starting build "0cdcc376-fcc1-44c0-a459-2b6c6b3efe7d" FETCHSOURCE BUILD Starting Step #0 Step #0: Already have image (with digest): gcr.io/cloud-builders/git Step #0: Cloning into 'oss-fuzz'... Finished Step #0 Starting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090" Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Already have image (with digest): gcr.io/cloud-builders/docker Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Sending build context to Docker daemon 5.12kB Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Step 1/5 : FROM gcr.io/oss-fuzz-base/base-builder Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": latest: Pulling from oss-fuzz-base/base-builder Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b549f31133a9: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b880dc731500: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 82041dc1a4fa: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 04b76f7cd96d: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fa579f83bc7d: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fe5bdcfddebe: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 71c80bdeaec9: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0754d8a56012: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 723e414dadd7: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 53113f4ad526: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fc6bda1704aa: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 349fc320bd50: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c24213376e70: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a52c4b712ad4: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": e54e961114cf: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": eec8cabe327b: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 561e2e49f924: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0d535df7fe34: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a2cff97ef91a: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": cc9147cf8d09: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a6c1b0cb7a93: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2cb6b8fa74c4: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2637bf5d1a33: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": eec8cabe327b: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 53113f4ad526: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 693d62192859: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 28a3979027aa: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 561e2e49f924: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dbcaf5522a5e: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fc6bda1704aa: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": d9f90f19b915: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0d535df7fe34: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 349fc320bd50: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": afa9e32e6d33: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c24213376e70: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 42d2ef0af396: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 21ef0f851d8c: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fd2a862ad38c: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 3cc37bc8d6fe: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a52c4b712ad4: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": e54e961114cf: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 7677dd7601c9: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 292e28b8283e: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 71c80bdeaec9: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 12423f642b7b: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a2cff97ef91a: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dc372bc84b0d: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0754d8a56012: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c4d0e60f59d1: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 723e414dadd7: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2637bf5d1a33: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 693d62192859: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 28a3979027aa: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fd2a862ad38c: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 13cd037adbd1: Pulling fs layer Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 3cc37bc8d6fe: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 7677dd7601c9: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dbcaf5522a5e: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": cc9147cf8d09: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 292e28b8283e: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a6c1b0cb7a93: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": d9f90f19b915: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 12423f642b7b: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2cb6b8fa74c4: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": afa9e32e6d33: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dc372bc84b0d: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 42d2ef0af396: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 13cd037adbd1: Waiting Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fa579f83bc7d: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fa579f83bc7d: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 82041dc1a4fa: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 82041dc1a4fa: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 71c80bdeaec9: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 71c80bdeaec9: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0754d8a56012: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0754d8a56012: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b549f31133a9: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b549f31133a9: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 04b76f7cd96d: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 04b76f7cd96d: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fc6bda1704aa: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fc6bda1704aa: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 349fc320bd50: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 349fc320bd50: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c24213376e70: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c24213376e70: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a52c4b712ad4: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": eec8cabe327b: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": eec8cabe327b: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": e54e961114cf: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": e54e961114cf: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b880dc731500: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b880dc731500: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 53113f4ad526: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 53113f4ad526: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a2cff97ef91a: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a2cff97ef91a: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 561e2e49f924: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 561e2e49f924: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": cc9147cf8d09: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": cc9147cf8d09: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0d535df7fe34: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0d535df7fe34: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2cb6b8fa74c4: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2cb6b8fa74c4: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a6c1b0cb7a93: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a6c1b0cb7a93: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 28a3979027aa: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2637bf5d1a33: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2637bf5d1a33: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 693d62192859: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dbcaf5522a5e: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": afa9e32e6d33: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": afa9e32e6d33: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": d9f90f19b915: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 42d2ef0af396: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 42d2ef0af396: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b549f31133a9: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fd2a862ad38c: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 21ef0f851d8c: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 21ef0f851d8c: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 7677dd7601c9: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 7677dd7601c9: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 3cc37bc8d6fe: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 292e28b8283e: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 12423f642b7b: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dc372bc84b0d: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 723e414dadd7: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 723e414dadd7: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c4d0e60f59d1: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c4d0e60f59d1: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 13cd037adbd1: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 13cd037adbd1: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fe5bdcfddebe: Verifying Checksum Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fe5bdcfddebe: Download complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": b880dc731500: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 82041dc1a4fa: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 04b76f7cd96d: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fa579f83bc7d: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fe5bdcfddebe: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 71c80bdeaec9: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0754d8a56012: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 723e414dadd7: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 53113f4ad526: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fc6bda1704aa: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 349fc320bd50: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c24213376e70: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a52c4b712ad4: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": e54e961114cf: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": eec8cabe327b: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 561e2e49f924: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 0d535df7fe34: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a2cff97ef91a: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": cc9147cf8d09: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": a6c1b0cb7a93: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2cb6b8fa74c4: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 2637bf5d1a33: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 693d62192859: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 28a3979027aa: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dbcaf5522a5e: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": d9f90f19b915: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": afa9e32e6d33: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 42d2ef0af396: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 21ef0f851d8c: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": fd2a862ad38c: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 3cc37bc8d6fe: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 7677dd7601c9: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 292e28b8283e: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 12423f642b7b: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": dc372bc84b0d: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": c4d0e60f59d1: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": 13cd037adbd1: Pull complete Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Digest: sha256:17577aa2fe7890132ccb9b77d973994084757f6609989df1da9380a5afcb2875 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-builder:latest Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> b1f32f5878be Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Step 2/5 : RUN pip3 install meson ninja Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> Running in 544dcbe5f9b3 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Collecting meson Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Downloading meson-1.10.0-py3-none-any.whl.metadata (1.8 kB) Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Collecting ninja Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl.metadata (5.1 kB) Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Downloading meson-1.10.0-py3-none-any.whl (1.1 MB) Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.1/1.1 MB 24.9 MB/s 0:00:00 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl (180 kB) Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Installing collected packages: ninja, meson Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Successfully installed meson-1.10.0 ninja-1.13.0 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning. Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Removing intermediate container 544dcbe5f9b3 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> a4291fa28a36 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Step 3/5 : RUN git clone --depth 1 https://github.com/syoyo/tinygltf.git Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> Running in 3377a7356ae3 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Cloning into 'tinygltf'... Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Removing intermediate container 3377a7356ae3 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> 740a8e2aaa11 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Step 4/5 : WORKDIR $SRC/tinygltf Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> Running in 7f479f087f8b Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Removing intermediate container 7f479f087f8b Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> ee82811cd3a9 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Step 5/5 : COPY build.sh $SRC/ Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": ---> f06de2376070 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Successfully built f06de2376070 Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Successfully tagged gcr.io/oss-fuzz/tinygltf:latest Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090": Successfully tagged us-central1-docker.pkg.dev/oss-fuzz/unsafe/tinygltf:latest Finished Step #1 - "build-703d8b67-e96f-488c-b63d-058cd1b77090" Starting Step #2 - "srcmap" Step #2 - "srcmap": Already have image: gcr.io/oss-fuzz/tinygltf Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + SRCMAP=/tmp/fileCQBJxM Step #2 - "srcmap": + echo '{}' Step #2 - "srcmap": + PATHS_TO_SCAN=/src Step #2 - "srcmap": + [[ c++ == \g\o ]] Step #2 - "srcmap": ++ find /src -name .git -type d Step #2 - "srcmap": + for DOT_GIT_DIR in $(find $PATHS_TO_SCAN -name ".git" -type d) Step #2 - "srcmap": ++ dirname /src/tinygltf/.git Step #2 - "srcmap": + GIT_DIR=/src/tinygltf Step #2 - "srcmap": + cd /src/tinygltf Step #2 - "srcmap": ++ git config --get remote.origin.url Step #2 - "srcmap": + GIT_URL=https://github.com/syoyo/tinygltf.git Step #2 - "srcmap": ++ git rev-parse HEAD Step #2 - "srcmap": + GIT_REV=81bd50c1062fdb956e878efa2a9234b2b9ec91ec Step #2 - "srcmap": + jq_inplace /tmp/fileCQBJxM '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + F=/tmp/fileDZfg7b Step #2 - "srcmap": + cat /tmp/fileCQBJxM Step #2 - "srcmap": + jq '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": + mv /tmp/fileDZfg7b /tmp/fileCQBJxM Step #2 - "srcmap": ++ find /src -name .svn -type d Step #2 - "srcmap": ++ find /src -name .hg -type d Step #2 - "srcmap": + '[' '' '!=' '' ']' Step #2 - "srcmap": + cat /tmp/fileCQBJxM Step #2 - "srcmap": + rm /tmp/fileCQBJxM Step #2 - "srcmap": { Step #2 - "srcmap": "/src/tinygltf": { Step #2 - "srcmap": "type": "git", Step #2 - "srcmap": "url": "https://github.com/syoyo/tinygltf.git", Step #2 - "srcmap": "rev": "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" Step #2 - "srcmap": } Step #2 - "srcmap": } Finished Step #2 - "srcmap" Starting Step #3 - "compile-libfuzzer-coverage-x86_64" Step #3 - "compile-libfuzzer-coverage-x86_64": Already have image (with digest): gcr.io/cloud-builders/docker Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": vm.mmap_rnd_bits = 28 Step #3 - "compile-libfuzzer-coverage-x86_64": Compiling libFuzzer to /usr/lib/libFuzzingEngine.a... done. Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": CC=clang Step #3 - "compile-libfuzzer-coverage-x86_64": CXX=clang++ Step #3 - "compile-libfuzzer-coverage-x86_64": CFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument Step #3 - "compile-libfuzzer-coverage-x86_64": CXXFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument -stdlib=libc++ Step #3 - "compile-libfuzzer-coverage-x86_64": RUSTFLAGS=--cfg fuzzing -Cdebuginfo=1 -Cforce-frame-pointers -Cinstrument-coverage -C link-arg=-lc++ Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": + cd tests/fuzzer/ Step #3 - "compile-libfuzzer-coverage-x86_64": + meson build Step #3 - "compile-libfuzzer-coverage-x86_64": The Meson build system Step #3 - "compile-libfuzzer-coverage-x86_64": Version: 1.10.0 Step #3 - "compile-libfuzzer-coverage-x86_64": Source dir: /src/tinygltf/tests/fuzzer Step #3 - "compile-libfuzzer-coverage-x86_64": Build dir: /src/tinygltf/tests/fuzzer/build Step #3 - "compile-libfuzzer-coverage-x86_64": Build type: native build Step #3 - "compile-libfuzzer-coverage-x86_64": Project name: fuzz_tinygltf Step #3 - "compile-libfuzzer-coverage-x86_64": Project version: undefined Step #3 - "compile-libfuzzer-coverage-x86_64": C++ compiler for the host machine: clang++ (clang 22.0.0 "clang version 22.0.0git (https://github.com/llvm/llvm-project.git cb2f0d0a5f14c183e7182aba0f0e54a518de9e3f)") Step #3 - "compile-libfuzzer-coverage-x86_64": C++ linker for the host machine: clang++ ld.bfd 2.34 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu family: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Build targets in project: 1 Step #3 - "compile-libfuzzer-coverage-x86_64": Step #3 - "compile-libfuzzer-coverage-x86_64": Found ninja-1.13.0.git.kitware.jobserver-pipe-1 at /usr/local/bin/ninja Step #3 - "compile-libfuzzer-coverage-x86_64": WARNING: Running the setup command as `meson [options]` instead of `meson setup [options]` is ambiguous and deprecated. Step #3 - "compile-libfuzzer-coverage-x86_64": + cd build Step #3 - "compile-libfuzzer-coverage-x86_64": ++ nproc Step #3 - "compile-libfuzzer-coverage-x86_64": + ninja -j32 Step #3 - "compile-libfuzzer-coverage-x86_64": [0/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o [1/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../fuzz_gltf.cc:10: Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../../../tiny_gltf.h:1715: Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26551:35: warning: identifier '_json' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26551 | inline nlohmann::json operator "" _json(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26570:49: warning: identifier '_json_pointer' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26570 | inline nlohmann::json::json_pointer operator "" _json_pointer(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~~~~~~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json_pointer Step #3 - "compile-libfuzzer-coverage-x86_64": 2 warnings generated. Step #3 - "compile-libfuzzer-coverage-x86_64": [1/2] Linking target fuzz_gltf [2/2] Linking target fuzz_gltf Step #3 - "compile-libfuzzer-coverage-x86_64": + cp fuzz_gltf /workspace/out/libfuzzer-coverage-x86_64/ Finished Step #3 - "compile-libfuzzer-coverage-x86_64" Starting Step #4 Step #4: Pulling image: gcr.io/oss-fuzz-base/base-runner Step #4: Using default tag: latest Step #4: latest: Pulling from oss-fuzz-base/base-runner Step #4: b549f31133a9: Already exists Step #4: b880dc731500: Already exists Step #4: 82041dc1a4fa: Already exists Step #4: f6f9908990c2: Pulling fs layer Step #4: a01b4cc35442: Pulling fs layer Step #4: 14ecfc0ec653: Pulling fs layer Step #4: d84b66083db9: Pulling fs layer Step #4: 61836e9deac7: Pulling fs layer Step #4: 1f3606abf545: Pulling fs layer Step #4: 0a296b7504af: Pulling fs layer Step #4: a6da47b51e29: Pulling fs layer Step #4: 7aedb9e97bc5: Pulling fs layer Step #4: 34e73298de3c: Pulling fs layer Step #4: c96cc9852dd0: Pulling fs layer Step #4: 5ef855770972: Pulling fs layer Step #4: 59d8edc5c5c1: Pulling fs layer Step #4: 7625284134c6: Pulling fs layer Step #4: 0e6ce95bed55: Pulling fs layer Step #4: 6dfe0c8bf399: Pulling fs layer Step #4: 96515525e0c0: Pulling fs layer Step #4: 01e047d299ca: Pulling fs layer Step #4: d1548cd4b8ba: Pulling fs layer Step #4: 9667f69f6584: Pulling fs layer Step #4: c474e10428ad: Pulling fs layer Step #4: 03b17cb6f2dd: Pulling fs layer Step #4: 042a6eb9cc1e: Pulling fs layer Step #4: 4f467d64479a: Pulling fs layer Step #4: 0a296b7504af: Waiting Step #4: a6da47b51e29: Waiting Step #4: 7aedb9e97bc5: Waiting Step #4: 34e73298de3c: Waiting Step #4: c96cc9852dd0: Waiting Step #4: 5ef855770972: Waiting Step #4: 59d8edc5c5c1: Waiting Step #4: 9667f69f6584: Waiting Step #4: 7625284134c6: Waiting Step #4: c474e10428ad: Waiting Step #4: 03b17cb6f2dd: Waiting Step #4: 01e047d299ca: Waiting Step #4: d1548cd4b8ba: Waiting Step #4: 042a6eb9cc1e: Waiting Step #4: 0e6ce95bed55: Waiting Step #4: 4f467d64479a: Waiting Step #4: 6dfe0c8bf399: Waiting Step #4: 61836e9deac7: Verifying Checksum Step #4: 61836e9deac7: Download complete Step #4: 14ecfc0ec653: Verifying Checksum Step #4: 14ecfc0ec653: Download complete Step #4: f6f9908990c2: Verifying Checksum Step #4: f6f9908990c2: Download complete Step #4: a01b4cc35442: Verifying Checksum Step #4: a01b4cc35442: Download complete Step #4: d84b66083db9: Verifying Checksum Step #4: d84b66083db9: Download complete Step #4: a6da47b51e29: Verifying Checksum Step #4: a6da47b51e29: Download complete Step #4: 7aedb9e97bc5: Verifying Checksum Step #4: 7aedb9e97bc5: Download complete Step #4: 0a296b7504af: Verifying Checksum Step #4: 0a296b7504af: Download complete Step #4: f6f9908990c2: Pull complete Step #4: 5ef855770972: Download complete Step #4: 59d8edc5c5c1: Verifying Checksum Step #4: 59d8edc5c5c1: Download complete Step #4: c96cc9852dd0: Verifying Checksum Step #4: c96cc9852dd0: Download complete Step #4: 0e6ce95bed55: Verifying Checksum Step #4: 0e6ce95bed55: Download complete Step #4: 96515525e0c0: Verifying Checksum Step #4: 96515525e0c0: Download complete Step #4: 1f3606abf545: Verifying Checksum Step #4: 1f3606abf545: Download complete Step #4: a01b4cc35442: Pull complete Step #4: 01e047d299ca: Verifying Checksum Step #4: 01e047d299ca: Download complete Step #4: 14ecfc0ec653: Pull complete Step #4: c474e10428ad: Download complete Step #4: 9667f69f6584: Download complete Step #4: 34e73298de3c: Verifying Checksum Step #4: 34e73298de3c: Download complete Step #4: 042a6eb9cc1e: Verifying Checksum Step #4: 042a6eb9cc1e: Download complete Step #4: 4f467d64479a: Verifying Checksum Step #4: 4f467d64479a: Download complete Step #4: d84b66083db9: Pull complete Step #4: 61836e9deac7: Pull complete Step #4: 03b17cb6f2dd: Verifying Checksum Step #4: 03b17cb6f2dd: Download complete Step #4: d1548cd4b8ba: Verifying Checksum Step #4: d1548cd4b8ba: Download complete Step #4: 7625284134c6: Verifying Checksum Step #4: 7625284134c6: Download complete Step #4: 6dfe0c8bf399: Verifying Checksum Step #4: 6dfe0c8bf399: Download complete Step #4: 1f3606abf545: Pull complete Step #4: 0a296b7504af: Pull complete Step #4: a6da47b51e29: Pull complete Step #4: 7aedb9e97bc5: Pull complete Step #4: 34e73298de3c: Pull complete Step #4: c96cc9852dd0: Pull complete Step #4: 5ef855770972: Pull complete Step #4: 59d8edc5c5c1: Pull complete Step #4: 7625284134c6: Pull complete Step #4: 0e6ce95bed55: Pull complete Step #4: 6dfe0c8bf399: Pull complete Step #4: 96515525e0c0: Pull complete Step #4: 01e047d299ca: Pull complete Step #4: d1548cd4b8ba: Pull complete Step #4: 9667f69f6584: Pull complete Step #4: c474e10428ad: Pull complete Step #4: 03b17cb6f2dd: Pull complete Step #4: 042a6eb9cc1e: Pull complete Step #4: 4f467d64479a: Pull complete Step #4: Digest: sha256:42559fdc03a2ac43e06298aaf24486fb7859f1efe1170f580064866f119fc0eb Step #4: Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-runner:latest Step #4: gcr.io/oss-fuzz-base/base-runner:latest Finished Step #4 Starting Step #5 Step #5: Already have image (with digest): gcr.io/oss-fuzz-base/base-runner Step #5: Running fuzz_gltf Step #5: Error occured while running fuzz_gltf: Step #5: Cov returncode: 0, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 777948270 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5561c2b276b0, 0x5561c2b2c24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5561c2b2c250,0x5561c2b77c00), Step #5: MERGE-OUTER: 12618 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 778046319 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5617d3d246b0, 0x5617d3d2924b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5617d3d29250,0x5617d3d74c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: 12618 total files; 0 processed earlier; will process 12618 files now Step #5: #1 pulse cov: 79 ft: 80 exec/s: 0 rss: 37Mb Step #5: #2 pulse cov: 79 ft: 80 exec/s: 0 rss: 37Mb Step #5: #4 pulse cov: 240 ft: 245 exec/s: 0 rss: 38Mb Step #5: #8 pulse cov: 299 ft: 312 exec/s: 0 rss: 38Mb Step #5: #16 pulse cov: 343 ft: 369 exec/s: 0 rss: 39Mb Step #5: #32 pulse cov: 470 ft: 540 exec/s: 0 rss: 39Mb Step #5: #64 pulse cov: 560 ft: 657 exec/s: 0 rss: 40Mb Step #5: #128 pulse cov: 638 ft: 753 exec/s: 0 rss: 41Mb Step #5: #256 pulse cov: 760 ft: 1002 exec/s: 0 rss: 43Mb Step #5: #512 pulse cov: 860 ft: 1337 exec/s: 0 rss: 48Mb Step #5: #1024 pulse cov: 993 ft: 2029 exec/s: 0 rss: 56Mb Step #5: #2048 pulse cov: 1273 ft: 3804 exec/s: 0 rss: 58Mb Step #5: #4096 pulse cov: 3585 ft: 10892 exec/s: 4096 rss: 65Mb Step #5: ==42== ERROR: libFuzzer: out-of-memory (used: 2064Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2155620573 bytes in 34716 chunks; quarantined: 8030328 bytes in 3703 chunks; 55688 other chunks; total chunks: 94107; showing top 95% (at most 8 unique