starting build "e0495907-90c9-40ce-8e3c-80cf2c68b273" FETCHSOURCE BUILD Starting Step #0 Step #0: Already have image (with digest): gcr.io/cloud-builders/git Step #0: Cloning into 'oss-fuzz'... Finished Step #0 Starting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad" Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Already have image (with digest): gcr.io/cloud-builders/docker Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Sending build context to Docker daemon 5.12kB Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Step 1/5 : FROM gcr.io/oss-fuzz-base/base-builder Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": latest: Pulling from oss-fuzz-base/base-builder Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b549f31133a9: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ed86ffd2aa74: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a9c806c1adcd: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3a389cd40624: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 556ad8cfc9f3: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 969ac16f2473: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 341c7bc3751f: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 25c0c91b29fd: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d31dfeb9e281: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d7ccba73f3ec: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 642e704e2111: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b3b485ef21f5: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 09a22a4c28c9: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3a389cd40624: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 341c7bc3751f: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 556ad8cfc9f3: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 0a450fc24efa: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 969ac16f2473: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 53b332461208: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 25c0c91b29fd: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 040d691600b5: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 259df3ac8d56: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d7ccba73f3ec: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 45ae93807502: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cbbbafcb891e: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d31dfeb9e281: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": aa6bf344f651: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 7ea4ae86bd01: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9faba1500082: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 0a450fc24efa: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 00bfd11ab984: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 642e704e2111: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b3b485ef21f5: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3c66a3627601: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 53b332461208: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bbd29bbc2d24: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 09a22a4c28c9: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d81d7a7b9941: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 45ae93807502: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bf7b43460a6e: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 040d691600b5: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cbbbafcb891e: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 6103cf324a0b: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9ba27d3e4daf: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ab9e51808f21: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a875ade2b11c: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 378dcd9fa2b5: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 4e6b7f6f099f: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 1b9425ca1d97: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 15a54df0cca2: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 223639c3d91e: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cd317f2fb950: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 62c0cfcc04b7: Pulling fs layer Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bbd29bbc2d24: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 259df3ac8d56: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bf7b43460a6e: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 4e6b7f6f099f: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 6103cf324a0b: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9ba27d3e4daf: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a875ade2b11c: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 378dcd9fa2b5: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ab9e51808f21: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 1b9425ca1d97: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 15a54df0cca2: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 223639c3d91e: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cd317f2fb950: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 62c0cfcc04b7: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9faba1500082: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 00bfd11ab984: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d81d7a7b9941: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 7ea4ae86bd01: Waiting Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a9c806c1adcd: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b549f31133a9: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b549f31133a9: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 556ad8cfc9f3: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 556ad8cfc9f3: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3a389cd40624: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3a389cd40624: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 969ac16f2473: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 969ac16f2473: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ed86ffd2aa74: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ed86ffd2aa74: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 25c0c91b29fd: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 25c0c91b29fd: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d31dfeb9e281: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d31dfeb9e281: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b549f31133a9: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 642e704e2111: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 642e704e2111: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b3b485ef21f5: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b3b485ef21f5: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 09a22a4c28c9: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 09a22a4c28c9: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 0a450fc24efa: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 0a450fc24efa: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 53b332461208: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 53b332461208: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d7ccba73f3ec: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d7ccba73f3ec: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 040d691600b5: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 040d691600b5: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 259df3ac8d56: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 259df3ac8d56: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 45ae93807502: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 45ae93807502: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cbbbafcb891e: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": aa6bf344f651: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": aa6bf344f651: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 7ea4ae86bd01: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 7ea4ae86bd01: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 341c7bc3751f: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 341c7bc3751f: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9faba1500082: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9faba1500082: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3c66a3627601: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3c66a3627601: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 00bfd11ab984: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 00bfd11ab984: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bbd29bbc2d24: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bbd29bbc2d24: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bf7b43460a6e: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d81d7a7b9941: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d81d7a7b9941: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 6103cf324a0b: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 6103cf324a0b: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9ba27d3e4daf: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9ba27d3e4daf: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a875ade2b11c: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a875ade2b11c: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ed86ffd2aa74: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a9c806c1adcd: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 378dcd9fa2b5: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 378dcd9fa2b5: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 4e6b7f6f099f: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 4e6b7f6f099f: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ab9e51808f21: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ab9e51808f21: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 1b9425ca1d97: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 1b9425ca1d97: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 15a54df0cca2: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 15a54df0cca2: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 223639c3d91e: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 223639c3d91e: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cd317f2fb950: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cd317f2fb950: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 62c0cfcc04b7: Verifying Checksum Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 62c0cfcc04b7: Download complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3a389cd40624: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 556ad8cfc9f3: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 969ac16f2473: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 341c7bc3751f: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 25c0c91b29fd: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d31dfeb9e281: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d7ccba73f3ec: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 642e704e2111: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": b3b485ef21f5: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 09a22a4c28c9: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 0a450fc24efa: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 53b332461208: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 040d691600b5: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 259df3ac8d56: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 