Note: Google Test filter = GraphiteGradientOverflowTest.NumStopsTimesFiveOverflowRedzone [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from GraphiteGradientOverflowTest [ RUN ] GraphiteGradientOverflowTest.NumStopsTimesFiveOverflowRedzone ================================================================= ==2740==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x749e62fe80b4 at pc 0x559845d23cc7 bp 0x7ffd67ecdf50 sp 0x7ffd67ecdf48 WRITE of size 4 at 0x749e62fe80b4 thread T0 #0 0x559845d23cc6 in GraphiteGradientOverflowTest_NumStopsTimesFiveOverflowRedzone_Test::TestBody() skia/ext/graphite_gradient_overflow_unittest.cc:150:11 #1 0x559846be57db in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #2 0x559846be7e07 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #3 0x559846be9e83 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #4 0x559846c188d4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #5 0x559846c1744a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x559847680940 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #7 0x559845dc6501 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #8 0x5598476ab46b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #9 0x5598476aad8b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #10 0x559845dc6234 in main mojo/core/test/run_all_unittests.cc:30:10 #11 0x778e63ef7249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) 0x749e62fe80b4 is located 0 bytes after 244-byte region [0x749e62fe7fc0,0x749e62fe80b4) allocated by thread T0 here: #0 0x559845cdcf3c in realloc (/chromium/chromium/src/out/asan/skia_unittests+0x18abf3c) (BuildId: 999ba204ba27e26f) #1 0x559847016513 in sk_realloc_throw(void*, unsigned long) skia/ext/SkMemory_new_handler.cpp:82:35 #2 0x559845e24f78 in SkTDStorage::resize(int) third_party/skia/src/base/SkTDArray.cpp:125:44 #3 0x559845d23e6c in skgpu::graphite::FloatStorageManager::allocateGradientData(int, SkGradientBaseShader const*) third_party/skia/include/private/base/SkTDArray.h:194:18 #4 0x559845d228d5 in GraphiteGradientOverflowTest_NumStopsTimesFiveOverflowRedzone_Test::TestBody() skia/ext/graphite_gradient_overflow_unittest.cc:136:25 #5 0x559846be57db in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #6 0x559846be7e07 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #7 0x559846be9e83 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #8 0x559846c188d4 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #9 0x559846c1744a in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #10 0x559847680940 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #11 0x559845dc6501 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #12 0x5598476ab46b in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #13 0x5598476aad8b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #14 0x559845dc6234 in main mojo/core/test/run_all_unittests.cc:30:10 #15 0x778e63ef7249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) SUMMARY: AddressSanitizer: heap-buffer-overflow skia/ext/graphite_gradient_overflow_unittest.cc:150:11 in GraphiteGradientOverflowTest_NumStopsTimesFiveOverflowRedzone_Test::TestBody() Shadow bytes around the buggy address: 0x749e62fe7e00: 00 00 fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x749e62fe7e80: 00 05 fc 00 00 03 00 00 00 00 00 01 fc 00 00 01 0x749e62fe7f00: fc 00 00 00 00 01 fc 00 00 fa fa fa fa fa fa fa 0x749e62fe7f80: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x749e62fe8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x749e62fe8080: 00 00 00 00 00 00[04]fa fa fa fa fa fa fa fa fa 0x749e62fe8100: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x749e62fe8180: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x749e62fe8200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x749e62fe8280: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x749e62fe8300: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==2740==ADDITIONAL INFO ==2740==Note: Please include this section with the ASan report. Task trace: ==2740==END OF ADDITIONAL INFO ==2740==ABORTING