starting build "0f6c179f-701c-4b46-b175-c84bf721fd44" FETCHSOURCE BUILD Starting Step #0 Step #0: Already have image (with digest): gcr.io/cloud-builders/git Step #0: Cloning into 'oss-fuzz'... Finished Step #0 Starting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391" Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Already have image (with digest): gcr.io/cloud-builders/docker Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Sending build context to Docker daemon 5.12kB Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Step 1/5 : FROM gcr.io/oss-fuzz-base/base-builder Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": latest: Pulling from oss-fuzz-base/base-builder Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b549f31133a9: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d83219b4c138: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 23e9620c4830: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": dcb858545676: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1d4cb1c77e4c: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 7b93b19b49d2: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 62ac95546ac5: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f64ad4a2748d: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f1f7b9f18d38: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4f37407c3d55: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5d2e7a577fd8: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b336eeb3caf4: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b60dd587cceb: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7762dcd6996: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": accd4910c328: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5dbf4873dd8c: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d6d7e62c7c9b: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 31d1420bbf48: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 00e474a92ae7: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4625d7314071: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 6a976afe520d: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 62ac95546ac5: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 0033ccab9ea6: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 69948e094fd0: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f64ad4a2748d: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 367dc498d9ed: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": fdb099469380: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f1f7b9f18d38: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 794f30983d63: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 9d6914eedc2a: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4f37407c3d55: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5d2e7a577fd8: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 8619ef976760: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b336eeb3caf4: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": c514ca65c9de: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 06ab641eb14d: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b60dd587cceb: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 25261086f893: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d3094d47d470: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d6d7e62c7c9b: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7762dcd6996: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 49448b68fcd6: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1e5acbdcd0e3: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": accd4910c328: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 24c575b3fd80: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3b8c290c5101: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7d1f2dad54f: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3eb33f168757: Pulling fs layer Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 0033ccab9ea6: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5dbf4873dd8c: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 49448b68fcd6: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d3094d47d470: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1e5acbdcd0e3: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4625d7314071: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 24c575b3fd80: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7d1f2dad54f: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 00e474a92ae7: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": c514ca65c9de: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 9d6914eedc2a: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 25261086f893: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 367dc498d9ed: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 8619ef976760: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 06ab641eb14d: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 794f30983d63: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": fdb099469380: Waiting Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1d4cb1c77e4c: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1d4cb1c77e4c: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 23e9620c4830: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 23e9620c4830: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 62ac95546ac5: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 62ac95546ac5: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f64ad4a2748d: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f64ad4a2748d: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": dcb858545676: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": dcb858545676: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b549f31133a9: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b549f31133a9: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b336eeb3caf4: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b336eeb3caf4: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5d2e7a577fd8: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5d2e7a577fd8: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b60dd587cceb: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b60dd587cceb: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7762dcd6996: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7762dcd6996: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4f37407c3d55: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4f37407c3d55: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5dbf4873dd8c: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d83219b4c138: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d83219b4c138: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": accd4910c328: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": accd4910c328: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d6d7e62c7c9b: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d6d7e62c7c9b: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 31d1420bbf48: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 31d1420bbf48: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 00e474a92ae7: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 00e474a92ae7: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4625d7314071: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4625d7314071: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 6a976afe520d: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 6a976afe520d: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 0033ccab9ea6: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 0033ccab9ea6: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 69948e094fd0: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 69948e094fd0: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 367dc498d9ed: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 367dc498d9ed: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": fdb099469380: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": fdb099469380: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 794f30983d63: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b549f31133a9: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 9d6914eedc2a: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 8619ef976760: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 8619ef976760: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 25261086f893: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d3094d47d470: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d3094d47d470: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 06ab641eb14d: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 06ab641eb14d: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": c514ca65c9de: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": c514ca65c9de: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 49448b68fcd6: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1e5acbdcd0e3: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1e5acbdcd0e3: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3b8c290c5101: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3b8c290c5101: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 24c575b3fd80: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 24c575b3fd80: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f1f7b9f18d38: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f1f7b9f18d38: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3eb33f168757: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3eb33f168757: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7d1f2dad54f: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7d1f2dad54f: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 7b93b19b49d2: Verifying Checksum Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 7b93b19b49d2: Download complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d83219b4c138: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 23e9620c4830: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": dcb858545676: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1d4cb1c77e4c: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 7b93b19b49d2: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 62ac95546ac5: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f64ad4a2748d: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": f1f7b9f18d38: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4f37407c3d55: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5d2e7a577fd8: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b336eeb3caf4: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": b60dd587cceb: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7762dcd6996: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": accd4910c328: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 5dbf4873dd8c: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d6d7e62c7c9b: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 31d1420bbf48: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 00e474a92ae7: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 4625d7314071: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 6a976afe520d: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 0033ccab9ea6: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 69948e094fd0: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 367dc498d9ed: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": fdb099469380: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 794f30983d63: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 9d6914eedc2a: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 8619ef976760: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": c514ca65c9de: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 06ab641eb14d: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 25261086f893: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": d3094d47d470: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 49448b68fcd6: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 1e5acbdcd0e3: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 24c575b3fd80: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3b8c290c5101: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": e7d1f2dad54f: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": 3eb33f168757: Pull complete Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Digest: sha256:d9a35e4c27148b00336fb96421ed39d6fe288c96a95234ad718303c1a5f7f7ad Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-builder:latest Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> 75b5ddf530da Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Step 2/5 : RUN pip3 install meson ninja Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> Running in 8fc494e03417 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Collecting meson Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Downloading meson-1.9.1-py3-none-any.whl.metadata (1.8 kB) Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Collecting ninja Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl.metadata (5.1 kB) Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Downloading meson-1.9.1-py3-none-any.whl (1.0 MB) Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.0/1.0 MB 30.0 MB/s 0:00:00 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl (180 kB) Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Installing collected packages: ninja, meson Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Successfully installed meson-1.9.1 ninja-1.13.0 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning. Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Removing intermediate container 8fc494e03417 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> 59d85663c53a Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Step 3/5 : RUN git clone --depth 1 https://github.com/syoyo/tinygltf.git Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> Running in 56db5ca85e94 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Cloning into 'tinygltf'... Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Removing intermediate container 56db5ca85e94 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> 47d118a6109f Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Step 4/5 : WORKDIR $SRC/tinygltf Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> Running in 58bffed857d3 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Removing intermediate container 58bffed857d3 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> c6764cd0337e Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Step 5/5 : COPY build.sh $SRC/ Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": ---> f6ad5c7d3b05 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Successfully built f6ad5c7d3b05 Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Successfully tagged gcr.io/oss-fuzz/tinygltf:latest Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391": Successfully tagged us-central1-docker.pkg.dev/oss-fuzz/unsafe/tinygltf:latest Finished Step #1 - "build-8cbbfad2-9b85-488e-a169-247dea4b0391" Starting Step #2 - "srcmap" Step #2 - "srcmap": Already have image: gcr.io/oss-fuzz/tinygltf Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + SRCMAP=/tmp/filedjwkFM Step #2 - "srcmap": + echo '{}' Step #2 - "srcmap": + PATHS_TO_SCAN=/src Step #2 - "srcmap": + [[ c++ == \g\o ]] Step #2 - "srcmap": ++ find /src -name .git -type d Step #2 - "srcmap": + for DOT_GIT_DIR in $(find $PATHS_TO_SCAN -name ".git" -type d) Step #2 - "srcmap": ++ dirname /src/tinygltf/.git Step #2 - "srcmap": + GIT_DIR=/src/tinygltf Step #2 - "srcmap": + cd /src/tinygltf Step #2 - "srcmap": ++ git config --get remote.origin.url Step #2 - "srcmap": + GIT_URL=https://github.com/syoyo/tinygltf.git Step #2 - "srcmap": ++ git rev-parse HEAD Step #2 - "srcmap": + GIT_REV=81bd50c1062fdb956e878efa2a9234b2b9ec91ec Step #2 - "srcmap": + jq_inplace /tmp/filedjwkFM '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + F=/tmp/fileWh2Br9 Step #2 - "srcmap": + cat /tmp/filedjwkFM Step #2 - "srcmap": + jq '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": + mv /tmp/fileWh2Br9 /tmp/filedjwkFM Step #2 - "srcmap": ++ find /src -name .svn -type d Step #2 - "srcmap": ++ find /src -name .hg -type d Step #2 - "srcmap": + '[' '' '!=' '' ']' Step #2 - "srcmap": + cat /tmp/filedjwkFM Step #2 - "srcmap": + rm /tmp/filedjwkFM Step #2 - "srcmap": { Step #2 - "srcmap": "/src/tinygltf": { Step #2 - "srcmap": "type": "git", Step #2 - "srcmap": "url": "https://github.com/syoyo/tinygltf.git", Step #2 - "srcmap": "rev": "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" Step #2 - "srcmap": } Step #2 - "srcmap": } Finished Step #2 - "srcmap" Starting Step #3 - "compile-libfuzzer-coverage-x86_64" Step #3 - "compile-libfuzzer-coverage-x86_64": Already have image (with digest): gcr.io/cloud-builders/docker Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": vm.mmap_rnd_bits = 28 Step #3 - "compile-libfuzzer-coverage-x86_64": Compiling libFuzzer to /usr/lib/libFuzzingEngine.a... done. Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": CC=clang Step #3 - "compile-libfuzzer-coverage-x86_64": CXX=clang++ Step #3 - "compile-libfuzzer-coverage-x86_64": CFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument Step #3 - "compile-libfuzzer-coverage-x86_64": CXXFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument -stdlib=libc++ Step #3 - "compile-libfuzzer-coverage-x86_64": RUSTFLAGS=--cfg fuzzing -Cdebuginfo=1 -Cforce-frame-pointers -Cinstrument-coverage -C link-arg=-lc++ Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": + cd tests/fuzzer/ Step #3 - "compile-libfuzzer-coverage-x86_64": + meson build Step #3 - "compile-libfuzzer-coverage-x86_64": The Meson build system Step #3 - "compile-libfuzzer-coverage-x86_64": Version: 1.9.1 Step #3 - "compile-libfuzzer-coverage-x86_64": Source dir: /src/tinygltf/tests/fuzzer Step #3 - "compile-libfuzzer-coverage-x86_64": Build dir: /src/tinygltf/tests/fuzzer/build Step #3 - "compile-libfuzzer-coverage-x86_64": Build type: native build Step #3 - "compile-libfuzzer-coverage-x86_64": Project name: fuzz_tinygltf Step #3 - "compile-libfuzzer-coverage-x86_64": Project version: undefined Step #3 - "compile-libfuzzer-coverage-x86_64": C++ compiler for the host machine: clang++ (clang 22.0.0 "clang version 22.0.0git (https://github.com/llvm/llvm-project.git cb2f0d0a5f14c183e7182aba0f0e54a518de9e3f)") Step #3 - "compile-libfuzzer-coverage-x86_64": C++ linker for the host machine: clang++ ld.bfd 2.34 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu family: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Build targets in project: 1 Step #3 - "compile-libfuzzer-coverage-x86_64": Step #3 - "compile-libfuzzer-coverage-x86_64": Found ninja-1.13.0.git.kitware.jobserver-pipe-1 at /usr/local/bin/ninja Step #3 - "compile-libfuzzer-coverage-x86_64": WARNING: Running the setup command as `meson [options]` instead of `meson setup [options]` is ambiguous and deprecated. Step #3 - "compile-libfuzzer-coverage-x86_64": + cd build Step #3 - "compile-libfuzzer-coverage-x86_64": ++ nproc Step #3 - "compile-libfuzzer-coverage-x86_64": + ninja -j32 Step #3 - "compile-libfuzzer-coverage-x86_64": [0/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o [1/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../fuzz_gltf.cc:10: Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../../../tiny_gltf.h:1715: Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26551:35: warning: identifier '_json' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26551 | inline nlohmann::json operator "" _json(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26570:49: warning: identifier '_json_pointer' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26570 | inline nlohmann::json::json_pointer operator "" _json_pointer(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~~~~~~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json_pointer Step #3 - "compile-libfuzzer-coverage-x86_64": 2 warnings generated. Step #3 - "compile-libfuzzer-coverage-x86_64": [1/2] Linking target fuzz_gltf [2/2] Linking target fuzz_gltf Step #3 - "compile-libfuzzer-coverage-x86_64": + cp fuzz_gltf /workspace/out/libfuzzer-coverage-x86_64/ Finished Step #3 - "compile-libfuzzer-coverage-x86_64" Starting Step #4 Step #4: Pulling image: gcr.io/oss-fuzz-base/base-runner Step #4: Using default tag: latest Step #4: latest: Pulling from oss-fuzz-base/base-runner Step #4: b549f31133a9: Already exists Step #4: d83219b4c138: Already exists Step #4: 23e9620c4830: Already exists Step #4: 07b7d5b97034: Pulling fs layer Step #4: 1196251fc48e: Pulling fs layer Step #4: 816abe2eae1f: Pulling fs layer Step #4: b263843166b5: Pulling fs layer Step #4: 3aeb4ba34210: Pulling fs layer Step #4: 9708627721c1: Pulling fs layer Step #4: e7a4af2bbdb4: Pulling fs layer Step #4: 268c86603e2d: Pulling fs layer Step #4: 94905a93a1b7: Pulling fs layer Step #4: 1d21ebedbe14: Pulling fs layer Step #4: f9f3a3179b91: Pulling fs layer Step #4: 3bf1e3a4250c: Pulling fs layer Step #4: 3e358121e220: Pulling fs layer Step #4: 5d57b6008cfe: Pulling fs layer Step #4: 6b061cb8b2dc: Pulling fs layer Step #4: 75b9f9b56068: Pulling fs layer Step #4: 83ff9245bc5e: Pulling fs layer Step #4: 7730e798bf88: Pulling fs layer Step #4: e7a4af2bbdb4: Waiting Step #4: d23ee5e1ce79: Pulling fs layer Step #4: ae2d4b006366: Pulling fs layer Step #4: d39e606f1935: Pulling fs layer Step #4: 268c86603e2d: Waiting Step #4: a381c3277add: Pulling fs layer Step #4: 474ba21d4cad: Pulling fs layer Step #4: 1fb919592e93: Pulling fs layer Step #4: 94905a93a1b7: Waiting Step #4: 1d21ebedbe14: Waiting Step #4: f9f3a3179b91: Waiting Step #4: 3bf1e3a4250c: Waiting Step #4: 3e358121e220: Waiting Step #4: 474ba21d4cad: Waiting Step #4: 1fb919592e93: Waiting Step #4: 6b061cb8b2dc: Waiting Step #4: 83ff9245bc5e: Waiting Step #4: 75b9f9b56068: Waiting Step #4: ae2d4b006366: Waiting Step #4: d39e606f1935: Waiting Step #4: a381c3277add: Waiting Step #4: d23ee5e1ce79: Waiting Step #4: 816abe2eae1f: Verifying Checksum Step #4: 816abe2eae1f: Download complete Step #4: 3aeb4ba34210: Verifying Checksum Step #4: 3aeb4ba34210: Download complete Step #4: 07b7d5b97034: Verifying Checksum Step #4: 07b7d5b97034: Download complete Step #4: b263843166b5: Verifying Checksum Step #4: b263843166b5: Download complete Step #4: 1196251fc48e: Verifying Checksum Step #4: 1196251fc48e: Download complete Step #4: 268c86603e2d: Verifying Checksum Step #4: 268c86603e2d: Download complete Step #4: e7a4af2bbdb4: Verifying Checksum Step #4: e7a4af2bbdb4: Download complete Step #4: 07b7d5b97034: Pull complete Step #4: 94905a93a1b7: Download complete Step #4: 3bf1e3a4250c: Verifying Checksum Step #4: 3bf1e3a4250c: Download complete Step #4: 3e358121e220: Download complete Step #4: f9f3a3179b91: Verifying Checksum Step #4: f9f3a3179b91: Download complete Step #4: 6b061cb8b2dc: Download complete Step #4: 1196251fc48e: Pull complete Step #4: 83ff9245bc5e: Verifying Checksum Step #4: 83ff9245bc5e: Download complete Step #4: 816abe2eae1f: Pull complete Step #4: 7730e798bf88: Verifying Checksum Step #4: 7730e798bf88: Download complete Step #4: 9708627721c1: Verifying Checksum Step #4: 9708627721c1: Download complete Step #4: 1d21ebedbe14: Download complete Step #4: b263843166b5: Pull complete Step #4: d39e606f1935: Verifying Checksum Step #4: d39e606f1935: Download complete Step #4: ae2d4b006366: Download complete Step #4: 3aeb4ba34210: Pull complete Step #4: 474ba21d4cad: Verifying Checksum Step #4: 474ba21d4cad: Download complete Step #4: 1fb919592e93: Verifying Checksum Step #4: 1fb919592e93: Download complete Step #4: a381c3277add: Verifying Checksum Step #4: a381c3277add: Download complete Step #4: 5d57b6008cfe: Verifying Checksum Step #4: 5d57b6008cfe: Download complete Step #4: d23ee5e1ce79: Verifying Checksum Step #4: d23ee5e1ce79: Download complete Step #4: 75b9f9b56068: Verifying Checksum Step #4: 75b9f9b56068: Download complete Step #4: 9708627721c1: Pull complete Step #4: e7a4af2bbdb4: Pull complete Step #4: 268c86603e2d: Pull complete Step #4: 94905a93a1b7: Pull complete Step #4: 1d21ebedbe14: Pull complete Step #4: f9f3a3179b91: Pull complete Step #4: 3bf1e3a4250c: Pull complete Step #4: 3e358121e220: Pull complete Step #4: 5d57b6008cfe: Pull complete Step #4: 6b061cb8b2dc: Pull complete Step #4: 75b9f9b56068: Pull complete Step #4: 83ff9245bc5e: Pull complete Step #4: 7730e798bf88: Pull complete Step #4: d23ee5e1ce79: Pull complete Step #4: ae2d4b006366: Pull complete Step #4: d39e606f1935: Pull complete Step #4: a381c3277add: Pull complete Step #4: 474ba21d4cad: Pull complete Step #4: 1fb919592e93: Pull complete Step #4: Digest: sha256:c7c9a21387f1a61ca1a631c6ab32e60fb2bd5678574c4ac368d770c052880d0e Step #4: Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-runner:latest Step #4: gcr.io/oss-fuzz-base/base-runner:latest Finished Step #4 Starting Step #5 Step #5: Already have image (with digest): gcr.io/oss-fuzz-base/base-runner Step #5: Running fuzz_gltf Step #5: Error occured while running fuzz_gltf: Step #5: Cov returncode: 0, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3996325611 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x562888c7d6b0, 0x562888c8224b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x562888c82250,0x562888ccdc00), Step #5: MERGE-OUTER: 12624 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3996389591 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55db90b746b0, 0x55db90b7924b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55db90b79250,0x55db90bc4c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: 12624 total files; 0 processed earlier; will process 12624 files now Step #5: #1 pulse cov: 79 ft: 80 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 79 ft: 80 exec/s: 0 rss: 39Mb Step #5: #4 pulse cov: 217 ft: 222 exec/s: 0 rss: 40Mb Step #5: #8 pulse cov: 228 ft: 245 exec/s: 0 rss: 40Mb Step #5: #16 pulse cov: 439 ft: 506 exec/s: 0 rss: 40Mb Step #5: #32 pulse cov: 479 ft: 568 exec/s: 0 rss: 41Mb Step #5: #64 pulse cov: 569 ft: 738 exec/s: 0 rss: 42Mb Step #5: #128 pulse cov: 645 ft: 846 exec/s: 0 rss: 43Mb Step #5: #256 pulse cov: 740 ft: 1040 exec/s: 0 rss: 45Mb Step #5: #512 pulse cov: 849 ft: 1327 exec/s: 0 rss: 50Mb Step #5: #1024 pulse cov: 995 ft: 2006 exec/s: 0 rss: 58Mb Step #5: #2048 pulse cov: 1135 ft: 3527 exec/s: 0 rss: 60Mb Step #5: #4096 pulse cov: 3569 ft: 10858 exec/s: 0 rss: 67Mb Step #5: ==42== ERROR: libFuzzer: out-of-memory (used: 2070Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1582684358 bytes in 34533 chunks; quarantined: 9654979 bytes in 3140 chunks; 56435 other chunks; total chunks: 94108; showing top 95% (at most 8 unique contexts) Step #5: 690908856 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55db90863ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55db909632dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55db909632dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x55db90930c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55db90930c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55db908a8219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55db908cdcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55db908cdcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55db909b5f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55db909b5f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55db909b5f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55db909b5f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55db90a0c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55db90a0c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55db90a0c637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55db90a0c637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55db908f8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55db908e3889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55db9092f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55db9092f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55db9092f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55db9074557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55db9074eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55db90736019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55db90761cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f307a544082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 690908856 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55db90863ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55db909632aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55db909632aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x55db90930c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55db90930c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55db908a8219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55db908cdcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55db908cdcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55db909b5f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55db909b5f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55db909b5f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55db909b5f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55db90a0c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55db90a0c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55db90a0c637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55db90a0c637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55db908f8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55db908e3889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55db9092f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55db9092f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55db9092f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55db9074557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55db9074eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55db90736019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55db90761cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f307a544082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 