45ae93807502: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cbbbafcb891e: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": aa6bf344f651: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 7ea4ae86bd01: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9faba1500082: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 00bfd11ab984: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 3c66a3627601: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bbd29bbc2d24: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": d81d7a7b9941: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": bf7b43460a6e: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 6103cf324a0b: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 9ba27d3e4daf: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ab9e51808f21: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": a875ade2b11c: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 378dcd9fa2b5: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 4e6b7f6f099f: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 1b9425ca1d97: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 15a54df0cca2: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 223639c3d91e: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": cd317f2fb950: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": 62c0cfcc04b7: Pull complete Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Digest: sha256:0fa36c09f633694367497b00be31f286bcb9db541ead6c72d3166527673f0068 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-builder:latest Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> 953536f40a25 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Step 2/5 : RUN pip3 install meson ninja Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> Running in b04a7adc26e6 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Collecting meson Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Downloading meson-1.8.2-py3-none-any.whl.metadata (1.8 kB) Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Collecting ninja Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Downloading ninja-1.11.1.4-py3-none-manylinux_2_12_x86_64.manylinux2010_x86_64.whl.metadata (5.0 kB) Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Downloading meson-1.8.2-py3-none-any.whl (1.0 MB) Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.0/1.0 MB 30.6 MB/s eta 0:00:00 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Downloading ninja-1.11.1.4-py3-none-manylinux_2_12_x86_64.manylinux2010_x86_64.whl (422 kB) Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Installing collected packages: ninja, meson Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Successfully installed meson-1.8.2 ninja-1.11.1.4 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager, possibly rendering your system unusable. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv. Use the --root-user-action option if you know what you are doing and want to suppress this warning. Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Removing intermediate container b04a7adc26e6 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> 87f7a31113ae Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Step 3/5 : RUN git clone --depth 1 https://github.com/syoyo/tinygltf.git Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> Running in ff4678c692c7 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Cloning into 'tinygltf'... Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Removing intermediate container ff4678c692c7 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> 3198adc25f11 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Step 4/5 : WORKDIR $SRC/tinygltf Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> Running in 87306540abc0 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Removing intermediate container 87306540abc0 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> 8ad984ddac3b Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Step 5/5 : COPY build.sh $SRC/ Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": ---> 2a5e99439770 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Successfully built 2a5e99439770 Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Successfully tagged gcr.io/oss-fuzz/tinygltf:latest Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad": Successfully tagged us-central1-docker.pkg.dev/oss-fuzz/unsafe/tinygltf:latest Finished Step #1 - "build-2005cbad-daf1-40f2-bc95-84d1cdbeb1ad" Starting Step #2 - "srcmap" Step #2 - "srcmap": Already have image: gcr.io/oss-fuzz/tinygltf Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + SRCMAP=/tmp/fileLNluPO Step #2 - "srcmap": + echo '{}' Step #2 - "srcmap": + PATHS_TO_SCAN=/src Step #2 - "srcmap": + [[ c++ == \g\o ]] Step #2 - "srcmap": ++ find /src -name .git -type d Step #2 - "srcmap": + for DOT_GIT_DIR in $(find $PATHS_TO_SCAN -name ".git" -type d) Step #2 - "srcmap": ++ dirname /src/tinygltf/.git Step #2 - "srcmap": + GIT_DIR=/src/tinygltf Step #2 - "srcmap": + cd /src/tinygltf Step #2 - "srcmap": ++ git config --get remote.origin.url Step #2 - "srcmap": + GIT_URL=https://github.com/syoyo/tinygltf.git Step #2 - "srcmap": ++ git rev-parse HEAD Step #2 - "srcmap": + GIT_REV=37250b3470b517fd6823ee82d6e0495695bb7924 Step #2 - "srcmap": + jq_inplace /tmp/fileLNluPO '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "37250b3470b517fd6823ee82d6e0495695bb7924" }' Step #2 - "srcmap": ++ tempfile Step #2 - "srcmap": + F=/tmp/fileXndHad Step #2 - "srcmap": + cat /tmp/fileLNluPO Step #2 - "srcmap": + jq '."/src/tinygltf" = { type: "git", url: "https://github.com/syoyo/tinygltf.git", rev: "37250b3470b517fd6823ee82d6e0495695bb7924" }' Step #2 - "srcmap": + mv /tmp/fileXndHad /tmp/fileLNluPO Step #2 - "srcmap": ++ find /src -name .svn -type d Step #2 - "srcmap": ++ find /src -name .hg -type d Step #2 - "srcmap": + '[' '' '!=' '' ']' Step #2 - "srcmap": + cat /tmp/fileLNluPO Step #2 - "srcmap": + rm /tmp/fileLNluPO Step #2 - "srcmap": { Step #2 - "srcmap": "/src/tinygltf": { Step #2 - "srcmap": "type": "git", Step #2 - "srcmap": "url": "https://github.com/syoyo/tinygltf.git", Step #2 - "srcmap": "rev": "37250b3470b517fd6823ee82d6e0495695bb7924" Step #2 - "srcmap": } Step #2 - "srcmap": } Finished Step #2 - "srcmap" Starting Step #3 - "compile-libfuzzer-coverage-x86_64" Step #3 - "compile-libfuzzer-coverage-x86_64": Already have image (with digest): gcr.io/cloud-builders/docker Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": vm.mmap_rnd_bits = 28 Step #3 - "compile-libfuzzer-coverage-x86_64": Compiling libFuzzer to /usr/lib/libFuzzingEngine.a... done. Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": CC=clang Step #3 - "compile-libfuzzer-coverage-x86_64": CXX=clang++ Step #3 - "compile-libfuzzer-coverage-x86_64": CFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=enum-constexpr-conversion -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument Step #3 - "compile-libfuzzer-coverage-x86_64": CXXFLAGS=-O1 -fno-omit-frame-pointer -gline-tables-only -Wno-error=enum-constexpr-conversion -Wno-error=incompatible-function-pointer-types -Wno-error=int-conversion -Wno-error=deprecated-declarations -Wno-error=implicit-function-declaration -Wno-error=implicit-int -Wno-error=vla-cxx-extension -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -fprofile-instr-generate -fcoverage-mapping -pthread -Wl,--no-as-needed -Wl,-ldl -Wl,-lm -Wno-unused-command-line-argument -stdlib=libc++ Step #3 - "compile-libfuzzer-coverage-x86_64": RUSTFLAGS=--cfg fuzzing -Cdebuginfo=1 -Cforce-frame-pointers -Cinstrument-coverage -C link-arg=-lc++ Step #3 - "compile-libfuzzer-coverage-x86_64": --------------------------------------------------------------- Step #3 - "compile-libfuzzer-coverage-x86_64": + cd tests/fuzzer/ Step #3 - "compile-libfuzzer-coverage-x86_64": + meson build Step #3 - "compile-libfuzzer-coverage-x86_64": The Meson build system Step #3 - "compile-libfuzzer-coverage-x86_64": Version: 1.8.2 Step #3 - "compile-libfuzzer-coverage-x86_64": Source dir: /src/tinygltf/tests/fuzzer Step #3 - "compile-libfuzzer-coverage-x86_64": Build dir: /src/tinygltf/tests/fuzzer/build Step #3 - "compile-libfuzzer-coverage-x86_64": Build type: native build Step #3 - "compile-libfuzzer-coverage-x86_64": Project name: fuzz_tinygltf Step #3 - "compile-libfuzzer-coverage-x86_64": Project version: undefined Step #3 - "compile-libfuzzer-coverage-x86_64": C++ compiler for the host machine: clang++ (clang 18.1.8 "clang version 18.1.8 (https://github.com/llvm/llvm-project.git 3b5b5c1ec4a3095ab096dd780e84d7ab81f3d7ff)") Step #3 - "compile-libfuzzer-coverage-x86_64": C++ linker for the host machine: clang++ ld.bfd 2.34 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu family: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Host machine cpu: x86_64 Step #3 - "compile-libfuzzer-coverage-x86_64": Build targets in project: 1 Step #3 - "compile-libfuzzer-coverage-x86_64": Step #3 - "compile-libfuzzer-coverage-x86_64": Found ninja-1.11.1.git.kitware.jobserver-1 at /usr/local/bin/ninja Step #3 - "compile-libfuzzer-coverage-x86_64": WARNING: Running the setup command as `meson [options]` instead of `meson setup [options]` is ambiguous and deprecated. Step #3 - "compile-libfuzzer-coverage-x86_64": + cd build Step #3 - "compile-libfuzzer-coverage-x86_64": ++ nproc Step #3 - "compile-libfuzzer-coverage-x86_64": + ninja -j32 Step #3 - "compile-libfuzzer-coverage-x86_64": [0/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o [1/2] Compiling C++ object fuzz_gltf.p/fuzz_gltf.cc.o [1/2] Linking target fuzz_gltf [2/2] Linking target fuzz_gltf Step #3 - "compile-libfuzzer-coverage-x86_64": + cp fuzz_gltf /workspace/out/libfuzzer-coverage-x86_64/ Finished Step #3 - "compile-libfuzzer-coverage-x86_64" Starting Step #4 Step #4: Pulling image: gcr.io/oss-fuzz-base/base-runner Step #4: Using default tag: latest Step #4: latest: Pulling from oss-fuzz-base/base-runner Step #4: b549f31133a9: Already exists Step #4: ed86ffd2aa74: Already exists Step #4: a9c806c1adcd: Already exists Step #4: f97be1847659: Pulling fs layer Step #4: f14536d49acb: Pulling fs layer Step #4: f9ee55498674: Pulling fs layer Step #4: a2db45da8ab1: Pulling fs layer Step #4: be644200e779: Pulling fs layer Step #4: c70045647055: Pulling fs layer Step #4: 1bc5d71dd796: Pulling fs layer Step #4: 40239a6facc1: Pulling fs layer Step #4: 8a4ee1c22f31: Pulling fs layer Step #4: faa8900e463d: Pulling fs layer Step #4: fcb2d5e0d25c: Pulling fs layer Step #4: 104ad7949b87: Pulling fs layer Step #4: add9794c8639: Pulling fs layer Step #4: 59ab64a84e97: Pulling fs layer Step #4: 141cf4df0d40: Pulling fs layer Step #4: b015a66506e2: Pulling fs layer Step #4: c733e17c4110: Pulling fs layer Step #4: 4e8e9487b536: Pulling fs layer Step #4: 033d31603c10: Pulling fs layer Step #4: 8b89bccbcb20: Pulling fs layer Step #4: 52c23ee25af5: Pulling fs layer Step #4: 68fed04682ae: Pulling fs layer Step #4: 9d7dc1c2c73f: Pulling fs layer Step #4: 59ab64a84e97: Waiting Step #4: 141cf4df0d40: Waiting Step #4: b015a66506e2: Waiting Step #4: c733e17c4110: Waiting Step #4: 4e8e9487b536: Waiting Step #4: 033d31603c10: Waiting Step #4: 8b89bccbcb20: Waiting Step #4: 52c23ee25af5: Waiting Step #4: 68fed04682ae: Waiting Step #4: 9d7dc1c2c73f: Waiting Step #4: 1bc5d71dd796: Waiting Step #4: a2db45da8ab1: Waiting Step #4: c70045647055: Waiting Step #4: 40239a6facc1: Waiting Step #4: be644200e779: Waiting Step #4: 8a4ee1c22f31: Waiting Step #4: 104ad7949b87: Waiting Step #4: add9794c8639: Waiting Step #4: fcb2d5e0d25c: Waiting Step #4: f97be1847659: Verifying Checksum Step #4: f97be1847659: Download