contexts) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5617d3a13ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5617d3b132aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5617d3b132aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x5617d3ae0c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5617d3ae0c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5617d3a58219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5617d3a7dcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5617d3a7dcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5617d3b65f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5617d3b65f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5617d3b65f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5617d3b65f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5617d3bbc637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5617d3bbc637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5617d3bbc637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5617d3bbc637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5617d3aa8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5617d3a93889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5617d3adf925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5617d3adf925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5617d3adf925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5617d38f557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5617d38feb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5617d38e6019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5617d3911cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ffbaf556082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5617d3a13ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5617d3b132dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5617d3b132dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x5617d3ae0c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5617d3ae0c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5617d3a58219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5617d3a7dcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5617d3a7dcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5617d3b65f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5617d3b65f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5617d3b65f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5617d3b65f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5617d3bbc637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5617d3bbc637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5617d3bbc637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5617d3bbc637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5617d3aa8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5617d3a93889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5617d3adf925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5617d3adf925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5617d3adf925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5617d38f557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5617d38feb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5617d38e6019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5617d3911cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ffbaf556082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 236386048 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x5617d3a13ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5617d3b13315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5617d3b13315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x5617d3ae0c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5617d3ae0c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5617d3a58219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5617d3a7dcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5617d3a7dcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5617d3b65f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5617d3b65f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5617d3b65f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5617d3b65f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5617d3bbc637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5617d3bbc637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5617d3bbc637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5617d3bbc637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5617d3aa8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5617d3a93889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5617d3adf925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5617d3adf925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5617d3adf925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5617d38f557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5617d38feb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5617d38e6019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5617d3911cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ffbaf556082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x67,0x4f,0x61,0x6d,0x44,0x79,0x79,0x79,0x79,0x79,0x45,0x6d,0x61,0x53,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdhgOamDyyyyyEmaS\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-d2be5ccf6064a323a21d76919eae8522c9cf712d Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaGdPYW1EeXl5eXlFbWFTIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 787189216 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5579c1b026b0, 0x5579c1b0724b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5579c1b07250,0x5579c1b52c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/d2be5ccf6064a323a21d76919eae8522c9cf712d' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 5469 processed earlier; will process 7149 files now Step #5: #1 pulse cov: 661 ft: 662 exec/s: 0 rss: 38Mb Step #5: #2 pulse cov: 801 ft: 824 exec/s: 0 rss: 39Mb Step #5: #4 pulse cov: 832 ft: 878 exec/s: 0 rss: 39Mb Step #5: #8 pulse cov: 1301 ft: 1601 exec/s: 0 rss: 2109Mb Step #5: #16 pulse cov: 1480 ft: 1870 exec/s: 0 rss: 2109Mb Step #5: ==46== ERROR: libFuzzer: out-of-memory (used: 2109Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2435685041 bytes in 17725 chunks; quarantined: 1029463 bytes in 3895 chunks; 30371 other chunks; total chunks: 51991; showing top 95% (at most 8 unique contexts) Step #5: 1070318800 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5579c17f1ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5579c18f12aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5579c18f12aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x5579c18bec53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5579c18bec53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5579c1836219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5579c185bcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5579c185bcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5579c1943f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5579c1943f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5579c1943f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5579c1943f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5579c199a637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5579c199a637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5579c199a637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5579c199a637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5579c1886509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5579c1871889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5579c18bd925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5579c18bd925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5579c18bd925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5579c16d357d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5579c16dcb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5579c16c4019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5579c16efcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7c52c80082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 1070318800 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5579c17f1ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5579c18f12dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5579c18f12dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x5579c18bec53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5579c18bec53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5579c1836219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5579c185bcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5579c185bcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5579c1943f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5579c1943f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5579c1943f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5579c1943f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5579c199a637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5579c199a637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5579c199a637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5579c199a637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5579c1886509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5579c1871889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5579c18bd925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5579c18bd925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5579c18bd925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5579c16d357d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5579c16dcb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5579c16c4019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5579c16efcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7c52c80082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 267579700 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x5579c17f1ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5579c18f1315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5579c18f1315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x5579c18bec53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5579c18bec53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5579c1836219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5579c185bcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5579c185bcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5579c1943f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5579c1943f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5579c1943f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5579c1943f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5579c199a637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5579c199a637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5579c199a637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5579c199a637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5579c1886509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5579c1871889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5579c18bd925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5579c18bd925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5579c18bd925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5579c16d357d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5579c16dcb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5579c16c4019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5579c16efcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7c52c80082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x31,0x79,0x50,0x73,0x63,0x65,0x6e,0x65,0x79,0x79,0x79,0x79,0x47,0x4c,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh1yPsceneyyyyGL\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-b09a21109379d4f973ead2969e1e8939835cfe0c Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDF5UHNjZW5leXl5eUdMIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 788324693 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55e80aab06b0, 0x55e80aab524b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55e80aab5250,0x55e80ab00c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/b09a21109379d4f973ead2969e1e8939835cfe0c' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 5487 processed earlier; will process 7131 files now Step #5: #1 pulse cov: 747 ft: 748 exec/s: 0 rss: 37Mb Step #5: #2 pulse cov: 959 ft: 1109 exec/s: 0 rss: 38Mb Step #5: #4 pulse cov: 1008 ft: 1184 exec/s: 0 rss: 38Mb Step #5: #8 pulse cov: 1373 ft: 1803 exec/s: 0 rss: 38Mb Step #5: #16 pulse cov: 1778 ft: 2350 exec/s: 0 rss: 39Mb Step #5: #32 pulse cov: 1998 ft: 2806 exec/s: 32 rss: 2047Mb Step #5: #64 pulse cov: 2412 ft: 4250 exec/s: 32 rss: 2047Mb Step #5: #128 pulse cov: 2619 ft: 4755 exec/s: 3 rss: 2104Mb Step #5: ==50== ERROR: libFuzzer: out-of-memory (used: 2104Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 57432764 bytes in 23171 chunks; quarantined: 6928160 bytes in 542 chunks; 37099 other chunks; total chunks: 60812; showing top 95% (at most 8 unique contexts) Step #5: 29677065 byte(s) (51%) in 1 allocation(s) Step #5: #0 0x55e80a79fed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55e80a88b5d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55e80a88b5d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55e80a88b5d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x55e80a86eaa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x55e80a7e4219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55e80a809cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55e80a809cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55e80a8f1f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55e80a8f1f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55e80a8f1f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55e80a8f1f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55e80a948637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55e80a948637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55e80a948637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55e80a948637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55e80a834509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55e80a81f889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55e80a86b925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55e80a86b925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55e80a86b925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55e80a68157d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55e80a68ab18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55e80a672019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55e80a69dcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe2c3cc8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (42%) in 