[+] libyuv detects kCpuHasERMS — CopyRow_ERMS will be used. [+] src = [0x7b8c055ff000 .. 0x7b8c855ff000) guard @ 0x7b8c855ff000 [+] dst = [0x7b8b855fe000 .. 0x7b8c055fe000) guard @ 0x7b8c055fe000 [+] Calling libyuv::CopyPlane(src, 131072, dst, 131072, width=131072, height=16384) contract: copy exactly 2147483648 bytes (== width*height) and return bug: width *= height wraps 131072*16384 = 0x80000000 to INT_MIN; CopyRow_ERMS sign-extends to rcx=0xFFFFFFFF80000000 and rep movsb runs OOB. [-] CopyPlane returned without crashing — overflow did not lead to OOB access (bug fixed or ERMS path not taken). dst[last] = 0xAB (expected 0xAB)