complete Step #4: f9ee55498674: Verifying Checksum Step #4: f9ee55498674: Download complete Step #4: f14536d49acb: Verifying Checksum Step #4: f14536d49acb: Download complete Step #4: f97be1847659: Pull complete Step #4: be644200e779: Verifying Checksum Step #4: be644200e779: Download complete Step #4: a2db45da8ab1: Verifying Checksum Step #4: a2db45da8ab1: Download complete Step #4: 1bc5d71dd796: Download complete Step #4: f14536d49acb: Pull complete Step #4: 40239a6facc1: Verifying Checksum Step #4: 40239a6facc1: Download complete Step #4: f9ee55498674: Pull complete Step #4: 8a4ee1c22f31: Verifying Checksum Step #4: 8a4ee1c22f31: Download complete Step #4: a2db45da8ab1: Pull complete Step #4: c70045647055: Verifying Checksum Step #4: c70045647055: Download complete Step #4: fcb2d5e0d25c: Verifying Checksum Step #4: fcb2d5e0d25c: Download complete Step #4: be644200e779: Pull complete Step #4: 104ad7949b87: Verifying Checksum Step #4: 104ad7949b87: Download complete Step #4: add9794c8639: Download complete Step #4: 141cf4df0d40: Verifying Checksum Step #4: 141cf4df0d40: Download complete Step #4: faa8900e463d: Verifying Checksum Step #4: faa8900e463d: Download complete Step #4: 59ab64a84e97: Verifying Checksum Step #4: 59ab64a84e97: Download complete Step #4: c733e17c4110: Verifying Checksum Step #4: c733e17c4110: Download complete Step #4: 4e8e9487b536: Verifying Checksum Step #4: 4e8e9487b536: Download complete Step #4: 033d31603c10: Verifying Checksum Step #4: 033d31603c10: Download complete Step #4: 8b89bccbcb20: Verifying Checksum Step #4: 8b89bccbcb20: Download complete Step #4: 52c23ee25af5: Verifying Checksum Step #4: 52c23ee25af5: Download complete Step #4: 68fed04682ae: Download complete Step #4: b015a66506e2: Verifying Checksum Step #4: b015a66506e2: Download complete Step #4: c70045647055: Pull complete Step #4: 9d7dc1c2c73f: Verifying Checksum Step #4: 9d7dc1c2c73f: Download complete Step #4: 1bc5d71dd796: Pull complete Step #4: 40239a6facc1: Pull complete Step #4: 8a4ee1c22f31: Pull complete Step #4: faa8900e463d: Pull complete Step #4: fcb2d5e0d25c: Pull complete Step #4: 104ad7949b87: Pull complete Step #4: add9794c8639: Pull complete Step #4: 59ab64a84e97: Pull complete Step #4: 141cf4df0d40: Pull complete Step #4: b015a66506e2: Pull complete Step #4: c733e17c4110: Pull complete Step #4: 4e8e9487b536: Pull complete Step #4: 033d31603c10: Pull complete Step #4: 8b89bccbcb20: Pull complete Step #4: 52c23ee25af5: Pull complete Step #4: 68fed04682ae: Pull complete Step #4: 9d7dc1c2c73f: Pull complete Step #4: Digest: sha256:bd8018093627b34acb86b69960f48c21710d9f9a0894d926c8cf94e4558cb7e1 Step #4: Status: Downloaded newer image for gcr.io/oss-fuzz-base/base-runner:latest Step #4: gcr.io/oss-fuzz-base/base-runner:latest Finished Step #4 Starting Step #5 Step #5: Already have image (with digest): gcr.io/oss-fuzz-base/base-runner Step #5: Running fuzz_gltf Step #5: Error occured while running fuzz_gltf: Step #5: Cov returncode: 0, grep returncode: 0 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 601389600 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x55965c997b30, 0x55965c99b794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x55965c99b798,0x55965c9d7dd8), Step #5: MERGE-OUTER: 11085 files, 0 in the initial corpus, 0 processed earlier Step #5: MERGE-OUTER: attempt 1 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 601449880 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x5636ec92ab30, 0x5636ec92e794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x5636ec92e798,0x5636ec96add8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: 11085 total files; 0 processed earlier; will process 11085 files now Step #5: #1 pulse cov: 101 ft: 102 exec/s: 0 rss: 37Mb Step #5: #2 pulse cov: 101 ft: 102 exec/s: 0 rss: 38Mb Step #5: #4 pulse cov: 247 ft: 249 exec/s: 0 rss: 39Mb Step #5: #8 pulse cov: 285 ft: 297 exec/s: 0 rss: 39Mb Step #5: #16 pulse cov: 326 ft: 357 exec/s: 0 rss: 40Mb Step #5: #32 pulse cov: 367 ft: 448 exec/s: 0 rss: 40Mb Step #5: #64 pulse cov: 524 ft: 644 exec/s: 0 rss: 41Mb Step #5: #128 pulse cov: 667 ft: 932 exec/s: 0 rss: 42Mb Step #5: #256 pulse cov: 758 ft: 1190 exec/s: 0 rss: 44Mb Step #5: #512 pulse cov: 853 ft: 1625 exec/s: 0 rss: 48Mb Step #5: #1024 pulse cov: 977 ft: 2437 exec/s: 0 rss: 55Mb Step #5: #2048 pulse cov: 1269 ft: 4402 exec/s: 0 rss: 59Mb Step #5: #4096 pulse cov: 3423 ft: 11317 exec/s: 4096 rss: 1363Mb Step #5: ==42== ERROR: libFuzzer: out-of-memory (used: 2304Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 178202565 bytes in 31113 chunks; quarantined: 9437009 bytes in 6326 chunks; 53371 other chunks; total chunks: 90810; showing top 95% (at most 8 unique contexts) Step #5: 150008061 byte(s) (84%) in 1 allocation(s) Step #5: #0 0x5636ec567fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5636ec647ba8 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5636ec647ba8 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5636ec647ba8 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x5636ec62af06 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x5636ec5a7c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5636ec5caf7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5636ec5caf7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5636ec6c7f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x5636ec6c7f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x5636ec6c7f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x5636ec6c7f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x5636ec73a7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x5636ec73a7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x5636ec73a7bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5636ec5eec84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5636ec5eec84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5636ec5dd3da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5636ec627c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5636ec627c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5636ec627c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5636ec45c210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x5636ec4657e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5636ec44cd95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x5636ec4781c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fdda75c7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (13%) in 11 allocation(s) Step #5: #0 0x5636ec567fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5636ec7c7d73 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5636ec4781c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7fdda75c7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x65,0x41,0x41,0x4c,0x2b,0x61,0x57,0x73,0x73,0x69,0x65,0x62,0x2f,0x2f,0x30,0x57,0x2f,0x2f,0x30,0x42,0x41,0x78,0x67,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,eAAL+aWssieb//0W//0BAxg\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-74054605d9aa62996e748b56b19b567c6e224d4e Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCxlQUFMK2FXc3NpZWIvLzBXLy8wQkF4ZyJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 2 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 605742184 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x5567b379eb30, 0x5567b37a2794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x5567b37a2798,0x5567b37dedd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/74054605d9aa62996e748b56b19b567c6e224d4e' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 4582 processed earlier; will process 6503 files now Step #5: #1 pulse cov: 649 ft: 650 exec/s: 0 rss: 39Mb Step #5: #2 pulse cov: 957 ft: 1142 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1051 ft: 1315 exec/s: 1 rss: 425Mb Step #5: #8 pulse cov: 1245 ft: 1707 exec/s: 2 rss: 425Mb Step #5: #16 pulse cov: 1286 ft: 1778 exec/s: 1 rss: 488Mb Step #5: #32 pulse cov: 1852 ft: 2701 exec/s: 2 rss: 488Mb Step #5: ==46== ERROR: libFuzzer: out-of-memory (used: 2078Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 452682686 bytes in 19007 chunks; quarantined: 6115886 bytes in 422 chunks; 44327 other chunks; total chunks: 63756; showing top 95% (at most 8 unique contexts) Step #5: 339976728 byte(s) (75%) in 1 allocation(s) Step #5: #0 0x5567b33dbfdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5567b34c46e3 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5567b34c46e3 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5567b34c46e3 in stbi__convert_format(unsigned char*, int, int, unsigned int, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1761:29 Step #5: #4 0x5567b34bdb53 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6084:18 Step #5: #5 0x5567b349ef06 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #6 0x5567b341bc79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x5567b343ef7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x5567b343ef7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x5567b353bf02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #10 0x5567b353bf02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #11 0x5567b353bf02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #12 0x5567b353bf02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #13 0x5567b35ae7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #14 0x5567b35ae7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #15 0x5567b35ae7bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x5567b3462c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x5567b3462c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x5567b34513da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x5567b349bc1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x5567b349bc1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x5567b349bc1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x5567b32d0210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #23 0x5567b32d97e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x5567b32c0d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #25 0x5567b32ec1c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f3e6b2a7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 84994182 byte(s) (18%) in 1 allocation(s) Step #5: #0 0x5567b33dbfdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5567b34bbba8 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5567b34bbba8 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5567b34bbba8 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x5567b349ef06 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x5567b341bc79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5567b343ef7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5567b343ef7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5567b353bf02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x5567b353bf02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x5567b353bf02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x5567b353bf02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x5567b35ae7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x5567b35ae7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x5567b35ae7bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5567b3462c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5567b3462c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5567b34513da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5567b349bc1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5567b349bc1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5567b349bc1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5567b32d0210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x5567b32d97e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5567b32c0d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x5567b32ec1c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f3e6b2a7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (5%) in 