 mojo::ScopedSharedBufferHandle GamepadProvider::GetSharedBufferHandle() {
  return mojo::WrapSharedMemoryHandle(
      gamepad_shared_buffer_->shared_memory()->GetReadOnlyHandle(),
      sizeof(GamepadHardwareBuffer),
      mojo::UnwrappedSharedMemoryHandleProtection::kReadOnly);
 }

The product writes data past the end, or before the beginning, of the intended buffer.