172727214 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x55db90863ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55db90963315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55db90963315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x55db90930c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55db90930c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55db908a8219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55db908cdcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55db908cdcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55db909b5f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55db909b5f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55db909b5f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55db909b5f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55db90a0c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55db90a0c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55db90a0c637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55db90a0c637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55db908f8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55db908e3889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55db9092f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55db9092f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55db9092f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55db9074557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55db9074eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55db90736019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55db90761cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f307a544082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x63,0x61,0x6d,0x4f,0x44,0x35,0x47,0x79,0x79,0x79,0x79,0x79,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdhcamOD5Gyyyyy\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-eba0c89c834532b393464bee3a3a3d3597f577d0 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaGNhbU9ENUd5eXl5eSJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3999484328 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x559dfa6fd6b0, 0x559dfa70224b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x559dfa702250,0x559dfa74dc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/eba0c89c834532b393464bee3a3a3d3597f577d0' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 5420 processed earlier; will process 7204 files now Step #5: #1 pulse cov: 743 ft: 744 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 845 ft: 980 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 956 ft: 1251 exec/s: 0 rss: 40Mb Step #5: #8 pulse cov: 1104 ft: 1469 exec/s: 0 rss: 40Mb Step #5: #16 pulse cov: 1306 ft: 1765 exec/s: 0 rss: 41Mb Step #5: #32 pulse cov: 1603 ft: 2459 exec/s: 0 rss: 1525Mb Step #5: #64 pulse cov: 2386 ft: 4274 exec/s: 0 rss: 1525Mb Step #5: ==46== ERROR: libFuzzer: out-of-memory (used: 2053Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1433198821 bytes in 22110 chunks; quarantined: 8541762 bytes in 8676 chunks; 29907 other chunks; total chunks: 60693; showing top 95% (at most 8 unique contexts) Step #5: 624691424 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x559dfa3eced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559dfa4ec2aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x559dfa4ec2aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x559dfa4b9c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x559dfa4b9c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x559dfa431219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x559dfa456cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x559dfa456cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x559dfa53ef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x559dfa53ef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x559dfa53ef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x559dfa53ef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x559dfa595637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x559dfa595637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x559dfa595637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x559dfa595637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x559dfa481509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x559dfa46c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x559dfa4b8925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x559dfa4b8925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x559dfa4b8925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x559dfa2ce57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x559dfa2d7b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x559dfa2bf019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x559dfa2eacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7693628082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 624691424 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x559dfa3eced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559dfa4ec2dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x559dfa4ec2dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x559dfa4b9c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x559dfa4b9c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x559dfa431219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x559dfa456cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x559dfa456cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x559dfa53ef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x559dfa53ef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x559dfa53ef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x559dfa53ef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x559dfa595637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x559dfa595637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x559dfa595637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x559dfa595637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x559dfa481509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x559dfa46c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x559dfa4b8925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x559dfa4b8925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x559dfa4b8925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x559dfa2ce57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x559dfa2d7b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x559dfa2bf019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x559dfa2eacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7693628082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 156172856 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x559dfa3eced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559dfa4ec315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x559dfa4ec315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x559dfa4b9c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x559dfa4b9c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x559dfa431219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x559dfa456cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x559dfa456cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x559dfa53ef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x559dfa53ef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x559dfa53ef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x559dfa53ef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x559dfa595637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x559dfa595637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x559dfa595637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x559dfa595637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x559dfa481509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x559dfa46c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x559dfa4b8925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x559dfa4b8925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x559dfa4b8925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x559dfa2ce57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x559dfa2d7b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x559dfa2bf019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x559dfa2eacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7693628082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x6c,0x68,0x4a,0x79,0x6c,0x2f,0x44,0x79,0x79,0x79,0x79,0x79,0x79,0x79,0x61,0x65,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODlhJyl/Dyyyyyyyae\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-af92026f6c40a5dc5b20a55f3bac3a8d2795d3b6 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RsaEp5bC9EeXl5eXl5eWFlIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4000570928 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x560fb1f1e6b0, 0x560fb1f2324b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x560fb1f23250,0x560fb1f6ec00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/af92026f6c40a5dc5b20a55f3bac3a8d2795d3b6' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 5497 processed earlier; will process 7127 files now Step #5: #1 pulse cov: 737 ft: 738 exec/s: 0 rss: 1522Mb Step #5: #2 pulse cov: 944 ft: 1140 exec/s: 0 rss: 1522Mb Step #5: #4 pulse cov: 1085 ft: 1308 exec/s: 0 rss: 1522Mb Step #5: #8 pulse cov: 1344 ft: 1646 exec/s: 0 rss: 1522Mb Step #5: #16 pulse cov: 1568 ft: 2239 exec/s: 0 rss: 1523Mb Step #5: #32 pulse cov: 1858 ft: 2678 exec/s: 0 rss: 1523Mb Step #5: ==50== ERROR: libFuzzer: out-of-memory (used: 2340Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2155045133 bytes in 20295 chunks; quarantined: 2544554 bytes in 6668 chunks; 29548 other chunks; total chunks: 56511; showing top 95% (at most 8 unique contexts) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #64 pulse cov: 2153 ft: 3599 exec/s: 64 rss: 2340Mb Step #5: #0 0x560fb1c0ded4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x560fb1d0d2aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x560fb1d0d2aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x560fb1cdac53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x560fb1cdac53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x560fb1c52219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x560fb1c77cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x560fb1c77cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x560fb1d5ff20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x560fb1d5ff20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x560fb1d5ff20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x560fb1d5ff20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x560fb1db6637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x560fb1db6637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x560fb1db6637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x560fb1db6637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x560fb1ca2509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x560fb1c8d889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x560fb1cd9925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x560fb1cd9925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x560fb1cd9925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x560fb1aef57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x560fb1af8b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x560fb1ae0019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x560fb1b0bcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7d0240d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x560fb1c0ded4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x560fb1d0d2dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x560fb1d0d2dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x560fb1cdac53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x560fb1cdac53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x560fb1c52219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x560fb1c77cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x560fb1c77cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x560fb1d5ff20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x560fb1d5ff20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x560fb1d5ff20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x560fb1d5ff20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x560fb1db6637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x560fb1db6637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x560fb1db6637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x560fb1db6637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x560fb1ca2509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x560fb1c8d889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x560fb1cd9925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x560fb1cd9925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x560fb1cd9925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x560fb1aef57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x560fb1af8b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x560fb1ae0019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x560fb1b0bcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7d0240d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 236386048 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x560fb1c0ded4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x560fb1d0d315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x560fb1d0d315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x560fb1cdac53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x560fb1cdac53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x560fb1c52219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x560fb1c77cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x560fb1c77cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x560fb1d5ff20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x560fb1d5ff20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x560fb1d5ff20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x560fb1d5ff20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x560fb1db6637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x560fb1db6637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x560fb1db6637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x560fb1db6637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x560fb1ca2509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x560fb1c8d889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x560fb1cd9925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x560fb1cd9925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x560fb1cd9925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x560fb1aef57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x560fb1af8b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x560fb1ae0019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x560fb1b0bcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7d0240d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x30,0x79,0x41,0x4f,0x63,0x44,0x63,0x50,0x61,0x69,0x79,0x41,0x41,0x4d,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh0yAOcDcPaiyAAM\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-ef53c8a5f5c14019ab77e61e5dd232e5e4251e92 