bool SkIcoCodec::onSkipScanlines(int count) {
 SkASSERT(fCurrScanlineCodec);
 return fCurrScanlineCodec->skipScanlines(count);
}

The product writes data past the end, or before the beginning, of the intended buffer.