crash {
    crash {
        target {
            engine: "libfuzzer"
            sanitizer: "address"
            task_dir: "/crs_scratch/selinux-OSV-2021-902-delta-1/"
            task_id: "selinux-OSV-2021-902-delta-1"
            build_type: "fuzzer"
            apply_diff: true
        }
        harness_name: "secilc-fuzzer"
        crash_input_path: "/crs_scratch/selinux-OSV-2021-902-delta-1.reproducer"
        stacktrace: "=================================================================\n\x1b[1m\x1b[31m==14==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7f013ccb77f0 at pc 0x555dcfad2fef bp 0x7ffd2207d630 sp 0x7ffd2207d628\n\x1b[1m\x1b[0m\x1b[1m\x1b[34mREAD of size 8 at 0x7f013ccb77f0 thread T0\x1b[1m\x1b[0m\nSCARINESS: 33 (8-byte-read-heap-buffer-overflow-far-from-bounds)\n    #0 0x555dcfad2fee in ebitmap_match_any /src/selinux/libsepol/src/ebitmap.c:235:27\n    #1 0x555dcfac0756 in check_assertion_avtab_match /src/selinux/libsepol/src/assertion.c:462:7\n    #2 0x555dcfac7cd7 in avtab_map /src/selinux/libsepol/src/avtab.c:346:10\n    #3 0x555dcfac0335 in check_assertion /src/selinux/libsepol/src/assertion.c:513:7\n    #4 0x555dcfa2dacf in cil_check_neverallow /src/selinux/libsepol/src/../cil/src/cil_binary.c:4686:8\n    #5 0x555dcfa2dacf in cil_check_neverallows /src/selinux/libsepol/src/../cil/src/cil_binary.c:4740:8\n    #6 0x555dcfa2c204 in cil_binary_create_allocated_pdb /src/selinux/libsepol/src/../cil/src/cil_binary.c:4999:8\n    #7 0x555dcfa2b7a9 in cil_binary_create /src/selinux/libsepol/src/../cil/src/cil_binary.c:4326:7\n    #8 0x555dcfa073c1 in cil_build_policydb /src/selinux/libsepol/src/../cil/src/cil.c:672:7\n    #9 0x555dcf9ed982 in LLVMFuzzerTestOneInput /src/secilc-fuzzer.c:62:6\n    #10 0x555dcf8a2330 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13\n    #11 0x555dcf88d5a5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6\n    #12 0x555dcf89303f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9\n    #13 0x555dcf8be2e2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10\n    #14 0x7f0141a73082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0702430aef5fa3dda43986563e9ffcc47efbd75e)\n    #15 0x555dcf88578d in _start (/out/secilc-fuzzer+0xcd78d)\n\nDEDUP_TOKEN: ebitmap_match_any--check_assertion_avtab_match--avtab_map\n\x1b[1m\x1b[32m0x7f013ccb77f0 is located 16 bytes before 1340512-byte region [0x7f013ccb7800,0x7f013cdfec60)\n\x1b[1m\x1b[0m\x1b[1m\x1b[35mallocated by thread T0 here:\x1b[1m\x1b[0m\n    #0 0x555dcf9ae0ff in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3\n    #1 0x555dcfa6e437 in cil_malloc /src/selinux/libsepol/src/../cil/src/cil_mem.c:40:14\n    #2 0x555dcfa12c4b in __cil_typeattr_bitmap_init /src/selinux/libsepol/src/../cil/src/cil_binary.c:599:23\n    #3 0x555dcfa130c9 in cil_typeattribute_to_bitmap /src/selinux/libsepol/src/../cil/src/cil_binary.c:636:8\n    #4 0x555dcfa28f8d in __cil_node_to_policydb /src/selinux/libsepol/src/../cil/src/cil_binary.c:3759:9\n    #5 0x555dcfab0bfb in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:263:9\n    #6 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #7 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #8 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #9 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #10 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #11 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #12 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #13 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #14 0x555dcfab0fee in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #15 0x555dcfa2bf73 in cil_binary_create_allocated_pdb /src/selinux/libsepol/src/../cil/src/cil_binary.c:4951:8\n    #16 0x555dcfa2b7a9 in cil_binary_create /src/selinux/libsepol/src/../cil/src/cil_binary.c:4326:7\n    #17 0x555dcfa073c1 in cil_build_policydb /src/selinux/libsepol/src/../cil/src/cil.c:672:7\n    #18 0x555dcf9ed982 in LLVMFuzzerTestOneInput /src/secilc-fuzzer.c:62:6\n    #19 0x555dcf8a2330 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13\n    #20 0x555dcf88d5a5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6\n    #21 0x555dcf89303f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9\n    #22 0x555dcf8be2e2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10\n    #23 