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDB5QU9jRGNQYWl5QUFNIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 4 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4001660674 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5629e584f6b0, 0x5629e585424b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5629e5854250,0x5629e589fc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/ef53c8a5f5c14019ab77e61e5dd232e5e4251e92' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 5563 processed earlier; will process 7061 files now Step #5: #1 pulse cov: 695 ft: 696 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 922 ft: 1014 exec/s: 0 rss: 41Mb Step #5: #4 pulse cov: 1144 ft: 1301 exec/s: 0 rss: 42Mb Step #5: #8 pulse cov: 1536 ft: 1944 exec/s: 0 rss: 77Mb Step #5: #16 pulse cov: 1654 ft: 2127 exec/s: 0 rss: 428Mb Step #5: #32 pulse cov: 1705 ft: 2340 exec/s: 2 rss: 506Mb Step #5: #64 pulse cov: 2030 ft: 3038 exec/s: 3 rss: 1533Mb Step #5: ==54== ERROR: libFuzzer: out-of-memory (used: 2101Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 177584397 bytes in 20433 chunks; quarantined: 8530839 bytes in 1875 chunks; 34272 other chunks; total chunks: 56580; showing top 95% (at most 8 unique contexts) Step #5: 150008061 byte(s) (84%) in 1 allocation(s) Step #5: #0 0x5629e553eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5629e562a5d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5629e562a5d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5629e562a5d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x5629e560daa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x5629e5583219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5629e55a8cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5629e55a8cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5629e5690f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5629e5690f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5629e5690f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5629e5690f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5629e56e7637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5629e56e7637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5629e56e7637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5629e56e7637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5629e55d3509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5629e55be889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5629e560a925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5629e560a925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5629e560a925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5629e542057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5629e5429b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5629e5411019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5629e543ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f0bdf05a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (13%) in 11 allocation(s) Step #5: #0 0x5629e553eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5629e5768253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5629e543ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f0bdf05a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x67,0x41,0x41,0x4c,0x2b,0x61,0x57,0x73,0x73,0x65,0x2b,0x2f,0x62,0x57,0x69,0x65,0x2f,0x2f,0x30,0x42,0x41,0x78,0x67,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,gAAL+aWsse+/bWie//0BAxg\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-1080bd4e9a1481be1790152797d66770c5c9bf59 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCxnQUFMK2FXc3NlKy9iV2llLy8wQkF4ZyJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 5 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4037752242 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5561589786b0, 0x55615897d24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55615897d250,0x5561589c8c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/1080bd4e9a1481be1790152797d66770c5c9bf59' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 5656 processed earlier; will process 6968 files now Step #5: #1 pulse cov: 830 ft: 831 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 877 ft: 889 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1122 ft: 1347 exec/s: 4 rss: 278Mb Step #5: #8 pulse cov: 1380 ft: 1836 exec/s: 4 rss: 1859Mb Step #5: #16 pulse cov: 1699 ft: 2357 exec/s: 5 rss: 1859Mb Step #5: #32 pulse cov: 2132 ft: 3122 exec/s: 4 rss: 1859Mb Step #5: #64 pulse cov: 2214 ft: 3449 exec/s: 3 rss: 1859Mb Step #5: #128 pulse cov: 2741 ft: 4962 exec/s: 4 rss: 1859Mb Step #5: ==58== ERROR: libFuzzer: out-of-memory (used: 2059Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 185016483 bytes in 24440 chunks; quarantined: 11256400 bytes in 3800 chunks; 32617 other chunks; total chunks: 60857; showing top 95% (at most 8 unique contexts) Step #5: 157280265 byte(s) (85%) in 1 allocation(s) Step #5: #0 0x556158667ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5561587535d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5561587535d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5561587535d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x556158736aa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x5561586ac219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5561586d1cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5561586d1cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5561587b9f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5561587b9f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5561587b9f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5561587b9f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x556158810637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x556158810637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x556158810637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x556158810637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5561586fc509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5561586e7889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x556158733925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x556158733925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x556158733925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55615854957d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x556158552b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55615853a019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x556158565cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fa4917aa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (13%) in 11 allocation(s) Step #5: #0 0x556158667ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x556158891253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x556158565cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fa4917aa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x6a,0x70,0x65,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x55,0x77,0x41,0x4b,0x76,0x77,0x77,0x7a,0x77,0x77,0x61,0x73,0x61,0x6d,0x70,0x6c,0x65,0x77,0x77,0x5a,0x51,0x41,0x2f,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/jpeg;base64,UwAKvwwzwwasamplewwZQA/\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-22d5b69d29b39543c2e0ee375d8023ec904dce60 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsVXdBS3Z3d3p3d2FzYW1wbGV3d1pRQS8ifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 6 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4080840375 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55b477e7f6b0, 0x55b477e8424b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55b477e84250,0x55b477ecfc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/22d5b69d29b39543c2e0ee375d8023ec904dce60' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 5862 processed earlier; will process 6762 files now Step #5: #1 pulse cov: 745 ft: 746 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 841 ft: 871 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1262 ft: 1571 exec/s: 0 rss: 42Mb Step #5: #8 pulse cov: 1552 ft: 2116 exec/s: 0 rss: 43Mb Step #5: #16 pulse cov: 1784 ft: 2510 exec/s: 0 rss: 1773Mb Step #5: #32 pulse cov: 2227 ft: 3391 exec/s: 0 rss: 1773Mb Step #5: #64 pulse cov: 2513 ft: 4329 exec/s: 21 rss: 1773Mb Step #5: #128 pulse cov: 2906 ft: 5742 exec/s: 8 rss: 1773Mb Step #5: #256 pulse cov: 3362 ft: 7660 exec/s: 8 rss: 1917Mb Step #5: ==62== ERROR: libFuzzer: out-of-memory (used: 2265Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2348791198 bytes in 27863 chunks; quarantined: 10810701 bytes in 730 chunks; 36666 other chunks; total chunks: 65259; showing top 95% (at most 8 unique contexts) Step #5: 1197468481 byte(s) (50%) in 1 allocation(s) Step #5: #0 0x55b477b6eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b477c50f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55b477c50f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55b477c50f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x55b477c50f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x55b477c3c324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x55b477bb3219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55b477bd8cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55b477bd8cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55b477cc0f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x55b477cc0f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x55b477cc0f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x55b477cc0f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x55b477d17637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x55b477d17637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x55b477d17637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55b477d17637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55b477c03509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55b477bee889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55b477c3a925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55b477c3a925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55b477c3a925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55b477a5057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x55b477a59b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55b477a41019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x55b477a6ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f5369d45082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 748921645 byte(s) (31%) in 3 allocation(s) Step #5: #0 0x55b477b6eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b477c81707 in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3344:37 Step #5: #2 0x55b477c78a91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x55b477c4906c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x55b477c4906c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x55b477c4906c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x55b477c3c324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x55b477bb3219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x55b477bd8cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x55b477bd8cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x55b477cc0f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x55b477cc0f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x55b477cc0f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x55b477cc0f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x55b477d17637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x55b477d17637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x55b477d17637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x55b477d17637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x55b477c03509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x55b477bee889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x55b477c3a925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x55b477c3a925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x55b477c3a925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x55b477a5057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x55b477a59b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x55b477a41019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x55b477a6ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f5369d45082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 374460845 byte(s) (15%) in 3 allocation(s) Step #5: #0 0x55b477b6eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b477c815ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x55b477c78a91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x55b477c4906c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x55b477c4906c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x55b477c4906c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x55b477c3c324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x55b477bb3219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x55b477bd8cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x55b477bd8cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x55b477cc0f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x55b477cc0f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x55b477cc0f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x55b477cc0f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x55b477d17637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x55b477d17637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x55b477d17637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x55b477d17637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x55b477c03509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x55b477bee889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x55b477c3a925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x55b477c3a925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x55b477c3a925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x55b477a5057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x55b477a59b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x55b477a41019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x55b477a6ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f5369d45082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x52,0x35,0x41,0x2f,0x31,0x51,0x4f,0x45,0x45,0x51,0x4e,0x30,0x49,0x51,0x47,0x2f,0x45,0x6b,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEIR5A/1QOEEQN0IQG/Ek\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-45f67d3776bfc8f2dd7cb328aaded92dc9f276ba Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUlSNUEvMVFPRUVRTjBJUUcvRWsifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 