starting build "9b8c3bea-5743-467f-90a9-0cbaf8047d47" FETCHSOURCE BUILD Starting Step #0 Step #0: Already have image (with digest): gcr.io/cloud-builders/git Step #0: Cloning into 'oss-fuzz'... Finished Step #0 Starting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54" Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Already have image (with digest): gcr.io/cloud-builders/docker Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Sending build context to Docker daemon 5.12kB Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Step 1/5 : FROM gcr.io/oss-fuzz-base/base-builder Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": latest: Pulling from oss-fuzz-base/base-builder Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b549f31133a9: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fbd651eef87f: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1213aebcf1ee: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": a060310a2694: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 497216b932c9: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": dbba7edc028b: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b265efe846ed: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 161940763a8b: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": cf5e5e872386: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 07e64dc83e3d: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0736b6e9e3d3: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2aa8d7237534: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 77f0438adcd7: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b4f29f80fb52: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8a13b0c532a1: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 816028f45e91: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": af4a22e37681: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e254a28c4707: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b93f7310e490: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 537b4d73e924: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fb7466f42249: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": caa5e91e8207: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8e5a6791c7a9: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2a27d4021cc9: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 44a0027834cd: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 02ef4a0d7537: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 639adac7267e: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e2c5062b3d7c: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1664575004c3: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0c12bc59d07a: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 33a9985c1ce6: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": eed49b03c9d2: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 296802ba35d9: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 56d297e5ca51: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 4202398c47b7: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 161940763a8b: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 05ac082b9935: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": cf5e5e872386: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e5eb489f668b: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 3c031922279e: Pulling fs layer Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 77f0438adcd7: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 07e64dc83e3d: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 816028f45e91: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b4f29f80fb52: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0736b6e9e3d3: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 44a0027834cd: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": af4a22e37681: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8a13b0c532a1: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e254a28c4707: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 02ef4a0d7537: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b93f7310e490: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 296802ba35d9: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 537b4d73e924: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 639adac7267e: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2aa8d7237534: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fb7466f42249: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 56d297e5ca51: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e2c5062b3d7c: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b265efe846ed: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": eed49b03c9d2: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 4202398c47b7: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 3c031922279e: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 05ac082b9935: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8e5a6791c7a9: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e5eb489f668b: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1664575004c3: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 33a9985c1ce6: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0c12bc59d07a: Waiting Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1213aebcf1ee: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1213aebcf1ee: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 497216b932c9: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 497216b932c9: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b265efe846ed: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 161940763a8b: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b265efe846ed: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b549f31133a9: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b549f31133a9: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": a060310a2694: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": a060310a2694: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0736b6e9e3d3: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0736b6e9e3d3: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2aa8d7237534: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2aa8d7237534: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b4f29f80fb52: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 77f0438adcd7: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 77f0438adcd7: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 816028f45e91: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8a13b0c532a1: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8a13b0c532a1: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fbd651eef87f: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fbd651eef87f: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 07e64dc83e3d: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 07e64dc83e3d: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e254a28c4707: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e254a28c4707: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": af4a22e37681: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": af4a22e37681: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b93f7310e490: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b93f7310e490: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 537b4d73e924: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 537b4d73e924: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": caa5e91e8207: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": caa5e91e8207: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fb7466f42249: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fb7466f42249: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2a27d4021cc9: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2a27d4021cc9: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8e5a6791c7a9: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8e5a6791c7a9: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 44a0027834cd: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 02ef4a0d7537: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b549f31133a9: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 639adac7267e: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1664575004c3: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1664575004c3: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e2c5062b3d7c: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e2c5062b3d7c: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 33a9985c1ce6: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 33a9985c1ce6: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0c12bc59d07a: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0c12bc59d07a: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": eed49b03c9d2: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": eed49b03c9d2: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 296802ba35d9: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 296802ba35d9: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": cf5e5e872386: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": cf5e5e872386: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 56d297e5ca51: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 4202398c47b7: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 4202398c47b7: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 05ac082b9935: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 3c031922279e: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 3c031922279e: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e5eb489f668b: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e5eb489f668b: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": dbba7edc028b: Verifying Checksum Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": dbba7edc028b: Download complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fbd651eef87f: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1213aebcf1ee: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": a060310a2694: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 497216b932c9: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": dbba7edc028b: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b265efe846ed: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 161940763a8b: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": cf5e5e872386: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 07e64dc83e3d: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0736b6e9e3d3: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2aa8d7237534: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 77f0438adcd7: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b4f29f80fb52: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8a13b0c532a1: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 816028f45e91: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": af4a22e37681: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e254a28c4707: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": b93f7310e490: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 537b4d73e924: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": fb7466f42249: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": caa5e91e8207: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 8e5a6791c7a9: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 2a27d4021cc9: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 44a0027834cd: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 02ef4a0d7537: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 639adac7267e: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e2c5062b3d7c: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 1664575004c3: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 0c12bc59d07a: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 33a9985c1ce6: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": eed49b03c9d2: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 296802ba35d9: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 56d297e5ca51: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 4202398c47b7: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 05ac082b9935: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": e5eb489f668b: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": 3c031922279e: Pull complete Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Digest: sha256:cede7bc2cc2ece182ffb31a0d118e0e3ade537b2ea40803829f19373815bb8f8 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-builder:latest Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> e9b8095f6233 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Step 2/5 : RUN pip3 install meson ninja Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> Running in c09cdce982b5 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Collecting meson Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Downloading meson-1.9.1-py3-none-any.whl.metadata (1.8 kB) Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Collecting ninja Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl.metadata (5.1 kB) Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Downloading meson-1.9.1-py3-none-any.whl (1.0 MB) Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.0/1.0 MB 25.8 MB/s 0:00:00 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Downloading ninja-1.13.0-py3-none-manylinux2014_x86_64.manylinux_2_17_x86_64.whl (180 kB) Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Installing collected packages: ninja, meson Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Successfully installed meson-1.9.1 ninja-1.13.0 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning. Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Removing intermediate container c09cdce982b5 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> 4279be95f991 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Step 3/5 : RUN git clone --depth 1 https://github.com/syoyo/tinygltf.git Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> Running in f2043bf26cd4 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Cloning into 'tinygltf'... Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Removing intermediate container f2043bf26cd4 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> f4d5c61ae027 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Step 4/5 : WORKDIR $SRC/tinygltf Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> Running in a3af360cde6b Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Removing intermediate container a3af360cde6b Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> a816bd073491 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Step 5/5 : COPY build.sh $SRC/ Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": ---> c91593078ae4 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Successfully built c91593078ae4 Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Successfully tagged gcr.io/oss-fuzz/tinygltf:latest Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54": Successfully tagged us-central1-docker.pkg.dev/oss-fuzz/unsafe/tinygltf:latest Finished Step #1 - "build-b2471f08-9e2f-4413-b17e-117afd2a5d54" Starting Step #2 - "srcmap" Step #2 - "srcmap": Already have image: gcr.io/oss-fuzz/tinygltf Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + SRCMAP=/tmp/fileRwtr0O Step #2 - "srcmap": + echo '{}' Step #2 - "srcmap": + PATHS_TO_SCAN=/src Step #2 - "srcmap": + [[ c++ == \g\o ]] Step #2 - "srcmap": ++ find /src -name .git -type d Step #2 - "srcmap": + for DOT_GIT_DIR in $(find $PATHS_TO_SCAN -name ".git" -type d) Step #2 - "srcmap": ++ dirname /src/tinygltf/.git Step #2 - "srcmap": + GIT_DIR=/src/tinygltf Step #2 - "srcmap": + cd /src/tinygltf Step #2 - "srcmap": ++ git config --get remote.origin.url Step #2 - "srcmap": + GIT_URL=https://github.com/syoyo/tinygltf.git Step #2 - "srcmap": ++ git rev-parse HEAD Step #2 - "srcmap": + GIT_REV=81bd50c1062fdb956e878efa2a9234b2b9ec91ec Step #2 - "srcmap": + jq_inplace /tmp/fileRwtr0O '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + F=/tmp/fileGyZ2ha Step #2 - "srcmap": + cat /tmp/fileRwtr0O Step #2 - "srcmap": + jq '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" }' Step #2 - "srcmap": + mv /tmp/fileGyZ2ha /tmp/fileRwtr0O Step #2 - "srcmap": ++ find /src -name .svn -type d Step #2 - "srcmap": ++ find /src -name .hg -type d Step #2 - "srcmap": + '[' '' '!=' '' ']' Step #2 - "srcmap": + cat /tmp/fileRwtr0O Step #2 - "srcmap": + rm /tmp/fileRwtr0O Step #2 - "srcmap": { Step #2 - "srcmap": "/src/tinygltf": { Step #2 - "srcmap": "type": "git", Step #2 - "srcmap": "url": "https://github.com/syoyo/tinygltf.git", Step #2 - "srcmap": "rev": "81bd50c1062fdb956e878efa2a9234b2b9ec91ec" Step #2 - "srcmap": } Step #2 - "srcmap": } Finished Step #2 - "srcmap" Starting Step #3 - "compile-libfuzzer-coverage-x86_64" Step #3 - "compile-libfuzzer-coverage-x86_64": Already have image (with digest): gcr.io/cloud-builders/docker Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": vm.mmap_rnd_bits = 28 Step #3 - "compile-libfuzzer-coverage-x86_64": Compiling libFuzzer to /usr/lib/libFuzzingEngine.a... done. Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": CC=clang Step #3 - "compile-libfuzzer-coverage-x86_64": CXX=clang++ Step #3 - "compile-libfuzzer-coverage-x86_64": CFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument Step #3 - "compile-libfuzzer-coverage-x86_64": CXXFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=unknown-warning-option -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument -stdlib=libc++ Step #3 - "compile-libfuzzer-coverage-x86_64": RUSTFLAGS=--cfg fuzzing -Cdebuginfo=1 -Cforce-frame-pointers -Cinstrument-coverage -C link-arg=-lc++ Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": + cd tests/fuzzer/ Step #3 - "compile-libfuzzer-coverage-x86_64": + meson build Step #3 - "compile-libfuzzer-coverage-x86_64": The Meson build system Step #3 - "compile-libfuzzer-coverage-x86_64": Version: 1.9.1 Step #3 - "compile-libfuzzer-coverage-x86_64": Source dir: /src/tinygltf/tests/fuzzer Step #3 - "compile-libfuzzer-coverage-x86_64": Build dir: /src/tinygltf/tests/fuzzer/build Step #3 - "compile-libfuzzer-coverage-x86_64": Build type: native build Step #3 - "compile-libfuzzer-coverage-x86_64": Project name: fuzz_tinygltf Step #3 - "compile-libfuzzer-coverage-x86_64": Project version: undefined Step #3 - "compile-libfuzzer-coverage-x86_64": C++ compiler for the host machine: clang++ (clang 22.0.0 "clang version 22.0.0git (https://github.com/llvm/llvm-project.git cb2f0d0a5f14c183e7182aba0f0e54a518de9e3f)") Step #3 - "compile-libfuzzer-coverage-x86_64": C++ linker for the host machine: clang++ ld.bfd 2.34 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu family: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Build targets in project: 1 Step #3 - "compile-libfuzzer-coverage-x86_64": Step #3 - "compile-libfuzzer-coverage-x86_64": Found ninja-1.13.0.git.kitware.jobserver-pipe-1 at /usr/local/bin/ninja Step #3 - "compile-libfuzzer-coverage-x86_64": WARNING: Running the setup command as `meson [options]` instead of `meson setup [options]` is ambiguous and deprecated. Step #3 - "compile-libfuzzer-coverage-x86_64": + cd build Step #3 - "compile-libfuzzer-coverage-x86_64": ++ nproc Step #3 - "compile-libfuzzer-coverage-x86_64": + ninja -j32 Step #3 - "compile-libfuzzer-coverage-x86_64": [0/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o [1/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../fuzz_gltf.cc:10: Step #3 - "compile-libfuzzer-coverage-x86_64": In file included from ../../../tiny_gltf.h:1715: Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26551:35: warning: identifier '_json' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26551 | inline nlohmann::json operator "" _json(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json Step #3 - "compile-libfuzzer-coverage-x86_64": ../../../json.hpp:26570:49: warning: identifier '_json_pointer' preceded by whitespace in a literal operator declaration is deprecated [-Wdeprecated-literal-operator] Step #3 - "compile-libfuzzer-coverage-x86_64": 26570 | inline nlohmann::json::json_pointer operator "" _json_pointer(const char* s, std::size_t n) Step #3 - "compile-libfuzzer-coverage-x86_64": |  ~~~~~~~~~~~~^~~~~~~~~~~~~ Step #3 - "compile-libfuzzer-coverage-x86_64":  |  operator""_json_pointer Step #3 - "compile-libfuzzer-coverage-x86_64": 2 warnings generated. Step #3 - "compile-libfuzzer-coverage-x86_64": [1/2] Linking target fuzz_gltf [2/2] Linking target fuzz_gltf Step #3 - "compile-libfuzzer-coverage-x86_64": + cp fuzz_gltf /workspace/out/libfuzzer-coverage-x86_64/ Finished Step #3 - "compile-libfuzzer-coverage-x86_64" Starting Step #4 Step #4: Pulling image: gcr.io/oss-fuzz-base/base-runner Step #4: Using default tag: latest Step #4: latest: Pulling from oss-fuzz-base/base-runner Step #4: b549f31133a9: Already exists Step #4: fbd651eef87f: Already exists Step #4: 1213aebcf1ee: Already exists Step #4: 159bfcba0ec1: Pulling fs layer Step #4: 151d203047ba: Pulling fs layer Step #4: ae91c9e86ee2: Pulling fs layer Step #4: 5dddfb68a37f: Pulling fs layer Step #4: d1987f23a844: Pulling fs layer Step #4: 079afb30a636: Pulling fs layer Step #4: 6e7c8674c91b: Pulling fs layer Step #4: 3e2f40aed1e2: Pulling fs layer Step #4: 05440077cdb5: Pulling fs layer Step #4: ccdf9af96bb5: Pulling fs layer Step #4: c2de5c419b37: Pulling fs layer Step #4: 05e243ea265e: Pulling fs layer Step #4: ad1c0c2bd206: Pulling fs layer Step #4: 08341a55e67c: Pulling fs layer Step #4: a1f8be6052bc: Pulling fs layer Step #4: 1b3eebaf3697: Pulling fs layer Step #4: aa88d2a73e4f: Pulling fs layer Step #4: df87eb8e0601: Pulling fs layer Step #4: 6e7c8674c91b: Waiting Step #4: f9b6ffc45d89: Pulling fs layer Step #4: 7e085c869f68: Pulling fs layer Step #4: 938a06431544: Pulling fs layer Step #4: 3e2f40aed1e2: Waiting Step #4: 99a8e6749860: Pulling fs layer Step #4: 03157d513924: Pulling fs layer Step #4: 05440077cdb5: Waiting Step #4: 77ecb77cc680: Pulling fs layer Step #4: ccdf9af96bb5: Waiting Step #4: ad1c0c2bd206: Waiting Step #4: c2de5c419b37: Waiting Step #4: 05e243ea265e: Waiting Step #4: 08341a55e67c: Waiting Step #4: a1f8be6052bc: Waiting Step #4: 1b3eebaf3697: Waiting Step #4: aa88d2a73e4f: Waiting Step #4: df87eb8e0601: Waiting Step #4: f9b6ffc45d89: Waiting Step #4: 7e085c869f68: Waiting Step #4: 938a06431544: Waiting Step #4: 99a8e6749860: Waiting Step #4: 03157d513924: Waiting Step #4: 77ecb77cc680: Waiting Step #4: ae91c9e86ee2: Verifying Checksum Step #4: ae91c9e86ee2: Download complete Step #4: 159bfcba0ec1: Download complete Step #4: d1987f23a844: Verifying Checksum Step #4: d1987f23a844: Download complete Step #4: 6e7c8674c91b: Download complete Step #4: 151d203047ba: Verifying Checksum Step #4: 151d203047ba: Download complete Step #4: 3e2f40aed1e2: Verifying Checksum Step #4: 3e2f40aed1e2: Download complete Step #4: 5dddfb68a37f: Verifying Checksum Step #4: 5dddfb68a37f: Download complete Step #4: 05440077cdb5: Verifying Checksum Step #4: 05440077cdb5: Download complete Step #4: 159bfcba0ec1: Pull complete Step #4: 05e243ea265e: Verifying Checksum Step #4: 05e243ea265e: Download complete Step #4: ad1c0c2bd206: Verifying Checksum Step #4: ad1c0c2bd206: Download complete Step #4: c2de5c419b37: Verifying Checksum Step #4: c2de5c419b37: Download complete Step #4: a1f8be6052bc: Verifying Checksum Step #4: a1f8be6052bc: Download complete Step #4: 079afb30a636: Verifying Checksum Step #4: 079afb30a636: Download complete Step #4: 151d203047ba: Pull complete Step #4: aa88d2a73e4f: Verifying Checksum Step #4: aa88d2a73e4f: Download complete Step #4: df87eb8e0601: Verifying Checksum Step #4: df87eb8e0601: Download complete Step #4: ae91c9e86ee2: Pull complete Step #4: 938a06431544: Download complete Step #4: ccdf9af96bb5: Download complete Step #4: 7e085c869f68: Verifying Checksum Step #4: 7e085c869f68: Download complete Step #4: 03157d513924: Verifying Checksum Step #4: 03157d513924: Download complete Step #4: 5dddfb68a37f: Pull complete Step #4: 77ecb77cc680: Verifying Checksum Step #4: 77ecb77cc680: Download complete Step #4: d1987f23a844: Pull complete Step #4: 99a8e6749860: Verifying Checksum Step #4: 99a8e6749860: Download complete Step #4: f9b6ffc45d89: Verifying Checksum Step #4: f9b6ffc45d89: Download complete Step #4: 08341a55e67c: Verifying Checksum Step #4: 08341a55e67c: Download complete Step #4: 1b3eebaf3697: Verifying Checksum Step #4: 1b3eebaf3697: Download complete Step #4: 079afb30a636: Pull complete Step #4: 6e7c8674c91b: Pull complete Step #4: 3e2f40aed1e2: Pull complete Step #4: 05440077cdb5: Pull complete Step #4: ccdf9af96bb5: Pull complete Step #4: c2de5c419b37: Pull complete Step #4: 05e243ea265e: Pull complete Step #4: ad1c0c2bd206: Pull complete Step #4: 08341a55e67c: Pull complete Step #4: a1f8be6052bc: Pull complete Step #4: 1b3eebaf3697: Pull complete Step #4: aa88d2a73e4f: Pull complete Step #4: df87eb8e0601: Pull complete Step #4: f9b6ffc45d89: Pull complete Step #4: 7e085c869f68: Pull complete Step #4: 938a06431544: Pull complete Step #4: 99a8e6749860: Pull complete Step #4: 03157d513924: Pull complete Step #4: 77ecb77cc680: Pull complete Step #4: Digest: sha256:cd72d13b77b6e6e5b4eb6fe7bf76f472326f214752dd653fe1fd32f2c58ab1ce Step #4: Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-runner:latest Step #4: gcr.io/oss-fuzz-base/base-runner:latest Finished Step #4 Starting Step #5 Step #5: Already have image (with digest): gcr.io/oss-fuzz-base/base-runner Step #5: Running fuzz_gltf Step #5: Error occured while running fuzz_gltf: Step #5: Cov returncode: 0, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2631427177 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5614fda7c6b0, 0x5614fda8124b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5614fda81250,0x5614fdaccc00), Step #5: MERGE-OUTER: 12522 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2631520049 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x559ff46a96b0, 0x559ff46ae24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x559ff46ae250,0x559ff46f9c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: 12522 total files; 0 processed earlier; will process 12522 files now Step #5: #1 pulse cov: 79 ft: 80 exec/s: 0 rss: 37Mb Step #5: #2 pulse cov: 79 ft: 80 exec/s: 0 rss: 37Mb Step #5: #4 pulse cov: 268 ft: 276 exec/s: 0 rss: 38Mb Step #5: #8 pulse cov: 333 ft: 356 exec/s: 0 rss: 38Mb Step #5: #16 pulse cov: 362 ft: 402 exec/s: 0 rss: 38Mb Step #5: #32 pulse cov: 474 ft: 537 exec/s: 0 rss: 39Mb Step #5: #64 pulse cov: 519 ft: 594 exec/s: 0 rss: 39Mb Step #5: #128 pulse cov: 591 ft: 742 exec/s: 0 rss: 41Mb Step #5: #256 pulse cov: 730 ft: 985 exec/s: 0 rss: 43Mb Step #5: #512 pulse cov: 838 ft: 1304 exec/s: 0 rss: 47Mb Step #5: #1024 pulse cov: 994 ft: 2027 exec/s: 0 rss: 55Mb Step #5: #2048 pulse cov: 1274 ft: 3786 exec/s: 0 rss: 57Mb Step #5: #4096 pulse cov: 3580 ft: 10857 exec/s: 4096 rss: 65Mb Step #5: ==42== ERROR: libFuzzer: out-of-memory (used: 2066Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1582671822 bytes in 34486 chunks; quarantined: 7584847 bytes in 1433 chunks; 58189 other chunks; total chunks: 94108; showing top 95% (at most 8 unique contexts) Step #5: 690908856 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x559ff4398ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559ff44982dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x559ff44982dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x559ff4465c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x559ff4465c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x559ff43dd219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x559ff4402cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x559ff4402cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x559ff44eaf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x559ff44eaf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x559ff44eaf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x559ff44eaf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x559ff4541637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x559ff4541637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x559ff4541637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x559ff4541637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x559ff442d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x559ff4418889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x559ff4464925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x559ff4464925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x559ff4464925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x559ff427a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x559ff4283b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x559ff426b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x559ff4296cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f3af5859082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 