crash {
    crash {
        target {
            engine: "libfuzzer"
            sanitizer: "address"
            task_dir: "/node_data/crs_scratch/0196a6de-f416-7b71-96df-c0f51a52298d-7e7c0d57-5cbc-41/"
            task_id: "0196a6de-f416-7b71-96df-c0f51a52298d"
            build_type: FUZZER
            apply_diff: true
        }
        harness_name: "TestFuzzCoreServer"
        crash_input_path: "/node_data/crs_scratch/0196a6de-f416-7b71-96df-c0f51a52298d.1.bin"
        stacktrace: "[22:23:58:259] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 15: dli_fname=/tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/TestFuzzCoreServer [0x55cf93797000], dli_sname=(null) [(nil)]\n[22:23:58:260] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 16: dli_fname=/lib/x86_64-linux-gnu/libc.so.6 [0x7f822a40d000], dli_sname=__libc_start_main [0x7f822a430f90]\n[22:23:58:260] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 17: dli_fname=/tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/TestFuzzCoreServer [0x55cf93797000], dli_sname=(null) [(nil)]\n[22:23:58:260] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 18: unresolvable, address=(nil)\n[22:23:58:260] [141:0000008d] [ERROR][com.freerdp.core] - [tpdu_read_header]: tpdu length 2 > tpkt header length 0\n[22:23:58:269] [141:0000008d] [WARN][com.freerdp.crypto] - [ber_read_application_tag]: invalid tag, got 0x42, expected 0x65\nAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==141==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x521000014203 bp 0x7fff57785c90 sp 0x7fff57785bd8 T0)\n==141==The signal is caused by a WRITE memory access.\n==141==Hint: address points to the zero page.\nSCARINESS: 10 (null-deref)\n    #0 0x521000014203  (<unknown module>)\n    #1 0x55cf93d4c2bb in freerdp_is_valid_mcs_create_response /src/FreeRDP/libfreerdp/core/freerdp.c:1458:16\n    #2 0x55cf93cd3790 in test_server /src/FreeRDP/libfreerdp/core/test/TestFuzzCoreServer.c:83:3\n    #3 0x55cf93cd3790 in LLVMFuzzerTestOneInput /src/FreeRDP/libfreerdp/core/test/TestFuzzCoreServer.c:106:2\n    #4 0x55cf93b8a100 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13\n    #5 0x55cf93b89925 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:516:7\n    #6 0x55cf93b8b105 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:760:19\n    #7 0x55cf93b8be95 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, std::__Fuzzer::allocator<fuzzer::SizedFile>>&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:905:5\n    #8 0x55cf93b7acdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:914:6\n    #9 0x55cf93ba60b2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10\n    #10 0x7f822a431082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0323ab4806bee6f846d9ad4bccfc29afdca49a58)\n\nDEDUP_TOKEN: freerdp_is_valid_mcs_create_response--test_server\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV (<unknown module>) \n==141==ABORTING\nMS: 5 ChangeBit-PersAutoDict-PersAutoDict-InsertByte-CopyPart- DE: \"B\\023\\000\\000\"-\"B\\023\\000\\000\"-; base unit: c466d1e822da53990e574a6e312fed34aba569bf\n0x3,0x0,0x0,0x25,0x2,0xf0,0x80,0x7f,0x42,0x13,0x0,0x0,0x60,0x4,0x1,0x1,0x4,0x1,0x1,0x1,0x1,0xff,0x30,0x19,0x2,0x1,0x22,0x2,0x1,0x2,0x2,0x1,0x0,0x2,0xad,0xb,0x1,0x2,0x42,0x13,0x0,0x0,0x1,0x0,0x2,0x1,0x1,0x65,0x42,0x13,0x0,0x0,0x60,0x4,0x1,0x1,0x4,0x1,0x1,0x1,0x1,0xff,0x30,0x19,0x2,0x1,0x22,0x2,0x1,0x2,0x2,0x1,0x0,0x2,0xad,0xb,0x1,0x2,0x42,0x13,0x0,0x0,0x1,0x0,0x2,0x1,0x1,0x2,\n\\003\\000\\000%\\002\\360\\200\\177B\\023\\000\\000`\\004\\001\\001\\004\\001\\001\\001\\001\\3770\\031\\002\\001\\\"\\002\\001\\002\\002\\001\\000\\002\\255\\013\\001\\002B\\023\\000\\000\\001\\000\\002\\001\\001eB\\023\\000\\000`\\004\\001\\001\\004\\001\\001\\001\\001\\3770\\031\\002\\001\\\"\\002\\001\\002\\002\\001\\000\\002\\255\\013\\001\\002B\\023\\000\\000\\001\\000\\002\\001\\001\\002\nartifact_prefix=\'/tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/repro876d8e60-4006-4ca1-a2c9-bb0090e59c78/\'; Test unit written to /tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/repro876d8e60-4006-4ca1-a2c9-bb0090e59c78/crash-5d92bcd1a47a8be14b7fbf366a49c9e81716e0a6\nBase64: AwAAJQLwgH9CEwAAYAQBAQQBAQEB/zAZAgEiAgECAgEAAq0LAQJCEwAAAQACAQFlQhMAAGAEAQEEAQEBAf8wGQIBIgIBAgIBAAKtCwECQhMAAAEAAgEBAg==\nstat::number_of_executed_units: 4171\nstat::average_exec_per_sec:     24\nstat::new_units_added:          25\nstat::slowest_unit_time_sec:    0\nstat::peak_rss_mb:              124\"\n  crash_token: \"test_server\nTestFuzzCoreServer.c"