7 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4131937980 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55b6de6c46b0, 0x55b6de6c924b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55b6de6c9250,0x55b6de714c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/45f67d3776bfc8f2dd7cb328aaded92dc9f276ba' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 6200 processed earlier; will process 6424 files now Step #5: #1 pulse cov: 736 ft: 737 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 865 ft: 996 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 988 ft: 1172 exec/s: 0 rss: 96Mb Step #5: #8 pulse cov: 1525 ft: 1994 exec/s: 0 rss: 782Mb Step #5: #16 pulse cov: 1701 ft: 2259 exec/s: 16 rss: 782Mb Step #5: #32 pulse cov: 1984 ft: 3081 exec/s: 32 rss: 782Mb Step #5: ==66== ERROR: libFuzzer: out-of-memory (used: 2329Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2415932532 bytes in 21270 chunks; quarantined: 9955227 bytes in 614 chunks; 34600 other chunks; total chunks: 56484; showing top 95% (at most 8 unique contexts) Step #5: 1194161473 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55b6de3b3ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b6de495f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55b6de495f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55b6de495f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x55b6de495f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x55b6de481324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x55b6de3f8219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55b6de41dcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55b6de41dcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55b6de505f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x55b6de505f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x55b6de505f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x55b6de505f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x55b6de55c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x55b6de55c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x55b6de55c637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55b6de55c637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55b6de448509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55b6de433889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55b6de47f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55b6de47f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55b6de47f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55b6de29557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x55b6de29eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55b6de286019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x55b6de2b1cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f740ab6e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1194161472 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55b6de3f68ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x55b6de506533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x55b6de506533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x55b6de506533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x55b6de506533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x55b6de506533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x55b6de41e950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x55b6de41e950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x55b6de505f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55b6de505f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55b6de505f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55b6de505f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55b6de55c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55b6de55c637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55b6de55c637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55b6de55c637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55b6de448509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55b6de433889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55b6de47f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55b6de47f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55b6de47f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55b6de29557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55b6de29eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55b6de286019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55b6de2b1cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f740ab6e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x52,0x31,0x41,0x2f,0x34,0x51,0x4f,0x45,0x45,0x51,0x4e,0x30,0x49,0x51,0x47,0x2f,0x45,0x6b,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEIR1A/4QOEEQN0IQG/Ek\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-7752a2a5ceeb14e0d62f2e7a388d61ba126056a8 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUlSMUEvNFFPRUVRTjBJUUcvRWsifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 8 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4138034847 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55ac841dd6b0, 0x55ac841e224b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55ac841e2250,0x55ac8422dc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/7752a2a5ceeb14e0d62f2e7a388d61ba126056a8' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 6261 processed earlier; will process 6363 files now Step #5: #1 pulse cov: 830 ft: 831 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 975 ft: 986 exec/s: 0 rss: 41Mb Step #5: #4 pulse cov: 1151 ft: 1252 exec/s: 0 rss: 41Mb Step #5: #8 pulse cov: 1623 ft: 2154 exec/s: 0 rss: 42Mb Step #5: #16 pulse cov: 1978 ft: 2621 exec/s: 0 rss: 149Mb Step #5: #32 pulse cov: 2214 ft: 3134 exec/s: 0 rss: 149Mb Step #5: #64 pulse cov: 2449 ft: 3869 exec/s: 0 rss: 1365Mb Step #5: #128 pulse cov: 3009 ft: 5385 exec/s: 18 rss: 1381Mb Step #5: #256 pulse cov: 3344 ft: 7386 exec/s: 12 rss: 1535Mb Step #5: ==70== ERROR: libFuzzer: out-of-memory (used: 2103Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 41709934 bytes in 27881 chunks; quarantined: 8466004 bytes in 889 chunks; 32031 other chunks; total chunks: 60801; showing top 95% (at most 8 unique contexts) Step #5: 24383096 byte(s) (58%) in 11 allocation(s) Step #5: #0 0x55ac83ecced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ac840f6253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55ac83dcacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f05d3c6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 9224192 byte(s) (22%) in 1 allocation(s) Step #5: #0 0x55ac83ecced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ac83fc130a in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55ac83fc130a in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55ac83fc130a in stbi__convert_format(unsigned char*, int, int, unsigned int, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1761:29 Step #5: #4 0x55ac83fba49f in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6084:18 Step #5: #5 0x55ac83f9baa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #6 0x55ac83f11219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55ac83f36cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55ac83f36cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55ac8401ef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x55ac8401ef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x55ac8401ef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x55ac8401ef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x55ac84075637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x55ac84075637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x55ac84075637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55ac84075637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55ac83f61509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55ac83f4c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55ac83f98925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55ac83f98925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55ac83f98925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55ac83dae57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x55ac83db7b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55ac83d9f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x55ac83dcacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f05d3c6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 4612096 byte(s) (11%) in 1 allocation(s) Step #5: #0 0x55ac83ecced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ac83fb85d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55ac83fb85d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55ac83fb85d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x55ac83f9baa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x55ac83f11219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55ac83f36cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55ac83f36cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55ac8401ef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55ac8401ef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55ac8401ef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55ac8401ef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55ac84075637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55ac84075637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55ac84075637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55ac84075637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55ac83f61509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55ac83f4c889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55ac83f98925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55ac83f98925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55ac83f98925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55ac83dae57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55ac83db7b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55ac83d9f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55ac83dcacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f05d3c6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1048576 byte(s) (2%) in 1 allocation(s) Step #5: #0 0x55ac83ecced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ac840f6253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55ac83d9efdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55ac83dcacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7f05d3c6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: 1009920 byte(s) (2%) in 1 allocation(s) Step #5: #0 0x55ac83ecced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ac840f6253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55ac83db5a92 in fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:71:9 Step #5: #3 0x55ac83db76f2 in ParseOrExit /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:32:8 Step #5: #4 0x55ac83db76f2 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:209:5 Step #5: #5 0x55ac83d9f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #6 0x55ac83dcacf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #7 0x7f05d3c6a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x31,0x35,0x45,0x76,0x41,0x45,0x50,0x41,0x32,0x6d,0x41,0x41,0x41,0x41,0x41,0x41,0x41,0x4d,0x41,0x41,0x41,0x41,0x30,0x71,0x43,0x41,0x41,0x41,0x45,0x41,0x41,0x51,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,Qk15EvAEPA2mAAAAAAAMAAAA0qCAAAEAAQ\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-8ab2fa2abad980420884df948ad61a39246b47b8 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxRazE1RXZBRVBBMm1BQUFBQUFBTUFBQUEwcUNBQUFFQUFRIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 9 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4176130577 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55f7eb28d6b0, 0x55f7eb29224b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55f7eb292250,0x55f7eb2ddc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/8ab2fa2abad980420884df948ad61a39246b47b8' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 6660 processed earlier; will process 5964 files now Step #5: #1 pulse cov: 786 ft: 787 exec/s: 0 rss: 1660Mb Step #5: #2 pulse cov: 855 ft: 916 exec/s: 0 rss: 1660Mb Step #5: #4 pulse cov: 874 ft: 948 exec/s: 0 rss: 1660Mb Step #5: #8 pulse cov: 1212 ft: 1496 exec/s: 1 rss: 1660Mb Step #5: #16 pulse cov: 1398 ft: 1781 exec/s: 2 rss: 1660Mb Step #5: #32 pulse cov: 2020 ft: 3090 exec/s: 4 rss: 1882Mb Step #5: #64 pulse cov: 2524 ft: 4392 exec/s: 8 rss: 1882Mb Step #5: #128 pulse cov: 2994 ft: 5615 exec/s: 9 rss: 1882Mb Step #5: #256 pulse cov: 3387 ft: 7270 exec/s: 17 rss: 1882Mb Step #5: #512 pulse cov: 3740 ft: 9403 exec/s: 6 rss: 1882Mb Step #5: ==74== ERROR: libFuzzer: out-of-memory (used: 2138Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2207429554 bytes in 30093 chunks; quarantined: 9607843 bytes in 895 chunks; 34078 other chunks; total chunks: 65066; showing top 95% (at most 8 unique contexts) Step #5: 968652216 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55f7eaf7ced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55f7eb07c2dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55f7eb07c2dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x55f7eb049c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55f7eb049c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55f7eafc1219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55f7eafe6cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55f7eafe6cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55f7eb0cef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55f7eb0cef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55f7eb0cef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55f7eb0cef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55f7eb125637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55f7eb125637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55f7eb125637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55f7eb125637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55f7eb011509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55f7eaffc889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55f7eb048925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55f7eb048925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55f7eb048925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55f7eae5e57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55f7eae67b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55f7eae4f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55f7eae7acf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5a667cd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 