11 allocation(s) Step #5: #0 0x5567b33dbfdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5567b363bd73 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5567b32ec1c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f3e6b2a7082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x66,0x51,0x41,0x43,0x56,0x30,0x62,0x67,0x67,0x67,0x67,0x67,0x67,0x67,0x67,0x67,0x67,0x67,0x30,0x44,0x59,0x41,0x67,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,fQACV0bggggggggggg0DYAg\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-5ebfb37acdb828797a55a581e7418e9af4c48f13 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCxmUUFDVjBiZ2dnZ2dnZ2dnZ2cwRFlBZyJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 3 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 625033714 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x561bdd1c3b30, 0x561bdd1c7794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x561bdd1c7798,0x561bdd203dd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/5ebfb37acdb828797a55a581e7418e9af4c48f13' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 4642 processed earlier; will process 6443 files now Step #5: #1 pulse cov: 781 ft: 782 exec/s: 0 rss: 44Mb Step #5: #2 pulse cov: 804 ft: 826 exec/s: 0 rss: 45Mb Step #5: #4 pulse cov: 935 ft: 1152 exec/s: 0 rss: 45Mb Step #5: #8 pulse cov: 1271 ft: 1747 exec/s: 0 rss: 66Mb Step #5: #16 pulse cov: 1494 ft: 2185 exec/s: 16 rss: 227Mb Step #5: #32 pulse cov: 1654 ft: 2592 exec/s: 2 rss: 1321Mb Step #5: #64 pulse cov: 1815 ft: 3058 exec/s: 2 rss: 1321Mb Step #5: ==50== ERROR: libFuzzer: out-of-memory (used: 2429Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2166695491 bytes in 20342 chunks; quarantined: 11024344 bytes in 3044 chunks; 36391 other chunks; total chunks: 59777; showing top 95% (at most 8 unique contexts) Step #5: 950635904 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x561bdce00fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x561bdcef46d2 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x561bdcef46d2 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x561bdcec20af in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x561bdcec20af in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x561bdce40c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x561bdce63f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x561bdce63f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x561bdcf60f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x561bdcf60f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x561bdcf60f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x561bdcf60f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x561bdcfd37bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x561bdcfd37bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x561bdcfd37bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x561bdce87c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x561bdce87c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x561bdce763da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x561bdcec0c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x561bdcec0c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x561bdcec0c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x561bdccf5210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x561bdccfe7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x561bdcce5d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x561bdcd111c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f63611ad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 950635904 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x561bdce00fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x561bdcef4705 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x561bdcef4705 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x561bdcec20af in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x561bdcec20af in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x561bdce40c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x561bdce63f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x561bdce63f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x561bdcf60f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x561bdcf60f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x561bdcf60f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x561bdcf60f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x561bdcfd37bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x561bdcfd37bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x561bdcfd37bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x561bdce87c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x561bdce87c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x561bdce763da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x561bdcec0c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x561bdcec0c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x561bdcec0c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x561bdccf5210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x561bdccfe7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x561bdcce5d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x561bdcd111c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f63611ad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 237658976 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x561bdce00fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x561bdcef473d in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x561bdcef473d in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x561bdcec20af in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x561bdcec20af in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x561bdce40c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x561bdce63f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x561bdce63f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x561bdcf60f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x561bdcf60f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x561bdcf60f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x561bdcf60f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x561bdcfd37bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x561bdcfd37bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x561bdcfd37bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x561bdce87c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x561bdce87c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x561bdce763da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x561bdcec0c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x561bdcec0c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x561bdcec0c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x561bdccf5210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x561bdccfe7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x561bdcce5d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x561bdcd111c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f63611ad082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x65,0x41,0x41,0x4c,0x2b,0x61,0x57,0x73,0x73,0x65,0x2f,0x69,0x73,0x6d,0x2f,0x30,0x67,0x78,0x61,0x42,0x41,0x78,0x41,0x41,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,eAAL+aWsse/ism/0gxaBAxAA\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-356e011494bf6a09df3f3d160eaed91c6eb14c45 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCxlQUFMK2FXc3NlL2lzbS8wZ3hhQkF4QUEifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 4 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 660332594 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x5576696e9b30, 0x5576696ed794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x5576696ed798,0x557669729dd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/356e011494bf6a09df3f3d160eaed91c6eb14c45' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 4743 processed earlier; will process 6342 files now Step #5: #1 pulse cov: 775 ft: 776 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 805 ft: 823 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1101 ft: 1338 exec/s: 0 rss: 42Mb Step #5: #8 pulse cov: 1263 ft: 1578 exec/s: 0 rss: 69Mb Step #5: #16 pulse cov: 1583 ft: 2420 exec/s: 0 rss: 69Mb Step #5: #32 pulse cov: 1835 ft: 2863 exec/s: 10 rss: 620Mb Step #5: #64 pulse cov: 2091 ft: 3454 exec/s: 4 rss: 1822Mb Step #5: #128 pulse cov: 2518 ft: 5082 exec/s: 4 rss: 1822Mb Step #5: #256 pulse cov: 2873 ft: 6592 exec/s: 6 rss: 1822Mb Step #5: ==54== ERROR: libFuzzer: out-of-memory (used: 2295Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2468547108 bytes in 24775 chunks; quarantined: 6122621 bytes in 565 chunks; 43119 other chunks; total chunks: 68459; showing top 95% (at most 8 unique contexts) Step #5: 1220302849 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x557669326fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5576693fd5f2 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5576693fd5f2 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5576693fd5f2 in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x5576693fd5f2 in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x5576693e8780 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x557669366c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x557669389f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x557669389f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x557669486f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #10 0x557669486f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #11 0x557669486f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #12 0x557669486f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #13 0x5576694f97bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #14 0x5576694f97bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #15 0x5576694f97bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x5576693adc84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x5576693adc84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55766939c3da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x5576693e6c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x5576693e6c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x5576693e6c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55766921b210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #23 0x5576692247e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55766920bd95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #25 0x5576692371c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f7386ea2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1220302848 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x5576693643ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:86:3 Step #5: #1 0x5576694493b1 in __libcpp_operator_new /usr/local/bin/../include/c++/v1/new:271:10 Step #5: #2 0x5576694493b1 in __libcpp_allocate /usr/local/bin/../include/c++/v1/new:295:10 Step #5: #3 0x5576694493b1 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:125:32 Step #5: #4 0x5576694493b1 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:55:19 Step #5: #5 0x5576694493b1 in std::__1::__split_buffer&>::__split_buffer(unsigned long, unsigned