690908856 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x559ff4398ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559ff44982aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x559ff44982aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x559ff4465c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x559ff4465c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x559ff43dd219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x559ff4402cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x559ff4402cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x559ff44eaf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x559ff44eaf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x559ff44eaf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x559ff44eaf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x559ff4541637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x559ff4541637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x559ff4541637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x559ff4541637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x559ff442d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x559ff4418889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x559ff4464925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x559ff4464925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x559ff4464925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x559ff427a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x559ff4283b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x559ff426b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x559ff4296cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f3af5859082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 172727214 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x559ff4398ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x559ff4498315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x559ff4498315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x559ff4465c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x559ff4465c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x559ff43dd219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x559ff4402cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x559ff4402cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x559ff44eaf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x559ff44eaf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x559ff44eaf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x559ff44eaf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x559ff4541637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x559ff4541637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x559ff4541637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x559ff4541637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x559ff442d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x559ff4418889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x559ff4464925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x559ff4464925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x559ff4464925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x559ff427a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x559ff4283b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x559ff426b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x559ff4296cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f3af5859082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: Step #5: Step #5: artifact_prefix='./'; Test unit written to ./oom-da39a3ee5e6b4b0d3255bfef95601890afd80709 Step #5: Base64: Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2639441420 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x556bc71296b0, 0x556bc712e24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x556bc712e250,0x556bc7179c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: 12522 total files; 5426 processed earlier; will process 7096 files now Step #5: #1 pulse cov: 581 ft: 582 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 711 ft: 908 exec/s: 0 rss: 41Mb Step #5: #4 pulse cov: 1112 ft: 1448 exec/s: 0 rss: 1509Mb Step #5: #8 pulse cov: 1206 ft: 1721 exec/s: 0 rss: 1509Mb Step #5: #16 pulse cov: 1496 ft: 2299 exec/s: 0 rss: 1509Mb Step #5: ==46== ERROR: libFuzzer: out-of-memory (used: 2113Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2154989261 bytes in 19158 chunks; quarantined: 1561979 bytes in 5428 chunks; 31682 other chunks; total chunks: 56268; showing top 95% (at most 8 unique contexts) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #32 pulse cov: 1773 ft: 2817 exec/s: 16 rss: 2113Mb Step #5: #0 0x556bc6e18ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x556bc6f182dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x556bc6f182dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x556bc6ee5c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x556bc6ee5c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x556bc6e5d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x556bc6e82cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x556bc6e82cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x556bc6f6af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x556bc6f6af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x556bc6f6af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x556bc6f6af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x556bc6fc1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x556bc6fc1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x556bc6fc1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x556bc6fc1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x556bc6ead509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x556bc6e98889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x556bc6ee4925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x556bc6ee4925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x556bc6ee4925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x556bc6cfa57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x556bc6d03b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x556bc6ceb019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x556bc6d16cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5c29b8f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 945544192 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x556bc6e18ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x556bc6f182aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x556bc6f182aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x556bc6ee5c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x556bc6ee5c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x556bc6e5d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x556bc6e82cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x556bc6e82cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x556bc6f6af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x556bc6f6af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x556bc6f6af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x556bc6f6af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x556bc6fc1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x556bc6fc1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x556bc6fc1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x556bc6fc1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x556bc6ead509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x556bc6e98889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x556bc6ee4925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x556bc6ee4925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x556bc6ee4925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x556bc6cfa57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x556bc6d03b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x556bc6ceb019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x556bc6d16cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5c29b8f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 236386048 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x556bc6e18ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x556bc6f18315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x556bc6f18315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x556bc6ee5c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x556bc6ee5c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x556bc6e5d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x556bc6e82cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x556bc6e82cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x556bc6f6af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x556bc6f6af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x556bc6f6af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x556bc6f6af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x556bc6fc1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x556bc6fc1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x556bc6fc1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x556bc6fc1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x556bc6ead509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x556bc6e98889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x556bc6ee4925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x556bc6ee4925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x556bc6ee4925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x556bc6cfa57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x556bc6d03b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x556bc6ceb019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x556bc6d16cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5c29b8f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x63,0x61,0x6d,0x4f,0x44,0x79,0x79,0x79,0x79,0x79,0x47,0x35,0x30,0x38,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdhcamODyyyyyG508\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-20d40020c20793200bf1c8c5d100eea0f53f65a3 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaGNhbU9EeXl5eXlHNTA4In1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2642370165 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x562a7b2196b0, 0x562a7b21e24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x562a7b21e250,0x562a7b269c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/20d40020c20793200bf1c8c5d100eea0f53f65a3' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 5474 processed earlier; will process 7048 files now Step #5: #1 pulse cov: 730 ft: 731 exec/s: 0 rss: 402Mb Step #5: #2 pulse cov: 840 ft: 856 exec/s: 0 rss: 402Mb Step #5: #4 pulse cov: 1082 ft: 1301 exec/s: 0 rss: 402Mb Step #5: #8 pulse cov: 1324 ft: 1617 exec/s: 0 rss: 402Mb Step #5: #16 pulse cov: 1654 ft: 2133 exec/s: 0 rss: 402Mb Step #5: ==50== ERROR: libFuzzer: out-of-memory (used: 2053Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1582074131 bytes in 19523 chunks; quarantined: 1765396 bytes in 5541 chunks; 31440 other chunks; total chunks: 56504; showing top 95% (at most 8 unique contexts) Step #5: 690908856 byte(s) (43%) in 1 allocation(s) Step #5: #32 pulse cov: 1898 ft: 2919 exec/s: 32 rss: 2053Mb Step #5: #0 0x562a7af08ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x562a7b0082aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x562a7b0082aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x562a7afd5c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x562a7afd5c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x562a7af4d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x562a7af72cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x562a7af72cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x562a7b05af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x562a7b05af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x562a7b05af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x562a7b05af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x562a7b0b1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x562a7b0b1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x562a7b0b1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x562a7b0b1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x562a7af9d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x562a7af88889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x562a7afd4925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x562a7afd4925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x562a7afd4925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x562a7adea57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x562a7adf3b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x562a7addb019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x562a7ae06cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ff646a23082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 690908856 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x562a7af08ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x562a7b0082dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x562a7b0082dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x562a7afd5c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x562a7afd5c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x562a7af4d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x562a7af72cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x562a7af72cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x562a7b05af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x562a7b05af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x562a7b05af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x562a7b05af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x562a7b0b1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x562a7b0b1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x562a7b0b1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x562a7b0b1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x562a7af9d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x562a7af88889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x562a7afd4925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x562a7afd4925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x562a7afd4925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x562a7adea57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x562a7adf3b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x562a7addb019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x562a7ae06cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ff646a23082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 