starting build "4f431433-b088-4a42-b480-de75592a4239" FETCHSOURCE BUILD Starting Step #0 Step #0: Already have image (with digest): gcr.io/cloud-builders/git Step #0: Cloning into 'oss-fuzz'... Finished Step #0 Starting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b" Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Already have image (with digest): gcr.io/cloud-builders/docker Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Sending build context to Docker daemon 5.12kB Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Step 1/5 : FROM gcr.io/oss-fuzz-base/base-builder Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": latest: Pulling from oss-fuzz-base/base-builder Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": b549f31133a9: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": e4841a44e4c6: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 84eada96952e: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 04275b6a66bf: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": f86bc6347431: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 77c3482d7be4: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0d9076907fc6: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 33445caadb9a: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c6a5a0838f3d: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 90ff1cdd600a: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 50e51ef02f12: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed6d38ab5bd7: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4679ddd21d4f: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 935f5665272b: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed272c42105d: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 318578b18eab: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0e6eca0b1d3e: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4101046951ed: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 57f7bb047df8: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 6405a3276a41: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0337885ea0b7: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": fa0ef530d742: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": af564a7818e9: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4bfe5f406c7a: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": cae52ec7dbcb: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": abe9029a36e6: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 35fd5eb66f9c: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 934971e00938: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 8bc6509307e8: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 628d8a234f0c: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c7fd738d0f72: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": d256d8e143c0: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 853768c90345: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 2fd76f3eeac0: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 809d80f27deb: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 79c424ca9de0: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": a99c99d0afb9: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": bd154c39f6a4: Pulling fs layer Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4bfe5f406c7a: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 935f5665272b: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": cae52ec7dbcb: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": abe9029a36e6: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed272c42105d: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 35fd5eb66f9c: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 934971e00938: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 318578b18eab: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 8bc6509307e8: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 628d8a234f0c: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0e6eca0b1d3e: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c7fd738d0f72: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4101046951ed: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 57f7bb047df8: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 6405a3276a41: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0337885ea0b7: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": fa0ef530d742: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": d256d8e143c0: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": af564a7818e9: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 853768c90345: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 2fd76f3eeac0: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 809d80f27deb: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c6a5a0838f3d: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4679ddd21d4f: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": a99c99d0afb9: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed6d38ab5bd7: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 50e51ef02f12: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 33445caadb9a: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0d9076907fc6: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 90ff1cdd600a: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": bd154c39f6a4: Waiting Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 84eada96952e: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 84eada96952e: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": f86bc6347431: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 33445caadb9a: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 33445caadb9a: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0d9076907fc6: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0d9076907fc6: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": b549f31133a9: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": b549f31133a9: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 04275b6a66bf: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 04275b6a66bf: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 50e51ef02f12: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed6d38ab5bd7: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed6d38ab5bd7: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 935f5665272b: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4679ddd21d4f: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4679ddd21d4f: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 318578b18eab: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 318578b18eab: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": e4841a44e4c6: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": e4841a44e4c6: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed272c42105d: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed272c42105d: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 90ff1cdd600a: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 90ff1cdd600a: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4101046951ed: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4101046951ed: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 6405a3276a41: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 6405a3276a41: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0e6eca0b1d3e: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0e6eca0b1d3e: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0337885ea0b7: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0337885ea0b7: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": fa0ef530d742: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4bfe5f406c7a: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": af564a7818e9: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": cae52ec7dbcb: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": cae52ec7dbcb: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": abe9029a36e6: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": b549f31133a9: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 35fd5eb66f9c: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 934971e00938: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 934971e00938: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 8bc6509307e8: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 8bc6509307e8: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c7fd738d0f72: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c7fd738d0f72: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 628d8a234f0c: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 628d8a234f0c: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": d256d8e143c0: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 853768c90345: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 853768c90345: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c6a5a0838f3d: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c6a5a0838f3d: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 2fd76f3eeac0: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 2fd76f3eeac0: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 79c424ca9de0: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 79c424ca9de0: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 809d80f27deb: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": a99c99d0afb9: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": a99c99d0afb9: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": bd154c39f6a4: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": bd154c39f6a4: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 77c3482d7be4: Verifying Checksum Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 77c3482d7be4: Download complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": e4841a44e4c6: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 84eada96952e: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 04275b6a66bf: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": f86bc6347431: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 77c3482d7be4: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0d9076907fc6: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 33445caadb9a: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c6a5a0838f3d: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 90ff1cdd600a: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 50e51ef02f12: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed6d38ab5bd7: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4679ddd21d4f: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 935f5665272b: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ed272c42105d: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 318578b18eab: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0e6eca0b1d3e: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4101046951ed: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 57f7bb047df8: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 6405a3276a41: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 0337885ea0b7: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": fa0ef530d742: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": af564a7818e9: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 4bfe5f406c7a: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": cae52ec7dbcb: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": abe9029a36e6: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 35fd5eb66f9c: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 934971e00938: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 8bc6509307e8: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 628d8a234f0c: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": c7fd738d0f72: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": d256d8e143c0: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 853768c90345: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 2fd76f3eeac0: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 809d80f27deb: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": 79c424ca9de0: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": a99c99d0afb9: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": bd154c39f6a4: Pull complete Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Digest: sha256:5e40d420b53050255d78548ef630b7d321df96da62e69bb5d1de247651cca9aa Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-builder:latest Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> 399c1786e516 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Step 2/5 : RUN pip3 install meson ninja Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> Running in 04d15d17f95c Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Collecting meson Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Downloading meson-1.10.0-py3-none-any.whl.metadata (1.8 kB) Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Collecting ninja Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl.metadata (5.1 kB) Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Downloading meson-1.10.0-py3-none-any.whl (1.1 MB) Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.1/1.1 MB 25.4 MB/s 0:00:00 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl (180 kB) Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Installing collected packages: ninja, meson Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Successfully installed meson-1.10.0 ninja-1.13.0 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning. Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Removing intermediate container 04d15d17f95c Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> 1c00c6ca6ef7 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Step 3/5 : RUN git clone --depth 1 https://github.com/syoyo/tinygltf.git Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> Running in 92d548a03d85 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Cloning into 'tinygltf'... Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Removing intermediate container 92d548a03d85 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> 71c67fcdb4b9 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Step 4/5 : WORKDIR $SRC/tinygltf Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> Running in a96475bff87e Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Removing intermediate container a96475bff87e Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> d0d91359a18d Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Step 5/5 : COPY build.sh $SRC/ Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": ---> bb7ecad47f69 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Successfully built bb7ecad47f69 Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Successfully tagged gcr.io/oss-fuzz/tinygltf:latest Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b": Successfully tagged us-central1-docker.pkg.dev/oss-fuzz/unsafe/tinygltf:latest Finished Step #1 - "build-604cf3f1-f605-4da8-b5d9-93530bc1d15b" Starting Step #2 - "srcmap" Step #2 - "srcmap": Already have image: gcr.io/oss-fuzz/tinygltf Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + SRCMAP=/tmp/file7jeJRN Step #2 - "srcmap": + echo '{}' Step #2 - "srcmap": + PATHS_TO_SCAN=/src Step #2 - "srcmap": + [[ c++ == \g\o ]] Step #2 - "srcmap": ++ find /src -name .git -type d Step #2 - "srcmap": + for DOT_GIT_DIR in $(find $PATHS_TO_SCAN -name ".git" -type d) Step #2 - "srcmap": ++ dirname /src/tinygltf/.git Step #2 - "srcmap": + GIT_DIR=/src/tinygltf Step #2 - "srcmap": + cd /src/tinygltf Step #2 - "srcmap": ++ git config --get remote.origin.url Step #2 - "srcmap": + GIT_URL=https://github.com/syoyo/tinygltf.git Step #2 - "srcmap": ++ git rev-parse HEAD Step #2 - "srcmap": + GIT_REV=81bd50c1062fdb956e878efa2a9234b2b9ec91ec Step #2 - "srcmap": + jq_inplace /tmp/file7jeJRN '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + F=/tmp/fileOfr9Na Step #2 - "srcmap": + cat /tmp/file7jeJRN Step #2 - "srcmap": + jq '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": + mv /tmp/fileOfr9Na /tmp/file7jeJRN Step #2 - "srcmap": ++ find /src -name .svn -type d Step #2 - "srcmap": ++ find /src -name .hg -type d Step #2 - "srcmap": + '[' '' '!=' '' ']' Step #2 - "srcmap": + cat /tmp/file7jeJRN Step #2 - "srcmap": + rm /tmp/file7jeJRN Step #2 - "srcmap": { Step #2 - "srcmap": "/src/tinygltf": { Step #2 - "srcmap": "type": "git", Step #2 - "srcmap": "url": "https://github.com/syoyo/tinygltf.git", Step #2 - "srcmap": "rev": "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" Step #2 - "srcmap": } Step #2 - "srcmap": } Finished Step #2 - "srcmap" Starting Step #3 - "compile-libfuzzer-coverage-x86_64" Step #3 - "compile-libfuzzer-coverage-x86_64": Already have image (with digest): gcr.io/cloud-builders/docker Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": vm.mmap_rnd_bits = 28 Step #3 - "compile-libfuzzer-coverage-x86_64": Compiling libFuzzer to /usr/lib/libFuzzingEngine.a... done. Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": CC=clang Step #3 - "compile-libfuzzer-coverage-x86_64": CXX=clang++ Step #3 - "compile-libfuzzer-coverage-x86_64": CFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument Step #3 - "compile-libfuzzer-coverage-x86_64": CXXFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument -stdlib=libc++ Step #3 - "compile-libfuzzer-coverage-x86_64": RUSTFLAGS=--cfg fuzzing -Cdebuginfo=1 -Cforce-frame-pointers -Cinstrument-coverage -C link-arg=-lc++ Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": + cd tests/fuzzer/ Step #3 - "compile-libfuzzer-coverage-x86_64": + meson build Step #3 - "compile-libfuzzer-coverage-x86_64": The Meson build system Step #3 - "compile-libfuzzer-coverage-x86_64": Version: 1.10.0 Step #3 - "compile-libfuzzer-coverage-x86_64": Source dir: /src/tinygltf/tests/fuzzer Step #3 - "compile-libfuzzer-coverage-x86_64": Build dir: /src/tinygltf/tests/fuzzer/build Step #3 - "compile-libfuzzer-coverage-x86_64": Build type: native build Step #3 - "compile-libfuzzer-coverage-x86_64": Project name: fuzz_tinygltf Step #3 - "compile-libfuzzer-coverage-x86_64": Project version: undefined Step #3 - "compile-libfuzzer-coverage-x86_64": C++ compiler for the host machine: clang++ (clang 22.0.0 "clang version 22.0.0git (https://github.com/llvm/llvm-project.git cb2f0d0a5f14c183e7182aba0f0e54a518de9e3f)") Step #3 - "compile-libfuzzer-coverage-x86_64": C++ linker for the host machine: clang++ ld.bfd 2.34 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu family: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Build targets in project: 1 Step #3 - "compile-libfuzzer-coverage-x86_64": Step #3 - "compile-libfuzzer-coverage-x86_64": Found ninja-1.13.0.git.kitware.jobserver-pipe-1 at /usr/local/bin/ninja Step #3 - "compile-libfuzzer-coverage-x86_64": WARNING: Running the setup command as `meson [options]` instead of `meson setup [options]` is ambiguous and deprecated. Step #3 - "compile-libfuzzer-coverage-x86_64": + cd build Step #3 - "compile-libfuzzer-coverage-x86_64": ++ nproc Step #3 - "compile-libfuzzer-coverage-x86_64": + ninja -j32 Step #3 - "compile-libfuzzer-coverage-x86_64": [0/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o [1/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../fuzz_gltf.cc:10: Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../../../tiny_gltf.h:1715: Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26551:35: warning: identifier '_json' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26551 | inline nlohmann::json operator "" _json(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26570:49: warning: identifier '_json_pointer' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26570 | inline nlohmann::json::json_pointer operator "" _json_pointer(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~~~~~~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json_pointer Step #3 - "compile-libfuzzer-coverage-x86_64": 2 warnings generated. Step #3 - "compile-libfuzzer-coverage-x86_64": [1/2] Linking target fuzz_gltf [2/2] Linking target fuzz_gltf Step #3 - "compile-libfuzzer-coverage-x86_64": + cp fuzz_gltf /workspace/out/libfuzzer-coverage-x86_64/ Finished Step #3 - "compile-libfuzzer-coverage-x86_64" Starting Step #4 Step #4: Pulling image: gcr.io/oss-fuzz-base/base-runner Step #4: Using default tag: latest Step #4: latest: Pulling from oss-fuzz-base/base-runner Step #4: b549f31133a9: Already exists Step #4: e4841a44e4c6: Already exists Step #4: 84eada96952e: Already exists Step #4: 9f88045b392a: Pulling fs layer Step #4: 8cc34e9addcb: Pulling fs layer Step #4: ff03b12ebafa: Pulling fs layer Step #4: 150093372d0a: Pulling fs layer Step #4: 4edd101f5130: Pulling fs layer Step #4: 7e617f38eef9: Pulling fs layer Step #4: 3faf2fe21a0c: Pulling fs layer Step #4: b9b98fec394d: Pulling fs layer Step #4: 399a2873e55f: Pulling fs layer Step #4: 5ba7d88acf04: Pulling fs layer Step #4: 7a1da0c25a6b: Pulling fs layer Step #4: 5d7c33d34cda: Pulling fs layer Step #4: 775e35b09f4d: Pulling fs layer Step #4: 07148187c252: Pulling fs layer Step #4: 54613ddae141: Pulling fs layer Step #4: 91fcd7d7c43d: Pulling fs layer Step #4: e2af06c7d444: Pulling fs layer Step #4: 3191ad09ee16: Pulling fs layer Step #4: 46704c12f66b: Pulling fs layer Step #4: 41879a727c87: Pulling fs layer Step #4: bd08de7700c7: Pulling fs layer Step #4: f37df8620cfd: Pulling fs layer Step #4: d810c5104626: Pulling fs layer Step #4: 85c781846e0d: Pulling fs layer Step #4: 54613ddae141: Waiting Step #4: 41879a727c87: Waiting Step #4: bd08de7700c7: Waiting Step #4: 3faf2fe21a0c: Waiting Step #4: 91fcd7d7c43d: Waiting Step #4: e2af06c7d444: Waiting Step #4: 3191ad09ee16: Waiting Step #4: 46704c12f66b: Waiting Step #4: f37df8620cfd: Waiting Step #4: b9b98fec394d: Waiting Step #4: d810c5104626: Waiting Step #4: 399a2873e55f: Waiting Step #4: 85c781846e0d: Waiting Step #4: 5ba7d88acf04: Waiting Step #4: 775e35b09f4d: Waiting Step #4: 7a1da0c25a6b: Waiting Step #4: 07148187c252: Waiting Step #4: ff03b12ebafa: Verifying Checksum Step #4: ff03b12ebafa: Download complete Step #4: 4edd101f5130: Verifying Checksum Step #4: 4edd101f5130: Download complete Step #4: 9f88045b392a: Verifying Checksum Step #4: 9f88045b392a: Download complete Step #4: 8cc34e9addcb: Verifying Checksum Step #4: 8cc34e9addcb: Download complete Step #4: 150093372d0a: Verifying Checksum Step #4: 150093372d0a: Download complete Step #4: 3faf2fe21a0c: Download complete Step #4: b9b98fec394d: Verifying Checksum Step #4: b9b98fec394d: Download complete Step #4: 399a2873e55f: Download complete Step #4: 9f88045b392a: Pull complete Step #4: 5d7c33d34cda: Verifying Checksum Step #4: 5d7c33d34cda: Download complete Step #4: 775e35b09f4d: Verifying Checksum Step #4: 775e35b09f4d: Download complete Step #4: 7a1da0c25a6b: Verifying Checksum Step #4: 7a1da0c25a6b: Download complete Step #4: 54613ddae141: Download complete Step #4: 8cc34e9addcb: Pull complete Step #4: 7e617f38eef9: Verifying Checksum Step #4: 7e617f38eef9: Download complete Step #4: e2af06c7d444: Verifying Checksum Step #4: e2af06c7d444: Download complete Step #4: ff03b12ebafa: Pull complete Step #4: 3191ad09ee16: Download complete Step #4: 41879a727c87: Download complete Step #4: 150093372d0a: Pull complete Step #4: 5ba7d88acf04: Verifying Checksum Step #4: 5ba7d88acf04: Download complete Step #4: bd08de7700c7: Verifying Checksum Step #4: bd08de7700c7: Download complete Step #4: 4edd101f5130: Pull complete Step #4: d810c5104626: Verifying Checksum Step #4: 85c781846e0d: Download complete Step #4: f37df8620cfd: Verifying Checksum Step #4: f37df8620cfd: Download complete Step #4: 46704c12f66b: Verifying Checksum Step #4: 46704c12f66b: Download complete Step #4: 07148187c252: Verifying Checksum Step #4: 07148187c252: Download complete Step #4: 91fcd7d7c43d: Verifying Checksum Step #4: 91fcd7d7c43d: Download complete Step #4: 7e617f38eef9: Pull complete Step #4: 3faf2fe21a0c: Pull complete Step #4: b9b98fec394d: Pull complete Step #4: 399a2873e55f: Pull complete Step #4: 5ba7d88acf04: Pull complete Step #4: 7a1da0c25a6b: Pull complete Step #4: 5d7c33d34cda: Pull complete Step #4: 775e35b09f4d: Pull complete Step #4: 07148187c252: Pull complete Step #4: 54613ddae141: Pull complete Step #4: 91fcd7d7c43d: Pull complete Step #4: e2af06c7d444: Pull complete Step #4: 3191ad09ee16: Pull complete Step #4: 46704c12f66b: Pull complete Step #4: 41879a727c87: Pull complete Step #4: bd08de7700c7: Pull complete Step #4: f37df8620cfd: Pull complete Step #4: d810c5104626: Pull complete Step #4: 85c781846e0d: Pull complete Step #4: Digest: sha256:867f1b44d19954fa32f21273f1696a30a7bcee083c5222d0398f02574bdfe507 Step #4: Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-runner:latest Step #4: gcr.io/oss-fuzz-base/base-runner:latest Finished Step #4 Starting Step #5 Step #5: Already have image (with digest): gcr.io/oss-fuzz-base/base-runner Step #5: Running fuzz_gltf Step #5: Error occured while running fuzz_gltf: Step #5: Cov returncode: 0, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 35270013 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x558761b346b0, 0x558761b3924b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x558761b39250,0x558761b84c00), Step #5: MERGE-OUTER: 12658 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 35335916 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5600545e36b0, 0x5600545e824b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5600545e8250,0x560054633c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: 12658 total files; 0 processed earlier; will process 12658 files now Step #5: #1 pulse cov: 79 ft: 80 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 79 ft: 80 exec/s: 0 rss: 39Mb Step #5: #4 pulse cov: 213 ft: 218 exec/s: 0 rss: 40Mb Step #5: #8 pulse cov: 273 ft: 283 exec/s: 0 rss: 40Mb Step #5: #16 pulse cov: 336 ft: 357 exec/s: 0 rss: 40Mb Step #5: #32 pulse cov: 378 ft: 418 exec/s: 0 rss: 41Mb Step #5: #64 pulse cov: 560 ft: 742 exec/s: 0 rss: 42Mb Step #5: #128 pulse cov: 646 ft: 881 exec/s: 0 rss: 43Mb Step #5: #256 pulse cov: 724 ft: 1032 exec/s: 0 rss: 45Mb Step #5: #512 pulse cov: 836 ft: 1303 exec/s: 0 rss: 50Mb Step #5: #1024 pulse cov: 995 ft: 1994 exec/s: 0 rss: 58Mb Step #5: #2048 pulse cov: 1133 ft: 3542 exec/s: 0 rss: 60Mb Step #5: #4096 pulse cov: 3580 ft: 10876 exec/s: 0 rss: 67Mb Step #5: ==42== ERROR: libFuzzer: out-of-memory (used: 2069Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1433707157 bytes in 34743 chunks; quarantined: 10171137 bytes in 4262 chunks; 55103 other chunks; total chunks: 94108; showing top 95% (at most 8 unique contexts) Step #5: 624691424 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5600542d2ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5600543d22dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5600543d22dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x56005439fc53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x56005439fc53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x560054317219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x56005433ccec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x56005433ccec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x560054424f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x560054424f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x560054424f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x560054424f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x56005447b637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x56005447b637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x56005447b637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x56005447b637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x560054367509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x560054352889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x56005439e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x56005439e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x56005439e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5600541b457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5600541bdb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5600541a5019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5600541d0cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7eff0881a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 624691424 