SkIcoCodec::SkIcoCodec(int width, int height, const SkEncodedInfo& info,
 SkTArray<std::unique_ptr<SkCodec>, true>* codecs,
                       sk_sp<SkColorSpace> colorSpace)
 : INHERITED(width, height, info, SkColorSpaceXform::ColorFormat(), nullptr,
                std::move(colorSpace))
 , fEmbeddedCodecs(codecs)
 , fCurrScanlineCodec(nullptr)
 , fCurrIncrementalCodec(nullptr)
{}

The product writes data past the end, or before the beginning, of the intended buffer.