[*] Encoding 320 x 240 (allocates content_state_sb_fd) [*] Reconfiguring to 1920 x 144 via vpx_codec_enc_config_set [*] Encoding 1920 x 144 (frame 2+ should OOB-write content_state_sb_fd) ================================================================= ==1080==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7b981660443f at pc 0x559cb494eaf6 bp 0x7ffedbd1f4b0 sp 0x7ffedbd1f4a8 READ of size 1 at 0x7b981660443f thread T0 #0 0x559cb494eaf5 in vp9_encode_sb_row third_party/libvpx/source/libvpx/vp9/encoder/vp9_encodeframe.c:1241:11 #1 0x559cb4954a88 in encode_frame_internal third_party/libvpx/source/libvpx/vp9/encoder/vp9_encodeframe.c:5501:5 #2 0x559cb4950a16 in vp9_encode_frame third_party/libvpx/source/libvpx/vp9/encoder/vp9_encodeframe.c:5953:5 #3 0x559cb48e511e in encode_frame_to_data_rate third_party/libvpx/source/libvpx/vp9/encoder/vp9_encoder.c:4281:3 #4 0x559cb48d5393 in vp9_get_compressed_data third_party/libvpx/source/libvpx/vp9/encoder/vp9_encoder.c #5 0x559cb4a59592 in encoder_encode third_party/libvpx/source/libvpx/vp9/vp9_cx_iface.c:1598:20 #6 0x559cb4a6fd1b in vpx_codec_encode third_party/libvpx/source/libvpx/vpx/src/vpx_encoder.c:218:13 #7 0x559cb46dfdd9 in main third_party/libvpx/tests/poc/vp9_content_state_sb_fd_oob.cc:128:9 #8 0x7f581735a249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x7b981660443f is located 0 bytes after 47-byte region [0x7b9816604410,0x7b981660443f) allocated by thread T0 here: #0 0x559cb46a4994 in malloc (/chromium/chromium/src/out/asan/vp9_content_state_sb_fd_oob_poc+0x189994) (BuildId: e03033ee9c0eea88) #1 0x559cb4ad6b67 in vpx_calloc third_party/libvpx/source/libvpx/vpx_mem/vpx_mem.c:62:10 #2 0x559cb4a328db in vp9_set_speed_features_framesize_independent third_party/libvpx/source/libvpx/vp9/encoder/vp9_speed_features.c:680:36 #3 0x559cb48e3392 in encode_frame_to_data_rate third_party/libvpx/source/libvpx/vp9/encoder/vp9_encoder.c:3758:3 #4 0x559cb48d5393 in vp9_get_compressed_data third_party/libvpx/source/libvpx/vp9/encoder/vp9_encoder.c #5 0x559cb4a59592 in encoder_encode third_party/libvpx/source/libvpx/vp9/vp9_cx_iface.c:1598:20 #6 0x559cb4a6fd1b in vpx_codec_encode third_party/libvpx/source/libvpx/vpx/src/vpx_encoder.c:218:13 #7 0x559cb46df473 in main third_party/libvpx/tests/poc/vp9_content_state_sb_fd_oob.cc:109:9 #8 0x7f581735a249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-buffer-overflow third_party/libvpx/source/libvpx/vp9/encoder/vp9_encodeframe.c:1241:11 in vp9_encode_sb_row Shadow bytes around the buggy address: 0x7b9816604180: fa fa fd fd fd fd fd fa fa fa fd fd fd fd fd fa 0x7b9816604200: fa fa fd fd fd fd fd fa fa fa fd fd fd fd fd fa 0x7b9816604280: fa fa fd fd fd fd fd fa fa fa fd fd fd fd fd fa 0x7b9816604300: fa fa fd fd fd fd fd fa fa fa fd fd fd fd fd fa 0x7b9816604380: fa fa fd fd fd fd fd fa fa fa fd fd fd fd fd fa =>0x7b9816604400: fa fa 00 00 00 00 00[07]fa fa fd fd fd fd fd fd 0x7b9816604480: fa fa fd fd fd fd fd fd fa fa 00 00 00 00 00 07 0x7b9816604500: fa fa 00 00 00 00 00 07 fa fa 00 00 00 00 00 07 0x7b9816604580: fa fa 00 00 00 00 00 07 fa fa 00 00 00 00 00 07 0x7b9816604600: fa fa 00 00 00 00 00 07 fa fa 00 00 00 00 00 07 0x7b9816604680: fa fa 00 00 00 00 00 07 fa fa 00 00 00 00 00 07 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==1080==ABORTING