Note: Google Test filter = SkTDArrayOverflow.ReserveBytesPositiveWrapHeapOverflow [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from SkTDArrayOverflow [ RUN ] SkTDArrayOverflow.ReserveBytesPositiveWrapHeapOverflow ================================================================= ==1718==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7b9b47de97c0 at pc 0x564a3d636978 bp 0x7fff75e2f290 sp 0x7fff75e2f288 WRITE of size 8 at 0x7b9b47de97c0 thread T0 #0 0x564a3d636977 in (anonymous namespace)::SkTDArrayOverflow_ReserveBytesPositiveWrapHeapOverflow_Test::TestBody() skia/ext/sktdarray_overflow_unittest.cc:70:19 #1 0x564a3e4a6bcb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #2 0x564a3e4a92d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #3 0x564a3e4ab3e3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #4 0x564a3e4db23a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #5 0x564a3e4d9c9e in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x564a3ef55ebc in base::TestSuite::Run() base/test/test_suite.cc:440:16 #7 0x564a3d678661 in base::internal::Invoker<...>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #8 0x564a3ef813eb in base::(anonymous namespace)::LaunchUnitTestsInternal(...) base/functional/callback.h:155:12 #9 0x564a3ef80d0b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #10 0x564a3d67835f in main mojo/core/test/run_all_unittests.cc:30:10 #11 0x7f5b48c20249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) 0x7b9b47de97c0 is located 0 bytes after 48-byte region [0x7b9b47de9790,0x7b9b47de97c0) allocated by thread T0 here: #0 0x564a3d590dac in realloc (/chromium/chromium/src/out/asan/skia_unittests+0x18c9dac) #1 0x564a3e8db623 in sk_realloc_throw(void*, unsigned long) skia/ext/SkMemory_new_handler.cpp:82:35 #2 0x564a3d6d5edf in SkTDStorage::reserve(int) third_party/skia/src/base/SkTDArray.cpp:122:44 #3 0x564a3d6367ad in (anonymous namespace)::SkTDArrayOverflow_ReserveBytesPositiveWrapHeapOverflow_Test::TestBody() third_party/skia/include/private/base/SkTDArray.h:188:18 #4 0x564a3e4a6bcb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc ... SUMMARY: AddressSanitizer: heap-buffer-overflow skia/ext/sktdarray_overflow_unittest.cc:70:19 in (anonymous namespace)::SkTDArrayOverflow_ReserveBytesPositiveWrapHeapOverflow_Test::TestBody() Shadow bytes around the buggy address: =>0x7b9b47de9780: fa fa 00 00 00 00 00 00[fa]fa fa fa fa fa fa fa ==1718==ABORTING