long, std::__1::allocator&) /usr/local/bin/../include/c++/v1/__split_buffer:343:25 Step #5: #6 0x557669487c1e in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/vector:1095:49 Step #5: #7 0x55766938ac09 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x557669486f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x557669486f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x557669486f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x557669486f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x5576694f97bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x5576694f97bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x5576694f97bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5576693adc84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5576693adc84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55766939c3da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5576693e6c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5576693e6c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5576693e6c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55766921b210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x5576692247e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55766920bd95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x5576692371c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f7386ea2082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_operator_new--__libcpp_allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x45,0x49,0x33,0x34,0x41,0x55,0x31,0x41,0x4e,0x48,0x49,0x51,0x45,0x4f,0x45,0x51,0x47,0x2f,0x45,0x2f,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,///Y///CABEI34AU1ANHIQEOEQG/E/\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-4f3359036c974be1cb9c6dfca49cdee4db7c0ad4 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCwvLy9ZLy8vQ0FCRUkzNEFVMUFOSElRRU9FUUcvRS8ifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 5 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 714634475 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x5654f6d54b30, 0x5654f6d58794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x5654f6d58798,0x5654f6d94dd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/4f3359036c974be1cb9c6dfca49cdee4db7c0ad4' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 5037 processed earlier; will process 6048 files now Step #5: #1 pulse cov: 795 ft: 796 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 937 ft: 1133 exec/s: 0 rss: 44Mb Step #5: #4 pulse cov: 1167 ft: 1460 exec/s: 0 rss: 69Mb Step #5: #8 pulse cov: 1435 ft: 1940 exec/s: 0 rss: 88Mb Step #5: #16 pulse cov: 1632 ft: 2476 exec/s: 8 rss: 896Mb Step #5: #32 pulse cov: 1961 ft: 3332 exec/s: 16 rss: 1537Mb Step #5: #64 pulse cov: 2308 ft: 4669 exec/s: 6 rss: 1537Mb Step #5: #128 pulse cov: 2671 ft: 5711 exec/s: 4 rss: 1688Mb Step #5: #256 pulse cov: 3037 ft: 7371 exec/s: 5 rss: 1971Mb Step #5: ==58== ERROR: libFuzzer: out-of-memory (used: 2105Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 100552038 bytes in 25327 chunks; quarantined: 10239093 bytes in 3483 chunks; 35548 other chunks; total chunks: 64358; showing top 95% (at most 8 unique contexts) Step #5: 72588384 byte(s) (72%) in 1 allocation(s) Step #5: #0 0x5654f6991fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5654f6a71ba8 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5654f6a71ba8 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5654f6a71ba8 in stbi__tga_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:5946:31 Step #5: #4 0x5654f6a54f06 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1182:14 Step #5: #5 0x5654f69d1c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x5654f69f4f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x5654f69f4f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x5654f6af1f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x5654f6af1f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x5654f6af1f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x5654f6af1f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x5654f6b647bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x5654f6b647bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x5654f6b647bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5654f6a18c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5654f6a18c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5654f6a073da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5654f6a51c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5654f6a51c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5654f6a51c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5654f6886210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x5654f688f7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5654f6876d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x5654f68a21c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f8a0af86082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 24383096 byte(s) (24%) in 11 allocation(s) Step #5: #0 0x5654f6991fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5654f6bf1d73 in operator new(unsigned long) cxa_noexception.cpp Step #5: #2 0x5654f68a21c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #3 0x7f8a0af86082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--operator new(unsigned long)--main Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x67,0x69,0x66,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x41,0x41,0x41,0x4c,0x67,0x67,0x67,0x64,0x67,0x44,0x74,0x67,0x67,0x67,0x67,0x67,0x67,0x67,0x67,0x77,0x67,0x67,0x67,0x41,0x41,0x41,0x41,0x41,0x51,0x41,0x41,0x41,0x41,0x51,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/gif;base64,AAALgggdgDtggggggggwgggAAAAAQAAAAQ\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-1aedaffd2cbd5c5572edf94de2dcc061da317117 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvZ2lmO2Jhc2U2NCxBQUFMZ2dnZGdEdGdnZ2dnZ2dnd2dnZ0FBQUFBUUFBQUFRIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 6 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 775928318 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x5581d2cfab30, 0x5581d2cfe794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x5581d2cfe798,0x5581d2d3add8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/1aedaffd2cbd5c5572edf94de2dcc061da317117' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 5337 processed earlier; will process 5748 files now Step #5: #1 pulse cov: 788 ft: 789 exec/s: 0 rss: 42Mb Step #5: #2 pulse cov: 906 ft: 1098 exec/s: 0 rss: 44Mb Step #5: #4 pulse cov: 960 ft: 1165 exec/s: 0 rss: 44Mb Step #5: #8 pulse cov: 1273 ft: 1737 exec/s: 0 rss: 56Mb Step #5: #16 pulse cov: 1736 ft: 2436 exec/s: 0 rss: 56Mb Step #5: ==62== ERROR: libFuzzer: out-of-memory (used: 2328Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2454377983 bytes in 18194 chunks; quarantined: 9102765 bytes in 2714 chunks; 38927 other chunks; total chunks: 59835; showing top 95% (at most 8 unique contexts) Step #5: 1213349353 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x5581d2937fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x5581d2a0e5f2 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x5581d2a0e5f2 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x5581d2a0e5f2 in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x5581d2a0e5f2 in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x5581d29f9780 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x5581d2977c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x5581d299af7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x5581d299af7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x5581d2a97f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #10 0x5581d2a97f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #11 0x5581d2a97f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #12 0x5581d2a97f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #13 0x5581d2b0a7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #14 0x5581d2b0a7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #15 0x5581d2b0a7bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x5581d29bec84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x5581d29bec84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x5581d29ad3da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x5581d29f7c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x5581d29f7c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x5581d29f7c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x5581d282c210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #23 0x5581d28357e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x5581d281cd95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #25 0x5581d28481c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f1ee7938082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1213349352 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x5581d29753ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:86:3 Step #5: #1 0x5581d2a5a3b1 in __libcpp_operator_new /usr/local/bin/../include/c++/v1/new:271:10 Step #5: #2 0x5581d2a5a3b1 in __libcpp_allocate /usr/local/bin/../include/c++/v1/new:295:10 Step #5: #3 0x5581d2a5a3b1 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:125:32 Step #5: #4 0x5581d2a5a3b1 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:55:19 Step #5: #5 0x5581d2a5a3b1 in std::__1::__split_buffer&>::__split_buffer(unsigned long, unsigned long, std::__1::allocator&) /usr/local/bin/../include/c++/v1/__split_buffer:343:25 Step #5: #6 0x5581d2a98c1e in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/vector:1095:49 Step #5: #7 0x5581d299bc09 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x5581d2a97f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x5581d2a97f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x5581d2a97f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x5581d2a97f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x5581d2b0a7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x5581d2b0a7bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x5581d2b0a7bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x5581d29bec84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x5581d29bec84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x5581d29ad3da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x5581d29f7c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x5581d29f7c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x5581d29f7c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x5581d282c210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x5581d28357e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x5581d281cd95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x5581d28481c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f1ee7938082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_operator_new--__libcpp_allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x62,0x6d,0x70,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x43,0x41,0x42,0x51,0x49,0x4a,0x51,0x39,0x38,0x35,0x67,0x51,0x48,0x45,0x51,0x45,0x45,0x45,0x67,0x49,0x4c,0x45,0x67,0x48,0x50,0x49,0x65,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/bmp;base64,///Y///CABQIJQ985gQHEQEEEgILEgHPIe\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-320e48e41bae024465ab2e223684ed9b631b8b24 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvYm1wO2Jhc2U2NCwvLy9ZLy8vQ0FCUUlKUTk4NWdRSEVRRUVFZ0lMRWdIUEllIn1dLCJhc3NldCI6eyJ2ZXJzaW9uIjoiIn19 Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 7 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 783233328 