    }
    tracer_stacktrace: "[22:23:58:259] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 15: dli_fname=/tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/TestFuzzCoreServer [0x55cf93797000], dli_sname=(null) [(nil)]\n[22:23:58:260] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 16: dli_fname=/lib/x86_64-linux-gnu/libc.so.6 [0x7f822a40d000], dli_sname=__libc_start_main [0x7f822a430f90]\n[22:23:58:260] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 17: dli_fname=/tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/TestFuzzCoreServer [0x55cf93797000], dli_sname=(null) [(nil)]\n[22:23:58:260] [141:0000008d] [WARN][com.winpr.asn1] - [winpr_log_backtrace_ex]: 18: unresolvable, address=(nil)\n[22:23:58:260] [141:0000008d] [ERROR][com.freerdp.core] - [tpdu_read_header]: tpdu length 2 > tpkt header length 0\n[22:23:58:269] [141:0000008d] [WARN][com.freerdp.crypto] - [ber_read_application_tag]: invalid tag, got 0x42, expected 0x65\nAddressSanitizer:DEADLYSIGNAL\n=================================================================\n==141==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x521000014203 bp 0x7fff57785c90 sp 0x7fff57785bd8 T0)\n==141==The signal is caused by a WRITE memory access.\n==141==Hint: address points to the zero page.\nSCARINESS: 10 (null-deref)\n    #0 0x521000014203  (<unknown module>)\n    #1 0x55cf93d4c2bb in freerdp_is_valid_mcs_create_response /src/FreeRDP/libfreerdp/core/freerdp.c:1458:16\n    #2 0x55cf93cd3790 in test_server /src/FreeRDP/libfreerdp/core/test/TestFuzzCoreServer.c:83:3\n    #3 0x55cf93cd3790 in LLVMFuzzerTestOneInput /src/FreeRDP/libfreerdp/core/test/TestFuzzCoreServer.c:106:2\n    #4 0x55cf93b8a100 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13\n    #5 0x55cf93b89925 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:516:7\n    #6 0x55cf93b8b105 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:760:19\n    #7 0x55cf93b8be95 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, std::__Fuzzer::allocator<fuzzer::SizedFile>>&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:905:5\n    #8 0x55cf93b7acdb in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:914:6\n    #9 0x55cf93ba60b2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10\n    #10 0x7f822a431082 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x24082) (BuildId: 0323ab4806bee6f846d9ad4bccfc29afdca49a58)\n\nDEDUP_TOKEN: freerdp_is_valid_mcs_create_response--test_server\nAddressSanitizer can not provide additional info.\nSUMMARY: AddressSanitizer: SEGV (<unknown module>) \n==141==ABORTING\nMS: 5 ChangeBit-PersAutoDict-PersAutoDict-InsertByte-CopyPart- DE: \"B\\023\\000\\000\"-\"B\\023\\000\\000\"-; base unit: c466d1e822da53990e574a6e312fed34aba569bf\n0x3,0x0,0x0,0x25,0x2,0xf0,0x80,0x7f,0x42,0x13,0x0,0x0,0x60,0x4,0x1,0x1,0x4,0x1,0x1,0x1,0x1,0xff,0x30,0x19,0x2,0x1,0x22,0x2,0x1,0x2,0x2,0x1,0x0,0x2,0xad,0xb,0x1,0x2,0x42,0x13,0x0,0x0,0x1,0x0,0x2,0x1,0x1,0x65,0x42,0x13,0x0,0x0,0x60,0x4,0x1,0x1,0x4,0x1,0x1,0x1,0x1,0xff,0x30,0x19,0x2,0x1,0x22,0x2,0x1,0x2,0x2,0x1,0x0,0x2,0xad,0xb,0x1,0x2,0x42,0x13,0x0,0x0,0x1,0x0,0x2,0x1,0x1,0x2,\n\\003\\000\\000%\\002\\360\\200\\177B\\023\\000\\000`\\004\\001\\001\\004\\001\\001\\001\\001\\3770\\031\\002\\001\\\"\\002\\001\\002\\002\\001\\000\\002\\255\\013\\001\\002B\\023\\000\\000\\001\\000\\002\\001\\001eB\\023\\000\\000`\\004\\001\\001\\004\\001\\001\\001\\001\\3770\\031\\002\\001\\\"\\002\\001\\002\\002\\001\\000\\002\\255\\013\\001\\002B\\023\\000\\000\\001\\000\\002\\001\\001\\002\nartifact_prefix=\'/tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/repro876d8e60-4006-4ca1-a2c9-bb0090e59c78/\'; Test unit written to /tmp/tmp1bdwhafh/0196a6de-f416-7b71-96df-c0f51a52298d-93718bc4-40df-45-8k5yds7s/fuzz-tooling/fuzz-tooling/build/out/freerdp/repro876d8e60-4006-4ca1-a2c9-bb0090e59c78/crash-5d92bcd1a47a8be14b7fbf366a49c9e81716e0a6\nBase64: AwAAJQLwgH9CEwAAYAQBAQQBAQEB/zAZAgEiAgECAgEAAq0LAQJCEwAAAQACAQFlQhMAAGAEAQEEAQEBAf8wGQIBIgIBAgIBAAKtCwECQhMAAAEAAgEBAg==\nstat::number_of_executed_units: 4171\nstat::average_exec_per_sec:     24\nstat::new_units_added:          25\nstat::slowest_unit_time_sec:    0\nstat::peak_rss_mb:              124\"\n  crash_token: \"test_server\nTestFuzzCoreServer.c"
}
submission_index: "0196a6de-f416-7b71-96df-c0f51a52298d-1"