968652216 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55f7eaf7ced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55f7eb07c2aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55f7eb07c2aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x55f7eb049c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55f7eb049c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55f7eafc1219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55f7eafe6cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55f7eafe6cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55f7eb0cef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55f7eb0cef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55f7eb0cef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55f7eb0cef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55f7eb125637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55f7eb125637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55f7eb125637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55f7eb125637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55f7eb011509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55f7eaffc889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55f7eb048925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55f7eb048925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55f7eb048925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55f7eae5e57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55f7eae67b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55f7eae4f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55f7eae7acf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5a667cd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 242163054 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x55f7eaf7ced4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55f7eb07c315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55f7eb07c315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x55f7eb049c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55f7eb049c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55f7eafc1219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55f7eafe6cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55f7eafe6cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55f7eb0cef20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55f7eb0cef20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55f7eb0cef20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55f7eb0cef20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55f7eb125637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55f7eb125637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55f7eb125637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55f7eb125637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55f7eb011509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55f7eaffc889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55f7eb048925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55f7eb048925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55f7eb048925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55f7eae5e57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55f7eae67b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55f7eae4f019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55f7eae7acf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5a667cd082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x63,0x61,0x31,0x4f,0x46,0x64,0x68,0x63,0x61,0x30,0x4f,0x6d,0x44,0x79,0x79,0x79,0x79,0x79,0x79,0x79,0x47,0x6c,0x41,0x45,0x69,0x68,0x41,0x41,0x44,0x63,0x69,0x79,0x41,0x58,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdhca1OFdhca0OmDyyyyyyyGlAEihAADciyAX\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-e144f3f6071a2797be9ab3cae1a63061ea47d72b Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaGNhMU9GZGhjYTBPbUR5eXl5eXl5R2xBRWloQUFEY2l5QVgifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 10 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4259235348 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55fc998596b0, 0x55fc9985e24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55fc9985e250,0x55fc998a9c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/e144f3f6071a2797be9ab3cae1a63061ea47d72b' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 7189 processed earlier; will process 5435 files now Step #5: #1 pulse cov: 611 ft: 612 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 966 ft: 1101 exec/s: 0 rss: 412Mb Step #5: #4 pulse cov: 1110 ft: 1318 exec/s: 4 rss: 925Mb Step #5: #8 pulse cov: 1207 ft: 1461 exec/s: 1 rss: 1523Mb Step #5: #16 pulse cov: 1394 ft: 1931 exec/s: 1 rss: 2022Mb Step #5: #32 pulse cov: 1786 ft: 2823 exec/s: 1 rss: 2022Mb Step #5: #64 pulse cov: 2517 ft: 4168 exec/s: 1 rss: 2025Mb Step #5: ==78== ERROR: libFuzzer: out-of-memory (used: 2377Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2469482519 bytes in 22462 chunks; quarantined: 5591507 bytes in 920 chunks; 33195 other chunks; total chunks: 56577; showing top 95% (at most 8 unique contexts) Step #5: 1085255700 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55fc99548ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55fc996482dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55fc996482dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x55fc99615c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55fc99615c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55fc9958d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55fc995b2cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55fc995b2cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55fc9969af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55fc9969af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55fc9969af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55fc9969af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55fc996f1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55fc996f1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55fc996f1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55fc996f1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55fc995dd509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55fc995c8889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55fc99614925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55fc99614925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55fc99614925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55fc9942a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55fc99433b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55fc9941b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55fc99446cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe210b26082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 1085255700 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55fc99548ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55fc996482aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55fc996482aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x55fc99615c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55fc99615c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55fc9958d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55fc995b2cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55fc995b2cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55fc9969af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55fc9969af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55fc9969af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55fc9969af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55fc996f1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55fc996f1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55fc996f1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55fc996f1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55fc995dd509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55fc995c8889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55fc99614925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55fc99614925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55fc99614925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55fc9942a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55fc99433b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55fc9941b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55fc99446cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe210b26082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 271313925 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x55fc99548ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55fc99648315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55fc99648315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x55fc99615c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55fc99615c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55fc9958d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55fc995b2cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55fc995b2cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55fc9969af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55fc9969af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55fc9969af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55fc9969af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55fc996f1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55fc996f1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55fc996f1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55fc996f1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55fc995dd509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55fc995c8889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55fc99614925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55fc99614925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55fc99614925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55fc9942a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55fc99433b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55fc9941b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55fc99446cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe210b26082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x31,0x79,0x4f,0x44,0x63,0x79,0x79,0x61,0x79,0x79,0x79,0x79,0x47,0x4c,0x41,0x41,0x41,0x51,0x64,0x68,0x41,0x4f,0x44,0x63,0x4f,0x61,0x41,0x69,0x79,0x41,0x41,0x41,0x58,0x39,0x48,0x58,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh1yODcyyayyyyGLAAAQdhAODcOaAiyAAAX9HX\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-38b8f576c4e25cc7486f8674b5c4b634d697aff6 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDF5T0RjeXlheXl5eUdMQUFBUWRoQU9EY09hQWl5QUFBWDlIWCJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 11 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3365953 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55d4048db6b0, 0x55d4048e024b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55d4048e0250,0x55d40492bc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/38b8f576c4e25cc7486f8674b5c4b634d697aff6' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 7261 processed earlier; will process 5363 files now Step #5: #1 pulse cov: 796 ft: 797 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 1069 ft: 1249 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1315 ft: 1601 exec/s: 4 rss: 1298Mb Step #5: #8 pulse cov: 1570 ft: 1913 exec/s: 4 rss: 1298Mb Step #5: #16 pulse cov: 1890 ft: 2795 exec/s: 8 rss: 1298Mb Step #5: #32 pulse cov: 2261 ft: 3956 exec/s: 6 rss: 1532Mb Step #5: ==82== ERROR: libFuzzer: out-of-memory (used: 2224Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2312776394 bytes in 21709 chunks; quarantined: 6743086 bytes in 145 chunks; 34645 other chunks; total chunks: 56499; showing top 95% (at most 8 unique contexts) Step #5: 1015621824 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55d4045caed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55d4046ca2dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55d4046ca2dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x55d404697c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55d404697c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55d40460f219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55d404634cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55d404634cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55d40471cf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55d40471cf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55d40471cf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55d40471cf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55d404773637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55d404773637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55d404773637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55d404773637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55d40465f509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55d40464a889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55d404696925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55d404696925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55d404696925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55d4044ac57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55d4044b5b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55d40449d019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55d4044c8cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fabcd5d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 1015621824 