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x55cdfd4b4b30, 0x55cdfd4b8794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x55cdfd4b8798,0x55cdfd4f4dd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/320e48e41bae024465ab2e223684ed9b631b8b24' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 5367 processed earlier; will process 5718 files now Step #5: #1 pulse cov: 785 ft: 786 exec/s: 0 rss: 40Mb Step #5: #2 pulse cov: 1016 ft: 1248 exec/s: 0 rss: 42Mb Step #5: #4 pulse cov: 1089 ft: 1371 exec/s: 4 rss: 427Mb Step #5: #8 pulse cov: 1225 ft: 1606 exec/s: 4 rss: 427Mb Step #5: #16 pulse cov: 1612 ft: 2264 exec/s: 2 rss: 1569Mb Step #5: #32 pulse cov: 1827 ft: 2780 exec/s: 4 rss: 1569Mb Step #5: #64 pulse cov: 2163 ft: 3683 exec/s: 5 rss: 1569Mb Step #5: ==66== ERROR: libFuzzer: out-of-memory (used: 2115Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2336725737 bytes in 21148 chunks; quarantined: 8763980 bytes in 387 chunks; 42495 other chunks; total chunks: 64030; showing top 95% (at most 8 unique contexts) Step #5: 1154464461 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55cdfd0f1fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x55cdfd1c85f2 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55cdfd1c85f2 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55cdfd1c85f2 in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x55cdfd1c85f2 in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x55cdfd1b3780 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x55cdfd131c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55cdfd154f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55cdfd154f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55cdfd251f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #10 0x55cdfd251f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #11 0x55cdfd251f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #12 0x55cdfd251f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #13 0x55cdfd2c47bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #14 0x55cdfd2c47bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #15 0x55cdfd2c47bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55cdfd178c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55cdfd178c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55cdfd1673da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55cdfd1b1c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55cdfd1b1c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55cdfd1b1c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55cdfcfe6210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #23 0x55cdfcfef7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55cdfcfd6d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #25 0x55cdfd0021c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7f621247f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1154464460 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55cdfd12f3ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:86:3 Step #5: #1 0x55cdfd2143b1 in __libcpp_operator_new /usr/local/bin/../include/c++/v1/new:271:10 Step #5: #2 0x55cdfd2143b1 in __libcpp_allocate /usr/local/bin/../include/c++/v1/new:295:10 Step #5: #3 0x55cdfd2143b1 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:125:32 Step #5: #4 0x55cdfd2143b1 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:55:19 Step #5: #5 0x55cdfd2143b1 in std::__1::__split_buffer&>::__split_buffer(unsigned long, unsigned long, std::__1::allocator&) /usr/local/bin/../include/c++/v1/__split_buffer:343:25 Step #5: #6 0x55cdfd252c1e in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/vector:1095:49 Step #5: #7 0x55cdfd155c09 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x55cdfd251f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x55cdfd251f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x55cdfd251f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x55cdfd251f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x55cdfd2c47bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x55cdfd2c47bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x55cdfd2c47bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55cdfd178c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55cdfd178c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55cdfd1673da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55cdfd1b1c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55cdfd1b1c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55cdfd1b1c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55cdfcfe6210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x55cdfcfef7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55cdfcfd6d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x55cdfd0021c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f621247f082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_operator_new--__libcpp_allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x6a,0x70,0x65,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x41,0x41,0x42,0x51,0x49,0x48,0x62,0x2b,0x55,0x44,0x51,0x53,0x48,0x45,0x51,0x45,0x48,0x4d,0x51,0x45,0x45,0x45,0x51,0x45,0x45,0x4d,0x65,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/jpeg;base64,///Y///AABQIHb+UDQSHEQEHMQEEEQEEMe\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-2ff9a2a2c5d2e93f01fdec2c484fa70806350a74 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsLy8vWS8vL0FBQlFJSGIrVURRU0hFUUVITVFFRUVRRUVNZSJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 8 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 799527563 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x55d9fb606b30, 0x55d9fb60a794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x55d9fb60a798,0x55d9fb646dd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/2ff9a2a2c5d2e93f01fdec2c484fa70806350a74' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 5470 processed earlier; will process 5615 files now Step #5: #1 pulse cov: 650 ft: 651 exec/s: 0 rss: 44Mb Step #5: #2 pulse cov: 891 ft: 1056 exec/s: 0 rss: 1362Mb Step #5: #4 pulse cov: 1065 ft: 1318 exec/s: 0 rss: 1362Mb Step #5: #8 pulse cov: 1391 ft: 1854 exec/s: 0 rss: 1362Mb Step #5: #16 pulse cov: 1593 ft: 2495 exec/s: 0 rss: 1362Mb Step #5: #32 pulse cov: 1917 ft: 2976 exec/s: 10 rss: 1362Mb Step #5: #64 pulse cov: 2234 ft: 3797 exec/s: 21 rss: 1365Mb Step #5: #128 pulse cov: 2693 ft: 5484 exec/s: 16 rss: 1520Mb Step #5: #256 pulse cov: 3107 ft: 6940 exec/s: 4 rss: 1840Mb Step #5: ==70== ERROR: libFuzzer: out-of-memory (used: 2385Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2469886623 bytes in 27779 chunks; quarantined: 6410505 bytes in 172 chunks; 40359 other chunks; total chunks: 68310; showing top 95% (at most 8 unique contexts) Step #5: 1085255700 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55d9fb243fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x55d9fb3376d2 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55d9fb3376d2 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6812:28 Step #5: #3 0x55d9fb3050af in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55d9fb3050af in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55d9fb283c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55d9fb2a6f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55d9fb2a6f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55d9fb3a3f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x55d9fb3a3f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x55d9fb3a3f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x55d9fb3a3f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x55d9fb4167bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x55d9fb4167bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x55d9fb4167bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55d9fb2cac84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55d9fb2cac84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55d9fb2b93da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55d9fb303c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55d9fb303c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55d9fb303c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55d9fb138210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x55d9fb1417e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55d9fb128d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x55d9fb1541c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f3d45944082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 1085255700 byte(s) (43%) in 1 allocation(s) Step #5: #0 0x55d9fb243fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x55d9fb337705 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55d9fb337705 in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6813:35 Step #5: #3 0x55d9fb3050af in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55d9fb3050af in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55d9fb283c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55d9fb2a6f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55d9fb2a6f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55d9fb3a3f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x55d9fb3a3f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x55d9fb3a3f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x55d9fb3a3f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x55d9fb4167bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x55d9fb4167bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x55d9fb4167bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55d9fb2cac84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55d9fb2cac84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55d9fb2b93da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55d9fb303c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55d9fb303c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55d9fb303c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55d9fb138210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x55d9fb1417e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55d9fb128d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x55d9fb1541c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f3d45944082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: 271313925 byte(s) (10%) in 1 allocation(s) Step #5: #0 0x55d9fb243fdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x55d9fb33773d in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55d9fb33773d in stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:6814:32 Step #5: #3 0x55d9fb3050af in stbi__gif_load /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:7074:8 Step #5: #4 0x55d9fb3050af in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1151:35 Step #5: #5 0x55d9fb283c79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #6 0x55d9fb2a6f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #7 0x55d9fb2a6f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #8 