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5600542d2ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5600543d22aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5600543d22aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x56005439fc53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x56005439fc53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x560054317219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x56005433ccec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x56005433ccec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x560054424f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x560054424f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x560054424f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x560054424f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x56005447b637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x56005447b637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x56005447b637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x56005447b637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x560054367509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x560054352889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x56005439e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x56005439e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x56005439e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5600541b457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5600541bdb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5600541a5019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5600541d0cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7eff0881a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 156172856 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x5600542d2ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5600543d2315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5600543d2315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x56005439fc53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x56005439fc53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x560054317219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x56005433ccec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x56005433ccec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x560054424f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x560054424f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x560054424f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x560054424f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x56005447b637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x56005447b637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x56005447b637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x56005447b637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x560054367509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x560054352889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x56005439e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x56005439e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x56005439e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5600541b457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5600541bdb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5600541a5019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5600541d0cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7eff0881a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x64,0x68,0x63,0x61,0x6d,0x4f,0x44,0x79,0x41,0x32,0x35,0x35,0x6f,0x73,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdhdhcamODyA255os\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-45aca23754a1253a50e2de7ddf10fad81fb14937 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaGRoY2FtT0R5QTI1NW9zIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 39430172 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x564255b8c6b0, 0x564255b9124b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x564255b91250,0x564255bdcc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/45aca23754a1253a50e2de7ddf10fad81fb14937' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 5513 processed earlier; will process 7145 files now Step #5: #1 pulse cov: 753 ft: 754 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 766 ft: 775 exec/s: 0 rss: 39Mb Step #5: #4 pulse cov: 1068 ft: 1280 exec/s: 0 rss: 2337Mb Step #5: #8 pulse cov: 1165 ft: 1452 exec/s: 0 rss: 2337Mb Step #5: #16 pulse cov: 1417 ft: 1814 exec/s: 0 rss: 2337Mb Step #5: #32 pulse cov: 1751 ft: 2293 exec/s: 0 rss: 2337Mb Step #5: ==46== ERROR: libFuzzer: out-of-memory (used: 2337Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2155071061 bytes in 20856 chunks; quarantined: 3008144 bytes in 7223 chunks; 32307 other chunks; total chunks: 60386; showing top 95% (at most 8 unique contexts) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x56425587bed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x56425597b2aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x56425597b2aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x564255948c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x564255948c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5642558c0219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5642558e5cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5642558e5cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5642559cdf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5642559cdf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5642559cdf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5642559cdf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x564255a24637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x564255a24637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x564255a24637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x564255a24637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x564255910509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5642558fb889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x564255947925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x564255947925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x564255947925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x56425575d57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x564255766b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x56425574e019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x564255779cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ff3c3eb8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x56425587bed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x56425597b2dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x56425597b2dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x564255948c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x564255948c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5642558c0219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5642558e5cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5642558e5cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5642559cdf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5642559cdf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5642559cdf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5642559cdf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x564255a24637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x564255a24637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x564255a24637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x564255a24637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x564255910509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5642558fb889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x564255947925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x564255947925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x564255947925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x56425575d57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x564255766b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x56425574e019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x564255779cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ff3c3eb8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 236386048 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x56425587bed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x56425597b315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x56425597b315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x564255948c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x564255948c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5642558c0219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5642558e5cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5642558e5cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5642559cdf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5642559cdf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5642559cdf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5642559cdf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x564255a24637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x564255a24637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x564255a24637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x564255a24637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x564255910509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5642558fb889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x564255947925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x564255947925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x564255947925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x56425575d57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x564255766b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x56425574e019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x564255779cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ff3c3eb8082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x67,0x4f,0x61,0x6d,0x44,0x79,0x79,0x79,0x79,0x79,0x45,0x6d,0x61,0x53,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdhgOamDyyyyyEmaS\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-d2be5ccf6064a323a21d76919eae8522c9cf712d Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaGdPYW1EeXl5eXlFbWFTIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 40522103 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55d956bb56b0, 0x55d956bba24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55d956bba250,0x55d956c05c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/d2be5ccf6064a323a21d76919eae8522c9cf712d' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 5574 processed earlier; will process 7084 files now Step #5: #1 pulse cov: 845 ft: 846 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 903 ft: 990 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 1001 ft: 1101 exec/s: 0 rss: 1523Mb Step #5: #8 pulse cov: 1131 ft: 1383 exec/s: 0 rss: 1523Mb Step #5: #16 pulse cov: 1851 ft: 2541 exec/s: 0 rss: 1523Mb Step #5: #32 pulse cov: 2003 ft: 2831 exec/s: 16 rss: 1523Mb Step #5: ==50== ERROR: libFuzzer: out-of-memory (used: 2101Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 57221018 bytes in 20107 chunks; quarantined: 11370033 bytes in 1036 chunks; 35301 other chunks; total chunks: 56444; showing top 95% (at most 8 unique contexts) Step #5: 29651061 byte(s) (51%) in 1 allocation(s) Step #5: #0 0x55d9568a4ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55d9569905d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55d9569905d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55d9569905d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x55d956973aa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x55d9568e9219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55d95690ecec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55d95690ecec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55d9569f6f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55d9569f6f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55d9569f6f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55d9569f6f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55d956a4d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55d956a4d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55d956a4d637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55d956a4d637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55d956939509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55d956924889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55d956970925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55d956970925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55d956970925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55d95678657d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55d95678fb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55d956777019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55d9567a2cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f04eaa58082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (42%) in 11 allocation(s) Step #5: #0 0x55d9568a4ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55d956ace253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55d9567a2cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f04eaa58082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 1048576 byte(s) (1%) in 1 allocation(s) Step #5: #0 0x55d9568a4ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55d956ace253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55d956776fdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55d9567a2cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7f04eaa58082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x64,0x41,0x45,0x42,0x42,0x43,0x30,0x58,0x42,0x42,0x43,0x42,0x6b,0x44,0x42,0x2b,0x30,0x52,0x46,0x33,0x43,0x42,0x42,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/gif;base64,dAEBBC0XBBCBkDB+0RF3CBB\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-446f02356b2eb792fab1a2a1c2feacc7f24c03fd Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxkQUVCQkMwWEJCQ0JrREIrMFJGM0NCQiJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 4 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 50607728 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x563e53fd56b0, 0x563e53fda24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x563e53fda250,0x563e54025c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/446f02356b2eb792fab1a2a1c2feacc7f24c03fd' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 5629 processed earlier; will process 7029 files now Step #5: #1 pulse cov: 890 ft: 891 exec/s: 0 rss: 427Mb Step #5: #2 pulse cov: 918 ft: 972 exec/s: 1 rss: 427Mb Step #5: #4 pulse cov: 978 ft: 1056 exec/s: 2 rss: 427Mb Step #5: #8 pulse cov: 1030 ft: 1136 exec/s: 4 rss: 427Mb Step #5: #16 pulse cov: 1229 ft: 1550 exec/s: 4 rss: 427Mb Step #5: #32 pulse cov: 1695 ft: 2297 exec/s: 2 rss: 493Mb Step #5: #64 pulse cov: 1962 ft: 2911 exec/s: 2 rss: 494Mb Step #5: #128 pulse cov: 2422 ft: 3927 exec/s: 2 rss: 1545Mb Step #5: #256 pulse cov: 2891 ft: 5823 exec/s: 3 rss: 1550Mb Step #5: ==54== ERROR: libFuzzer: out-of-memory (used: 2203Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1900129086 bytes in 28995 chunks; quarantined: 6032485 bytes in 48 chunks; 36157 other chunks; total chunks: 65200; showing top 95% (at most 8 unique contexts) Step #5: 855080485 byte(s) (45%) in 1 allocation(s) Step #5: #0 0x563e53cc4ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x563e53da6f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x563e53da6f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x563e53da6f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x563e53da6f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x563e53d92324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x563e53d09219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x563e53d2ecec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x563e53d2ecec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x563e53e16f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x563e53e16f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x563e53e16f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x563e53e16f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x563e53e6d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x563e53e6d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x563e53e6d637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x563e53e6d637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x563e53d59509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x563e53d44889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x563e53d90925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x563e53d90925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x563e53d90925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x563e53ba657d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x563e53bafb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x563e53b97019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x563e53bc2cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f15214af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 678002733 byte(s) (35%) in 3 allocation(s) Step #5: #0 0x563e53cc4ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x563e53dd7707 in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3344:37 Step #5: #2 0x563e53dcea91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x563e53d9f06c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x563e53d9f06c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x563e53d9f06c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x563e53d92324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x563e53d09219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x563e53d2ecec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x563e53d2ecec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x563e53e16f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x563e53e16f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x563e53e16f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x563e53e16f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x563e53e6d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x563e53e6d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x563e53e6d637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x563e53e6d637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x563e53d59509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x563e53d44889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x563e53d90925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x563e53d90925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x563e53d90925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x563e53ba657d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x563e53bafb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x563e53b97019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x563e53bc2cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f15214af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 339001389 byte(s) (17%) in 3 allocation(s) Step #5: #0 0x563e53cc4ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x563e53dd75ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x563e53dcea91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x563e53d9f06c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x563e53d9f06c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x563e53d9f06c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x563e53d92324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x563e53d09219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x563e53d2ecec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x563e53d2ecec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x563e53e16f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x563e53e16f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x563e53e16f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x563e53e16f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x563e53e6d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x563e53e6d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x563e53e6d637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x563e53e6d637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x563e53d59509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x563e53d44889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x563e53d90925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x563e53d90925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x563e53d90925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x563e53ba657d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x563e53bafb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x563e53b97019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x563e53bc2cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f15214af082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x46,0x2f,0x6d,0x49,0x45,0x51,0x4d,0x30,0x4e,0x41,0x4f,0x48,0x45,0x51,0x47,0x30,0x4d,0x69,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEIF/mIEQM0NAOHEQG0Mi\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-b50de4d259b00066c2c0a2244fe826e1745a6224 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUlGL21JRVFNME5BT0hFUUcwTWkifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 5 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 158707977 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55a4a37546b0, 0x55a4a375924b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55a4a3759250,0x55a4a37a4c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/b50de4d259b00066c2c0a2244fe826e1745a6224' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 6140 processed earlier; will process 6518 files now Step #5: #1 pulse cov: 749 ft: 750 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 858 ft: 911 exec/s: 0 rss: 343Mb Step #5: #4 pulse cov: 1014 ft: 1213 exec/s: 0 rss: 343Mb Step #5: #8 pulse cov: 1179 ft: 1566 exec/s: 0 rss: 1500Mb Step #5: #16 pulse cov: 1311 ft: 1776 exec/s: 8 rss: 1500Mb Step #5: ==58== ERROR: libFuzzer: out-of-memory (used: 2250Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1287068599 bytes in 17676 chunks; quarantined: 9391911 bytes in 265 chunks; 34391 other chunks; total chunks: 52332; showing top 95% (at most 8 unique contexts) Step #5: 719208897 byte(s) (55%) in 1 allocation(s) Step #5: #0 0x55a4a3443ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55a4a3525f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55a4a3525f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55a4a3525f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x55a4a3525f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x55a4a3511324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x55a4a3488219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55a4a34adcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55a4a34adcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55a4a3595f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x55a4a3595f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x55a4a3595f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x55a4a3595f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x55a4a35ec637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x55a4a35ec637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x55a4a35ec637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55a4a35ec637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55a4a34d8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55a4a34c3889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55a4a350f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55a4a350f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55a4a350f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55a4a332557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x55a4a332eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55a4a3316019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x55a4a3341cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f3a8182b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 360177453 byte(s) (27%) in 3 allocation(s) Step #5: #0 0x55a4a3443ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55a4a3556707 in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3344:37 Step #5: #2 0x55a4a354da91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x55a4a351e06c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x55a4a351e06c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x55a4a351e06c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x55a4a3511324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x55a4a3488219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x55a4a34adcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x55a4a34adcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x55a4a3595f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x55a4a3595f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x55a4a3595f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x55a4a3595f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x55a4a35ec637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x55a4a35ec637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x55a4a35ec637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x55a4a35ec637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x55a4a34d8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x55a4a34c3889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x55a4a350f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x55a4a350f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x55a4a350f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x55a4a332557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x55a4a332eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x55a4a3316019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x55a4a3341cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f3a8182b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 180088749 byte(s) (13%) in 3 allocation(s) Step #5: #0 0x55a4a3443ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55a4a35565ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x55a4a354da91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x55a4a351e06c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x55a4a351e06c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x55a4a351e06c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x55a4a3511324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x55a4a3488219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x55a4a34adcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x55a4a34adcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x55a4a3595f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x55a4a3595f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x55a4a3595f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x55a4a3595f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x55a4a35ec637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x55a4a35ec637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x55a4a35ec637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x55a4a35ec637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x55a4a34d8509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x55a4a34c3889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x55a4a350f925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x55a4a350f925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x55a4a350f925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x55a4a332557d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x55a4a332eb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x55a4a3316019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x55a4a3341cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f3a8182b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x46,0x41,0x6d,0x49,0x38,0x41,0x4e,0x48,0x4d,0x51,0x45,0x4f,0x45,0x51,0x47,0x30,0x45,0x69,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEIFAmI8ANHMQEOEQG0Ei\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-3485c53e1f0a3ad19fb0beb749d874510915b59b Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUlGQW1JOEFOSE1RRU9FUUcwRWkifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 6 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 164793129 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x557879b056b0, 0x557879b0a24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x557879b0a250,0x557879b55c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/3485c53e1f0a3ad19fb0beb749d874510915b59b' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 6164 processed earlier; will process 6494 files now Step #5: #1 pulse cov: 828 ft: 829 exec/s: 0 rss: 335Mb Step #5: #2 pulse cov: 851 ft: 882 exec/s: 0 rss: 335Mb Step #5: #4 pulse cov: 1127 ft: 1345 exec/s: 0 rss: 335Mb Step #5: #8 pulse cov: 1458 ft: 1950 exec/s: 8 rss: 1205Mb Step #5: #16 pulse cov: 1786 ft: 2503 exec/s: 16 rss: 1205Mb Step #5: ==62== ERROR: libFuzzer: out-of-memory (used: 2333Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1224992957 bytes in 