Note: Google Test filter = RotateDesktopFrameOOB.LiveTextureLargerThanCached_OverflowWrite [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from RotateDesktopFrameOOB [ RUN ] RotateDesktopFrameOOB.LiveTextureLargerThanCached_OverflowWrite ================================================================= ==3935==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7b65e9df4080 at pc 0x560575790216 bp 0x7ffcb06c4100 sp 0x7ffcb06c40f8 WRITE of size 4 at 0x7b65e9df4080 thread T0 #0 0x560575790215 in ScaleARGBRowDownEven_C third_party/libyuv/source/scale_common.cc:1100:12 #1 0x56057573ae84 in ARGBRotate third_party/libyuv/source/rotate_argb.cc:73:5 #2 0x56057648418f in webrtc::RotateDesktopFrame(webrtc::DesktopFrame const&, webrtc::DesktopRect const&, webrtc::Rotation const&, webrtc::DesktopVector const&, webrtc::DesktopFrame*) third_party/webrtc/modules/desktop_capture/desktop_frame_rotation.cc:114:16 #3 0x5605677979ac in (anonymous namespace)::RotateDesktopFrameOOB_LiveTextureLargerThanCached_OverflowWrite_Test::TestBody() remoting/codec/desktop_frame_rotation_oob_test.cc:88:3 #4 0x56056950857b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #5 0x56056950b1d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #6 0x56056950d2d3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #7 0x56056953c71a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #8 0x56056953b1ee in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #9 0x5605734156ac in base::TestSuite::Run() base/test/test_suite.cc:440:16 #10 0x56056d835bb1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #11 0x5605734244cb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #12 0x560573423deb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #13 0x56056d835843 in main remoting/base/run_all_unittests.cc:60:10 #14 0x7c45eb560249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7b65e9df4080 is located 0 bytes after 80000-byte region [0x7b65e9de0800,0x7b65e9df4080) allocated by thread T0 here: #0 0x560566ffa361 in operator new[](unsigned long) (/chromium/chromium/src/out/asan/remoting_unittests+0x68b2361) (BuildId: 4b5cfa05daa1cbdf) #1 0x5605764c45e7 in webrtc::BasicDesktopFrame::BasicDesktopFrame(webrtc::DesktopSize) third_party/webrtc/modules/desktop_capture/desktop_frame.cc:191:20 #2 0x56056779797b in (anonymous namespace)::RotateDesktopFrameOOB_LiveTextureLargerThanCached_OverflowWrite_Test::TestBody() remoting/codec/desktop_frame_rotation_oob_test.cc:73:29 #3 0x56056950857b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #4 0x56056950b1d7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #5 0x56056950d2d3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #6 0x56056953c71a in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #7 0x56056953b1ee in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #8 0x5605734156ac in base::TestSuite::Run() base/test/test_suite.cc:440:16 #9 0x56056d835bb1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #10 0x5605734244cb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #11 0x560573423deb in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #12 0x56056d835843 in main remoting/base/run_all_unittests.cc:60:10 #13 0x7c45eb560249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-buffer-overflow third_party/libyuv/source/scale_common.cc:1100:12 in ScaleARGBRowDownEven_C Shadow bytes around the buggy address: 0x7b65e9df3e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b65e9df3e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b65e9df3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b65e9df3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x7b65e9df4000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x7b65e9df4080:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b65e9df4100: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b65e9df4180: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b65e9df4200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b65e9df4280: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x7b65e9df4300: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==3935==ADDITIONAL INFO ==3935==Note: Please include this section with the ASan report. Task trace: ==3935==END OF ADDITIONAL INFO ==3935==ABORTING