W=/opt/cyclops-v2/oracle/work/llamacpp

BIN="$W/fuzz_deep"

SEEN="$W/deep/seen.txt"; touch "$SEEN"

CRASHDIR="$W/deep/crashes"

[ -d "$CRASHDIR" ] || exit 0

for c in "$CRASHDIR"/d-* "$CRASHDIR"/crash-* "$CRASHDIR"/oom-* "$CRASHDIR"/leak-*; do

  [ -f "$c" ] || continue

  b=$(basename "$c")

  grep -qx "$b" "$SEEN" && continue

  echo "$b" >> "$SEEN"

  out=$(ASAN_OPTIONS=detect_leaks=0:abort_on_error=0:exitcode=88 timeout 30 "$BIN" "$c" 2>&1)

  sig=$(echo "$out" | grep -oE "heap-buffer-overflow|stack-buffer-overflow|global-buffer-overflow|heap-use-after-free|double-free|WRITE of size [0-9]+|stack-overflow|FPE|division by zero|out-of-memory|allocator is out of memory|GGML_ASSERT|GGML_ABORT|SEGV on unknown" | head -1)

  case "$sig" in

    heap-buffer-overflow|stack-buffer-overflow|global-buffer-overflow|heap-use-after-free|double-free|"WRITE of size"*)

      loc=$(echo "$out" | grep -oE "gguf.cpp:[0-9]+|ggml[-a-z]*\.c:[0-9]+|ggml\.c:[0-9]+" | head -1)

      echo "HIGH $b :: $sig @ ${loc:-?}" ;;

    "SEGV on unknown")

      loc=$(echo "$out" | grep -oE "gguf.cpp:[0-9]+|ggml[-a-z]*\.c:[0-9]+" | head -1)

      echo "REVIEW $b :: SEGV @ ${loc:-?}" ;;

    FPE|"division by zero"|stack-overflow|out-of-memory|"allocator is out of memory"|GGML_ASSERT|GGML_ABORT)

      : ;;

    *)

      [ -n "$out" ] && echo "REVIEW $b :: unclassified" || : ;;

  esac

done