19040 chunks; quarantined: 7565637 bytes in 391 chunks; 32867 other chunks; total chunks: 52298; showing top 95% (at most 8 unique contexts) Step #5: 1197468480 byte(s) (97%) in 1 allocation(s) Step #5: #0 0x5578798378ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x557879947533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x557879947533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x557879947533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x557879947533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x557879947533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x55787985f950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x55787985f950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x557879946f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x557879946f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x557879946f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x557879946f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55787999d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55787999d637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55787999d637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55787999d637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x557879889509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x557879874889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5578798c0925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5578798c0925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5578798c0925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5578796d657d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5578796dfb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5578796c7019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5578796f2cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f15c30c4082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x52,0x31,0x41,0x2f,0x34,0x51,0x4f,0x45,0x45,0x51,0x4e,0x30,0x49,0x51,0x47,0x2f,0x45,0x6b,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEIR1A/4QOEEQN0IQG/Ek\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-7752a2a5ceeb14e0d62f2e7a388d61ba126056a8 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUlSMUEvNFFPRUVRTjBJUUcvRWsifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 7 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 167881264 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55bd6113a6b0, 0x55bd6113f24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55bd6113f250,0x55bd6118ac00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/7752a2a5ceeb14e0d62f2e7a388d61ba126056a8' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 6189 processed earlier; will process 6469 files now Step #5: #1 pulse cov: 565 ft: 566 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 928 ft: 1026 exec/s: 0 rss: 769Mb Step #5: #4 pulse cov: 1102 ft: 1365 exec/s: 0 rss: 769Mb Step #5: #8 pulse cov: 1164 ft: 1576 exec/s: 8 rss: 1403Mb Step #5: #16 pulse cov: 1527 ft: 2146 exec/s: 16 rss: 1403Mb Step #5: #32 pulse cov: 1860 ft: 2828 exec/s: 10 rss: 1403Mb Step #5: #64 pulse cov: 2342 ft: 3887 exec/s: 8 rss: 1787Mb Step #5: #128 pulse cov: 2679 ft: 5213 exec/s: 9 rss: 1787Mb Step #5: #256 pulse cov: 3226 ft: 7299 exec/s: 8 rss: 1831Mb Step #5: ==66== ERROR: libFuzzer: out-of-memory (used: 2366Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 367674526 bytes in 27706 chunks; quarantined: 10287681 bytes in 840 chunks; 32280 other chunks; total chunks: 60826; showing top 95% (at most 8 unique contexts) Step #5: 339804160 byte(s) (92%) in 1 allocation(s) Step #5: #0 0x55bd60e29ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55bd60ef7a27 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55bd60ef7a27 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55bd60ef7a27 in stbi__bmp_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5616:22 Step #5: #4 0x55bd60ef7a27 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1148:35 Step #5: #5 0x55bd60e6e219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55bd60e93cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55bd60e93cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55bd60f7bf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55bd60f7bf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55bd60f7bf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55bd60f7bf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55bd60fd2637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55bd60fd2637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55bd60fd2637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55bd60fd2637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55bd60ebe509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55bd60ea9889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55bd60ef5925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55bd60ef5925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55bd60ef5925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55bd60d0b57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55bd60d14b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55bd60cfc019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55bd60d27cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f75678f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (6%) in 11 allocation(s) Step #5: #0 0x55bd60e29ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55bd61053253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55bd60d27cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f75678f1082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x33,0x32,0x45,0x76,0x41,0x45,0x50,0x41,0x31,0x6d,0x41,0x41,0x41,0x41,0x41,0x41,0x41,0x4d,0x41,0x41,0x41,0x41,0x41,0x4b,0x41,0x61,0x43,0x41,0x45,0x41,0x41,0x51,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,Qk32EvAEPA1mAAAAAAAMAAAAAKAaCAEAAQ\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-20ce41d1beaf8ed01db6777c82c48248defdea22 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxRazMyRXZBRVBBMW1BQUFBQUFBTUFBQUFBS0FhQ0FFQUFRIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 8 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 216970731 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55afc89fc6b0, 0x55afc8a0124b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55afc8a01250,0x55afc8a4cc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/20ce41d1beaf8ed01db6777c82c48248defdea22' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 6511 processed earlier; will process 6147 files now Step #5: #1 pulse cov: 780 ft: 781 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 808 ft: 819 exec/s: 0 rss: 381Mb Step #5: #4 pulse cov: 852 ft: 916 exec/s: 0 rss: 381Mb Step #5: #8 pulse cov: 1210 ft: 1638 exec/s: 0 rss: 381Mb Step #5: #16 pulse cov: 1465 ft: 2077 exec/s: 16 rss: 383Mb Step #5: #32 pulse cov: 1604 ft: 2342 exec/s: 32 rss: 383Mb Step #5: #64 pulse cov: 1822 ft: 2766 exec/s: 12 rss: 869Mb Step #5: ==70== ERROR: libFuzzer: out-of-memory (used: 2098Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 27551703 bytes in 19724 chunks; quarantined: 5485480 bytes in 401 chunks; 36407 other chunks; total chunks: 56532; showing top 95% (at most 8 unique contexts) Step #5: 24383096 byte(s) (88%) in 11 allocation(s) Step #5: #0 0x55afc86ebed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55afc8915253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55afc85e9cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f198f5fa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 1048576 byte(s) (3%) in 1 allocation(s) Step #5: #0 0x55afc86ebed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55afc8915253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55afc85bdfdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55afc85e9cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7f198f5fa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: 1012640 byte(s) (3%) in 1 allocation(s) Step #5: #0 0x55afc86ebed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55afc8915253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55afc85d4a92 in fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:71:9 Step #5: #3 0x55afc85d66f2 in ParseOrExit /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:32:8 Step #5: #4 0x55afc85d66f2 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:209:5 Step #5: #5 0x55afc85be019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #6 0x55afc85e9cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #7 0x7f198f5fa082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) Step #5: 818096 byte(s) (2%) in 12659 allocation(s) Step #5: #0 0x55afc86ebed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55afc8915253 in operator new(unsigned long) cxa_noexception.cpp Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x33,0x31,0x43,0x61,0x6e,0x69,0x61,0x69,0x6d,0x51,0x6e,0x69,0x4d,0x41,0x41,0x41,0x41,0x4d,0x41,0x41,0x41,0x41,0x4c,0x71,0x6d,0x35,0x41,0x51,0x45,0x41,0x42,0x41,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,Qk31CaniaimQniMAAAAMAAAALqm5AQEABA\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-5fcbff51e511e310ceb9908a9d2ccfd69ee0deee Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxRazMxQ2FuaWFpbVFuaU1BQUFBTUFBQUFMcW01QVFFQUJBIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 9 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 224020847 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55ad21d466b0, 0x55ad21d4b24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55ad21d4b250,0x55ad21d96c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/5fcbff51e511e310ceb9908a9d2ccfd69ee0deee' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 6595 processed earlier; will process 6063 files now Step #5: #1 pulse cov: 728 ft: 729 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 815 ft: 866 exec/s: 2 rss: 434Mb Step #5: #4 pulse cov: 907 ft: 986 exec/s: 4 rss: 434Mb Step #5: #8 pulse cov: 1010 ft: 1136 exec/s: 8 rss: 434Mb Step #5: #16 pulse cov: 1213 ft: 1499 exec/s: 16 rss: 434Mb Step #5: #32 pulse cov: 1460 ft: 1840 exec/s: 6 rss: 731Mb Step #5: #64 pulse cov: 1937 ft: 2869 exec/s: 9 rss: 932Mb Step #5: #128 pulse cov: 2642 ft: 4837 exec/s: 9 rss: 1882Mb Step #5: #256 pulse cov: 3232 ft: 6828 exec/s: 15 rss: 1882Mb Step #5: #512 pulse cov: 3632 ft: 9120 exec/s: 6 rss: 1882Mb Step #5: ==74== ERROR: libFuzzer: out-of-memory (used: 2376Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2469835455 bytes in 31206 chunks; quarantined: 1809705 bytes in 1516 chunks; 32316 other chunks; total chunks: 65038; showing top 95% (at most 8 unique contexts) Step #5: 1085255700 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55ad21a35ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ad21b352dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55ad21b352dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x55ad21b02c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55ad21b02c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55ad21a7a219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55ad21a9fcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55ad21a9fcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55ad21b87f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55ad21b87f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55ad21b87f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55ad21b87f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55ad21bde637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55ad21bde637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55ad21bde637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55ad21bde637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55ad21aca509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55ad21ab5889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55ad21b01925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55ad21b01925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55ad21b01925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55ad2191757d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55ad21920b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55ad21908019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55ad21933cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f4cfc482082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 1085255700 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55ad21a35ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ad21b352aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55ad21b352aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x55ad21b02c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55ad21b02c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55ad21a7a219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55ad21a9fcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55ad21a9fcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55ad21b87f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55ad21b87f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55ad21b87f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55ad21b87f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55ad21bde637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55ad21bde637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55ad21bde637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55ad21bde637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55ad21aca509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55ad21ab5889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55ad21b01925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55ad21b01925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55ad21b01925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55ad2191757d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55ad21920b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55ad21908019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55ad21933cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f4cfc482082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 271313925 