0x7f0141a73082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0702430aef5fa3dda43986563e9ffcc47efbd75e)\n\nDEDUP_TOKEN: __interceptor_malloc--cil_malloc--__cil_typeattr_bitmap_init\nSUMMARY: AddressSanitizer: heap-buffer-overflow /src/selinux/libsepol/src/ebitmap.c:235:27 in ebitmap_match_any\nShadow bytes around the buggy address:\n  0x7f013ccb7500: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7580: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7600: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7680: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7700: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n=>0x7f013ccb7780: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m[\x1b[1m\x1b[31mfa\x1b[1m\x1b[0m]\x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7800: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7880: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7900: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7980: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7a00: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  Partially addressable: \x1b[1m\x1b[0m01\x1b[1m\x1b[0m \x1b[1m\x1b[0m02\x1b[1m\x1b[0m \x1b[1m\x1b[0m03\x1b[1m\x1b[0m \x1b[1m\x1b[0m04\x1b[1m\x1b[0m \x1b[1m\x1b[0m05\x1b[1m\x1b[0m \x1b[1m\x1b[0m06\x1b[1m\x1b[0m \x1b[1m\x1b[0m07\x1b[1m\x1b[0m \n  Heap left redzone:       \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  Freed heap region:       \x1b[1m\x1b[35mfd\x1b[1m\x1b[0m\n  Stack left redzone:      \x1b[1m\x1b[31mf1\x1b[1m\x1b[0m\n  Stack mid redzone:       \x1b[1m\x1b[31mf2\x1b[1m\x1b[0m\n  Stack right redzone:     \x1b[1m\x1b[31mf3\x1b[1m\x1b[0m\n  Stack after return:      \x1b[1m\x1b[35mf5\x1b[1m\x1b[0m\n  Stack use after scope:   \x1b[1m\x1b[35mf8\x1b[1m\x1b[0m\n  Global redzone:          \x1b[1m\x1b[31mf9\x1b[1m\x1b[0m\n  Global init order:       \x1b[1m\x1b[36mf6\x1b[1m\x1b[0m\n  Poisoned by user:        \x1b[1m\x1b[34mf7\x1b[1m\x1b[0m\n  Container overflow:      \x1b[1m\x1b[34mfc\x1b[1m\x1b[0m\n  Array cookie:            \x1b[1m\x1b[31mac\x1b[1m\x1b[0m\n  Intra object redzone:    \x1b[1m\x1b[33mbb\x1b[1m\x1b[0m\n  ASan internal:           \x1b[1m\x1b[33mfe\x1b[1m\x1b[0m\n  Left alloca redzone:     \x1b[1m\x1b[34mca\x1b[1m\x1b[0m\n  Right alloca redzone:    \x1b[1m\x1b[34mcb\x1b[1m\x1b[0m\n==14==ABORTING\n"
    }
    tracer_stacktrace: "=================================================================\n\x1b[1m\x1b[31m==14==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7f013ccb77f0 at pc 0x555dcfad2fef bp 0x7ffd2207d630 sp 0x7ffd2207d628\n\x1b[1m\x1b[0m\x1b[1m\x1b[34mREAD of size 8 at 0x7f013ccb77f0 thread T0\x1b[1m\x1b[0m\nSCARINESS: 33 (8-byte-read-heap-buffer-overflow-far-from-bounds)\n    #0 0x555dcfad2fee in ebitmap_match_any /src/selinux/libsepol/src/ebitmap.c:235:27\n    #1 0x555dcfac0756 in check_assertion_avtab_match /src/selinux/libsepol/src/assertion.c:462:7\n    #2 0x555dcfac7cd7 in avtab_map /src/selinux/libsepol/src/avtab.c:346:10\n    #3 0x555dcfac0335 in check_assertion /src/selinux/libsepol/src/assertion.c:513:7\n    #4 0x555dcfa2dacf in cil_check_neverallow /src/selinux/libsepol/src/../cil/src/cil_binary.c:4686:8\n    #5 0x555dcfa2dacf in cil_check_neverallows /src/selinux/libsepol/src/../cil/src/cil_binary.c:4740:8\n    #6 0x555dcfa2c204 in cil_binary_create_allocated_pdb /src/selinux/libsepol/src/../cil/src/cil_binary.c:4999:8\n    #7 0x555dcfa2b7a9 in cil_binary_create /src/selinux/libsepol/src/../cil/src/cil_binary.c:4326:7\n    #8 0x555dcfa073c1 in cil_build_policydb /src/selinux/libsepol/src/../cil/src/cil.c:672:7\n    #9 0x555dcf9ed982 in LLVMFuzzerTestOneInput /src/secilc-fuzzer.c:62:6\n    #10 0x555dcf8a2330 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13\n    #11 0x555dcf88d5a5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6\n    #12 0x555dcf89303f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9\n    #13 0x555dcf8be2e2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10\n    #14 0x7f0141a73082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0702430aef5fa3dda43986563e9ffcc47efbd75e)\n    #15 0x555dcf88578d in _start (/out/secilc-fuzzer+0xcd78d)\n\nDEDUP_TOKEN: ebitmap_match_any--check_assertion_avtab_match--avtab_map\n\x1b[1m\x1b[32m0x7f013ccb77f0 is located 16 bytes before 1340512-byte region [0x7f013ccb7800,0x7f013cdfec60)\n\x1b[1m\x1b[0m\x1b[1m\x1b[35mallocated by