172727214 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x562a7af08ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x562a7b008315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x562a7b008315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x562a7afd5c53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x562a7afd5c53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x562a7af4d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x562a7af72cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x562a7af72cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x562a7b05af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x562a7b05af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x562a7b05af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x562a7b05af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x562a7b0b1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x562a7b0b1637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x562a7b0b1637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x562a7b0b1637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x562a7af9d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x562a7af88889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x562a7afd4925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x562a7afd4925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x562a7afd4925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x562a7adea57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x562a7adf3b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x562a7addb019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x562a7ae06cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7ff646a23082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x31,0x79,0x50,0x73,0x63,0x65,0x6e,0x65,0x79,0x79,0x79,0x79,0x47,0x4c,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh1yPsceneyyyyGL\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-b09a21109379d4f973ead2969e1e8939835cfe0c Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDF5UHNjZW5leXl5eUdMIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 4 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2644284440 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55fe87bd16b0, 0x55fe87bd624b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55fe87bd6250,0x55fe87c21c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/b09a21109379d4f973ead2969e1e8939835cfe0c' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 5509 processed earlier; will process 7013 files now Step #5: #1 pulse cov: 643 ft: 644 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 685 ft: 773 exec/s: 0 rss: 41Mb Step #5: #4 pulse cov: 901 ft: 1072 exec/s: 0 rss: 41Mb Step #5: #8 pulse cov: 1344 ft: 1733 exec/s: 8 rss: 147Mb Step #5: #16 pulse cov: 1691 ft: 2203 exec/s: 4 rss: 1861Mb Step #5: #32 pulse cov: 1751 ft: 2348 exec/s: 3 rss: 1861Mb Step #5: #64 pulse cov: 2121 ft: 3102 exec/s: 2 rss: 1861Mb Step #5: ==54== ERROR: libFuzzer: out-of-memory (used: 2104Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 68427301 bytes in 20471 chunks; quarantined: 8037205 bytes in 582 chunks; 35514 other chunks; total chunks: 56567; showing top 95% (at most 8 unique contexts) Step #5: 24383096 byte(s) (35%) in 11 allocation(s) Step #5: #0 0x55fe878c0ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55fe87aea253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55fe877becf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f939736b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 23348684 byte(s) (34%) in 1 allocation(s) Step #5: #0 0x55fe878c0ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55fe879b530a in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55fe879b530a in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55fe879b530a in stbi__convert_format(unsigned char*, int, int, unsigned int, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1761:29 Step #5: #4 0x55fe879ae49f in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6084:18 Step #5: #5 0x55fe8798faa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #6 0x55fe87905219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55fe8792acec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55fe8792acec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55fe87a12f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x55fe87a12f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x55fe87a12f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x55fe87a12f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x55fe87a69637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x55fe87a69637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x55fe87a69637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55fe87a69637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55fe87955509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55fe87940889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55fe8798c925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55fe8798c925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55fe8798c925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55fe877a257d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x55fe877abb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55fe87793019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x55fe877becf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f939736b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 17511513 byte(s) (25%) in 1 allocation(s) Step #5: #0 0x55fe878c0ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55fe879ac5d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55fe879ac5d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55fe879ac5d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x55fe8798faa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x55fe87905219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55fe8792acec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55fe8792acec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55fe87a12f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55fe87a12f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55fe87a12f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55fe87a12f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55fe87a69637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55fe87a69637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55fe87a69637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55fe87a69637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55fe87955509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55fe87940889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55fe8798c925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55fe8798c925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55fe8798c925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55fe877a257d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55fe877abb18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55fe87793019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55fe877becf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f939736b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1048576 byte(s) (1%) in 1 allocation(s) Step #5: #0 0x55fe878c0ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55fe87aea253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55fe87792fdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55fe877becf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7f939736b082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x64,0x41,0x45,0x42,0x42,0x43,0x42,0x35,0x58,0x42,0x43,0x42,0x6b,0x44,0x42,0x46,0x36,0x32,0x66,0x52,0x43,0x42,0x42,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/gif;base64,dAEBBCB5XBCBkDBF62fRCBB\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-9108d2b214058b7ca5a7719d01068167c36267af Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxkQUVCQkNCNVhCQ0JrREJGNjJmUkNCQiJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 5 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2705205972 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55b740d536b0, 0x55b740d5824b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55b740d58250,0x55b740da3c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/9108d2b214058b7ca5a7719d01068167c36267af' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 5609 processed earlier; will process 6913 files now Step #5: #1 pulse cov: 889 ft: 890 exec/s: 0 rss: 116Mb Step #5: #2 pulse cov: 932 ft: 946 exec/s: 1 rss: 156Mb Step #5: #4 pulse cov: 1063 ft: 1178 exec/s: 2 rss: 1524Mb Step #5: #8 pulse cov: 1237 ft: 1511 exec/s: 1 rss: 1524Mb Step #5: #16 pulse cov: 1411 ft: 1775 exec/s: 1 rss: 1524Mb Step #5: #32 pulse cov: 1578 ft: 2213 exec/s: 2 rss: 1524Mb Step #5: #64 pulse cov: 2139 ft: 3501 exec/s: 2 rss: 1524Mb Step #5: #128 pulse cov: 2737 ft: 5045 exec/s: 2 rss: 2056Mb Step #5: ==58== ERROR: libFuzzer: out-of-memory (used: 2056Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 117092171 bytes in 24137 chunks; quarantined: 6254875 bytes in 2721 chunks; 29802 other chunks; total chunks: 56660; showing top 95% (at most 8 unique contexts) Step #5: 89249283 byte(s) (76%) in 1 allocation(s) Step #5: #0 0x55b740a42ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b740b2e5d6 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55b740b2e5d6 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55b740b2e5d6 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x55b740b11aa1 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x55b740a87219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55b740aaccec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55b740aaccec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55b740b94f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55b740b94f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55b740b94f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55b740b94f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55b740beb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55b740beb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55b740beb637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55b740beb637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55b740ad7509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55b740ac2889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55b740b0e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55b740b0e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55b740b0e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55b74092457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55b74092db18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55b740915019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55b740940cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe170022082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (20%) in 11 allocation(s) Step #5: #0 0x55b740a42ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55b740c6c253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55b740940cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fe170022082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x6a,0x70,0x65,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x56,0x41,0x45,0x42,0x77,0x69,0x6d,0x61,0x71,0x42,0x42,0x6e,0x42,0x4f,0x74,0x41,0x74,0x61,0x32,0x64,0x41,0x67,0x67,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/jpeg;base64,VAEBwimaqBBnBOtAta2dAgg\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-0abedda5eff552a8bee1f64864ed9c5404e40015 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsVkFFQndpbWFxQkJuQk90QXRhMmRBZ2cifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 6 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2764129745 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5608de6c96b0, 0x5608de6ce24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5608de6ce250,0x5608de719c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/0abedda5eff552a8bee1f64864ed9c5404e40015' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 5794 processed earlier; will process 6728 files now Step #5: #1 pulse cov: 839 ft: 840 exec/s: 1 rss: 213Mb Step #5: #2 pulse cov: 900 ft: 974 exec/s: 2 rss: 213Mb Step #5: #4 pulse cov: 995 ft: 1082 exec/s: 1 rss: 422Mb Step #5: #8 pulse cov: 1415 ft: 1829 exec/s: 2 rss: 422Mb Step #5: #16 pulse cov: 1701 ft: 2278 exec/s: 3 rss: 1528Mb Step #5: #32 pulse cov: 2099 ft: 3228 exec/s: 4 rss: 1770Mb Step #5: #64 pulse cov: 2476 ft: 4375 exec/s: 5 rss: 1770Mb Step #5: #128 pulse cov: 2774 ft: 5458 exec/s: 4 rss: 1913Mb Step #5: #256 pulse cov: 3323 ft: 7544 exec/s: 3 rss: 1913Mb Step #5: ==62== ERROR: libFuzzer: out-of-memory (used: 2335Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2422782916 bytes in 27453 chunks; quarantined: 9265694 bytes in 289 chunks; 37533 other chunks; total chunks: 65275; showing top 95% (at most 8 unique contexts) Step #5: 1197468481 