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x55ad21a35ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55ad21b35315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55ad21b35315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x55ad21b02c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55ad21b02c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55ad21a7a219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55ad21a9fcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55ad21a9fcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55ad21b87f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55ad21b87f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55ad21b87f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55ad21b87f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55ad21bde637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55ad21bde637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55ad21bde637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55ad21bde637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55ad21aca509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55ad21ab5889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55ad21b01925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55ad21b01925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55ad21b01925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55ad2191757d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55ad21920b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55ad21908019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55ad21933cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f4cfc482082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x31,0x79,0x4f,0x44,0x63,0x79,0x79,0x61,0x79,0x79,0x79,0x79,0x47,0x4c,0x41,0x41,0x41,0x51,0x64,0x68,0x41,0x4f,0x44,0x63,0x4f,0x61,0x41,0x69,0x79,0x41,0x41,0x41,0x58,0x39,0x48,0x58,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh1yODcyyayyyyGLAAAQdhAODcOaAiyAAAX9HX\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-38b8f576c4e25cc7486f8674b5c4b634d697aff6 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDF5T0RjeXlheXl5eUdMQUFBUWRoQU9EY09hQWl5QUFBWDlIWCJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 10 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 348172422 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5630a6ac16b0, 0x5630a6ac624b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5630a6ac6250,0x5630a6b11c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/38b8f576c4e25cc7486f8674b5c4b634d697aff6' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 7266 processed earlier; will process 5392 files now Step #5: #1 pulse cov: 750 ft: 751 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 912 ft: 1115 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 1119 ft: 1460 exec/s: 0 rss: 361Mb Step #5: #8 pulse cov: 1224 ft: 1618 exec/s: 4 rss: 1296Mb Step #5: #16 pulse cov: 1532 ft: 2080 exec/s: 2 rss: 1434Mb Step #5: #32 pulse cov: 1987 ft: 3252 exec/s: 2 rss: 1525Mb Step #5: #64 pulse cov: 2515 ft: 4740 exec/s: 3 rss: 1529Mb Step #5: #128 pulse cov: 2912 ft: 5881 exec/s: 4 rss: 1548Mb Step #5: #256 pulse cov: 3580 ft: 8176 exec/s: 5 rss: 1794Mb Step #5: ==78== ERROR: libFuzzer: out-of-memory (used: 2108Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 293007545 bytes in 28704 chunks; quarantined: 9499315 bytes in 151 chunks; 32016 other chunks; total chunks: 60871; showing top 95% (at most 8 unique contexts) Step #5: 183418321 byte(s) (62%) in 1 allocation(s) Step #5: #0 0x5630a67b0ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5630a6892f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5630a6892f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5630a6892f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x5630a6892f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x5630a687e324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x5630a67f5219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x5630a681acec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x5630a681acec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x5630a6902f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x5630a6902f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x5630a6902f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x5630a6902f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x5630a6959637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x5630a6959637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x5630a6959637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x5630a6959637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x5630a6845509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x5630a6830889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x5630a687c925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x5630a687c925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x5630a687c925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x5630a669257d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x5630a669bb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x5630a6683019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x5630a66aecf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f6f4bf6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 81463484 byte(s) (27%) in 4 allocation(s) Step #5: #0 0x5630a67b0ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5630a68c35ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x5630a68baa91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x5630a688b06c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x5630a688b06c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x5630a688b06c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x5630a687e324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x5630a67f5219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x5630a681acec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x5630a681acec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x5630a6902f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x5630a6902f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x5630a6902f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x5630a6902f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x5630a6959637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x5630a6959637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x5630a6959637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x5630a6959637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x5630a6845509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x5630a6830889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x5630a687c925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x5630a687c925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x5630a687c925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x5630a669257d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x5630a669bb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x5630a6683019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x5630a66aecf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f6f4bf6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 24383096 byte(s) (8%) in 11 allocation(s) Step #5: #0 0x5630a67b0ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5630a69da253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5630a66aecf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f6f4bf6d082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x6a,0x70,0x65,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x41,0x41,0x42,0x51,0x49,0x41,0x36,0x4c,0x41,0x6d,0x67,0x51,0x48,0x45,0x51,0x45,0x48,0x49,0x51,0x45,0x45,0x45,0x67,0x45,0x45,0x45,0x67,0x50,0x2f,0x36,0x41,0x41,0x45,0x45,0x67,0x50,0x2f,0x34,0x65,0x67,0x26,0x69,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/jpeg;base64,///Y///AABQIA6LAmgQHEQEHIQEEEgEEEgP/6AAEEgP/4eg&i\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-56a6f77e3c6fead5b714e9a59232ea7f400256c7 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsLy8vWS8vL0FBQlFJQTZMQW1nUUhFUUVISVFFRUVnRUVFZ1AvNkFBRUVnUC80ZWcmaSJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 11 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 395264646 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55cd469266b0, 0x55cd4692b24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55cd4692b250,0x55cd46976c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/56a6f77e3c6fead5b714e9a59232ea7f400256c7' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 7537 processed earlier; will process 5121 files now Step #5: #1 pulse cov: 781 ft: 782 exec/s: 0 rss: 44Mb Step #5: #2 pulse cov: 799 ft: 814 exec/s: 0 rss: 80Mb Step #5: #4 pulse cov: 1277 ft: 1562 exec/s: 0 rss: 80Mb Step #5: #8 pulse cov: 1506 ft: 2083 exec/s: 8 rss: 1142Mb Step #5: #16 pulse cov: 1881 ft: 3301 exec/s: 16 rss: 1142Mb Step #5: #32 pulse cov: 2352 ft: 4219 exec/s: 8 rss: 1142Mb Step #5: #64 pulse cov: 2823 ft: 5699 exec/s: 5 rss: 1371Mb Step #5: #128 pulse cov: 3373 ft: 7687 exec/s: 8 rss: 1910Mb Step #5: #256 pulse cov: 3674 ft: 9349 exec/s: 13 rss: 1910Mb Step #5: #512 pulse cov: 3921 ft: 11491 exec/s: 11 rss: 1910Mb Step #5: #1024 pulse cov: 4129 ft: 13845 exec/s: 7 rss: 1910Mb Step #5: ==82== ERROR: libFuzzer: out-of-memory (used: 2138Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 109351944 bytes in 36812 chunks; quarantined: 7318450 bytes in 1611 chunks; 30835 other chunks; total chunks: 69258; showing top 95% (at most 8 unique contexts) Step #5: 56236753 byte(s) (51%) in 1 allocation(s) Step #5: #0 0x55cd46615ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55cd466f7f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55cd466f7f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55cd466f7f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x55cd466f7f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x55cd466e3324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x55cd4665a219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55cd4667fcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55cd4667fcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55cd46767f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x55cd46767f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x55cd46767f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x55cd46767f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x55cd467be637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x55cd467be637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x55cd467be637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55cd467be637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55cd466aa509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55cd46695889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55cd466e1925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55cd466e1925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55cd466e1925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55cd464f757d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x55cd46500b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55cd464e8019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x55cd46513cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7fcfe2fed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24796860 byte(s) (22%) in 4 allocation(s) Step #5: #0 0x55cd46615ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55cd467285ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x55cd4671fa91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x55cd466f006c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x55cd466f006c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x55cd466f006c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x55cd466e3324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x55cd4665a219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x55cd4667fcec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x55cd4667fcec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x55cd46767f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x55cd46767f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x55cd46767f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x55cd46767f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x55cd467be637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x55cd467be637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x55cd467be637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x55cd467be637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x55cd466aa509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x55cd46695889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x55cd466e1925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x55cd466e1925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x55cd466e1925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x55cd464f757d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x55cd46500b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x55cd464e8019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x55cd46513cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7fcfe2fed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 24383096 byte(s) (22%) in 11 allocation(s) Step #5: #0 0x55cd46615ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55cd4683f253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55cd46513cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fcfe2fed082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x33,0x34,0x43,0x76,0x41,0x4d,0x41,0x31,0x42,0x68,0x51,0x41,0x41,0x41,0x41,0x41,0x41,0x4d,0x41,0x41,0x41,0x41,0x6a,0x30,0x51,0x66,0x41,0x41,0x45,0x41,0x43,0x41,0x22,0x7d,0x2c,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x33,0x34,0x43,0x76,0x41,0x41,0x68,0x51,0x31,0x42,0x41,0x4d,0x41,0x41,0x41,0x41,0x41,0x4d,0x41,0x41,0x41,0x41,0x6a,0x30,0x51,0x66,0x41,0x41,0x45,0x41,0x43,0x41,0x41,0x41,0x31,0x6a,0x51,0x66,0x41,0x41,0x45,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,Qk34CvAMA1BhQAAAAAAMAAAAj0QfAAEACA\"},{\"uri\":\"data:image/png;base64,Qk34CvAAhQ1BAMAAAAAMAAAAj0QfAAEACAAA1jQfAAE\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-0b3ded4db5c10e8679e029dc5b223d9d6dbe6a20 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxRazM0Q3ZBTUExQmhRQUFBQUFBTUFBQUFqMFFmQUFFQUNBIn0seyJ1cmkiOiJkYXRhOmltYWdlL3BuZztiYXNlNjQsUWszNEN2QUFoUTFCQU1BQUFBQU1BQUFBajBRZkFBRUFDQUFBMWpRZkFBRSJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 12 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 584380523 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x56000789a6b0, 