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55d4045caed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55d4046ca2aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55d4046ca2aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x55d404697c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55d404697c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55d40460f219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55d404634cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55d404634cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55d40471cf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55d40471cf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55d40471cf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55d40471cf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55d404773637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55d404773637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55d404773637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55d404773637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55d40465f509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55d40464a889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55d404696925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55d404696925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55d404696925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55d4044ac57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55d4044b5b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55d40449d019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55d4044c8cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fabcd5d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 253905456 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x55d4045caed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55d4046ca315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55d4046ca315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x55d404697c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55d404697c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55d40460f219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55d404634cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55d404634cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55d40471cf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55d40471cf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55d40471cf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55d40471cf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55d404773637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55d404773637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55d404773637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55d404773637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55d40465f509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55d40464a889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55d404696925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55d404696925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55d404696925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55d4044ac57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55d4044b5b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55d40449d019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55d4044c8cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fabcd5d8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x32,0x50,0x61,0x79,0x44,0x79,0x79,0x61,0x79,0x79,0x79,0x79,0x47,0x6c,0x41,0x41,0x41,0x41,0x41,0x68,0x41,0x4f,0x44,0x63,0x4f,0x61,0x41,0x69,0x79,0x41,0x41,0x41,0x58,0x34,0x48,0x58,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh2PayDyyayyyyGlAAAAAhAODcOaAiyAAAX4HX\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-f8ad821b667addc47e4b5adfcc9d85406399d3fb Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDJQYXlEeXlheXl5eUdsQUFBQUFoQU9EY09hQWl5QUFBWDRIWCJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 12 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 18496352 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x56339eca76b0, 0x56339ecac24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x56339ecac250,0x56339ecf7c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/f8ad821b667addc47e4b5adfcc9d85406399d3fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 7305 processed earlier; will process 5319 files now Step #5: #1 pulse cov: 649 ft: 650 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 897 ft: 944 exec/s: 1 rss: 1522Mb Step #5: #4 pulse cov: 1205 ft: 1477 exec/s: 2 rss: 1522Mb Step #5: #8 pulse cov: 1409 ft: 1930 exec/s: 2 rss: 1522Mb Step #5: #16 pulse cov: 1568 ft: 2240 exec/s: 2 rss: 1525Mb Step #5: #32 pulse cov: 2000 ft: 2988 exec/s: 2 rss: 1526Mb Step #5: #64 pulse cov: 2415 ft: 3835 exec/s: 4 rss: 1526Mb Step #5: #128 pulse cov: 2762 ft: 4944 exec/s: 8 rss: 1554Mb Step #5: #256 pulse cov: 3624 ft: 8615 exec/s: 6 rss: 1913Mb Step #5: #512 pulse cov: 3935 ft: 11139 exec/s: 8 rss: 1913Mb Step #5: #1024 pulse cov: 4154 ft: 13773 exec/s: 9 rss: 1913Mb Step #5: #2048 pulse cov: 4405 ft: 17720 exec/s: 6 rss: 1913Mb Step #5: #4096 pulse cov: 4476 ft: 25036 exec/s: 7 rss: 1915Mb Step #5: AddressSanitizer:DEADLYSIGNAL Step #5: ================================================================= Step #5: ==86==ERROR: AddressSanitizer: stack-overflow on address 0x7ffdca6d8c98 (pc 0x56339e994df6 bp 0x7ffdca6d94d0 sp 0x7ffdca6d8ca0 T0) Step #5: SCARINESS: 10 (stack-overflow) Step #5: #0 0x56339e994df6 in __asan_memset /src/llvm-project/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cpp:67:3 Step #5: #1 0x56339eacc7fa in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3665:9 Step #5: #2 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #3 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #4 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #5 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #6 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #7 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #8 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #9 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #10 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #11 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #12 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #13 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #14 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #15 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #16 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #17 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #18 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #19 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #20 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #21 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #22 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #23 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #24 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #25 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #26 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #27 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #28 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #29 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #30 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #31 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #32 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #33 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #34 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #35 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #36 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #37 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #38 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #39 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #40 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #41 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #42 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #43 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #44 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #45 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #46 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #47 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #48 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #49 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #50 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #51 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #52 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #53 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #54 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #55 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #56 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #57 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #58 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #59 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #60 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #61 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #62 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #63 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #64 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #65 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #66 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #67 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #68 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #69 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #70 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #71 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #72 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #73 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #74 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #75 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #76 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #77 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #78 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #79 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #80 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #81 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #82 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #83 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #84 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #85 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #86 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #87 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #88 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #89 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #90 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #91 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #92 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #93 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #94 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #95 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #96 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #97 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #98 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #99 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #100 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #101 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #102 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #103 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #104 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #105 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #106 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #107 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #108 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #109 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #110 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #111 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #112 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #113 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #114 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #115 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #116 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #117 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #118 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #119 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #120 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #121 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #122 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #123 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #124 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #125 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #126 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #127 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #128 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #129 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #130 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #131 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #132 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #133 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #134 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #135 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #136 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #137 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #138 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #139 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #140 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #141 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #142 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #143 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #144 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #145 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #146 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #147 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #148 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #149 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #150 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #151 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #152 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #153 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #154 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #155 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #156 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #157 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #158 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #159 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #160 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #161 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #162 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #163 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #164 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #165 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #166 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #167 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #168 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #169 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #170 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #171 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #172 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #173 