11 allocation(s) Step #5: #0 0x55e80a79fed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55e80a9c9253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55e80a69dcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fe2c3cc8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 1048576 byte(s) (1%) in 1 allocation(s) Step #5: #0 0x55e80a79fed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55e80a9c9253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55e80a671fdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55e80a69dcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7fe2c3cc8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: 1009440 byte(s) (1%) in 1 allocation(s) Step #5: #0 0x55e80a79fed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55e80a9c9253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55e80a688a92 in fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:71:9 Step #5: #3 0x55e80a68a6f2 in ParseOrExit /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:32:8 Step #5: #4 0x55e80a68a6f2 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:209:5 Step #5: #5 0x55e80a672019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #6 0x55e80a69dcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #7 0x7fe2c3cc8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x64,0x41,0x45,0x42,0x42,0x43,0x63,0x35,0x58,0x42,0x43,0x42,0x6b,0x44,0x42,0x66,0x31,0x52,0x46,0x33,0x43,0x42,0x42,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/gif;base64,dAEBBCc5XBCBkDBf1RF3CBB\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-58b75492317159d4bd1f28482cc62990c36d2e38 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxkQUVCQkNjNVhCQ0JrREJmMVJGM0NCQiJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 4 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 831454169 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x559ad0ddd6b0, 0x559ad0de224b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x559ad0de2250,0x559ad0e2dc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/58b75492317159d4bd1f28482cc62990c36d2e38' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 5624 processed earlier; will process 6994 files now Step #5: #1 pulse cov: 888 ft: 889 exec/s: 0 rss: 46Mb Step #5: #2 pulse cov: 940 ft: 991 exec/s: 0 rss: 46Mb Step #5: #4 pulse cov: 957 ft: 1021 exec/s: 0 rss: 48Mb Step #5: #8 pulse cov: 1462 ft: 1798 exec/s: 0 rss: 48Mb Step #5: #16 pulse cov: 1679 ft: 2171 exec/s: 2 rss: 436Mb Step #5: #32 pulse cov: 1856 ft: 2549 exec/s: 1 rss: 1427Mb Step #5: #64 pulse cov: 2072 ft: 2943 exec/s: 1 rss: 1530Mb Step #5: #128 pulse cov: 2653 ft: 4610 exec/s: 2 rss: 1872Mb Step #5: #256 pulse cov: 3078 ft: 6328 exec/s: 2 rss: 1872Mb Step #5: ==54== ERROR: libFuzzer: out-of-memory (used: 2335Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 570196249 bytes in 29037 chunks; quarantined: 8661548 bytes in 749 chunks; 35389 other chunks; total chunks: 65175; showing top 95% (at most 8 unique contexts) Step #5: 382205677 byte(s) (67%) in 1 allocation(s) Step #5: #0 0x559ad0acced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559ad0baef1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x559ad0baef1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x559ad0baef1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x559ad0baef1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x559ad0b9a324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x559ad0b11219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x559ad0b36cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x559ad0b36cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x559ad0c1ef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x559ad0c1ef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x559ad0c1ef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x559ad0c1ef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x559ad0c75637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x559ad0c75637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x559ad0c75637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x559ad0c75637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x559ad0b61509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x559ad0b4c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x559ad0b98925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x559ad0b98925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x559ad0b98925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x559ad09ae57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x559ad09b7b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x559ad099f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x559ad09cacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7fc8129ce082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 159960045 byte(s) (28%) in 3 allocation(s) Step #5: #0 0x559ad0acced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559ad0bdf5ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x559ad0bd6a91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x559ad0ba706c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x559ad0ba706c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x559ad0ba706c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x559ad0b9a324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x559ad0b11219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x559ad0b36cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x559ad0b36cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x559ad0c1ef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x559ad0c1ef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x559ad0c1ef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x559ad0c1ef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x559ad0c75637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x559ad0c75637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x559ad0c75637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x559ad0c75637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x559ad0b61509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x559ad0b4c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x559ad0b98925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x559ad0b98925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x559ad0b98925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x559ad09ae57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x559ad09b7b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x559ad099f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x559ad09cacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7fc8129ce082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 24383096 byte(s) (4%) in 11 allocation(s) Step #5: #0 0x559ad0acced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559ad0cf6253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x559ad09cacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fc8129ce082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x42,0x41,0x42,0x45,0x49,0x44,0x41,0x74,0x35,0x45,0x51,0x4e,0x48,0x45,0x51,0x4d,0x4f,0x45,0x51,0x48,0x2f,0x45,0x2f,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///BABEIDAt5EQNHEQMOEQH/E/\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-6d77ff839765dad86f59ba2bb1046101602e9534 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQkFCRUlEQXQ1RVFOSEVRTU9FUUgvRS8ifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 5 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 988598568 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55b8c71fb6b0, 0x55b8c720024b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55b8c7200250,0x55b8c724bc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/6d77ff839765dad86f59ba2bb1046101602e9534' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 6108 processed earlier; will process 6510 files now Step #5: #1 pulse cov: 765 ft: 766 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 854 ft: 901 exec/s: 2 rss: 912Mb Step #5: #4 pulse cov: 1026 ft: 1225 exec/s: 2 rss: 1298Mb Step #5: #8 pulse cov: 1218 ft: 1584 exec/s: 4 rss: 1298Mb Step #5: #16 pulse cov: 1401 ft: 1950 exec/s: 2 rss: 1423Mb Step #5: #32 pulse cov: 1735 ft: 2928 exec/s: 4 rss: 1423Mb Step #5: #64 pulse cov: 2130 ft: 3540 exec/s: 4 rss: 1423Mb Step #5: ==58== ERROR: libFuzzer: out-of-memory (used: 2256Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 45976387 bytes in 21652 chunks; quarantined: 9786369 bytes in 624 chunks; 34289 other chunks; total chunks: 56565; showing top 95% (at most 8 unique contexts) Step #5: 24383096 byte(s) (53%) in 11 allocation(s) Step #5: #0 0x55b8c6eeaed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b8c7114253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55b8c6de8cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f4aa9fe0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 18352128 byte(s) (39%) in 1 allocation(s) Step #5: #0 0x55b8c6eeaed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b8c6fd65d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55b8c6fd65d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55b8c6fd65d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x55b8c6fb9aa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x55b8c6f2f219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55b8c6f54cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55b8c6f54cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55b8c703cf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55b8c703cf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55b8c703cf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55b8c703cf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55b8c7093637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55b8c7093637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55b8c7093637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55b8c7093637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55b8c6f7f509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55b8c6f6a889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55b8c6fb6925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55b8c6fb6925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55b8c6fb6925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55b8c6dcc57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55b8c6dd5b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55b8c6dbd019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55b8c6de8cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f4aa9fe0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1048576 byte(s) (2%) in 1 allocation(s) Step #5: #0 0x55b8c6eeaed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b8c7114253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55b8c6dbcfdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55b8c6de8cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7f4aa9fe0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: 1009440 byte(s) (2%) in 1 allocation(s) Step #5: #0 0x55b8c6eeaed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b8c7114253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55b8c6dd3a92 in fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:71:9 Step #5: #3 0x55b8c6dd56f2 in ParseOrExit /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:32:8 Step #5: #4 0x55b8c6dd56f2 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:209:5 Step #5: #5 0x55b8c6dbd019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #6 0x55b8c6de8cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #7 0x7f4aa9fe0082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x6a,0x70,0x65,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x41,0x41,0x45,0x42,0x41,0x41,0x41,0x42,0x41,0x41,0x67,0x71,0x65,0x31,0x42,0x41,0x41,0x41,0x49,0x45,0x6a,0x42,0x41,0x31,0x58,0x64,0x65,0x4b,0x7c,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/jpeg;base64,AAEBAAABAAgqe1BAAAIEjBA1XdeK|\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-d7c74b3a09bd0094d1f18a7bca5d999b9723f841 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsQUFFQkFBQUJBQWdxZTFCQUFBSUVqQkExWGRlS3wifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 6 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1011732602 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5568266406b0, 0x55682664524b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x556826645250,0x556826690c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/d7c74b3a09bd0094d1f18a7bca5d999b9723f841' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 6204 processed earlier; will process 6414 files now Step #5: #1 pulse cov: 840 ft: 841 exec/s: 0 rss: 44Mb Step #5: #2 pulse cov: 850 ft: 876 exec/s: 1 rss: 1523Mb Step #5: #4 pulse cov: 882 ft: 975 exec/s: 2 rss: 1523Mb Step #5: #8 pulse cov: 1202 ft: 1657 exec/s: 4 rss: 1523Mb Step #5: #16 pulse cov: 1667 ft: 2388 exec/s: 3 rss: 1523Mb Step #5: #32 pulse cov: 2103 ft: 3096 exec/s: 2 rss: 2325Mb Step #5: ==62== ERROR: libFuzzer: out-of-memory (used: 2325Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 161716876 bytes in 20562 chunks; quarantined: 8108746 bytes in 1607 chunks; 34314 other chunks; total chunks: 56483; showing top 95% (at most 8 unique contexts) Step #5: 134136238 byte(s) (82%) in 1 allocation(s) Step #5: #0 