0x56000789f24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x56000789f250,0x5600078eac00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/0b3ded4db5c10e8679e029dc5b223d9d6dbe6a20' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 8870 processed earlier; will process 3788 files now Step #5: #1 pulse cov: 732 ft: 733 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 896 ft: 1089 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 978 ft: 1465 exec/s: 0 rss: 41Mb Step #5: #8 pulse cov: 1575 ft: 2612 exec/s: 8 rss: 147Mb Step #5: #16 pulse cov: 2193 ft: 3800 exec/s: 16 rss: 147Mb Step #5: #32 pulse cov: 2600 ft: 5160 exec/s: 10 rss: 1382Mb Step #5: #64 pulse cov: 3067 ft: 6953 exec/s: 4 rss: 1382Mb Step #5: #128 pulse cov: 3500 ft: 8991 exec/s: 4 rss: 1902Mb Step #5: #256 pulse cov: 3782 ft: 11173 exec/s: 5 rss: 1902Mb Step #5: #512 pulse cov: 4074 ft: 14355 exec/s: 7 rss: 1902Mb Step #5: ==86== ERROR: libFuzzer: out-of-memory (used: 2141Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 755916085 bytes in 36316 chunks; quarantined: 6549310 bytes in 246 chunks; 32598 other chunks; total chunks: 69160; showing top 95% (at most 8 unique contexts) Step #5: 727700640 byte(s) (96%) in 1 allocation(s) Step #5: #0 0x5600075cc8ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x5600076dc533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x5600076dc533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x5600076dc533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x5600076dc533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x5600076dc533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x5600075f4950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x5600075f4950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x5600076dbf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5600076dbf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5600076dbf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5600076dbf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x560007732637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x560007732637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x560007732637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x560007732637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x56000761e509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x560007609889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x560007655925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x560007655925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x560007655925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x56000746b57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x560007474b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x56000745c019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x560007487cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f8cb0203082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./oom-93e66adc57f6d7ed59d1f9d72b72d9edcbe2a1f3 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 13 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 672481435 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55fd923046b0, 0x55fd9230924b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55fd92309250,0x55fd92354c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/93e66adc57f6d7ed59d1f9d72b72d9edcbe2a1f3' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 9500 processed earlier; will process 3158 files now Step #5: #1 pulse cov: 865 ft: 866 exec/s: 0 rss: 43Mb Step #5: #2 pulse cov: 912 ft: 937 exec/s: 0 rss: 43Mb Step #5: #4 pulse cov: 1065 ft: 1511 exec/s: 0 rss: 44Mb Step #5: #8 pulse cov: 1429 ft: 2153 exec/s: 4 rss: 1365Mb Step #5: #16 pulse cov: 1945 ft: 3374 exec/s: 3 rss: 1365Mb Step #5: #32 pulse cov: 2548 ft: 5132 exec/s: 5 rss: 1365Mb Step #5: #64 pulse cov: 2907 ft: 7379 exec/s: 8 rss: 1365Mb Step #5: #128 pulse cov: 3423 ft: 9872 exec/s: 7 rss: 1365Mb Step #5: #256 pulse cov: 3793 ft: 12213 exec/s: 8 rss: 1365Mb Step #5: #512 pulse cov: 4079 ft: 15183 exec/s: 7 rss: 1365Mb Step #5: #1024 pulse cov: 4239 ft: 18722 exec/s: 8 rss: 1392Mb Step #5: #2048 pulse cov: 4347 ft: 23250 exec/s: 7 rss: 1408Mb Step #5: AddressSanitizer:DEADLYSIGNAL Step #5: ================================================================= Step #5: ==90==ERROR: AddressSanitizer: stack-overflow on address 0x7ffe13c28c98 (pc 0x55fd91ff1df6 bp 0x7ffe13c294d0 sp 0x7ffe13c28ca0 T0) Step #5: SCARINESS: 10 (stack-overflow) Step #5: #0 0x55fd91ff1df6 in __asan_memset /src/llvm-project/compiler-rt/lib/asan/asan_interceptors_memintrinsics.cpp:67:3 Step #5: #1 0x55fd921297fa in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3665:9 Step #5: #2 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #3 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #4 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #5 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #6 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #7 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #8 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #9 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #10 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #11 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #12 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #13 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #14 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #15 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #16 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #17 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #18 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #19 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #20 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #21 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #22 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #23 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #24 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #25 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #26 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #27 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #28 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #29 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #30 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #31 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #32 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #33 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #34 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #35 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #36 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #37 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #38 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #39 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #40 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #41 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #42 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #43 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #44 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #45 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #46 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #47 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #48 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #49 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #50 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #51 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #52 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #53 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #54 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #55 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #56 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #57 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #58 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #59 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #60 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #61 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #62 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #63 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #64 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #65 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #66 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #67 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #68 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #69 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #70 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #71 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #72 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #73 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #74 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #75 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #76 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #77 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #78 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #79 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #80 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #81 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #82 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #83 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #84 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #85 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #86 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #87 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #88 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #89 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #90 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #91 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #92 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #93 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #94 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #95 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #96 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #97 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #98 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #99 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #100 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #101 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #102 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #103 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #104 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #105 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #106 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #107 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #108 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #109 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #110 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #111 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #112 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #113 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #114 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #115 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #116 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #117 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #118 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #119 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #120 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #121 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #122 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #123 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #124 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #125 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #126 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #127 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #128 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #129 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #130 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #131 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #132 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #133 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #134 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #135 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #136 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #137 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #138 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #139 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #140 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #141 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #142 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #143 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #144 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #145 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #146 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #147 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #148 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #149 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #150 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #151 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #152 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #153 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #154 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #155 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #156 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #157 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #158 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #159 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #160 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #161 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #162 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #163 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #164 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #165 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #166 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #167 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #168 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #169 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #170 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #171 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #172 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #173 