustedVaultBackend>,GaiaId,std::__Cr::vector<unsigned char,std::__Cr::allocator<unsigned char> >,int,base::OnceCallback<void ()> >::__tuple_impl<scoped_refptr<trusted_vault::StandaloneTrustedVaultBackend> &,const GaiaId &,const std::__Cr::vector<unsigned char,std::__Cr::allocator<unsigned char> > &,int &,base::OnceCallback<void ()> > D:\chromium\src\third_party\libc++\src\include\tuple:523
    #3 0x7ff835e61383 in trusted_vault::StandaloneTrustedVaultClient::AddTrustedRecoveryMethod D:\chromium\src\components\trusted_vault\standalone_trusted_vault_client.cc:375
    #4 0x7ff83a975f56 in `anonymous namespace'::EncryptionKeyApi::AddTrustedRecoveryMethod D:\chromium\src\chrome\browser\trusted_vault\trusted_vault_encryption_keys_tab_helper.cc:116
    #5 0x7ff82c6c2a82 in chrome::mojom::TrustedVaultEncryptionKeysExtensionStubDispatch::AcceptWithResponder D:\chromium\src\out\asan\gen\chrome\common\trusted_vault_encryption_keys_extension.mojom.cc:681
    #6 0x7ff83a9747cc in chrome::mojom::TrustedVaultEncryptionKeysExtensionStub<mojo::RawPtrImplRefTraits<chrome::mojom::TrustedVaultEncryptionKeysExtension> >::AcceptWithResponder D:\chromium\src\out\asan\gen\chrome\common\trusted_vault_encryption_keys_extension.mojom.h:147
    #7 0x7ff8310ee9f6 in mojo::InterfaceEndpointClient::HandleValidatedMessage D:\chromium\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc:1013
    #8 0x7ff83651d749 in mojo::MessageDispatcher::Accept D:\chromium\src\mojo\public\cpp\bindings\lib\message_dispatcher.cc:48
    #9 0x7ff8310f4d4e in mojo::InterfaceEndpointClient::HandleIncomingMessage D:\chromium\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc:731
    #10 0x7ff837571738 in IPC::ChannelAssociatedGroupController::AcceptOnEndpointThread D:\chromium\src\ipc\ipc_mojo_bootstrap.cc:1202
    #11 0x7ff837573ca8 in base::internal::Invoker<base::internal::FunctorTraits<void (ChannelAssociatedGroupController::*&&)(mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification),IPC::ChannelAssociatedGroupController *&&,mojo::Message &&,IPC::(anonymous namespace)::ScopedUrgentMessageNotification &&>,base::internal::BindState<1,1,0,void (ChannelAssociatedGroupController::*)(mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification),scoped_refptr<IPC::ChannelAssociatedGroupController>,mojo::Message,IPC::(anonymous namespace)::ScopedUrgentMessageNotification>,void ()>::RunOnce D:\chromium\src\base\functional\bind_internal.h:972
    #12 0x7ff8312b2c23 in base::TaskAnnotator::RunTaskImpl D:\chromium\src\base\task\common\task_annotator.cc:207
    #13 0x7ff8365c47a9 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl D:\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:472
    #14 0x7ff8365c364f in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork D:\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:346
    #15 0x7ff8311e42f0 in base::MessagePumpForUI::DoRunLoop D:\chromium\src\base\message_loop\message_pump_win.cc:260
    #16 0x7ff8311e1cb8 in base::MessagePumpWin::Run D:\chromium\src\base\message_loop\message_pump_win.cc:87
    #17 0x7ff8365c64f1 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run D:\chromium\src\base\task\sequence_manager\thread_controller_with_message_pump_impl.cc:647
    #18 0x7ff83131eefe in base::RunLoop::Run D:\chromium\src\base\run_loop.cc:134
    #19 0x7ff82807eaad in content::BrowserMainLoop::RunMainMessageLoop D:\chromium\src\content\browser\browser_main_loop.cc:1120
    #20 0x7ff828086729 in content::BrowserMainRunnerImpl::Run D:\chromium\src\content\browser\browser_main_runner_impl.cc:156
    #21 0x7ff8280756cc in content::BrowserMain D:\chromium\src\content\browser\browser_main.cc:32
    #22 0x7ff82e358a52 in content::RunBrowserProcessMain D:\chromium\src\content\app\content_main_runner_impl.cc:701
    #23 0x7ff82e35bb9f in content::ContentMainRunnerImpl::RunBrowser D:\chromium\src\content\app\content_main_runner_impl.cc:1278
    #24 0x7ff82e35b3ae in content::ContentMainRunnerImpl::Run D:\chromium\src\content\app\content_main_runner_impl.cc:1127
    #25 0x7ff82e34f8af in content::RunContentProcess D:\chromium\src\content\app\content_main.cc:346
    #26 0x7ff82e34fe3d in content::ContentMain D:\chromium\src\content\app\content_main.cc:359
    #27 0x7ff81f17301f in ChromeMain D:\chromium\src\chrome\app\chrome_main.cc:228