0x55d9fb3a3f02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x55d9fb3a3f02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x55d9fb3a3f02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x55d9fb3a3f02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x55d9fb4167bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x55d9fb4167bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x55d9fb4167bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55d9fb2cac84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55d9fb2cac84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55d9fb2b93da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55d9fb303c1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55d9fb303c1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55d9fb303c1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55d9fb138210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x55d9fb1417e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55d9fb128d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x55d9fb1541c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7f3d45944082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__gif_load_next(stbi__context*, stbi__gif*, int*, int, unsigned char*) Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x70,0x6e,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x52,0x30,0x6c,0x47,0x4f,0x44,0x64,0x68,0x31,0x79,0x4f,0x44,0x63,0x79,0x79,0x61,0x79,0x79,0x79,0x79,0x47,0x4c,0x41,0x41,0x41,0x51,0x64,0x68,0x41,0x4f,0x44,0x63,0x4f,0x61,0x41,0x69,0x79,0x41,0x41,0x41,0x58,0x38,0x48,0x58,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/png;base64,R0lGODdh1yODcyyayyyyGLAAAQdhAODcOaAiyAAAX8HX\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-702fd0c6ec33fd01e6835595ef5cbb4f9e71e527 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxSMGxHT0RkaDF5T0RjeXlheXl5eUdMQUFBUWRoQU9EY09hQWl5QUFBWDhIWCJ9XSwiYXNzZXQiOnsidmVyc2lvbiI6IiJ9fQ== Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 9 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 901841480 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x55f621b72b30, 0x55f621b76794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x55f621b76798,0x55f621bb2dd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/702fd0c6ec33fd01e6835595ef5cbb4f9e71e527' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 5913 processed earlier; will process 5172 files now Step #5: #1 pulse cov: 784 ft: 785 exec/s: 0 rss: 41Mb Step #5: #2 pulse cov: 924 ft: 1172 exec/s: 0 rss: 43Mb Step #5: #4 pulse cov: 1109 ft: 1545 exec/s: 0 rss: 57Mb Step #5: #8 pulse cov: 1391 ft: 1939 exec/s: 0 rss: 57Mb Step #5: #16 pulse cov: 1796 ft: 2690 exec/s: 0 rss: 1364Mb Step #5: #32 pulse cov: 2109 ft: 3489 exec/s: 0 rss: 1364Mb Step #5: #64 pulse cov: 2534 ft: 4419 exec/s: 10 rss: 1527Mb Step #5: #128 pulse cov: 2872 ft: 5875 exec/s: 11 rss: 1535Mb Step #5: ==74== ERROR: libFuzzer: out-of-memory (used: 2113Mb; limit: 2048Mb) Step #5: To change the out-of-memory limit use -rss_limit_mb= Step #5: Step #5: Live Heap Allocations: 2198709539 bytes in 24640 chunks; quarantined: 10907077 bytes in 2861 chunks; 32574 other chunks; total chunks: 60075; showing top 95% (at most 8 unique contexts) Step #5: 1085386753 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55f6217affdf in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3 Step #5: #1 0x55f6218865f2 in stbi__malloc /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:985:12 Step #5: #2 0x55f6218865f2 in stbi__malloc_mad3 /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1056:11 Step #5: #3 0x55f6218865f2 in load_jpeg_image /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:3920:28 Step #5: #4 0x55f6218865f2 in stbi__jpeg_load(stbi__context*, int*, int*, int*, int, stbi__result_info*) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:4035:13 Step #5: #5 0x55f621871780 in stbi__load_main(stbi__context*, int*, int*, int*, int, stbi__result_info*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1166:35 Step #5: #6 0x55f6217efc79 in stbi__load_and_postprocess_8bit(stbi__context*, int*, int*, int*, int) /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1261:19 Step #5: #7 0x55f621812f7e in stbi_load_from_memory /src/tinygltf/tests/fuzzer/build/../../../stb_image.h:1431:11 Step #5: #8 0x55f621812f7e in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2665:14 Step #5: #9 0x55f62190ff02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #10 0x55f62190ff02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #11 0x55f62190ff02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #12 0x55f62190ff02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #13 0x55f6219827bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #14 0x55f6219827bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #15 0x55f6219827bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #16 0x55f621836c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #17 0x55f621836c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #18 0x55f6218253da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #19 0x55f62186fc1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #20 0x55f62186fc1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #21 0x55f62186fc1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #22 0x55f6216a4210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #23 0x55f6216ad7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #24 0x55f621694d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #25 0x55f6216c01c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #26 0x7fe0bc08e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: __interceptor_malloc--stbi__malloc--stbi__malloc_mad3 Step #5: 1085386752 byte(s) (49%) in 1 allocation(s) Step #5: #0 0x55f6217ed3ad in operator new(unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:86:3 Step #5: #1 0x55f6218d23b1 in __libcpp_operator_new /usr/local/bin/../include/c++/v1/new:271:10 Step #5: #2 0x55f6218d23b1 in __libcpp_allocate /usr/local/bin/../include/c++/v1/new:295:10 Step #5: #3 0x55f6218d23b1 in allocate /usr/local/bin/../include/c++/v1/__memory/allocator.h:125:32 Step #5: #4 0x55f6218d23b1 in __allocate_at_least > /usr/local/bin/../include/c++/v1/__memory/allocate_at_least.h:55:19 Step #5: #5 0x55f6218d23b1 in std::__1::__split_buffer&>::__split_buffer(unsigned long, unsigned long, std::__1::allocator&) /usr/local/bin/../include/c++/v1/__split_buffer:343:25 Step #5: #6 0x55f621910c1e in std::__1::vector>::__append(unsigned long) /usr/local/bin/../include/c++/v1/vector:1095:49 Step #5: #7 0x55f621813c09 in tinygltf::LoadImageData(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:2732:18 Step #5: #8 0x55f62190ff02 in __invoke, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:344:25 Step #5: #9 0x55f62190ff02 in __call, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *), tinygltf::Image *, int, std::__1::basic_string, std::__1::allocator > *, std::__1::basic_string, std::__1::allocator > *, int, int, const unsigned char *, int, void *> /usr/local/bin/../include/c++/v1/__type_traits/invoke.h:411:12 Step #5: #10 0x55f62190ff02 in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:169:12 Step #5: #11 0x55f62190ff02 in std::__1::__function::__func, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*), std::__1::allocator, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>, bool (tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)>::operator()(tinygltf::Image*&&, int&&, std::__1::basic_string, std::__1::allocator>*&&, std::__1::basic_string, std::__1::allocator>*&&, int&&, int&&, unsigned char const*&&, int&&, void*&&) /usr/local/bin/../include/c++/v1/__functional/function.h:311:10 Step #5: #12 0x55f6219827bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:428:12 Step #5: #13 0x55f6219827bc in operator() /usr/local/bin/../include/c++/v1/__functional/function.h:981:10 Step #5: #14 0x55f6219827bc in tinygltf::ParseImage(tinygltf::Image*, int, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, bool, std::__1::basic_string, std::__1::allocator> const&, unsigned long, tinygltf::FsCallbacks*, tinygltf::URICallbacks const*, std::__1::function, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, int, int, unsigned char const*, int, void*)> const&, void*) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:4435:10 Step #5: #15 0x55f621836c84 in operator() /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6415:12 Step #5: #16 0x55f621836c84 in bool tinygltf::detail::ForEachInArray, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10>(nlohmann::basic_json, std::__1::allocator>, bool, long, unsigned long, double, std::__1::allocator, nlohmann::adl_serializer, std::__1::vector>> const&, char const*, tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int)::$_10&&) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:5971:12 Step #5: #17 0x55f6218253da in tinygltf::TinyGLTF::LoadFromString(tinygltf::Model*, std::__1::basic_string, std::__1::allocator>*, std::__1::basic_string, std::__1::allocator>*, char const*, unsigned int, std::__1::basic_string, std::__1::allocator> const&, unsigned int) /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6407:20 Step #5: #18 0x55f62186fc1d in LoadASCIIFromString /src/tinygltf/tests/fuzzer/build/../../../tiny_gltf.h:6698:10 Step #5: #19 0x55f62186fc1d in parse_intCoding4 /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:22:18 Step #5: #20 0x55f62186fc1d in LLVMFuzzerTestOneInput /src/tinygltf/tests/fuzzer/build/../fuzz_gltf.cc:30:5 Step #5: #21 0x55f6216a4210 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 Step #5: #22 0x55f6216ad7e0 in fuzzer::Fuzzer::CrashResistantMergeInternalStep(std::__Fuzzer::basic_string, std::__Fuzzer::allocator> const&, bool) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMerge.cpp:239:5 Step #5: #23 0x55f621694d95 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:887:8 Step #5: #24 0x55f6216c01c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 Step #5: #25 0x7fe0bc08e082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 5792732f783158c66fb4f3756458ca24e46e827d) Step #5: Step #5: DEDUP_TOKEN: operator new(unsigned long)--__libcpp_operator_new--__libcpp_allocate Step #5: MS: 0 ; base unit: 0000000000000000000000000000000000000000 Step #5: 0x7b,0x22,0x69,0x6d,0x61,0x67,0x65,0x73,0x22,0x3a,0x5b,0x7b,0x22,0x75,0x72,0x69,0x22,0x3a,0x22,0x64,0x61,0x74,0x61,0x3a,0x69,0x6d,0x61,0x67,0x65,0x2f,0x6a,0x70,0x65,0x67,0x3b,0x62,0x61,0x73,0x65,0x36,0x34,0x2c,0x2f,0x2f,0x2f,0x59,0x2f,0x2f,0x2f,0x41,0x41,0x42,0x51,0x49,0x41,0x30,0x4b,0x41,0x45,0x77,0x51,0x48,0x45,0x51,0x45,0x48,0x49,0x51,0x45,0x45,0x45,0x67,0x45,0x45,0x45,0x67,0x50,0x2f,0x36,0x41,0x41,0x45,0x45,0x67,0x50,0x2f,0x32,0x59,0x2e,0x22,0x7d,0x5d,0x2c,0x22,0x61,0x73,0x73,0x65,0x74,0x22,0x3a,0x7b,0x22,0x76,0x65,0x72,0x73,0x69,0x6f,0x6e,0x22,0x3a,0x22,0x22,0x7d,0x7d, Step #5: {\"images\":[{\"uri\":\"data:image/jpeg;base64,///Y///AABQIA0KAEwQHEQEHIQEEEgEEEgP/6AAEEgP/2Y.