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x5608de3b8ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5608de49af1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5608de49af1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5608de49af1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x5608de49af1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x5608de486324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x5608de3fd219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x5608de422cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x5608de422cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x5608de50af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x5608de50af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x5608de50af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x5608de50af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x5608de561637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x5608de561637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x5608de561637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x5608de561637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x5608de44d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x5608de438889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x5608de484925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x5608de484925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x5608de484925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x5608de29a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x5608de2a3b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x5608de28b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x5608de2b6cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f503a49e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1197468480 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x5608de3fb8ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x5608de50b533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x5608de50b533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x5608de50b533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x5608de50b533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x5608de50b533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x5608de423950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x5608de423950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x5608de50af20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5608de50af20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5608de50af20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5608de50af20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5608de561637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5608de561637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5608de561637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5608de561637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5608de44d509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5608de438889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5608de484925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5608de484925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5608de484925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5608de29a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5608de2a3b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5608de28b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5608de2b6cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f503a49e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x46,0x2f,0x6d,0x49,0x45,0x51,0x4d,0x30,0x4e,0x41,0x4f,0x48,0x45,0x51,0x47,0x30,0x4d,0x69,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEIF/mIEQM0NAOHEQG0Mi\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-b50de4d259b00066c2c0a2244fe826e1745a6224 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUlGL21JRVFNME5BT0hFUUcwTWkifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 7 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2846065288 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x56175b1696b0, 0x56175b16e24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x56175b16e250,0x56175b1b9c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/b50de4d259b00066c2c0a2244fe826e1745a6224' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 6104 processed earlier; will process 6418 files now Step #5: #1 pulse cov: 830 ft: 831 exec/s: 0 rss: 38Mb Step #5: #2 pulse cov: 844 ft: 871 exec/s: 2 rss: 768Mb Step #5: #4 pulse cov: 969 ft: 1073 exec/s: 4 rss: 768Mb Step #5: #8 pulse cov: 1047 ft: 1233 exec/s: 1 rss: 1401Mb Step #5: #16 pulse cov: 1305 ft: 1589 exec/s: 2 rss: 1784Mb Step #5: ==66== ERROR: libFuzzer: out-of-memory (used: 2253Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 166840478 bytes in 16994 chunks; quarantined: 6655041 bytes in 325 chunks; 35068 other chunks; total chunks: 52387; showing top 95% (at most 8 unique contexts) Step #5: 79424421 byte(s) (47%) in 1 allocation(s) Step #5: #0 0x56175ae58ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x56175af3af1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x56175af3af1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x56175af3af1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x56175af3af1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x56175af26324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x56175ae9d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x56175aec2cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x56175aec2cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x56175afaaf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x56175afaaf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x56175afaaf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x56175afaaf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x56175b001637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x56175b001637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x56175b001637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x56175b001637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x56175aeed509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x56175aed8889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x56175af24925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x56175af24925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x56175af24925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x56175ad3a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x56175ad43b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x56175ad2b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x56175ad56cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f8d4df22082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 39975981 byte(s) (23%) in 3 allocation(s) Step #5: #0 0x56175ae58ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x56175af6b707 in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3344:37 Step #5: #2 0x56175af62a91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x56175af3306c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x56175af3306c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x56175af3306c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x56175af26324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x56175ae9d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x56175aec2cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x56175aec2cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x56175afaaf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x56175afaaf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x56175afaaf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x56175afaaf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x56175b001637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x56175b001637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x56175b001637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x56175b001637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x56175aeed509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x56175aed8889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x56175af24925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x56175af24925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x56175af24925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x56175ad3a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x56175ad43b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x56175ad2b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x56175ad56cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f8d4df22082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 24383096 byte(s) (14%) in 11 allocation(s) Step #5: #0 0x56175ae58ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x56175b082253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x56175ad56cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f8d4df22082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 19988013 byte(s) (11%) in 3 allocation(s) Step #5: #0 0x56175ae58ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x56175af6b5ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x56175af62a91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x56175af3306c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x56175af3306c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x56175af3306c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x56175af26324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x56175ae9d219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x56175aec2cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x56175aec2cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x56175afaaf20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x56175afaaf20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x56175afaaf20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x56175afaaf20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x56175b001637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x56175b001637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x56175b001637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x56175b001637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x56175aeed509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x56175aed8889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x56175af24925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x56175af24925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x56175af24925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x56175ad3a57d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x56175ad43b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x56175ad2b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x56175ad56cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f8d4df22082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x42,0x41,0x42,0x45,0x49,0x41,0x30,0x58,0x32,0x45,0x51,0x4e,0x48,0x45,0x51,0x4d,0x4f,0x4d,0x51,0x48,0x2f,0x45,0x2f,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///BABEIA0X2EQNHEQMOMQH/E/\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-1ada9e1acc081069ada29824e23332422f388832 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQkFCRUlBMFgyRVFOSEVRTU9NUUgvRS8ifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 8 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2859984219 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5613805c06b0, 0x5613805c524b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5613805c5250,0x561380610c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/1ada9e1acc081069ada29824e23332422f388832' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 6128 processed earlier; will process 6394 files now Step #5: #1 pulse cov: 765 ft: 766 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 980 ft: 1175 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 1056 ft: 1283 exec/s: 0 rss: 254Mb Step #5: #8 pulse cov: 1513 ft: 2054 exec/s: 0 rss: 254Mb Step #5: #16 pulse cov: 1842 ft: 2809 exec/s: 16 rss: 632Mb Step #5: ==70== ERROR: libFuzzer: out-of-memory (used: 2255Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 1007519551 bytes in 19384 chunks; quarantined: 8885810 bytes in 456 chunks; 32552 other chunks; total chunks: 52392; showing top 95% (at most 8 unique contexts) Step #5: 504797345 byte(s) (50%) in 1 allocation(s) Step #5: #0 0x5613802afed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x561380391f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x561380391f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x561380391f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x561380391f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x56138037d324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x5613802f4219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x561380319cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x561380319cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x561380401f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x561380401f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x561380401f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x561380401f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x561380458637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x561380458637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x561380458637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x561380458637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x561380344509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x56138032f889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x56138037b925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x56138037b925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x56138037b925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x56138019157d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x56138019ab18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x561380182019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x5613801adcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f7348273082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 316782765 byte(s) (31%) in 3 allocation(s) Step #5: #0 0x5613802afed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5613803c2707 in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3344:37 Step #5: #2 