Thread T8 created by T0 here:
    #0 0x7ff8b597b0a2 in _asan_wrap_CreateThread+0x62 (D:\chromium\src\out\asan\clang_rt.asan_dynamic-x86_64.dll+0x18005b0a2)
    #1 0x7ff8311c1fec in base::`anonymous namespace'::CreateThreadInternal D:\chromium\src\base\threading\platform_thread_win.cc:182
    #2 0x7ff84095cacf in base::internal::WorkerThread::Start D:\chromium\src\base\task\thread_pool\worker_thread.cc:185
    #3 0x7ff83b6d7a96 in base::internal::ThreadGroup::BaseScopedCommandsExecutor::Flush D:\chromium\src\base\task\thread_pool\thread_group.cc:89
    #4 0x7ff83b6d776d in base::internal::ThreadGroup::BaseScopedCommandsExecutor::~BaseScopedCommandsExecutor D:\chromium\src\base\task\thread_pool\thread_group.cc:80
    #5 0x7ff83b6f66a7 in base::internal::ThreadGroupImpl::Start D:\chromium\src\base\task\thread_pool\thread_group_impl.cc:252
    #6 0x7ff836589ff5 in base::internal::ThreadPoolImpl::Start D:\chromium\src\base\task\thread_pool\thread_pool_impl.cc:198
    #7 0x7ff829a9a8c1 in content::StartBrowserThreadPool D:\chromium\src\content\browser\startup_helper.cc:99
    #8 0x7ff82e35c185 in content::ContentMainRunnerImpl::RunBrowser D:\chromium\src\content\app\content_main_runner_impl.cc:1215
    #9 0x7ff82e35b3ae in content::ContentMainRunnerImpl::Run D:\chromium\src\content\app\content_main_runner_impl.cc:1127
    #10 0x7ff82e34f8af in content::RunContentProcess D:\chromium\src\content\app\content_main.cc:346
    #11 0x7ff82e34fe3d in content::ContentMain D:\chromium\src\content\app\content_main.cc:359
    #12 0x7ff81f17301f in ChromeMain D:\chromium\src\chrome\app\chrome_main.cc:228
    #13 0x7ff6295f479b in MainDllLoader::Launch D:\chromium\src\chrome\app\main_dll_loader_win.cc:201
    #14 0x7ff6295f200c in main D:\chromium\src\chrome\app\chrome_exe_main_win.cc:352
    #15 0x7ff629ab225b in __scrt_common_main_seh D:\a\_work\1\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl:288
    #16 0x7ff91e65e8d6 in BaseThreadInitThunk+0x16 (C:\WINDOWS\System32\KERNEL32.DLL+0x18002e8d6)
    #17 0x7ff920608d9b in RtlUserThreadStart+0x2b (C:\WINDOWS\SYSTEM32\ntdll.dll+0x180008d9b)

SUMMARY: AddressSanitizer: heap-buffer-overflow D:\chromium\src\third_party\boringssl\src\crypto\fipsmodule\ec\simple.cc.inc:271 in ec_GFp_simple_felem_from_bytes
Shadow bytes around the buggy address:
  0x123c578e2a00: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fd
  0x123c578e2a80: f7 fa fd fa f7 fa fd fa f7 fa fd fd f7 fa fd fa
  0x123c578e2b00: f7 fa fd fa f7 fa fd fd f7 fa fd fa f7 fa fd fa
  0x123c578e2b80: f7 fa fd fa f7 fa fd fd f7 fa fd fa f7 fa fd fa
  0x123c578e2c00: f7 fa fd fd f7 fa 00 fa f7 fa 00 fa f7 fa 01 fa
=>0x123c578e2c80: f7[fa]fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fd
  0x123c578e2d00: f7 fa fd fa f7 fa fd fd f7 fa fd fd f7 fa fd fa
  0x123c578e2d80: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa
  0x123c578e2e00: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa
  0x123c578e2e80: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa
  0x123c578e2f00: f7 fa fd fa f7 fa fd fa f7 fa fd fa f7 fa fd fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb

==23096==ADDITIONAL INFO

==23096==Note: Please include this section with the ASan report.
Task trace:
    #0 0x7ff835e613d1 in trusted_vault::StandaloneTrustedVaultClient::AddTrustedRecoveryMethod D:\chromium\src\components\trusted_vault\standalone_trusted_vault_client.cc:374
    #1 0x7ff837562578 in IPC::ChannelAssociatedGroupController::Accept D:\chromium\src\ipc\ipc_mojo_bootstrap.cc:1141
    #2 0x7ff8315c1e58 in mojo::SimpleWatcher::Context::Notify D:\chromium\src\mojo\public\cpp\system\simple_watcher.cc:102


Command line: `"out\asan\chrome.exe" --no-sandbox --flag-switches-begin --enable-experimental-web-platform-features --flag-switches-end`


==23096==END OF ADDITIONAL INFO
==23096==ABORTING