Note: Google Test filter = I010ToNV12HeapOverflowTest.RowVWriteOverflows192ByteTemp [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from I010ToNV12HeapOverflowTest [ RUN ] I010ToNV12HeapOverflowTest.RowVWriteOverflows192ByteTemp [POC] Convert16To8Row_AVX512BW(halfwidth=96) into row_v at row_u+96 of a 192-byte temp. Kernel writes 128 bytes -> row_u[192..224) = 32-byte OOB write -> expect SIGSEGV at 0x705071535000 AddressSanitizer:DEADLYSIGNAL ================================================================= ==1925==ERROR: AddressSanitizer: SEGV on unknown address 0x705071535000 (pc 0x5fc58f4ebf60 bp 0x7fff16056f30 sp 0x7fff16056f30 T0) ==1925==The signal is caused by a WRITE memory access. #0 0x5fc58f4ebf60 in Convert16To8Row_AVX512BW third_party/libyuv/source/row_gcc.cc:5382:7 #1 0x5fc5804cd41d in media::I010ToNV12HeapOverflowTest_RowVWriteOverflows192ByteTemp_Test::TestBody() media/video/mappable_shared_image_video_frame_pool_unittest.cc:1237:3 #2 0x5fc580f73bfb in testing::Test::Run() third_party/googletest/src/googletest/src/gtest.cc #3 0x5fc580f76c77 in testing::TestInfo::Run() third_party/googletest/src/googletest/src/gtest.cc:2892:11 #4 0x5fc580f78cf3 in testing::TestSuite::Run() third_party/googletest/src/googletest/src/gtest.cc:3070:30 #5 0x5fc580fa7744 in testing::internal::UnitTestImpl::RunAllTests() third_party/googletest/src/googletest/src/gtest.cc:6062:44 #6 0x5fc580fa62ba in testing::UnitTest::Run() third_party/googletest/src/googletest/src/gtest.cc #7 0x5fc58c1d82f0 in base::TestSuite::Run() base/test/test_suite.cc:440:16 #8 0x5fc5804827a1 in base::internal::Invoker, base::internal::BindState>, int ()>::RunOnce(base::internal::BindStateBase*) base/functional/bind_internal.h:740:12 #9 0x5fc58c1df9eb in base::(anonymous namespace)::LaunchUnitTestsInternal(base::OnceCallback, unsigned long, int, unsigned long, bool, base::RepeatingCallback, base::OnceCallback) base/functional/callback.h:155:12 #10 0x5fc58c1df30b in base::LaunchUnitTests(int, char**, base::OnceCallback, unsigned long) base/test/launcher/unit_test_launcher.cc:337:10 #11 0x5fc580482485 in main media/test/run_all_unittests.cc:52:10 #12 0x705072445249 (/lib/x86_64-linux-gnu/libc.so.6+0x27249) (BuildId: 6196744a316dbd57c0fd8968df1680aac482cec4) ==1925==Register values: rax = 0x00000000000000bb rbx = 0x0000705071534000 rcx = 0x0000000000000020 rdx = 0x0000000000004001 rdi = 0x00006dc070de0880 rsi = 0x0000705071534fe0 rbp = 0x00007fff16056f30 rsp = 0x00007fff16056f30 r8 = 0x00007050725b94e0 r9 = 0x0000000000000078 r10 = 0x00007fff16054c7c r11 = 0x0000000000000202 r12 = 0x00007fff16057060 r13 = 0x00000fffe2c0adec r14 = 0x0000705071534fa0 r15 = 0x00006dc070de0a40 AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV third_party/libyuv/source/row_gcc.cc:5382:7 in Convert16To8Row_AVX512BW ==1925==ADDITIONAL INFO ==1925==Note: Please include this section with the ASan report. Task trace: ==1925==END OF ADDITIONAL INFO ==1925==ABORTING