thread T0 here:\x1b[1m\x1b[0m\n    #0 0x555dcf9ae0ff in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:68:3\n    #1 0x555dcfa6e437 in cil_malloc /src/selinux/libsepol/src/../cil/src/cil_mem.c:40:14\n    #2 0x555dcfa12c4b in __cil_typeattr_bitmap_init /src/selinux/libsepol/src/../cil/src/cil_binary.c:599:23\n    #3 0x555dcfa130c9 in cil_typeattribute_to_bitmap /src/selinux/libsepol/src/../cil/src/cil_binary.c:636:8\n    #4 0x555dcfa28f8d in __cil_node_to_policydb /src/selinux/libsepol/src/../cil/src/cil_binary.c:3759:9\n    #5 0x555dcfab0bfb in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:263:9\n    #6 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #7 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #8 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #9 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #10 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #11 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #12 0x555dcfab0de1 in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #13 0x555dcfab0de1 in cil_tree_walk_core /src/selinux/libsepol/src/../cil/src/cil_tree.c:275:9\n    #14 0x555dcfab0fee in cil_tree_walk /src/selinux/libsepol/src/../cil/src/cil_tree.c:307:7\n    #15 0x555dcfa2bf73 in cil_binary_create_allocated_pdb /src/selinux/libsepol/src/../cil/src/cil_binary.c:4951:8\n    #16 0x555dcfa2b7a9 in cil_binary_create /src/selinux/libsepol/src/../cil/src/cil_binary.c:4326:7\n    #17 0x555dcfa073c1 in cil_build_policydb /src/selinux/libsepol/src/../cil/src/cil.c:672:7\n    #18 0x555dcf9ed982 in LLVMFuzzerTestOneInput /src/secilc-fuzzer.c:62:6\n    #19 0x555dcf8a2330 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13\n    #20 0x555dcf88d5a5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6\n    #21 0x555dcf89303f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9\n    #22 0x555dcf8be2e2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10\n    #23 0x7f0141a73082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0702430aef5fa3dda43986563e9ffcc47efbd75e)\n\nDEDUP_TOKEN: __interceptor_malloc--cil_malloc--__cil_typeattr_bitmap_init\nSUMMARY: AddressSanitizer: heap-buffer-overflow /src/selinux/libsepol/src/ebitmap.c:235:27 in ebitmap_match_any\nShadow bytes around the buggy address:\n  0x7f013ccb7500: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7580: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7600: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7680: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7700: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n=>0x7f013ccb7780: \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m[\x1b[1m\x1b[31mfa\x1b[1m\x1b[0m]\x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  0x7f013ccb7800: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7880: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7900: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7980: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  0x7f013ccb7a00: \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           \x1b[1m\x1b[0m00\x1b[1m\x1b[0m\n  Partially addressable: \x1b[1m\x1b[0m01\x1b[1m\x1b[0m \x1b[1m\x1b[0m02\x1b[1m\x1b[0m \x1b[1m\x1b[0m03\x1b[1m\x1b[0m \x1b[1m\x1b[0m04\x1b[1m\x1b[0m \x1b[1m\x1b[0m05\x1b[1m\x1b[0m \x1b[1m\x1b[0m06\x1b[1m\x1b[0m \x1b[1m\x1b[0m07\x1b[1m\x1b[0m \n  Heap left redzone:       \x1b[1m\x1b[31mfa\x1b[1m\x1b[0m\n  Freed heap region:       \x1b[1m\x1b[35mfd\x1b[1m\x1b[0m\n  Stack left redzone:      \x1b[1m\x1b[31mf1\x1b[1m\x1b[0m\n  Stack mid redzone:       \x1b[1m\x1b[31mf2\x1b[1m\x1b[0m\n  Stack right redzone:     \x1b[1m\x1b[31mf3\x1b[1m\x1b[0m\n  Stack after return:      \x1b[1m\x1b[35mf5\x1b[1m\x1b[0m\n  Stack use after scope:   \x1b[1m\x1b[35mf8\x1b[1m\x1b[0m\n  Global redzone:          \x1b[1m\x1b[31mf9\x1b[1m\x1b[0m\n  Global init order:       \x1b[1m\x1b[36mf6\x1b[1m\x1b[0m\n  Poisoned by user:        \x1b[1m\x1b[34mf7\x1b[1m\x1b[0m\n  Container overflow:      \x1b[1m\x1b[34mfc\x1b[1m\x1b[0m\n  Array cookie:            \x1b[1m\x1b[31mac\x1b[1m\x1b[0m\n  Intra object redzone:    \x1b[1m\x1b[33mbb\x1b[1m\x1b[0m\n  ASan internal:           \x1b[1m\x1b[33mfe\x1b[1m\x1b[0m\n  Left alloca redzone:     \x1b[1m\x1b[34mca\x1b[1m\x1b[0m\n  Right alloca redzone:    \x1b[1m\x1b[34mcb\x1b[1m\x1b[0m\n==14==ABORTING\n"
}
vuln_id: "selinux-my-vuln-id"