0x5613803b9a91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x56138038a06c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x56138038a06c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x56138038a06c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x56138037d324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x5613802f4219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x561380319cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x561380319cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x561380401f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x561380401f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x561380401f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x561380401f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x561380458637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x561380458637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x561380458637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x561380458637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x561380344509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x56138032f889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x56138037b925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x56138037b925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x56138037b925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x56138019157d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x56138019ab18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x561380182019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x5613801adcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f7348273082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: 158391405 byte(s) (15%) in 3 allocation(s) Step #5: #0 0x5613802afed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5613803c25ba in stbi__process_frame_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3335:33 Step #5: #2 0x5613803b9a91 in stbi__decode_jpeg_header(stbi__jpeg*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3383:9 Step #5: #3 0x56138038a06c in stbi__decode_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3418:9 Step #5: #4 0x56138038a06c in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3872:9 Step #5: #5 0x56138038a06c in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #6 0x56138037d324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #7 0x5613802f4219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #8 0x561380319cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #9 0x561380319cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #10 0x561380401f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #11 0x561380401f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #12 0x561380401f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #13 0x561380401f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #14 0x561380458637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #15 0x561380458637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #16 0x561380458637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #17 0x561380458637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #18 0x561380344509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #19 0x56138032f889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #20 0x56138037b925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #21 0x56138037b925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #22 0x56138037b925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #23 0x56138019157d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #24 0x56138019ab18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #25 0x561380182019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #26 0x5613801adcf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #27 0x7f7348273082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__process_frame_header(stbi__jpeg*, int)--stbi__decode_jpeg_header(stbi__jpeg*, int) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x37,0x38,0x55,0x49,0x43,0x41,0x4e,0x68,0x49,0x51,0x45,0x4f,0x45,0x51,0x47,0x30,0x45,0x69,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEI78UICANhIQEOEQG0Ei\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-3e4a2b253751cd13d13918101a9622fdddcf36b3 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUk3OFVJQ0FOaElRRU9FUUcwRWkifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 9 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2866903869 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55c9670536b0, 0x55c96705824b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55c967058250,0x55c9670a3c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/3e4a2b253751cd13d13918101a9622fdddcf36b3' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 6147 processed earlier; will process 6375 files now Step #5: #1 pulse cov: 680 ft: 681 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 1063 ft: 1244 exec/s: 0 rss: 84Mb Step #5: #4 pulse cov: 1187 ft: 1424 exec/s: 0 rss: 442Mb Step #5: #8 pulse cov: 1253 ft: 1591 exec/s: 8 rss: 442Mb Step #5: #16 pulse cov: 1585 ft: 2164 exec/s: 5 rss: 1508Mb Step #5: #32 pulse cov: 1838 ft: 2716 exec/s: 6 rss: 1508Mb Step #5: ==74== ERROR: libFuzzer: out-of-memory (used: 2322Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2415846628 bytes in 19383 chunks; quarantined: 7380372 bytes in 57 chunks; 32992 other chunks; total chunks: 52432; showing top 95% (at most 8 unique contexts) Step #5: 1194161473 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55c966d42ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55c966e24f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55c966e24f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55c966e24f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x55c966e24f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x55c966e10324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x55c966d87219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55c966daccec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55c966daccec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55c966e94f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x55c966e94f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x55c966e94f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x55c966e94f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x55c966eeb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x55c966eeb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x55c966eeb637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55c966eeb637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55c966dd7509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55c966dc2889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55c966e0e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55c966e0e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55c966e0e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55c966c2457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x55c966c2db18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55c966c15019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x55c966c40cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7fb579a42082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1194161472 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55c966d858ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x55c966e95533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x55c966e95533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x55c966e95533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x55c966e95533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x55c966e95533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x55c966dad950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x55c966dad950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x55c966e94f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55c966e94f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55c966e94f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55c966e94f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55c966eeb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55c966eeb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55c966eeb637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55c966eeb637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55c966dd7509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55c966dc2889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55c966e0e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55c966e0e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55c966e0e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55c966c2457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55c966c2db18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55c966c15019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55c966c40cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fb579a42082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x52,0x31,0x41,0x2f,0x34,0x51,0x4f,0x45,0x45,0x51,0x4e,0x30,0x49,0x51,0x47,0x2f,0x45,0x6b,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEIR1A/4QOEEQN0IQG/Ek\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-7752a2a5ceeb14e0d62f2e7a388d61ba126056a8 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUlSMUEvNFFPRUVRTjBJUUcvRWsifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 10 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2877853903 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5635e2ca96b0, 0x5635e2cae24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5635e2cae250,0x5635e2cf9c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/7752a2a5ceeb14e0d62f2e7a388d61ba126056a8' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 6188 processed earlier; will process 6334 files now Step #5: #1 pulse cov: 751 ft: 752 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 1027 ft: 1208 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 1308 ft: 1588 exec/s: 0 rss: 42Mb Step #5: #8 pulse cov: 1528 ft: 2081 exec/s: 0 rss: 48Mb Step #5: #16 pulse cov: 1765 ft: 2486 exec/s: 4 rss: 1526Mb Step #5: #32 pulse cov: 2127 ft: 3163 exec/s: 8 rss: 1526Mb Step #5: #64 pulse cov: 2650 ft: 4383 exec/s: 8 rss: 1526Mb Step #5: #128 pulse cov: 2985 ft: 5472 exec/s: 5 rss: 1526Mb Step #5: #256 pulse cov: 3342 ft: 7335 exec/s: 6 rss: 1529Mb Step #5: ==78== ERROR: libFuzzer: out-of-memory (used: 2104Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 27841830 bytes in 27350 chunks; quarantined: 10789197 bytes in 1739 chunks; 31647 other chunks; total chunks: 60736; showing top 95% (at most 8 unique contexts) Step #5: 24383096 byte(s) (87%) in 11 allocation(s) Step #5: #0 0x5635e2998ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5635e2bc2253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5635e2896cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f67fd28f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 1048576 byte(s) (3%) in 1 allocation(s) Step #5: #0 0x5635e2998ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5635e2bc2253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5635e286afdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x5635e2896cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7f67fd28f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: 1001760 byte(s) (3%) in 1 allocation(s) Step #5: #0 0x5635e2998ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5635e2bc2253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5635e2881a92 in fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:71:9 Step #5: #3 0x5635e28836f2 in ParseOrExit /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:32:8 Step #5: #4 0x5635e28836f2 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:209:5 Step #5: #5 0x5635e286b019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #6 0x5635e2896cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #7 0x7f67fd28f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::Merger::Parse(std::__Fuzzer::basic_istream>&, bool) Step #5: 809264 byte(s) (2%) in 12523 allocation(s) Step #5: #0 0x5635e2998ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5635e2bc2253 in operator new(unsigned long) cxa_noexception.cpp Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x41,0x41,0x42,0x51,0x49,0x4c,0x33,0x39,0x41,0x41,0x51,0x51,0x45,0x45,0x67,0x48,0x45,0x45,0x67,0x45,0x45,0x45,0x67,0x50,0x2b,0x49,0x65,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,///Y///AABQIL39AAQQEEgHEEgEEEgP+Ie\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-7c174d3671c93d81b37e8a39cd9938c621538eda Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCwvLy9ZLy8vQUFCUUlMMzlBQVFRRUVnSEVFZ0VFRWdQK0llIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 11 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 2929741681 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5634a908f6b0, 0x5634a909424b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5634a9094250,0x5634a90dfc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/7c174d3671c93d81b37e8a39cd9938c621538eda' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 6472 processed earlier; will process 6050 files now Step #5: #1 pulse cov: 787 ft: 788 exec/s: 0 rss: 94Mb Step #5: #2 pulse cov: 813 ft: 865 exec/s: 0 rss: 94Mb Step #5: #4 pulse cov: 1061 ft: 1298 exec/s: 0 rss: 94Mb Step #5: #8 pulse cov: 1090 ft: 1341 exec/s: 8 rss: 558Mb Step #5: #16 pulse cov: 1202 ft: 1510 exec/s: 8 rss: 558Mb Step #5: #32 pulse cov: 1556 ft: 2196 exec/s: 16 rss: 558Mb Step #5: #64 pulse cov: 1822 ft: 2716 exec/s: 9 rss: 700Mb Step #5: #128 pulse cov: 2302 ft: 3775 exec/s: 5 rss: 1543Mb Step #5: #256 pulse cov: 3146 ft: 6351 exec/s: 6 rss: 1884Mb Step #5: #512 pulse cov: 3624 ft: 8738 exec/s: 3 rss: 2027Mb Step #5: ==82== ERROR: libFuzzer: out-of-memory (used: 2230Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2313153042 bytes in 31408 chunks; quarantined: 7453662 bytes in 1129 chunks; 32528 other chunks; total chunks: 65065; showing top 95% (at most 8 unique contexts) Step #5: 1015621824 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5634a8d7eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5634a8e7e2aa in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5634a8e7e2aa