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #174 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #175 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #176 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #177 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #178 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #179 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #180 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #181 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #182 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #183 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #184 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #185 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #186 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #187 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #188 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #189 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #190 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #191 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #192 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #193 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #194 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #195 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #196 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #197 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #198 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #199 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #200 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #201 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #202 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #203 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #204 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #205 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #206 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #207 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #208 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #209 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #210 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #211 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #212 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #213 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #214 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #215 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #216 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #217 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #218 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #219 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #220 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #221 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #222 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #223 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #224 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #225 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #226 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #227 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #228 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #229 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #230 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #231 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #232 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #233 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #234 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #235 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #236 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #237 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #238 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #239 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #240 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #241 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #242 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #243 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #244 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #245 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: #246 0x55fd92129bbd in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3729:9 Step #5: Step #5: DEDUP_TOKEN: __asan_memset--tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&)--tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) Step #5: SUMMARY: AddressSanitizer: stack-overflow /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:3665:9 in tinygltf::ParseJsonAsValue(tinygltf::Value*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) Step #5: ==90==ABORTING Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./crash-f71704490c5264022a4d4e07a5dafa56c6c4115a Step #5: MERGE-OUTER: attempt 14 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 955220435 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55e31d3e46b0, 0x55e31d3e924b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55e31d3e9250,0x55e31d434c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/f71704490c5264022a4d4e07a5dafa56c6c4115a' caused a failure at the previous merge step Step #5: MERGE-INNER: 12658 total files; 11887 processed earlier; will process 771 files now Step #5: #1 pulse cov: 850 ft: 851 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 1043 ft: 1209 exec/s: 0 rss: 46Mb Step #5: #4 pulse cov: 1761 ft: 2301 exec/s: 4 rss: 147Mb Step #5: #8 pulse cov: 2120 ft: 3197 exec/s: 8 rss: 147Mb Step #5: #16 pulse cov: 2503 ft: 5103 exec/s: 16 rss: 147Mb Step #5: #32 pulse cov: 2781 ft: 7001 exec/s: 32 rss: 147Mb Step #5: #64 pulse cov: 3281 ft: 9848 exec/s: 5 rss: 1388Mb Step #5: #128 pulse cov: 3537 ft: 11988 exec/s: 4 rss: 1396Mb Step #5: #256 pulse cov: 3866 ft: 14360 exec/s: 7 rss: 1443Mb Step #5: #512 pulse cov: 3967 ft: 16030 exec/s: 9 rss: 1443Mb Step #5: #771 DONE cov: 4093 ft: 16987 exec/s: 10 rss: 1443Mb Step #5: MERGE-OUTER: successful in 14 attempt(s) Step #5: MERGE-OUTER: the control file has 2301101 bytes Step #5: MERGE-OUTER: consumed 1Mb (59Mb rss) to parse the control file Step #5: MERGE-OUTER: 7769 new files with 28810 new features added; 4938 new coverage edges Step #5: [2025-12-22 07:18:54,381 INFO] Finding shared libraries for targets (if any). Step #5: [2025-12-22 07:18:54,390 INFO] Finished finding shared libraries for targets. Step #5: Coverage error, creating log file: /workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log Step #5: [2025-12-22 07:18:54,678 INFO] Finding shared libraries for targets (if any). Step #5: [2025-12-22 07:18:54,688 INFO] Finished finding shared libraries for targets. Step #5: [2025-12-22 07:18:54,908 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-12-22 07:18:54,908 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html". Step #5: [2025-12-22 07:18:54,918 DEBUG] Finished generating file view html index file. Step #5: [2025-12-22 07:18:54,918 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-12-22 07:18:54,918 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-12-22 07:18:54,918 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-12-22 07:18:54,955 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-12-22 07:18:54,955 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html". Step #5: [2025-12-22 07:18:54,955 DEBUG] Finished generating directory view html index file. Step #5: [2025-12-22 07:18:54,955 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html". Step #5: [2025-12-22 07:18:55,173 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-12-22 07:18:55,173 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html". Step #5: [2025-12-22 07:18:55,183 DEBUG] Finished generating file view html index file. Step #5: [2025-12-22 07:18:55,183 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-12-22 07:18:55,183 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-12-22 07:18:55,183 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-12-22 07:18:55,218 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-12-22 07:18:55,218 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html". Step #5: [2025-12-22 07:18:55,218 DEBUG] Finished generating directory view html index file. Step #5: [2025-12-22 07:18:55,218 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html". Finished Step #5 Starting Step #6 Step #6: Pulling image: gcr.io/cloud-builders/gsutil Step #6: Using default tag: latest Step #6: latest: Pulling from cloud-builders/gsutil Step #6: 63e5bc7682b8: Already exists Step #6: 534d2e38e8a8: Already exists Step #6: bbc46ad61e6d: Already exists Step #6: 2f3c2c3a9a12: Already exists Step #6: 8d1b9cbacfc5: Already exists Step #6: 90ba0300aff9: Already exists Step #6: f4c8a662b829: Pulling fs layer Step #6: c83e9f744172: Pulling fs layer Step #6: c83e9f744172: Verifying Checksum Step #6: c83e9f744172: Download complete Step #6: f4c8a662b829: Verifying Checksum Step #6: f4c8a662b829: Download complete Step #6: f4c8a662b829: Pull complete Step #6: c83e9f744172: Pull complete Step #6: Digest: sha256:119795476125b6158f07ba9dc1a99b5b4cb7a0a078b6a41790e070192efabdf3 Step #6: Status: Downloaded newer image for gcr.io/cloud-builders/gsutil:latest Step #6: gcr.io/cloud-builders/gsutil:latest Step #6: CommandException: 1 files/objects could not be removed. Finished Step #6 Starting Step #7 Step #7: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #7: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/control.js [Content-Type=text/javascript]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/style.css [Content-Type=text/css]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/summary.json [Content-Type=application/json]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/report.html [Content-Type=text/html]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 2.3 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/report.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #7: / [1/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #7: / [1/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #7: / [4/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done / [6/16 files][ 23.4 KiB/ 9.4 MiB] 0% Done / [7/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done / [8/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #7: / [8/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #7: / [8/16 files][ 29.4 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #7: / [8/16 files][293.4 KiB/ 9.4 MiB] 3% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #7: / [8/16 files][ 4.4 MiB/ 9.4 MiB] 46% Done / [9/16 files][ 7.4 MiB/ 9.4 MiB] 78% Done / [10/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #7: Operation completed over 16 objects/9.4 MiB. Finished Step #7 Starting Step #8 Step #8: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #8: CommandException: 1 files/objects could not be removed. Finished Step #8 Starting Step #9 Step #9: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/control.js [Content-Type=text/javascript]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/style.css [Content-Type=text/css]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/summary.json [Content-Type=application/json]... Step #9: / [0/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #9: / [5/16 files][ 14.8 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 20.7 KiB/ 9.4 MiB] 0% Done / [6/16 files][440.6 KiB/ 9.4 MiB] 4% Done / [7/16 files][ 5.2 MiB/ 9.4 MiB] 55% Done / [8/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [9/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [10/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #9: Operation completed over 16 objects/9.4 MiB. Finished Step #9 Starting Step #10 Step #10: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #10: CommandException: 1 files/objects could not be removed. Finished Step #10 Starting Step #11 Step #11: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #11: Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf.json [Content-Type=application/json]... Step #11: / [0/3 files][ 0.0 B/ 3.6 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log [Content-Type=application/octet-stream]... Step #11: / [0/3 files][ 0.0 B/ 3.6 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/coverage_targets.txt [Content-Type=text/plain]... Step #11: / [0/3 files][ 3.6 KiB/ 3.6 KiB] 99% Done / [1/3 files][ 3.6 KiB/ 3.6 KiB] 99% Done / [2/3 files][ 3.6 KiB/ 3.6 KiB] 99% Done / [3/3 files][ 3.6 KiB/ 3.6 KiB] 100% Done Step #11: Operation completed over 3 objects/3.6 KiB. Finished Step #11 Starting Step #12 Step #12: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #12: CommandException: 1 files/objects could not be removed. Finished Step #12 Starting Step #13 Step #13: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #13: Copying file:///workspace/out/libfuzzer-coverage-x86_64/textcov_reports/fuzz_gltf.covreport [Content-Type=application/octet-stream]... Step #13: / [0/1 files][ 0.0 B/756.3 KiB] 0% Done / [1/1 files][756.3 KiB/756.3 KiB] 100% Done Step #13: Operation completed over 1 objects/756.3 KiB. Finished Step #13 Starting Step #14 Step #14: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #14: CommandException: 1 files/objects could not be removed. Finished Step #14 Starting Step #15 Step #15: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #15: Copying file:///workspace/out/libfuzzer-coverage-x86_64/logs/fuzz_gltf.log [Content-Type=application/octet-stream]... Step #15: / [0/1 files][ 0.0 B/320.5 KiB] 0% Done / [1/1 files][320.5 KiB/320.5 KiB] 100% Done Step #15: Operation completed over 1 objects/320.5 KiB. Finished Step #15 Starting Step #16 Step #16: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #16: Copying file:///workspace/srcmap.json [Content-Type=application/json]... Step #16: / [0 files][ 0.0 B/ 154.0 B] / [1 files][ 154.0 B/ 154.0 B] Step #16: Operation completed over 1 objects/154.0 B. Finished Step #16 Starting Step #17 Step #17: Already have image (with digest): gcr.io/cloud-builders/curl Step #17: % Total % Received % Xferd Average Speed Time Time Time Current Step #17: Dload Upload Total Spent Left Speed Step #17: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 312 0 0 100 312 0 1575 --:--:-- --:--:-- --:--:-- 1575 100 312 0 0 100 312 0 1575 --:--:-- --:--:-- --:--:-- 1575 Finished Step #17 PUSH DONE