0x55682632fed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55682641b5d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55682641b5d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55682641b5d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x5568263feaa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x556826374219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x556826399cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x556826399cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x556826481f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x556826481f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x556826481f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x556826481f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5568264d8637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5568264d8637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5568264d8637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5568264d8637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5568263c4509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5568263af889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5568263fb925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5568263fb925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5568263fb925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55682621157d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55682621ab18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x556826202019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55682622dcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ff850b77082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (15%) in 11 allocation(s) Step #5: #0 0x55682632fed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x556826559253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55682622dcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7ff850b77082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x41,0x41,0x41,0x4c,0x67,0x67,0x67,0x44,0x41,0x74,0x67,0x6c,0x6f,0x31,0x67,0x30,0x67,0x30,0x67,0x36,0x48,0x41,0x68,0x67,0x67,0x2f,0x2b,0x41,0x2f,0x6e,0x30,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/gif;base64,AAALgggDAtglo1g0g0g6HAhgg/+A/n0\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-c80fd1af2570d3838d4c05690f80db90a5a77e6b Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxBQUFMZ2dnREF0Z2xvMWcwZzBnNkhBaGdnLytBL24wIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 7 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1025857469 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55f5d0d106b0, 0x55f5d0d1524b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55f5d0d15250,0x55f5d0d60c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/c80fd1af2570d3838d4c05690f80db90a5a77e6b' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 6238 processed earlier; will process 6380 files now Step #5: #1 pulse cov: 815 ft: 816 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 971 ft: 1009 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1081 ft: 1186 exec/s: 0 rss: 43Mb Step #5: #8 pulse cov: 1563 ft: 1982 exec/s: 0 rss: 43Mb Step #5: #16 pulse cov: 1749 ft: 2342 exec/s: 0 rss: 44Mb Step #5: #32 pulse cov: 2116 ft: 3261 exec/s: 0 rss: 48Mb Step #5: #64 pulse cov: 2425 ft: 4080 exec/s: 9 rss: 1383Mb Step #5: #128 pulse cov: 2939 ft: 5478 exec/s: 11 rss: 1532Mb Step #5: ==66== ERROR: libFuzzer: out-of-memory (used: 2367Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 75544950 bytes in 26637 chunks; quarantined: 8524426 bytes in 1258 chunks; 32903 other chunks; total chunks: 60798; showing top 95% (at most 8 unique contexts) Step #5: 47721520 byte(s) (63%) in 1 allocation(s) Step #5: #0 0x55f5d09ffed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55f5d0acda27 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55f5d0acda27 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55f5d0acda27 in stbi__bmp_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5616:22 Step #5: #4 0x55f5d0acda27 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1148:35 Step #5: #5 0x55f5d0a44219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55f5d0a69cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55f5d0a69cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55f5d0b51f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55f5d0b51f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55f5d0b51f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55f5d0b51f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55f5d0ba8637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55f5d0ba8637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55f5d0ba8637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55f5d0ba8637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55f5d0a94509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55f5d0a7f889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55f5d0acb925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55f5d0acb925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55f5d0acb925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55f5d08e157d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55f5d08eab18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55f5d08d2019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55f5d08fdcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe1cff9a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (32%) in 11 allocation(s) Step #5: #0 0x55f5d09ffed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55f5d0c29253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55f5d08fdcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fe1cff9a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 1048576 byte(s) (1%) in 1 allocation(s) Step #5: #0 0x55f5d09ffed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55f5d0c29253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55f5d08d1fdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55f5d08fdcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7fe1cff9a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x31,0x35,0x43,0x2b,0x6d,0x79,0x42,0x41,0x41,0x45,0x71,0x4e,0x6f,0x41,0x41,0x41,0x41,0x4d,0x41,0x41,0x41,0x41,0x2f,0x37,0x37,0x30,0x41,0x41,0x45,0x41,0x47,0x41,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,Qk15C+myBAAEqNoAAAAMAAAA/770AAEAGA\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-822850521744c90e96ccf3ab74e6261e5ca3e734 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxRazE1QytteUJBQUVxTm9BQUFBTUFBQUEvNzcwQUFFQUdBIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 8 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1061988085 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5601c56856b0, 0x5601c568a24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5601c568a250,0x5601c56d5c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/822850521744c90e96ccf3ab74e6261e5ca3e734' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 6446 processed earlier; will process 6172 files now Step #5: #1 pulse cov: 717 ft: 718 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 740 ft: 747 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 825 ft: 880 exec/s: 0 rss: 48Mb Step #5: #8 pulse cov: 912 ft: 1002 exec/s: 0 rss: 64Mb Step #5: #16 pulse cov: 1311 ft: 1674 exec/s: 5 rss: 1565Mb Step #5: #32 pulse cov: 1631 ft: 2301 exec/s: 5 rss: 1565Mb Step #5: #64 pulse cov: 2001 ft: 3075 exec/s: 4 rss: 1565Mb Step #5: ==70== ERROR: libFuzzer: out-of-memory (used: 2102Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2178656239 bytes in 20243 chunks; quarantined: 8730228 bytes in 801 chunks; 31332 other chunks; total chunks: 52376; showing top 95% (at most 8 unique contexts) Step #5: 1075544009 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x5601c5374ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5601c5456f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5601c5456f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5601c5456f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x5601c5456f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x5601c5442324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x5601c53b9219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x5601c53decec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x5601c53decec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x5601c54c6f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x5601c54c6f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x5601c54c6f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x5601c54c6f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x5601c551d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x5601c551d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x5601c551d637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x5601c551d637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x5601c5409509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x5601c53f4889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x5601c5440925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x5601c5440925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x5601c5440925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x5601c525657d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x5601c525fb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x5601c5247019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x5601c5272cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f2f3c7ef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1075544008 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x5601c53b78ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x5601c54c7533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x5601c54c7533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x5601c54c7533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x5601c54c7533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x5601c54c7533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x5601c53df950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x5601c53df950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x5601c54c6f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5601c54c6f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5601c54c6f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5601c54c6f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5601c551d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5601c551d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5601c551d637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5601c551d637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5601c5409509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5601c53f4889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5601c5440925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5601c5440925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5601c5440925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5601c525657d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5601c525fb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5601c5247019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5601c5272cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f2f3c7ef082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x51,0x49,0x45,0x41,0x66,0x2f,0x2f,0x67,0x51,0x48,0x45,0x67,0x45,0x45,0x45,0x67,0x45,0x4c,0x49,0x67,0x48,0x50,0x45,0x68,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,///Y///CABQIEAf//gQHEgEEEgELIgHPEh\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-04e65a889f0d734b01ad1a9fd267e726b13475f8 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCwvLy9ZLy8vQ0FCUUlFQWYvL2dRSEVnRUVFZ0VMSWdIUEVoIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 9 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1092215396 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55c9d0cbd6b0, 0x55c9d0cc224b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55c9d0cc2250,0x55c9d0d0dc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/04e65a889f0d734b01ad1a9fd267e726b13475f8' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 6554 processed earlier; will process 6064 files now Step #5: #1 pulse cov: 783 ft: 784 exec/s: 0 rss: 50Mb Step #5: #2 pulse cov: 808 ft: 853 exec/s: 0 rss: 50Mb Step #5: #4 pulse cov: 836 ft: 896 exec/s: 0 rss: 53Mb Step #5: #8 pulse cov: 983 ft: 1084 exec/s: 1 rss: 869Mb Step #5: #16 pulse cov: 1188 ft: 1372 exec/s: 2 rss: 869Mb Step #5: #32 pulse cov: 1515 ft: 1951 exec/s: 5 rss: 869Mb Step #5: #64 pulse cov: 2072 ft: 3362 exec/s: 8 rss: 869Mb Step #5: #128 pulse cov: 2768 ft: 5137 exec/s: 7 rss: 1882Mb Step #5: #256 pulse cov: 3260 ft: 6778 exec/s: 9 rss: 1882Mb Step #5: #512 pulse cov: 3635 ft: 9101 exec/s: 4 rss: 1882Mb Step #5: ==74== ERROR: libFuzzer: out-of-memory (used: 2228Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2302885036 bytes in 32308 chunks; quarantined: 9719841 bytes in 1420 chunks; 31327 other chunks; total chunks: 65055; showing top 95% (at most 8 unique contexts) Step #5: 1011037800 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55c9d09aced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55c9d0aac2dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55c9d0aac2dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x55c9d0a79c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55c9d0a79c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55c9d09f1219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55c9d0a16cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55c9d0a16cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55c9d0afef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55c9d0afef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55c9d0afef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55c9d0afef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55c9d0b55637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55c9d0b55637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55c9d0b55637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55c9d0b55637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55c9d0a41509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55c9d0a2c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55c9d0a78925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55c9d0a78925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55c9d0a78925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55c9d088e57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55c9d0897b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55c9d087f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55c9d08aacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe4232ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 