in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x5634a8e4bc53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5634a8e4bc53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5634a8dc3219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5634a8de8cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5634a8de8cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5634a8ed0f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5634a8ed0f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5634a8ed0f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5634a8ed0f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5634a8f27637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5634a8f27637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5634a8f27637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5634a8f27637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5634a8e13509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5634a8dfe889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5634a8e4a925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5634a8e4a925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5634a8e4a925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5634a8c6057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5634a8c69b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5634a8c51019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5634a8c7ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5d21184082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 1015621824 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x5634a8d7eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5634a8e7e2dd in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5634a8e7e2dd in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x5634a8e4bc53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5634a8e4bc53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5634a8dc3219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5634a8de8cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5634a8de8cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5634a8ed0f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5634a8ed0f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5634a8ed0f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5634a8ed0f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5634a8f27637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5634a8f27637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5634a8f27637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5634a8f27637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5634a8e13509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5634a8dfe889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5634a8e4a925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5634a8e4a925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5634a8e4a925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5634a8c6057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5634a8c69b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5634a8c51019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5634a8c7ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5d21184082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 253905456 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x5634a8d7eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5634a8e7e315 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5634a8e7e315 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x5634a8e4bc53 in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x5634a8e4bc53 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x5634a8dc3219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5634a8de8cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5634a8de8cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5634a8ed0f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5634a8ed0f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5634a8ed0f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5634a8ed0f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5634a8f27637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5634a8f27637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5634a8f27637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5634a8f27637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5634a8e13509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5634a8dfe889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5634a8e4a925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5634a8e4a925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5634a8e4a925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5634a8c6057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5634a8c69b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5634a8c51019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5634a8c7ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f5d21184082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x32,0x50,0x61,0x79,0x44,0x79,0x79,0x61,0x79,0x79,0x79,0x79,0x47,0x6c,0x41,0x41,0x41,0x41,0x41,0x68,0x41,0x4f,0x44,0x63,0x4f,0x61,0x41,0x69,0x79,0x41,0x41,0x41,0x58,0x34,0x48,0x58,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh2PayDyyayyyyGlAAAAAhAODcOaAiyAAAX4HX\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-f8ad821b667addc47e4b5adfcc9d85406399d3fb Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDJQYXlEeXlheXl5eUdsQUFBQUFoQU9EY09hQWl5QUFBWDRIWCJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 12 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3172711558 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55a1c552f6b0, 0x55a1c553424b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55a1c5534250,0x55a1c557fc00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/f8ad821b667addc47e4b5adfcc9d85406399d3fb' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 7222 processed earlier; will process 5300 files now Step #5: #1 pulse cov: 703 ft: 704 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 828 ft: 951 exec/s: 0 rss: 40Mb Step #5: #4 pulse cov: 1054 ft: 1357 exec/s: 0 rss: 40Mb Step #5: #8 pulse cov: 1579 ft: 2296 exec/s: 0 rss: 43Mb Step #5: #16 pulse cov: 1887 ft: 2759 exec/s: 5 rss: 1528Mb Step #5: #32 pulse cov: 2108 ft: 3411 exec/s: 1 rss: 1528Mb Step #5: #64 pulse cov: 2438 ft: 4340 exec/s: 3 rss: 1546Mb Step #5: #128 pulse cov: 2833 ft: 5291 exec/s: 5 rss: 1546Mb Step #5: #256 pulse cov: 3591 ft: 8625 exec/s: 4 rss: 1839Mb Step #5: #512 pulse cov: 3930 ft: 11019 exec/s: 6 rss: 1913Mb Step #5: #1024 pulse cov: 4216 ft: 13850 exec/s: 7 rss: 1913Mb Step #5: ==86== ERROR: libFuzzer: out-of-memory (used: 2141Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 81780805 bytes in 37379 chunks; quarantined: 9219035 bytes in 1491 chunks; 30390 other chunks; total chunks: 69260; showing top 95% (at most 8 unique contexts) Step #5: 53537800 byte(s) (65%) in 1 allocation(s) Step #5: #0 0x55a1c521eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55a1c52eca27 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55a1c52eca27 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55a1c52eca27 in stbi__bmp_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5616:22 Step #5: #4 0x55a1c52eca27 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1148:35 Step #5: #5 0x55a1c5263219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55a1c5288cec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55a1c5288cec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55a1c5370f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x55a1c5370f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x55a1c5370f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x55a1c5370f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x55a1c53c7637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x55a1c53c7637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x55a1c53c7637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55a1c53c7637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55a1c52b3509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55a1c529e889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55a1c52ea925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55a1c52ea925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55a1c52ea925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55a1c510057d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x55a1c5109b18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55a1c50f1019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x55a1c511ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7b75e53082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (29%) in 11 allocation(s) Step #5: #0 0x55a1c521eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55a1c5448253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55a1c511ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f7b75e53082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: 1048576 byte(s) (1%) in 1 allocation(s) Step #5: #0 0x55a1c521eed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x55a1c5448253 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x55a1c50f0fdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:888:10 Step #5: #3 0x55a1c511ccf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #4 0x7f7b75e53082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x30,0x66,0x72,0x73,0x6e,0x61,0x34,0x2f,0x2f,0x45,0x45,0x42,0x30,0x45,0x41,0x41,0x42,0x38,0x41,0x41,0x41,0x41,0x7a,0x51,0x41,0x41,0x41,0x41,0x72,0x2f,0x41,0x41,0x41,0x42,0x41,0x42,0x41,0x41,0x40,0x41,0x41,0x40,0x41,0x22,0x7d,0x2c,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x51,0x6b,0x30,0x66,0x72,0x73,0x6e,0x61,0x34,0x2f,0x2f,0x45,0x45,0x42,0x30,0x45,0x41,0x41,0x42,0x38,0x41,0x41,0x41,0x41,0x41,0x30,0x30,0x45,0x42,0x30,0x45,0x41,0x41,0x42,0x31,0x41,0x65,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/gif;base64,Qk0frsna4//EEB0EAAB8AAAAzQAAAAr/AAABABAA@AA@A\"},{\"uri\":\"data:image/gif;base64,Qk0frsna4//EEB0EAAB8AAAAA00EB0EAAB1Ae\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-d84ea72b45e179ad51e4c2a4d493671538505d3e Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxRazBmcnNuYTQvL0VFQjBFQUFCOEFBQUF6UUFBQUFyL0FBQUJBQkFBQEFBQEEifSx7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxRazBmcnNuYTQvL0VFQjBFQUFCOEFBQUFBMDBFQjBFQUFCMUFlIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 13 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3518673142 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5582b31636b0, 0x5582b316824b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5582b3168250,0x5582b31b3c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/d84ea72b45e179ad51e4c2a4d493671538505d3e' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 8831 processed earlier; will process 3691 files now Step #5: #1 pulse cov: 594 ft: 595 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 937 ft: 1096 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1403 ft: 1827 exec/s: 0 rss: 406Mb Step #5: #8 pulse cov: 1660 ft: 2528 exec/s: 4 rss: 406Mb Step #5: #16 pulse cov: 2209 ft: 3944 exec/s: 2 rss: 647Mb Step #5: #32 pulse cov: 2604 ft: 5326 exec/s: 2 rss: 1899Mb Step #5: #64 pulse cov: 3206 ft: 7074 exec/s: 2 rss: 1899Mb Step #5: #128 pulse cov: 3534 ft: 8967 exec/s: 2 rss: 1899Mb Step #5: #256 pulse cov: 3820 ft: 11317 exec/s: 4 rss: 1899Mb Step #5: #512 pulse cov: 4069 ft: 14420 exec/s: 4 rss: 1899Mb Step #5: ==90== ERROR: libFuzzer: out-of-memory (used: 2140Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2211289726 bytes in 35988 chunks; quarantined: 7809747 bytes in 2056 chunks; 31030 other chunks; total chunks: 69074; showing top 95% (at most 8 unique contexts) Step #5: 1455401280 byte(s) (65%) in 2 allocation(s) Step #5: #0 0x5582b2e958ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:109:35 Step #5: #1 0x5582b2fa5533 in __libcpp_allocate /usr/local/bin/../include/c++/v1/__new/allocate.h:43:28 Step #5: #2 0x5582b2fa5533 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:105:14 Step #5: #3 0x5582b2fa5533 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:41:19 Step #5: #4 0x5582b2fa5533 in __split_buffer /usr/local/bin/../include/c++/v1/__split_buffer:330:25 Step #5: #5 0x5582b2fa5533 in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/__vector/vector.h:966:49 Step #5: #6 0x5582b2ebd950 in resize /usr/local/bin/../include/c++/v1/__vector/vector.h:1370:11 Step #5: #7 0x5582b2ebd950 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x5582b2fa4f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #9 0x5582b2fa4f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #10 0x5582b2fa4f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #11 0x5582b2fa4f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #12 0x5582b2ffb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #13 0x5582b2ffb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #14 0x5582b2ffb637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5582b2ffb637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5582b2ee7509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5582b2ed2889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5582b2f1e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5582b2f1e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5582b2f1e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5582b2d3457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #22 0x5582b2d3db18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5582b2d25019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #24 0x5582b2d50cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f8cc0d7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_allocate--allocate Step #5: 727700641 byte(s) (32%) in 1 allocation(s) Step #5: #0 0x5582b2e52ed4 in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3 Step #5: #1 0x5582b2f34f1e in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5582b2f34f1e in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5582b2f34f1e in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x5582b2f34f1e in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x5582b2f20324 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x5582b2e97219 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x5582b2ebccec in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x5582b2ebccec in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x5582b2fa4f20 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:87:27 Step #5: #10 0x5582b2fa4f20 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:336:12 Step #5: #11 0x5582b2fa4f20 in __invoke_r, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:350:10 Step #5: #12 0x5582b2fa4f20 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:174:12 Step #5: #13 