[.] Sanitizer coverage enabled. Counter map size: 2634443, Cmp map size: 262144
Note: Google Test filter = HuffmanEncoderTest.HuffmanSize32BitOverflowOOBWrite
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from HuffmanEncoderTest
[ RUN      ] HuffmanEncoderTest.HuffmanSize32BitOverflowOOBWrite
=================================================================
==868==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7a498e9d7c37 at pc 0x606c02511dd2 bp 0x7fff9483ff00 sp 0x7fff9483fef8
READ of size 1 at 0x7a498e9d7c37 thread T0
    #0 0x606c02511dd1 in http2::HuffmanEncode(std::__Cr::basic_string_view<char, std::__Cr::char_traits<char>>, unsigned long, std::__Cr::basic_string<char, std::__Cr::char_traits<char>, std::__Cr::allocator<char>>*) net/third_party/quiche/src/quiche/http2/hpack/huffman/hpack_huffman_encoder.cc:69:20
    #1 0x606bfd07bae2 in http2::(anonymous namespace)::HuffmanEncoderTest_HuffmanSize32BitOverflowOOBWrite_Test::TestBody() net/third_party/quiche/src/quiche/http2/hpack/huffman/hpack_huffman_encoder_test.cc:162:3
    #2 0x606c003c3f4b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x606c003c6fc7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x606c003c9043 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x606c003f81c4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x606c003f6d3a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x606c02f3f9e0 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x606bf9be76a1 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), NetTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<NetTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x606c02f5b8ab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x606c02f5b1cb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x606bf9be7399 in main net/test/run_all_unittests.cc:53:10
    #12 0x7dd98f395249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

0x7a498e9d7c37 is located 71 bytes inside of 72-byte region [0x7a498e9d7bf0,0x7a498e9d7c38)
allocated by thread T0 here:
    #0 0x606bf574304d in operator new(unsigned long) (/chromium/chromium/src/out/asan/net_unittests+0x513e04d) (BuildId: f5cf9906bc7363b6)
    #1 0x606bfd07ba0a in http2::(anonymous namespace)::HuffmanEncoderTest_HuffmanSize32BitOverflowOOBWrite_Test::TestBody() gen/third_party/libc++/src/include/__new/allocate.h:42:28
    #2 0x606c003c3f4b in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc
    #3 0x606c003c6fc7 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11
    #4 0x606c003c9043 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30
    #5 0x606c003f81c4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44
    #6 0x606c003f6d3a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc
    #7 0x606c02f3f9e0 in base::TestSuite::Run() base/test/test_suite.cc:440:16
    #8 0x606bf9be76a1 in base::internal::Invoker<base::internal::FunctorTraits<int (base::TestSuite::*&&)(), NetTestSuite*>, base::internal::BindState<true, true, false, int (base::TestSuite::*)(), base::internal::UnretainedWrapper<NetTestSuite, base::unretained_traits::MayNotDangle, (partition_alloc::internal::RawPtrTraits)0>>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12
    #9 0x606c02f5b8ab in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback<int ()>, unsigned long, int, unsigned long, bool, base::RepeatingCallback<void ()>, base::OnceCallback<void ()>) base/functional/callback.h:155:12
    #10 0x606c02f5b1cb in base::LaunchUnitTests(int, char**, base::OnceCallback<int ()>, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10
    #11 0x606bf9be7399 in main net/test/run_all_unittests.cc:53:10
    #12 0x7dd98f395249  (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4)

Shadow bytes around the buggy address:
  0x7a498e9d7980: fd fd fd fd fa fa fa fa fd fd fd fd fd fd fd fd
  0x7a498e9d7a00: fd fd fa fa fa fa fd fd fd fd fd fd fd fd fd fd
  0x7a498e9d7a80: fa fa fa fa fd fd fd fd fd fd fd fd fd fa fa fa
  0x7a498e9d7b00: fa fa fd fd fd fd fd fd fd fd fd fa fa fa fa fa
  0x7a498e9d7b80: fd fd fd fd fd fd fd fd fd fd fa fa fa fa 00 00
=>0x7a498e9d7c00: 00 00 00 00 00 00[07]fa fa fa fa fa fa fa fa fa
  0x7a498e9d7c80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7a498e9d7d00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7a498e9d7d80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7a498e9d7e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7a498e9d7e80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
WARNING: All log messages before absl::InitializeLog() is called are written to STDERR
E0000 00:00:1778910905.225318     868 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==868==ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778910905.225425     868 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==868==Note: Please include this section with the ASan report.
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778910905.225456     868 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: Task trace:
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778910905.225480     868 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778910905.225503     868 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==868==END OF ADDITIONAL INFO
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31

E0000 00:00:1778910905.225527     868 runtime.cc:173] Failed to extract sanitizer crash type: INVALID_ARGUMENT: No `SUMMARY: ` prefix in sanitizer error summary: 
==868==ABORTING
=== Source Location Trace: === 
../../third_party/fuzztest/src/fuzztest/internal/sanitizer_interface.cc:31