if (kBytesPerPixelUNORM8 * width > out_buffer_stride ||
     out_buffer_stride * height < out_buffer_size) {
          // Output buffer too small.
          return false;
     }

If I pass in a buffer with exactly the right size, this would fail. If I passed in a buffer much larger than required, it would also fail? Seems like the logic is inverted on the second condition - unless I'm missing something?