0x5582b2ffb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:274:12 Step #5: #14 0x5582b2ffb637 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:772:10 Step #5: #15 0x5582b2ffb637 in ParseImage /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x5582b2ffb637 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10::operator()(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&) const /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x5582b2ee7509 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x5582b2ed2889 in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x5582b2f1e925 in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x5582b2f1e925 in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x5582b2f1e925 in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x5582b2d3457d in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13 Step #5: #23 0x5582b2d3db18 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x5582b2d25019 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:890:8 Step #5: #25 0x5582b2d50cf2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f8cc0d7a082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./oom-58dfa16c3682c6b37be2b31e2005c879e2bf5430 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 14 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 3648620665 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x5605b80086b0, 0x5605b800d24b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x5605b800d250,0x5605b8058c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/58dfa16c3682c6b37be2b31e2005c879e2bf5430' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 9425 processed earlier; will process 3097 files now Step #5: #1 pulse cov: 775 ft: 776 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 1097 ft: 1275 exec/s: 0 rss: 1364Mb Step #5: #4 pulse cov: 1207 ft: 1544 exec/s: 1 rss: 1364Mb Step #5: #8 pulse cov: 1511 ft: 2182 exec/s: 2 rss: 1364Mb Step #5: #16 pulse cov: 1897 ft: 3498 exec/s: 4 rss: 1364Mb Step #5: #32 pulse cov: 2464 ft: 5190 exec/s: 6 rss: 1364Mb Step #5: #64 pulse cov: 3046 ft: 7297 exec/s: 7 rss: 1364Mb Step #5: #128 pulse cov: 3446 ft: 9657 exec/s: 5 rss: 1364Mb Step #5: #256 pulse cov: 3805 ft: 12123 exec/s: 5 rss: 1905Mb Step #5: #512 pulse cov: 4095 ft: 15325 exec/s: 6 rss: 1905Mb Step #5: #1024 pulse cov: 4233 ft: 18721 exec/s: 6 rss: 1905Mb Step #5: #2048 pulse cov: 4350 ft: 23168 exec/s: 4 rss: 1905Mb Step #5: AddressSanitizer:DEADLYSIGNAL Step #5: ================================================================= Step #5: ==94==ERROR: AddressSanitizer: stack-overflow on address 0x7fff0920eff8 (pc 0x5605b7d26a75 bp 0x00000000001e sp 0x7fff0920f000 T0) Step #5: SCARINESS: 10 (stack-overflow) Step #5: Step #5: Step #5: SUMMARY: AddressSanitizer: stack-overflow Step #5: ==94==ABORTING Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: artifact_prefix='./'; Test unit written to ./crash-f71704490c5264022a4d4e07a5dafa56c6c4115a Step #5: MERGE-OUTER: attempt 15 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 4083763511 Step #5: INFO: Loaded 1 modules (19355 inline 8-bit counters): 19355 [0x55db953006b0, 0x55db9530524b), Step #5: INFO: Loaded 1 PC tables (19355 PCs): 19355 [0x55db95305250,0x55db95350c00), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/f71704490c5264022a4d4e07a5dafa56c6c4115a' caused a failure at the previous merge step Step #5: MERGE-INNER: 12522 total files; 11791 processed earlier; will process 731 files now Step #5: #1 pulse cov: 850 ft: 851 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 1043 ft: 1209 exec/s: 0 rss: 46Mb Step #5: #4 pulse cov: 1325 ft: 1903 exec/s: 0 rss: 47Mb Step #5: #8 pulse cov: 2011 ft: 3643 exec/s: 8 rss: 900Mb Step #5: #16 pulse cov: 2572 ft: 5682 exec/s: 8 rss: 900Mb Step #5: #32 pulse cov: 2808 ft: 7627 exec/s: 16 rss: 900Mb Step #5: #64 pulse cov: 3218 ft: 9764 exec/s: 5 rss: 1392Mb Step #5: #128 pulse cov: 3574 ft: 12312 exec/s: 3 rss: 1399Mb Step #5: #256 pulse cov: 3868 ft: 14646 exec/s: 3 rss: 1453Mb Step #5: #512 pulse cov: 3939 ft: 16204 exec/s: 6 rss: 1453Mb Step #5: #731 DONE cov: 4046 ft: 17028 exec/s: 6 rss: 1453Mb Step #5: MERGE-OUTER: successful in 15 attempt(s) Step #5: MERGE-OUTER: the control file has 2288979 bytes Step #5: MERGE-OUTER: consumed 1Mb (58Mb rss) to parse the control file Step #5: MERGE-OUTER: 7736 new files with 28735 new features added; 4937 new coverage edges Step #5: [2025-11-16 07:14:06,470 INFO] Finding shared libraries for targets (if any). Step #5: [2025-11-16 07:14:06,481 INFO] Finished finding shared libraries for targets. Step #5: Coverage error, creating log file: /workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log Step #5: [2025-11-16 07:14:06,938 INFO] Finding shared libraries for targets (if any). Step #5: [2025-11-16 07:14:06,948 INFO] Finished finding shared libraries for targets. Step #5: [2025-11-16 07:14:07,246 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-11-16 07:14:07,247 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html". Step #5: [2025-11-16 07:14:07,260 DEBUG] Finished generating file view html index file. Step #5: [2025-11-16 07:14:07,260 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-11-16 07:14:07,260 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-11-16 07:14:07,260 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-11-16 07:14:07,309 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-11-16 07:14:07,309 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html". Step #5: [2025-11-16 07:14:07,309 DEBUG] Finished generating directory view html index file. Step #5: [2025-11-16 07:14:07,309 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html". Step #5: [2025-11-16 07:14:07,610 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-11-16 07:14:07,610 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html". Step #5: [2025-11-16 07:14:07,623 DEBUG] Finished generating file view html index file. Step #5: [2025-11-16 07:14:07,623 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-11-16 07:14:07,623 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-11-16 07:14:07,623 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-11-16 07:14:07,672 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-11-16 07:14:07,672 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html". Step #5: [2025-11-16 07:14:07,673 DEBUG] Finished generating directory view html index file. Step #5: [2025-11-16 07:14:07,673 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html". Finished Step #5 Starting Step #6 Step #6: Pulling image: gcr.io/cloud-builders/gsutil Step #6: Using default tag: latest Step #6: latest: Pulling from cloud-builders/gsutil Step #6: 828c1365039a: Already exists Step #6: 39789446ae29: Pulling fs layer Step #6: f44b695ca5b1: Pulling fs layer Step #6: d35b9edda0b6: Pulling fs layer Step #6: 758204a80743: Pulling fs layer Step #6: 20c7c0718038: Pulling fs layer Step #6: d472b022749e: Pulling fs layer Step #6: 3581d33ecfdf: Pulling fs layer Step #6: 3581d33ecfdf: Waiting Step #6: 758204a80743: Download complete Step #6: 20c7c0718038: Download complete Step #6: f44b695ca5b1: Download complete Step #6: 39789446ae29: Verifying Checksum Step #6: 39789446ae29: Download complete Step #6: d472b022749e: Verifying Checksum Step #6: d472b022749e: Download complete Step #6: 39789446ae29: Pull complete Step #6: 3581d33ecfdf: Download complete Step #6: f44b695ca5b1: Pull complete Step #6: d35b9edda0b6: Verifying Checksum Step #6: d35b9edda0b6: Download complete Step #6: d35b9edda0b6: Pull complete Step #6: 758204a80743: Pull complete Step #6: 20c7c0718038: Pull complete Step #6: d472b022749e: Pull complete Step #6: 3581d33ecfdf: Pull complete Step #6: Digest: sha256:fe8680cf18ffb5cb4994d9f480aa37f7ecb91e8be27c8d8615bb047efafa0ad3 Step #6: Status: Downloaded newer image for gcr.io/cloud-builders/gsutil:latest Step #6: gcr.io/cloud-builders/gsutil:latest Step #6: CommandException: 1 files/objects could not be removed. Finished Step #6 Starting Step #7 Step #7: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #7: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/control.js [Content-Type=text/javascript]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/style.css [Content-Type=text/css]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/summary.json [Content-Type=application/json]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/report.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/report.html [Content-Type=text/html]... Step #7: / [0/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #7: / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #7: / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #7: / [5/16 files][293.4 KiB/ 9.4 MiB] 3% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 1.1 MiB/ 9.4 MiB] 11% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #7: / [5/16 files][ 2.1 MiB/ 9.4 MiB] 22% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #7: / [5/16 files][ 3.1 MiB/ 9.4 MiB] 33% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #7: / [5/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [6/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #7: / [6/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [7/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [8/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [9/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [10/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done - - [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #7: Operation completed over 16 objects/9.4 MiB. Finished Step #7 Starting Step #8 Step #8: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #8: CommandException: 1 files/objects could not be removed. Finished Step #8 Starting Step #9 Step #9: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/control.js [Content-Type=text/javascript]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/style.css [Content-Type=text/css]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/summary.json [Content-Type=application/json]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 0.0 B/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/report.html [Content-Type=text/html]... Step #9: / [0/16 files][ 5.5 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html [Content-Type=text/html]... Step #9: / [0/16 files][ 5.7 KiB/ 9.4 MiB] 0% Done / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/report.html [Content-Type=text/html]... Step #9: / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #9: / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #9: / [1/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [2/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [3/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [4/16 files][ 8.6 KiB/ 9.4 MiB] 0% Done / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #9: / [5/16 files][ 13.0 KiB/ 9.4 MiB] 0% Done / [6/16 files][ 17.3 KiB/ 9.4 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #9: / [6/16 files][ 5.3 MiB/ 9.4 MiB] 56% Done / [7/16 files][ 7.4 MiB/ 9.4 MiB] 78% Done / [8/16 files][ 7.4 MiB/ 9.4 MiB] 78% Done / [9/16 files][ 7.4 MiB/ 9.4 MiB] 78% Done / [10/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [11/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [12/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done / [13/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - - [14/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [15/16 files][ 9.4 MiB/ 9.4 MiB] 99% Done - [16/16 files][ 9.4 MiB/ 9.4 MiB] 100% Done Step #9: Operation completed over 16 objects/9.4 MiB. Finished Step #9 Starting Step #10 Step #10: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #10: CommandException: 1 files/objects could not be removed. Finished Step #10 Starting Step #11 Step #11: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #11: Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf.json [Content-Type=application/json]... Step #11: / [0/3 files][ 0.0 B/ 3.6 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/coverage_targets.txt [Content-Type=text/plain]... Step #11: / [0/3 files][ 0.0 B/ 3.6 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log [Content-Type=application/octet-stream]... Step #11: / [0/3 files][ 0.0 B/ 3.6 KiB] 0% Done / [1/3 files][ 3.6 KiB/ 3.6 KiB] 99% Done / [2/3 files][ 3.6 KiB/ 3.6 KiB] 99% Done / [3/3 files][ 3.6 KiB/ 3.6 KiB] 100% Done Step #11: Operation completed over 3 objects/3.6 KiB. Finished Step #11 Starting Step #12 Step #12: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #12: CommandException: 1 files/objects could not be removed. Finished Step #12 Starting Step #13 Step #13: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #13: Copying file:///workspace/out/libfuzzer-coverage-x86_64/textcov_reports/fuzz_gltf.covreport [Content-Type=application/octet-stream]... Step #13: / [0/1 files][ 0.0 B/755.2 KiB] 0% Done / [1/1 files][755.2 KiB/755.2 KiB] 100% Done Step #13: Operation completed over 1 objects/755.2 KiB. Finished Step #13 Starting Step #14 Step #14: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #14: CommandException: 1 files/objects could not be removed. Finished Step #14 Starting Step #15 Step #15: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #15: Copying file:///workspace/out/libfuzzer-coverage-x86_64/logs/fuzz_gltf.log [Content-Type=application/octet-stream]... Step #15: / [0/1 files][ 0.0 B/255.7 KiB] 0% Done / [1/1 files][255.7 KiB/255.7 KiB] 100% Done Step #15: Operation completed over 1 objects/255.7 KiB. Finished Step #15 Starting Step #16 Step #16: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #16: Copying file:///workspace/srcmap.json [Content-Type=application/json]... Step #16: / [0 files][ 0.0 B/ 154.0 B] / [1 files][ 154.0 B/ 154.0 B] Step #16: Operation completed over 1 objects/154.0 B. Finished Step #16 Starting Step #17 Step #17: Already have image (with digest): gcr.io/cloud-builders/curl Step #17: % Total % Received % Xferd Average Speed Time Time Time Current Step #17: Dload Upload Total Spent Left Speed Step #17: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 312 0 0 100 312 0 1686 --:--:-- --:--:-- --:--:-- 1695 100 312 0 0 100 312 0 1677 --:--:-- --:--:-- --:--:-- 1686 Finished Step #17 PUSH DONE