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #174 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #175 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #176 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #177 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #178 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #179 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #180 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #181 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #182 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #183 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #184 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #185 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #186 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #187 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #188 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #189 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #190 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #191 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #192 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #193 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #194 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #195 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #196 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #197 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #198 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #199 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #200 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #201 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #202 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #203 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #204 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #205 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #206 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #207 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #208 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #209 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #210 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #211 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #212 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #213 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #214 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #215 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #216 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #217 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #218 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #219 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #220 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #221 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #222 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #223 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #224 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #225 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #226 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #227 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #228 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #229 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #230 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #231 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #232 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #233 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #234 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #235 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #236 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #237 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #238 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #239 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #240 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #241 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #242 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #243 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #244 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #245 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #246 0x56339eaccbbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: Step #5: DEDUP_TOKEN: __asan_memset--tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&)--tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) Step #5: SUMMARY: AddressSanitizer: stack-overflow /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3665:9 in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) Step #5: ==86==ABORTING Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./crash-f71704490c5264022a4d4e07a5dafa56c6c4115a Step #5: MERGE-OUTER: attempt 13 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 600480837 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x564e8b45f6b0, 0x564e8b46424b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x564e8b464250,0x564e8b4afc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/f71704490c5264022a4d4e07a5dafa56c6c4115a' caused a failure at the previous merge step Step #5: MERGE-INNER: 12624 total files; 11873 processed earlier; will process 751 files now Step #5: #1 pulse cov: 850 ft: 851 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 1043 ft: 1209 exec/s: 0 rss: 48Mb Step #5: #4 pulse cov: 1325 ft: 1903 exec/s: 0 rss: 49Mb Step #5: #8 pulse cov: 1975 ft: 3360 exec/s: 0 rss: 60Mb Step #5: #16 pulse cov: 2456 ft: 5117 exec/s: 0 rss: 65Mb Step #5: #32 pulse cov: 2697 ft: 7019 exec/s: 0 rss: 66Mb Step #5: #64 pulse cov: 3274 ft: 9712 exec/s: 6 rss: 1395Mb Step #5: #128 pulse cov: 3555 ft: 12091 exec/s: 4 rss: 1399Mb Step #5: #256 pulse cov: 3845 ft: 14704 exec/s: 7 rss: 1446Mb Step #5: #512 pulse cov: 3948 ft: 16276 exec/s: 9 rss: 1446Mb Step #5: #751 DONE cov: 4054 ft: 17088 exec/s: 10 rss: 1446Mb Step #5: MERGE-OUTER: successful in 13 attempt(s) Step #5: MERGE-OUTER: the control file has 2119653 bytes Step #5: MERGE-OUTER: consumed 1Mb (59Mb rss) to parse the control file Step #5: MERGE-OUTER: 7751 new files with 28759 new features added; 4937 new coverage edges Step #5: [2025-11-21 06:45:18,617 INFO] Finding shared libraries for targets (if any). Step #5: [2025-11-21 06:45:18,627 INFO] Finished finding shared libraries for targets. Step #5: Coverage error, creating log file: /workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log Step #5: [2025-11-21 06:45:18,921 INFO] Finding shared libraries for targets (if any). Step #5: [2025-11-21 06:45:18,930 INFO] Finished finding shared libraries for targets. Step #5: [2025-11-21 06:45:19,146 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-11-21 06:45:19,146 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html". Step #5: [2025-11-21 06:45:19,155 DEBUG] Finished generating file view html index file. Step #5: [2025-11-21 06:45:19,155 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-11-21 06:45:19,155 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-11-21 06:45:19,155 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-11-21 06:45:19,199 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-11-21 06:45:19,199 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html". Step #5: [2025-11-21 06:45:19,200 DEBUG] Finished generating directory view html index file. Step #5: [2025-11-21 06:45:19,200 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html". Step #5: [2025-11-21 06:45:19,424 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-11-21 06:45:19,424 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html". Step #5: [2025-11-21 06:45:19,433 DEBUG] Finished generating file view html index file. Step #5: [2025-11-21 06:45:19,433 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-11-21 06:45:19,433 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-11-21 06:45:19,433 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-11-21 06:45:19,468 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-11-21 06:45:19,468 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html". Step #5: [2025-11-21 06:45:19,468 DEBUG] Finished generating directory view html index file. Step #5: [2025-11-21 06:45:19,468 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html". Finished Step #5 Starting Step #6 Step #6: Pulling image: gcr.io/cloud-builders/gsutil Step #6: Using default tag: latest Step #6: latest: Pulling from cloud-builders/gsutil Step #6: 828c1365039a: Already exists Step #6: 5b8b445149c8: Pulling fs layer Step #6: f94c61d5ab3e: Pulling fs layer Step #6: 6963728227ac: Pulling fs layer Step #6: 5b3c2a41485f: Pulling fs layer Step #6: 7af559a52100: Pulling fs layer Step #6: 5666a5d74b7c: Pulling fs layer Step #6: 91370b17df9f: Pulling fs layer Step #6: 91370b17df9f: Waiting Step #6: f94c61d5ab3e: Verifying Checksum Step #6: f94c61d5ab3e: Download complete Step #6: 5b8b445149c8: Verifying Checksum Step #6: 5b8b445149c8: Download complete Step #6: 7af559a52100: Download complete Step #6: 5666a5d74b7c: Verifying Checksum Step #6: 5666a5d74b7c: Download complete Step #6: 5b3c2a41485f: Verifying Checksum Step #6: 5b3c2a41485f: Download complete Step #6: 5b8b445149c8: Pull complete Step #6: 91370b17df9f: Verifying Checksum Step #6: 91370b17df9f: Download complete Step #6: f94c61d5ab3e: Pull complete Step #6: 6963728227ac: Verifying Checksum Step #6: 6963728227ac: Download complete Step #6: 6963728227ac: Pull complete Step #6: 5b3c2a41485f: Pull complete Step #6: 7af559a52100: Pull complete Step #6: 5666a5d74b7c: Pull complete Step #6: 91370b17df9f: Pull complete Step #6: Digest: sha256:94e88a3fc11c1fdf37f87cbee09b4cafac663ee32bb97fa87163ebaa73d847e4 Step #6: Status: Downloaded newer image for gcr.io/cloud-builders/gsutil:latest Step #6: gcr.io/cloud-builders/gsutil:latest Step #6: CommandException: 1 files/objects could not be removed. Finished Step #6 Starting Step #7 Step #7: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #7: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/control.js [Content-Type=text/javascript]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/style.css [Content-Type=text/css]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/summary.json [Content-Type=application/json]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 2.3 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/report.html [Content-Type=text/html]... Step #7: / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/report.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #7: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #7: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done / [6/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done / [7/16 files][ 8.9 MiB/ 9.4 MiB] 95% Done / [8/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [9/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [10/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #7: Operation completed over 16 objects/9.4 MiB. Finished Step #7 Starting Step #8 Step #8: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #8: CommandException: 1 files/objects could not be removed. Finished Step #8 Starting Step #9 Step #9: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/control.js [Content-Type=text/javascript]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/style.css [Content-Type=text/css]... Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/summary.json [Content-Type=application/json]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 2.3 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/report.html [Content-Type=text/html]... Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html [Content-Type=text/html]... Step #9: / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/report.html [Content-Type=text/html]... Step #9: / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done / [6/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #9: / [6/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done / [7/16 files][557.4 KiB/ 9.4 MiB] 5% Done / [8/16 files][ 7.4 MiB/ 9.4 MiB] 78% Done / [9/16 files][ 8.4 MiB/ 9.4 MiB] 89% Done / [10/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #9: Operation completed over 16 objects/9.4 MiB. Finished Step #9 Starting Step #10 Step #10: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #10: CommandException: 1 files/objects could not be removed. Finished Step #10 Starting Step #11 Step #11: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #11: Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf.json [Content-Type=application/json]... Step #11: / [0/3 files][ 0.0 B/ 3.5 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log [Content-Type=application/octet-stream]... Step #11: / [0/3 files][ 0.0 B/ 3.5 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/coverage_targets.txt [Content-Type=text/plain]... Step #11: / [0/3 files][ 0.0 B/ 3.5 KiB] 0% Done / [1/3 files][ 3.5 KiB/ 3.5 KiB] 99% Done / [2/3 files][ 3.5 KiB/ 3.5 KiB] 99% Done / [3/3 files][ 3.5 KiB/ 3.5 KiB] 100% Done Step #11: Operation completed over 3 objects/3.5 KiB. Finished Step #11 Starting Step #12 Step #12: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #12: CommandException: 1 files/objects could not be removed. Finished Step #12 Starting Step #13 Step #13: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #13: Copying file:///workspace/out/libfuzzer-coverage-x86_64/textcov_reports/fuzz_gltf.covreport [Content-Type=application/octet-stream]... Step #13: / [0/1 files][ 0.0 B/754.0 KiB] 0% Done / [1/1 files][754.0 KiB/754.0 KiB] 100% Done Step #13: Operation completed over 1 objects/754.0 KiB. Finished Step #13 Starting Step #14 Step #14: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #14: CommandException: 1 files/objects could not be removed. Finished Step #14 Starting Step #15 Step #15: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #15: Copying file:///workspace/out/libfuzzer-coverage-x86_64/logs/fuzz_gltf.log [Content-Type=application/octet-stream]... Step #15: / [0/1 files][ 0.0 B/346.2 KiB] 0% Done / [1/1 files][346.2 KiB/346.2 KiB] 100% Done Step #15: Operation completed over 1 objects/346.2 KiB. Finished Step #15 Starting Step #16 Step #16: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #16: Copying file:///workspace/srcmap.json [Content-Type=application/json]... Step #16: / [0 files][ 0.0 B/ 154.0 B] / [1 files][ 154.0 B/ 154.0 B] Step #16: Operation completed over 1 objects/154.0 B. Finished Step #16 Starting Step #17 Step #17: Already have image (with digest): gcr.io/cloud-builders/curl Step #17: % Total % Received % Xferd Average Speed Time Time Time Current Step #17: Dload Upload Total Spent Left Speed Step #17: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 312 0 0 100 312 0 1625 --:--:-- --:--:-- --:--:-- 1633 Finished Step #17 PUSH DONE