1011037800 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55c9d09aced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55c9d0aac2aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55c9d0aac2aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x55c9d0a79c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55c9d0a79c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55c9d09f1219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55c9d0a16cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55c9d0a16cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55c9d0afef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55c9d0afef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55c9d0afef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55c9d0afef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55c9d0b55637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55c9d0b55637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55c9d0b55637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55c9d0b55637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55c9d0a41509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55c9d0a2c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55c9d0a78925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55c9d0a78925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55c9d0a78925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55c9d088e57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55c9d0897b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55c9d087f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55c9d08aacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe4232ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 252759450 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x55c9d09aced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55c9d0aac315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55c9d0aac315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x55c9d0a79c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55c9d0a79c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55c9d09f1219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55c9d0a16cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55c9d0a16cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55c9d0afef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55c9d0afef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55c9d0afef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55c9d0afef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55c9d0b55637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55c9d0b55637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55c9d0b55637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55c9d0b55637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55c9d0a41509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55c9d0a2c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55c9d0a78925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55c9d0a78925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55c9d0a78925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55c9d088e57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55c9d0897b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55c9d087f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55c9d08aacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe4232ec082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x6c,0x68,0x74,0x66,0x6c,0x79,0x44,0x79,0x4f,0x79,0x79,0x79,0x79,0x79,0x41,0x41,0x41,0x41,0x41,0x6c,0x47,0x4f,0x44,0x64,0x68,0x63,0x61,0x6d,0x4f,0x44,0x79,0x41,0x41,0x41,0x2f,0x2f,0x2f,0x35,0x2f,0x2f,0x73,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODlhtflyDyOyyyyyAAAAAlGODdhcamODyAAA///5//s\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-774898c7d9d09d13211fd6e8a1a7d479545d3dd2 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RsaHRmbHlEeU95eXl5eUFBQUFBbEdPRGRoY2FtT0R5QUFBLy8vNS8vcyJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 10 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1338394580 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x555a77e9e6b0, 0x555a77ea324b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x555a77ea3250,0x555a77eeec00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/774898c7d9d09d13211fd6e8a1a7d479545d3dd2' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 7429 processed earlier; will process 5189 files now Step #5: #1 pulse cov: 562 ft: 563 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 881 ft: 1006 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 962 ft: 1208 exec/s: 0 rss: 40Mb Step #5: #8 pulse cov: 1232 ft: 1588 exec/s: 2 rss: 1524Mb Step #5: #16 pulse cov: 1619 ft: 2406 exec/s: 2 rss: 1529Mb Step #5: #32 pulse cov: 2241 ft: 3617 exec/s: 2 rss: 1529Mb Step #5: ==78== ERROR: libFuzzer: out-of-memory (used: 2103Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2178830141 bytes in 23780 chunks; quarantined: 5709432 bytes in 2898 chunks; 34036 other chunks; total chunks: 60714; showing top 95% (at most 8 unique contexts) Step #5: 1075560421 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x555a77b8ded4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x555a77c6ff1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x555a77c6ff1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x555a77c6ff1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x555a77c6ff1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x555a77c5b324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x555a77bd2219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x555a77bf7cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x555a77bf7cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x555a77cdff20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x555a77cdff20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x555a77cdff20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x555a77cdff20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x555a77d36637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x555a77d36637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x555a77d36637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x555a77d36637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x555a77c22509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x555a77c0d889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x555a77c59925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x555a77c59925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x555a77c59925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x555a77a6f57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x555a77a78b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x555a77a60019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x555a77a8bcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7fd13d1c4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1075560420 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x555a77bd08ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x555a77ce0533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x555a77ce0533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x555a77ce0533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x555a77ce0533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x555a77ce0533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x555a77bf8950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x555a77bf8950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x555a77cdff20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x555a77cdff20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x555a77cdff20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x555a77cdff20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x555a77d36637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x555a77d36637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x555a77d36637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x555a77d36637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x555a77c22509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x555a77c0d889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x555a77c59925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x555a77c59925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x555a77c59925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x555a77a6f57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x555a77a78b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x555a77a60019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x555a77a8bcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fd13d1c4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x51,0x49,0x45,0x41,0x66,0x2f,0x2f,0x77,0x51,0x48,0x45,0x67,0x45,0x45,0x45,0x67,0x45,0x4c,0x49,0x67,0x48,0x50,0x45,0x68,0x26,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x62,0x6d,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x51,0x49,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,///Y///CABQIEAf//wQHEgEEEgELIgHPEh&\"}],\"asset\":{\"version\":\"bm///Y///CABQI\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-e86d16708951e138cfdbce84462a133b80ea01e1 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCwvLy9ZLy8vQ0FCUUlFQWYvL3dRSEVnRUVFZ0VMSWdIUEVoJiJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6ImJtLy8vWS8vL0NBQlFJIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 11 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1355530898 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x564e13fbe6b0, 0x564e13fc324b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x564e13fc3250,0x564e1400ec00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/e86d16708951e138cfdbce84462a133b80ea01e1' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 7480 processed earlier; will process 5138 files now Step #5: #1 pulse cov: 302 ft: 303 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 844 ft: 958 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 1396 ft: 1854 exec/s: 0 rss: 41Mb Step #5: #8 pulse cov: 1634 ft: 2349 exec/s: 4 rss: 1141Mb Step #5: #16 pulse cov: 2129 ft: 3306 exec/s: 2 rss: 1141Mb Step #5: #32 pulse cov: 2479 ft: 4446 exec/s: 4 rss: 1141Mb Step #5: #64 pulse cov: 2877 ft: 5964 exec/s: 3 rss: 1376Mb Step #5: #128 pulse cov: 3298 ft: 7729 exec/s: 4 rss: 1911Mb Step #5: #256 pulse cov: 3711 ft: 9758 exec/s: 6 rss: 1911Mb Step #5: #512 pulse cov: 3952 ft: 11603 exec/s: 7 rss: 1911Mb Step #5: #1024 pulse cov: 4135 ft: 13864 exec/s: 4 rss: 1911Mb Step #5: ==82== ERROR: libFuzzer: out-of-memory (used: 2146Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 755932547 bytes in 36838 chunks; quarantined: 7051603 bytes in 1432 chunks; 30979 other chunks; total chunks: 69249; showing top 95% (at most 8 unique contexts) Step #5: 727700640 byte(s) (96%) in 1 allocation(s) Step #5: #0 0x564e13cf08ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x564e13e00533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x564e13e00533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x564e13e00533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x564e13e00533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x564e13e00533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x564e13d18950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x564e13d18950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x564e13dfff20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x564e13dfff20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x564e13dfff20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x564e13dfff20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x564e13e56637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x564e13e56637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x564e13e56637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x564e13e56637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x564e13d42509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x564e13d2d889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x564e13d79925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x564e13d79925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x564e13d79925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x564e13b8f57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x564e13b98b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x564e13b80019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x564e13babcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f8dd6241082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x32,0x34,0x6a,0x2f,0x2f,0x74,0x72,0x73,0x78,0x61,0x65,0x30,0x67,0x41,0x41,0x41,0x41,0x6f,0x41,0x41,0x41,0x41,0x59,0x49,0x6b,0x41,0x41,0x4f,0x30,0x43,0x41,0x41,0x41,0x42,0x41,0x43,0x41,0x41,0x41,0x77,0x41,0x41,0x41,0x41,0x74,0x72,0x73,0x78,0x61,0x65,0x30,0x67,0x41,0x43,0x41,0x41,0x6f,0x41,0x41,0x50,0x41,0x41,0x59,0x49,0x6b,0x41,0x41,0x43,0x30,0x41,0x4f,0x41,0x77,0x41,0x42,0x41,0x41,0x43,0x41,0x41,0x41,0x41,0x41,0x73,0x6b,0x69,0x6e,0x73,0x61,0x63,0x50,0x65,0x73,0x63,0x2f,0x2f,0x2f,0x2f,0x31,0x33,0x78,0x2f,0x2f,0x6d,0x2f,0x61,0x2f,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/gif;base64,Qk24j//trsxae0gAAAAoAAAAYIkAAO0CAAABACAAAwAAAAtrsxae0gACAAoAAPAAYIkAAC0AOAwABAACAAAAAskinsacPesc////13x//m/a/\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-69b36d345f555a4fbd7a155b3de38db85645b1ed Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxRazI0ai8vdHJzeGFlMGdBQUFBb0FBQUFZSWtBQU8wQ0FBQUJBQ0FBQXdBQUFBdHJzeGFlMGdBQ0FBb0FBUEFBWUlrQUFDMEFPQXdBQkFBQ0FBQUFBc2tpbnNhY1Blc2MvLy8vMTN4Ly9tL2EvIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 