==89==Registered root region at 0x7ff61fd007a0 of size 32 ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_scanf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_sscanf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_fscanf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_vscanf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_vsscanf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_vfscanf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_printf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_sprintf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_snprintf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_fprintf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_vprintf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_vsprintf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_vsnprintf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc99_vfprintf' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_strtoimax' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_strtoumax' ==89==Registered root region at 0x7ff61f700b70 of size 48 ==89==Unregistered root region at 0x7ff61f700b70 of size 48 ==89==AddressSanitizer: failed to intercept 'xdr_destroy' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_strtol' ==89==Registered root region at 0x7ff61f900f40 of size 64 ==89==Unregistered root region at 0x7ff61f900f40 of size 64 ==89==AddressSanitizer: failed to intercept '__isoc23_strtoll' ==89==Registered root region at 0x7ff61f501310 of size 80 ==89==Unregistered root region at 0x7ff61f501310 of size 80 ==89==AddressSanitizer: failed to intercept '__cxa_rethrow_primary_exception' ==89==AddressSanitizer: libc interceptors initialized || `[0x10007fff8000, 0x7fffffffffff]` || HighMem || || `[0x02008fff7000, 0x10007fff7fff]` || HighShadow || || `[0x00008fff7000, 0x02008fff6fff]` || ShadowGap || || `[0x00007fff8000, 0x00008fff6fff]` || LowShadow || || `[0x000000000000, 0x00007fff7fff]` || LowMem || MemToShadow(shadow): 0x00008fff7000 0x000091ff6dff 0x004091ff6e00 0x02008fff6fff redzone=16 max_redzone=2048 quarantine_size_mb=256M thread_local_quarantine_size_kb=1024K malloc_context_size=30 SHADOW_SCALE: 3 SHADOW_GRANULARITY: 8 SHADOW_OFFSET: 0x7fff8000 ==89==Installed the sigaction for signal 11 ==89==Installed the sigaction for signal 7 ==89==Installed the sigaction for signal 8 ==89==T0: FakeStack created: 0x7ff61d9f7000 -- 0x7ff61e500000 stack_size_log: 20; mmapped 11300K, noreserve=0 ==89==T0: stack [0x7ffcaf278000,0x7ffcafa78000) size 0x800000; local=0x7ffcafa75254 ==89==AddressSanitizer Init done ==89==T1: FakeStack created: 0x7ff61aab0000 -- 0x7ff61b5b9000 stack_size_log: 20; mmapped 11300K, noreserve=0 ==89==T1: stack [0x7ff61b5ba000,0x7ff61bdb8ec0) size 0x7feec0; local=0x7ff61bdb8d14 ================================================================= ==89==ERROR: AddressSanitizer: alloc-dealloc-mismatch (operator new [] vs free) on 0x5020000000d0 #0 0x555a43333ea6 in free /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:52:3 #1 0x555a43373c38 in LLVMFuzzerTestOneInput /src/cups/ossfuzz/fuzz_array.c:161:3 #2 0x555a43228370 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 #3 0x555a432135e5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6 #4 0x555a4321907f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9 #5 0x555a43244322 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 #6 0x7ff620407082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0323ab4806bee6f846d9ad4bccfc29afdca49a58) #7 0x555a4320b7cd in _start (/out/fuzz_array+0x3e7cd) 0x5020000000d0 is located 0 bytes inside of 2-byte region [0x5020000000d0,0x5020000000d2) allocated by thread T0 here: #0 0x555a4337161d in operator new[](unsigned long) /src/llvm-project/compiler-rt/lib/asan/asan_new_delete.cpp:89:3 #1 0x555a43373ec6 in generate_fuzz_array_data /src/cups/ossfuzz/fuzz_helpers.cpp:21:21 #2 0x555a4337393d in LLVMFuzzerTestOneInput /src/cups/ossfuzz/fuzz_array.c:51:3 #3 0x555a43228370 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 #4 0x555a432135e5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6 #5 0x555a4321907f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9 #6 0x555a43244322 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 #7 0x7ff620407082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0323ab4806bee6f846d9ad4bccfc29afdca49a58) SUMMARY: AddressSanitizer: alloc-dealloc-mismatch /src/cups/ossfuzz/fuzz_array.c:161:3 in LLVMFuzzerTestOneInput ==89==HINT: if you don't care about these errors you may set ASAN_OPTIONS=alloc_dealloc_mismatch=0 ==89==ABORTING