bool CredentialManagerImpl::IsZeroClickAllowed() const {
  return *auto_signin_enabled_ && !client_->IsIncognito();
}

The product reads data past the end, or before the beginning, of the intended buffer.