12 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 1643732351 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5597ed8436b0, 0x5597ed84824b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5597ed848250,0x5597ed893c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/69b36d345f555a4fbd7a155b3de38db85645b1ed' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 8812 processed earlier; will process 3806 files now Step #5: #1 pulse cov: 599 ft: 600 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 608 ft: 701 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 982 ft: 1342 exec/s: 0 rss: 42Mb Step #5: #8 pulse cov: 1295 ft: 2143 exec/s: 0 rss: 152Mb Step #5: #16 pulse cov: 1821 ft: 3329 exec/s: 0 rss: 152Mb Step #5: #32 pulse cov: 2340 ft: 5074 exec/s: 0 rss: 152Mb Step #5: #64 pulse cov: 3050 ft: 7240 exec/s: 2 rss: 1384Mb Step #5: #128 pulse cov: 3450 ft: 9037 exec/s: 2 rss: 1901Mb Step #5: #256 pulse cov: 3763 ft: 11299 exec/s: 3 rss: 1901Mb Step #5: #512 pulse cov: 4056 ft: 14262 exec/s: 4 rss: 1901Mb Step #5: #1024 pulse cov: 4247 ft: 17153 exec/s: 4 rss: 1909Mb Step #5: #2048 pulse cov: 4373 ft: 22007 exec/s: 5 rss: 1909Mb Step #5: AddressSanitizer:DEADLYSIGNAL Step #5: ================================================================= Step #5: ==86==ERROR: AddressSanitizer: stack-overflow on address 0x7ffc1de2ab38 (pc 0x5597ed530df6 bp 0x7ffc1de2b370 sp 0x7ffc1de2ab40 T0) Step #5: SCARINESS: 10 (stack-overflow) Step #5: #0 0x5597ed530df6 in __asan_memset /src/llvm-project/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cpp:67:3 Step #5: #1 0x5597ed6687fa in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3665:9 Step #5: #2 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #3 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #4 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #5 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #6 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #7 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #8 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #9 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #10 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #11 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #12 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #13 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #14 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #15 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #16 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #17 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #18 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #19 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #20 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #21 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #22 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #23 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #24 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #25 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #26 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #27 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #28 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #29 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #30 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #31 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #32 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #33 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #34 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #35 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #36 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #37 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #38 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #39 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #40 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #41 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #42 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #43 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #44 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #45 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #46 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #47 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #48 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #49 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #50 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #51 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #52 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #53 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #54 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #55 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #56 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #57 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #58 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #59 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #60 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #61 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #62 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #63 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #64 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #65 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #66 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #67 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #68 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #69 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #70 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #71 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #72 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #73 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #74 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #75 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #76 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #77 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #78 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #79 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #80 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #81 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #82 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #83 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #84 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #85 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #86 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #87 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #88 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #89 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #90 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #91 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #92 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #93 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #94 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #95 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #96 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #97 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #98 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #99 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #100 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #101 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #102 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #103 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #104 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #105 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #106 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #107 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #108 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #109 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #110 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #111 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #112 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #113 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #114 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #115 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #116 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #117 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #118 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #119 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #120 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #121 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #122 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #123 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #124 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #125 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #126 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #127 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #128 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #129 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #130 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #131 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #132 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #133 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #134 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #135 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #136 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #137 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #138 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #139 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #140 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #141 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #142 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #143 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #144 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #145 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #146 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #147 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #148 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #149 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #150 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #151 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #152 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #153 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #154 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #155 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #156 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #157 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #158 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #159 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #160 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #161 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #162 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #163 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #164 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #165 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #166 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #167 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #168 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #169 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #170 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #171 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #172 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #173 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #174 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #175 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #176 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #177 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #178 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #179 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #180 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #181 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #182 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #183 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #184 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #185 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #186 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #187 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #188 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #189 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #190 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #191 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #192 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #193 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #194 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #195 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #196 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #197 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #198 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #199 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #200 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #201 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #202 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #203 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #204 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #205 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #206 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #207 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #208 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #209 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #210 