\"}],\"asset\":{\"version\":\"\"}} Step #5: artifact_prefix='./'; Test unit written to ./oom-2236f1c35cd522c942b14d18e433f5da7e931242 Step #5: Base64: eyJpbWFnZXMiOlt7InVyaSI6ImRhdGE6aW1hZ2UvanBlZztiYXNlNjQsLy8vWS8vL0FBQlFJQTBLQUV3UUhFUUVISVFFRUVnRUVFZ1AvNkFBRUVnUC8yWS4ifV0sImFzc2V0Ijp7InZlcnNpb24iOiIifX0= Step #5: SUMMARY: libFuzzer: out-of-memory Step #5: MERGE-OUTER: attempt 10 Step #5: INFO: Running with entropic power schedule (0xFF, 100). Step #5: INFO: Seed: 933157682 Step #5: INFO: Loaded 1 modules (15460 inline 8-bit counters): 15460 [0x5641d4882b30, 0x5641d4886794), Step #5: INFO: Loaded 1 PC tables (15460 PCs): 15460 [0x5641d4886798,0x5641d48c2dd8), Step #5: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 1048576 bytes Step #5: MERGE-INNER: using the control file '/tmp/libFuzzerTemp.Merge39.txt' Step #5: MERGE-INNER: '/corpus/fuzz_gltf/2236f1c35cd522c942b14d18e433f5da7e931242' caused a failure at the previous merge step Step #5: MERGE-INNER: 11085 total files; 6096 processed earlier; will process 4989 files now Step #5: #1 pulse cov: 792 ft: 793 exec/s: 0 rss: 1524Mb Step #5: #2 pulse cov: 1058 ft: 1277 exec/s: 0 rss: 1524Mb Step #5: #4 pulse cov: 1215 ft: 1529 exec/s: 4 rss: 1524Mb Step #5: #8 pulse cov: 1473 ft: 2058 exec/s: 8 rss: 1525Mb Step #5: #16 pulse cov: 1764 ft: 2944 exec/s: 16 rss: 1525Mb Step #5: #32 pulse cov: 2044 ft: 3732 exec/s: 4 rss: 1526Mb Step #5: #64 pulse cov: 2591 ft: 5442 exec/s: 3 rss: 1526Mb Step #5: #128 pulse cov: 2977 ft: 6728 exec/s: 3 rss: 1526Mb Step #5: #256 pulse cov: 3312 ft: 8629 exec/s: 4 rss: 1538Mb Step #5: #512 pulse cov: 3519 ft: 10478 exec/s: 5 rss: 1538Mb Step #5: #1024 pulse cov: 3656 ft: 12632 exec/s: 7 rss: 1834Mb Step #5: #2048 pulse cov: 3875 ft: 16389 exec/s: 7 rss: 1907Mb Step #5: #4096 pulse cov: 3955 ft: 22478 exec/s: 7 rss: 1907Mb Step #5: #4989 DONE cov: 3961 ft: 23135 exec/s: 7 rss: 1907Mb Step #5: MERGE-OUTER: successful in 10 attempt(s) Step #5: MERGE-OUTER: the control file has 1682354 bytes Step #5: MERGE-OUTER: consumed 1Mb (57Mb rss) to parse the control file Step #5: MERGE-OUTER: 5946 new files with 24666 new features added; 4269 new coverage edges Step #5: [2025-07-10 06:32:56,013 INFO] Finding shared libraries for targets (if any). Step #5: [2025-07-10 06:32:56,022 INFO] Finished finding shared libraries for targets. Step #5: Coverage error, creating log file: /workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log Step #5: [2025-07-10 06:32:56,351 INFO] Finding shared libraries for targets (if any). Step #5: [2025-07-10 06:32:56,360 INFO] Finished finding shared libraries for targets. Step #5: [2025-07-10 06:32:56,594 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-07-10 06:32:56,594 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html". Step #5: [2025-07-10 06:32:56,604 DEBUG] Finished generating file view html index file. Step #5: [2025-07-10 06:32:56,604 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-07-10 06:32:56,604 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-07-10 06:32:56,604 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-07-10 06:32:56,640 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-07-10 06:32:56,640 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html". Step #5: [2025-07-10 06:32:56,640 DEBUG] Finished generating directory view html index file. Step #5: [2025-07-10 06:32:56,640 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html". Step #5: [2025-07-10 06:32:56,870 DEBUG] Finished generating per-file code coverage summary. Step #5: [2025-07-10 06:32:56,870 DEBUG] Generating file view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html". Step #5: [2025-07-10 06:32:56,880 DEBUG] Finished generating file view html index file. Step #5: [2025-07-10 06:32:56,880 DEBUG] Calculating per-directory coverage summary. Step #5: [2025-07-10 06:32:56,880 DEBUG] Finished calculating per-directory coverage summary. Step #5: [2025-07-10 06:32:56,880 DEBUG] Writing per-directory coverage html reports. Step #5: [2025-07-10 06:32:56,914 DEBUG] Finished writing per-directory coverage html reports. Step #5: [2025-07-10 06:32:56,914 DEBUG] Generating directory view html index file as: "/workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html". Step #5: [2025-07-10 06:32:56,915 DEBUG] Finished generating directory view html index file. Step #5: [2025-07-10 06:32:56,915 INFO] Index file for html report is generated as: "file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html". Finished Step #5 Starting Step #6 Step #6: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #6: CommandException: 1 files/objects could not be removed. Finished Step #6 Starting Step #7 Step #7: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #7: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/style.css [Content-Type=text/css]... Step #7: / [0/15 files][ 0.0 B/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/directory_view_index.html [Content-Type=text/html]... Step #7: / [0/15 files][ 0.0 B/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/summary.json [Content-Type=application/json]... Step #7: / [0/15 files][ 0.0 B/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/index.html [Content-Type=text/html]... Step #7: / [0/15 files][ 0.0 B/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/report.html [Content-Type=text/html]... Step #7: / [0/15 files][ 0.0 B/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/file_view_index.html [Content-Type=text/html]... Step #7: / [0/15 files][ 2.9 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/report.html [Content-Type=text/html]... Step #7: / [0/15 files][ 2.9 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #7: / [0/15 files][ 2.9 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #7: / [0/15 files][ 2.9 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #7: / [0/15 files][ 2.9 KiB/ 9.3 MiB] 0% Done / [1/15 files][ 10.4 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #7: / [1/15 files][ 16.5 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #7: / [1/15 files][ 26.7 KiB/ 9.3 MiB] 0% Done / [2/15 files][ 26.7 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #7: / [2/15 files][ 26.7 KiB/ 9.3 MiB] 0% Done / [3/15 files][818.7 KiB/ 9.3 MiB] 8% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #7: / [3/15 files][ 1.3 MiB/ 9.3 MiB] 14% Done / [4/15 files][ 2.4 MiB/ 9.3 MiB] 25% Done / [5/15 files][ 2.4 MiB/ 9.3 MiB] 25% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #7: / [5/15 files][ 2.6 MiB/ 9.3 MiB] 27% Done / [6/15 files][ 7.3 MiB/ 9.3 MiB] 78% Done / [7/15 files][ 7.3 MiB/ 9.3 MiB] 78% Done / [8/15 files][ 7.3 MiB/ 9.3 MiB] 78% Done / [9/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [10/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [11/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [12/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [13/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [14/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [15/15 files][ 9.3 MiB/ 9.3 MiB] 100% Done Step #7: Operation completed over 15 objects/9.3 MiB. Finished Step #7 Starting Step #8 Step #8: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #8: CommandException: 1 files/objects could not be removed. Finished Step #8 Starting Step #9 Step #9: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #9: Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/style.css [Content-Type=text/css]... Step #9: / [0/15 files][ 0.0 B/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/directory_view_index.html [Content-Type=text/html]... Step #9: / [0/15 files][ 2.9 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/summary.json [Content-Type=application/json]... Step #9: / [0/15 files][ 2.9 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/index.html [Content-Type=text/html]... Step #9: / [0/15 files][ 3.1 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/report.html [Content-Type=text/html]... Step #9: / [0/15 files][ 5.8 KiB/ 9.3 MiB] 0% Done / [1/15 files][ 5.8 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/file_view_index.html [Content-Type=text/html]... Step #9: / [1/15 files][ 6.0 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/report.html [Content-Type=text/html]... Step #9: / [1/15 files][ 10.4 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/json.hpp.html [Content-Type=text/html]... Step #9: / [1/15 files][ 10.4 KiB/ 9.3 MiB] 0% Done / [2/15 files][ 10.4 KiB/ 9.3 MiB] 0% Done / [3/15 files][ 10.4 KiB/ 9.3 MiB] 0% Done / [4/15 files][ 10.4 KiB/ 9.3 MiB] 0% Done / [5/15 files][ 10.4 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/report.html [Content-Type=text/html]... Step #9: / [5/15 files][ 16.5 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image.h.html [Content-Type=text/html]... Step #9: / [5/15 files][ 16.5 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/stb_image_write.h.html [Content-Type=text/html]... Step #9: / [5/15 files][ 20.8 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tiny_gltf.h.html [Content-Type=text/html]... Step #9: / [5/15 files][ 20.8 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/report.html [Content-Type=text/html]... Step #9: / [5/15 files][ 20.8 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/report.html [Content-Type=text/html]... Step #9: / [5/15 files][ 20.8 KiB/ 9.3 MiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/report_target/fuzz_gltf/linux/src/tinygltf/tests/fuzzer/fuzz_gltf.cc.html [Content-Type=text/html]... Step #9: / [5/15 files][ 20.8 KiB/ 9.3 MiB] 0% Done / [6/15 files][ 7.0 MiB/ 9.3 MiB] 74% Done / [7/15 files][ 7.0 MiB/ 9.3 MiB] 74% Done / [8/15 files][ 7.3 MiB/ 9.3 MiB] 78% Done / [9/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [10/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [11/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [12/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [13/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [14/15 files][ 9.3 MiB/ 9.3 MiB] 99% Done / [15/15 files][ 9.3 MiB/ 9.3 MiB] 100% Done Step #9: Operation completed over 15 objects/9.3 MiB. Finished Step #9 Starting Step #10 Step #10: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #10: CommandException: 1 files/objects could not be removed. Finished Step #10 Starting Step #11 Step #11: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #11: Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf.json [Content-Type=application/json]... Step #11: / [0/3 files][ 0.0 B/ 3.4 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/fuzz_gltf_error.log [Content-Type=application/octet-stream]... Step #11: / [0/3 files][ 0.0 B/ 3.4 KiB] 0% Done Copying file:///workspace/out/libfuzzer-coverage-x86_64/fuzzer_stats/coverage_targets.txt [Content-Type=text/plain]... Step #11: / [0/3 files][ 3.4 KiB/ 3.4 KiB] 99% Done / [1/3 files][ 3.4 KiB/ 3.4 KiB] 99% Done / [2/3 files][ 3.4 KiB/ 3.4 KiB] 99% Done / [3/3 files][ 3.4 KiB/ 3.4 KiB] 100% Done Step #11: Operation completed over 3 objects/3.4 KiB. Finished Step #11 Starting Step #12 Step #12: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #12: CommandException: 1 files/objects could not be removed. Finished Step #12 Starting Step #13 Step #13: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #13: Copying file:///workspace/out/libfuzzer-coverage-x86_64/textcov_reports/fuzz_gltf.covreport [Content-Type=application/octet-stream]... Step #13: / [0/1 files][ 0.0 B/762.6 KiB] 0% Done / [1/1 files][762.6 KiB/762.6 KiB] 100% Done Step #13: Operation completed over 1 objects/762.6 KiB. Finished Step #13 Starting Step #14 Step #14: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #14: CommandException: 1 files/objects could not be removed. Finished Step #14 Starting Step #15 Step #15: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #15: Copying file:///workspace/out/libfuzzer-coverage-x86_64/logs/fuzz_gltf.log [Content-Type=application/octet-stream]... Step #15: / [0/1 files][ 0.0 B/164.2 KiB] 0% Done / [1/1 files][164.2 KiB/164.2 KiB] 100% Done Step #15: Operation completed over 1 objects/164.2 KiB. Finished Step #15 Starting Step #16 Step #16: Already have image (with digest): gcr.io/cloud-builders/gsutil Step #16: Copying file:///workspace/srcmap.json [Content-Type=application/json]... Step #16: / [0 files][ 0.0 B/ 154.0 B] / [1 files][ 154.0 B/ 154.0 B] Step #16: Operation completed over 1 objects/154.0 B. Finished Step #16 Starting Step #17 Step #17: Already have image (with digest): gcr.io/cloud-builders/curl Step #17: % Total % Received % Xferd Average Speed Time Time Time Current Step #17: Dload Upload Total Spent Left Speed Step #17: 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 312 0 0 100 312 0 1344 --:--:-- --:--:-- --:--:-- 1356 Finished Step #17 PUSH DONE