=================================================================
==PID==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x1245f3685cbc at pc 0x02239a2e62f3 bp 0x00bd56bfdda0 sp 0x00bd56bfdde8
READ of size 4 at 0x1245f3685cbc thread T15
    #0 rx::CopyNativeVertexData<signed char,4,4,0> src/third_party/angle/src/libANGLE/renderer/copyvertex.inc.h:84
    #1 rx::VertexBuffer11::storeVertexAttributes src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/VertexBuffer11.cpp:133
    #2 rx::StreamingVertexBufferInterface::storeDynamicAttribute src/third_party/angle/src/libANGLE/renderer/d3d/VertexBuffer.cpp:206
    #3 rx::VertexDataManager::storeDynamicAttrib src/third_party/angle/src/libANGLE/renderer/d3d/VertexDataManager.cpp:595
    #4 rx::VertexDataManager::storeDynamicAttribs src/third_party/angle/src/libANGLE/renderer/d3d/VertexDataManager.cpp:462
    #5 rx::VertexArray11::updateDynamicAttribs src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/VertexArray11.cpp:330
    #6 rx::VertexArray11::syncStateForDraw src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/VertexArray11.cpp:163
    #7 rx::StateManager11::updateState src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/StateManager11.cpp:2001
    #8 rx::Context11::drawArrays src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/Context11.cpp:285
    #9 GL_DrawArrays src/third_party/angle/src/libGLESv2/entry_points_gles_2_0_autogen.cpp:1819
    #10 gl::RealGLApi::glDrawArraysFn src/ui/gl/gl_gl_api_implementation.cc:390
    #11 gpu::gles2::GLES2DecoderPassthroughImpl::DoDrawArrays src/gpu/command_buffer/service/gles2_cmd_decoder_passthrough_doers.cc:1149
    #12 gpu::gles2::GLES2DecoderPassthroughImpl::DoCommandsImpl<0> src/gpu/command_buffer/service/gles2_cmd_decoder_passthrough.cc:745
    #13 gpu::CommandBufferService::Flush src/gpu/command_buffer/service/command_buffer_service.cc:267
    #14 gpu::CommandBufferStub::OnAsyncFlush src/gpu/ipc/service/command_buffer_stub.cc:504
    #15 gpu::CommandBufferStub::ExecuteDeferredRequest src/gpu/ipc/service/command_buffer_stub.cc:173
    #16 gpu::GpuChannel::ExecuteDeferredRequest src/gpu/ipc/service/gpu_channel.cc:854

0x1245f3685cbc is located 4 bytes before 256-byte region [0x1245f3685cc0,0x1245f3685dc0)
allocated by thread T15 here:
    #0 _malloc_base (clang_rt.asan)
    #1 angle::MemoryBuffer::resize src/third_party/angle/src/common/MemoryBuffer.cpp:40
    #2 rx::Buffer11::SystemMemoryStorage::resize src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/Buffer11.cpp:1705
    #3 rx::Buffer11::setSubData src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/Buffer11.cpp:443
    #4 rx::Buffer11::setData src/third_party/angle/src/libANGLE/renderer/d3d/d3d11/Buffer11.cpp:359
    #5 gl::Buffer::bufferData src/third_party/angle/src/libANGLE/Buffer.cpp:179
    #6 GL_BufferData src/third_party/angle/src/libGLESv2/entry_points_gles_2_0_autogen.cpp:589
    #7 gpu::gles2::GLES2DecoderPassthroughImpl::DoBufferData src/gpu/command_buffer/service/gles2_cmd_decoder_passthrough_doers.cc:617

Thread T15 created by T0 here:
    #0 base::Thread::StartWithOptions src/base/threading/thread.cc:232
    #1 content::GpuProcessHost::Init src/content/browser/gpu/gpu_process_host.cc:934
    #2 content::GpuProcessHost::Get src/content/browser/gpu/gpu_process_host.cc:616

SUMMARY: AddressSanitizer: heap-buffer-overflow src/third_party/angle/src/libANGLE/renderer/copyvertex.inc.h:84 in rx::CopyNativeVertexData<signed char,4,4,0>
Shadow bytes around the buggy address:
  0x1245f3685b80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x1245f3685c00: fd fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa
=>0x1245f3685c80: fa fa fa fa fa fa f7[fa]00 00 00 00 00 00 00 00
  0x1245f3685d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x1245f3685d80: 00 00 00 00 00 00 00 00 fa fa fa fa fa fa f7 fa

==PID==ABORTING