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #211 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #212 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #213 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #214 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #215 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #216 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #217 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #218 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #219 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #220 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #221 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #222 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #223 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #224 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #225 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #226 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #227 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #228 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #229 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #230 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #231 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #232 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #233 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #234 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #235 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #236 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #237 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #238 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #239 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #240 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #241 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #242 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #243 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #244 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #245 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #246 0x5597ed668bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: Step #5: DEDUP_TOKEN: __asan_memset--tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&)--tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) Step #5: SUMMARY: AddressSanitizer: stack-overflow /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3665:9 in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) Step #5: ==86==ABORTING Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./crash-f71704490c5264022a4d4e07a5dafa56c6c4115a Step #5: MERGE-OUTER: attempt 13 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2231007186 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5616752806b0, 0x56167528524b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x561675285250,0x5616752d0c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/f71704490c5264022a4d4e07a5dafa56c6c4115a' caused a failure at the previous merge step Step #5: MERGE-INNER: 12618 total files; 11851 processed earlier; will process 767 files now Step #5: #1 pulse cov: 850 ft: 851 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 1043 ft: 1209 exec/s: 0 rss: 46Mb Step #5: #4 pulse cov: 1725 ft: 2244 exec/s: 0 rss: 52Mb Step #5: #8 pulse cov: 2102 ft: 3425 exec/s: 0 rss: 58Mb Step #5: #16 pulse cov: 2535 ft: 5166 exec/s: 8 rss: 152Mb Step #5: #32 pulse cov: 2767 ft: 7072 exec/s: 16 rss: 152Mb Step #5: #64 pulse cov: 3295 ft: 9815 exec/s: 4 rss: 1391Mb Step #5: #128 pulse cov: 3576 ft: 12128 exec/s: 2 rss: 1394Mb Step #5: #256 pulse cov: 3864 ft: 14345 exec/s: 4 rss: 1432Mb Step #5: #512 pulse cov: 3959 ft: 15948 exec/s: 6 rss: 1432Mb Step #5: #767 DONE cov: 4084 ft: 16800 exec/s: 6 rss: 1432Mb Step #5: MERGE-OUTER: successful in 13 attempt(s) Step #5: MERGE-OUTER: the control file has 2182784 bytes Step #5: MERGE-OUTER: consumed 1Mb (61Mb rss) to parse the control file Step #5: MERGE-OUTER: 7759 new files with 28792 new features added; 4938 new coverage edges Step #5: [2025-12-12 06:41:06,991 INFO] Finding shared libraries for targets (if any). Step #5: [2025-12-12 06:41:07,002 INFO] Finished finding shared libraries for targets. Step #5: Coverage error, creating log file: /workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log Step #5: [2025-12-12 06:41:07,471 INFO] Finding shared libraries for targets (if any). Step #5: [2025-12-12 06:41:07,482 INFO] Finished finding shared libraries for targets. Step #5: [2025-12-12 06:41:07,797 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-12-12 06:41:07,797 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html". Step #5: [2025-12-12 06:41:07,810 DEBUG] Finished generating file view html index file. Step #5: [2025-12-12 06:41:07,810 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-12-12 06:41:07,811 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-12-12 06:41:07,811 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-12-12 06:41:07,860 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-12-12 06:41:07,860 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html". Step #5: [2025-12-12 06:41:07,860 DEBUG] Finished generating directory view html index file. Step #5: [2025-12-12 06:41:07,860 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html". Step #5: [2025-12-12 06:41:08,173 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-12-12 06:41:08,173 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html". Step #5: [2025-12-12 06:41:08,186 DEBUG] Finished generating file view html index file. Step #5: [2025-12-12 06:41:08,186 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-12-12 06:41:08,186 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-12-12 06:41:08,186 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-12-12 06:41:08,235 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-12-12 06:41:08,235 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html". Step #5: [2025-12-12 06:41:08,235 DEBUG] Finished generating directory view html index file. Step #5: [2025-12-12 06:41:08,235 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html". Finished Step #5 Starting Step #6 Step #6: Pulling image: gcr.io/cloud-builders/gsutil Step #6: Using default tag: latest Step #6: latest: Pulling from cloud-builders/gsutil Step #6: 63e5bc7682b8: Already exists Step #6: 5d2c6feef28e: Pulling fs layer Step #6: 2d5ee1cc1b5f: Pulling fs layer Step #6: e3602ea80335: Pulling fs layer Step #6: b052e962aefe: Pulling fs layer Step #6: 67fcf43fccaf: Pulling fs layer Step #6: 27ac79e7e60e: Pulling fs layer Step #6: 6770b3e2145a: Pulling fs layer Step #6: 6770b3e2145a: Waiting Step #6: b052e962aefe: Verifying Checksum Step #6: b052e962aefe: Download complete Step #6: 5d2c6feef28e: Download complete Step #6: 27ac79e7e60e: Verifying Checksum Step #6: 27ac79e7e60e: Download complete Step #6: 67fcf43fccaf: Verifying Checksum Step #6: 67fcf43fccaf: Download complete Step #6: 2d5ee1cc1b5f: Verifying Checksum Step #6: 2d5ee1cc1b5f: Download complete Step #6: 5d2c6feef28e: Pull complete Step #6: 6770b3e2145a: Verifying Checksum Step #6: 6770b3e2145a: Download complete Step #6: 2d5ee1cc1b5f: Pull complete Step #6: e3602ea80335: Verifying Checksum Step #6: e3602ea80335: Download complete Step #6: e3602ea80335: Pull complete Step #6: b052e962aefe: Pull complete Step #6: 67fcf43fccaf: Pull complete Step #6: 27ac79e7e60e: Pull complete Step #6: 6770b3e2145a: Pull complete Step #6: Digest: sha256:1733d15f3a62c40b132b024bcba75e1746e30771fb71027eadc7514ebc1114f0 Step #6: Status: Downloaded newer image for gcr.io/cloud-builders/gsutil:latest Step #6: gcr.io/cloud-builders/gsutil:latest Step #6: CommandException: 1 files/objects could not be removed. Finished Step #6 Starting Step #7 Step #7: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #7: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/control.js [Content-Type=text/javascript]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/style.css [Content-Type=text/css]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/summary.json [Content-Type=application/json]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/report.html [Content-Type=text/html]... Step #7: / [0/16 files][ 2.3 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/report.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #7: / [5/16 files][ 1.6 MiB/ 9.4 MiB] 16% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 2.9 MiB/ 9.4 MiB] 30% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #7: / [5/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [6/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [7/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [8/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [9/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #7: / [9/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [10/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done - - [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #7: Operation completed over 16 objects/9.4 MiB. Finished Step #7 Starting Step #8 Step #8: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #8: CommandException: 1 files/objects could not be removed. Finished Step #8 Starting Step #9 Step #9: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/control.js [Content-Type=text/javascript]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/style.css [Content-Type=text/css]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/summary.json [Content-Type=application/json]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done / [1/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/report.html [Content-Type=text/html]... Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html [Content-Type=text/html]... Step #9: / [1/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/report.html [Content-Type=text/html]... Step #9: / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #9: / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #9: / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 19.1 KiB/ 9.4 MiB] 0% Done / [6/16 files][ 19.1 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #9: / [7/16 files][ 19.1 KiB/ 9.4 MiB] 0% Done / [7/16 files][ 19.1 KiB/ 9.4 MiB] 0% Done / [8/16 files][ 7.4 MiB/ 9.4 MiB] 78% Done / [9/16 files][ 7.4 MiB/ 9.4 MiB] 78% Done / [10/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - - [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #9: Operation completed over 16 objects/9.4 MiB. Finished Step #9 Starting Step #10 Step #10: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #10: CommandException: 1 files/objects could not be removed. Finished Step #10 Starting Step #11 Step #11: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #11: Step #11: ***** NOTICE ***** Step #11: Step #11: Official `cloud-sdk` images, including multiple tagged versions across multiple Step #11: platforms, can be found at Step #11: https://github.com/GoogleCloudPlatform/cloud-sdk-docker. Step #11: Step #11: Suggested alternative images include: Step #11: Step #11: gcr.io/google.com/cloudsdktool/cloud-sdk Step #11: gcr.io/google.com/cloudsdktool/cloud-sdk:alpine Step #11: gcr.io/google.com/cloudsdktool/cloud-sdk:debian_component_based Step #11: gcr.io/google.com/cloudsdktool/cloud-sdk:slim Step #11: Step #11: Please note that the `gsutil` entrypoint must be specified when using these Step #11: images. Step #11: Step #11: ***** END OF NOTICE ***** Step #11: Step #11: Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf.json [Content-Type=application/json]... Step #11: / [0/3 files][ 0.0 B/ 3.5 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log [Content-Type=application/octet-stream]... Step #11: / [0/3 files][ 2.8 KiB/ 3.5 KiB] 78% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/coverage_targets.txt [Content-Type=text/plain]... Step #11: / [0/3 files][ 2.8 KiB/ 3.5 KiB] 78% Done / [1/3 files][ 2.8 KiB/ 3.5 KiB] 78% Done / [2/3 files][ 3.5 KiB/ 3.5 KiB] 99% Done / [3/3 files][ 3.5 KiB/ 3.5 KiB] 100% Done Step #11: Operation completed over 3 objects/3.5 KiB. Finished Step #11 Starting Step #12 Step #12: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #12: CommandException: 1 files/objects could not be removed. Finished Step #12 Starting Step #13 Step #13: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #13: Copying file:///workspace/out/libfuzzer-coverage-x86_64/textcov_reports/fuzz_gltf.covreport [Content-Type=application/octet-stream]... Step #13: / [0/1 files][ 0.0 B/756.3 KiB] 0% Done / [1/1 files][756.3 KiB/756.3 KiB] 100% Done Step #13: Operation completed over 1 objects/756.3 KiB. Finished Step #13 Starting Step #14 Step #14: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #14: CommandException: 1 files/objects could not be removed. Finished Step #14 Starting Step #15 Step #15: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #15: Copying file:///workspace/out/libfuzzer-coverage-x86_64/logs/fuzz_gltf.log [Content-Type=application/octet-stream]... Step #15: / [0/1 files][ 0.0 B/295.7 KiB] 0% Done / [1/1 files][295.7 KiB/295.7 KiB] 100% Done Step #15: Operation completed over 1 objects/295.7 KiB. Finished Step #15 Starting Step #16 Step #16: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #16: Copying file:///workspace/srcmap.json [Content-Type=application/json]... Step #16: / [0 files][ 0.0 B/ 154.0 B] / [1 files][ 154.0 B/ 154.0 B] Step #16: Operation completed over 1 objects/154.0 B. Finished Step #16 Starting Step #17 Step #17: Already have image (with digest): gcr.io/cloud-builders/curl Step #17: % Total % Received % Xferd Average Speed Time Time Time Current Step #17: Dload Upload Total Spent Left Speed Step #17: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 312 0 0 100 312 0 1485 --:--:-- --:--:-- --:--:-- 1500 Finished Step #17 PUSH DONE