dladdr LIBC libdl.so __snprintf_chk libc.so __libc_init __cxa_atexit __register_atfork __android_log_print _ZNK7android6VectorINS_8String16EE12do_constructEPvj _ZN7android8String16C1Ev random __aeabi_memcpy LIBC_PRIVATE __aeabi_memset __gnu_Unwind_Find_exidx _ZNK7android6VectorINS_8String16EE7do_copyEPvPKvj _ZN7android8String16C1ERKS0_ _ZNK7android6VectorINS_8String16EE8do_splatEPvPKvj _ZNK7android6VectorINS_8String16EE10do_destroyEPvj _ZN7android8String16D1Ev _ZN7android10VectorImpl13finish_vectorEv _ZN7android10VectorImplD2Ev _ZTVN7android6VectorINS_8String16EEE _ZdlPv _ZNK7android6VectorINS_8String16EE15do_move_forwardEPvPKvj memmove _ZNK7android6VectorINS_8String16EE16do_move_backwardEPvPKvj _ZN7android6ParcelC1Ev _ZN7android6Parcel19writeInterfaceTokenERKNS_8String16E _ZN7android6Parcel10writeInt32Ei _ZN7android6ParcelD1Ev _ZNK7android6Parcel12readString16Ev pthread_create sleep _ZN7android2spINS_7IBinderEED2Ev _ZNK7android7RefBase9decStrongEPKv _ZN7android2spINS_7IBinderEED1Ev stderr _ZN7android21defaultServiceManagerEv fprintf _ZN7android8String16C1EPKc abort _ZNK7android8String1610startsWithERKS0_ _ZNK7android7RefBase9incStrongEPKv _ZN7android7String8C1ERKNS_8String16E _ZN7android7String8D1Ev _ZN7android19IAudioPolicyService11asInterfaceERKNS_2spINS_7IBinderEEE _ZNK7android29ICameraRecordingProxyListener22getInterfaceDescriptorEv _ZN7android11BnInterfaceINS_29ICameraRecordingProxyListenerEE10onAsBinderEv strzcmp16 _ZN7android30BnCameraRecordingProxyListener10onTransactEjRKNS_6ParcelEPS1_j _ZNK7android6Parcel14checkInterfaceEPNS_7IBinderE _ZNK7android6Parcel9readInt64Ev _ZNK7android6Parcel9readInt32Ev _ZNK7android6Parcel16readStrongBinderEv _ZN7android7IMemory11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android7BBinder10onTransactEjRKNS_6ParcelEPS1_j _ZThn4_N7android30BnCameraRecordingProxyListener10onTransactEjRKNS_6ParcelEPS1_j _ZNK7android7IMemory7pointerEv _ZNK7android7IMemory4sizeEv memset _ZN7android6Parcel10writeInt64Ex _ZN7android10IInterface8asBinderERKNS_2spIS0_EE _ZN7android6Parcel17writeStrongBinderERKNS_2spINS_7IBinderEEE _ZN7android29ICameraRecordingProxyListenerC2Ev _ZN7android10IInterfaceC2Ev _ZN7android29ICameraRecordingProxyListener11asInterfaceERKNS_2spINS_7IBinderEEE _Znwj _ZN7android7RefBaseC2Ev _ZN7android9BpRefBaseC2ERKNS_2spINS_7IBinderEEE _ZTTN7android30BpCameraRecordingProxyListenerE _ZTVN7android30BpCameraRecordingProxyListenerE _ZN7android29ICameraRecordingProxyListenerC1Ev _ZN7android10IInterfaceD2Ev _ZN7android7RefBaseD2Ev _ZN7android29ICameraRecordingProxyListenerD2Ev _ZN7android9BpRefBaseD2Ev _ZTVN7android11BpInterfaceINS_29ICameraRecordingProxyListenerEEE _ZTTN7android11BpInterfaceINS_29ICameraRecordingProxyListenerEEE _ZN7android29ICameraRecordingProxyListenerD1Ev _ZTv0_n12_N7android29ICameraRecordingProxyListenerD1Ev _ZN7android29ICameraRecordingProxyListenerD0Ev _ZTv0_n12_N7android29ICameraRecordingProxyListenerD0Ev __aeabi_atexit _ZTTN7android29ICameraRecordingProxyListenerE _ZTVN7android29ICameraRecordingProxyListenerE _ZTTN7android30BnCameraRecordingProxyListenerE _ZTVN7android30BnCameraRecordingProxyListenerE _ZN7android9BpRefBase10onFirstRefEv _ZN7android9BpRefBase15onLastStrongRefEPKv _ZN7android9BpRefBase20onIncStrongAttemptedEjPKv _ZTv0_n16_N7android9BpRefBase10onFirstRefEv _ZTv0_n20_N7android9BpRefBase15onLastStrongRefEPKv _ZTv0_n24_N7android9BpRefBase20onIncStrongAttemptedEjPKv _ZN7android7RefBase13onLastWeakRefEPKv __cxa_pure_virtual _ZN7android7RefBase10onFirstRefEv _ZN7android7RefBase15onLastStrongRefEPKv _ZN7android7RefBase20onIncStrongAttemptedEjPKv _ZN7android29ICameraRecordingProxyListener10descriptorE _ZNK7android7BBinder13isBinderAliveEv _ZN7android7BBinder10pingBinderEv _ZN7android7BBinder4dumpEiRKNS_6VectorINS_8String16EEE _ZN7android7BBinder8transactEjRKNS_6ParcelEPS1_j _ZN7android7BBinder11linkToDeathERKNS_2spINS_7IBinder14DeathRecipientEEEPvj _ZN7android7BBinder13unlinkToDeathERKNS_2wpINS_7IBinder14DeathRecipientEEEPvjPS4_ _ZNK7android7IBinder13checkSubclassEPKv _ZN7android7BBinder12attachObjectEPKvPvS3_PFvS2_S3_S3_E _ZNK7android7BBinder10findObjectEPKv _ZN7android7BBinder12detachObjectEPKv _ZN7android7BBinder11localBinderEv _ZN7android7IBinder12remoteBinderEv __stack_chk_fail _ZN7android7IBinder19queryLocalInterfaceERKNS_8String16E __stack_chk_guard _ZN7android7IBinder11localBinderEv strncmp _ZNK7android7BBinder22getInterfaceDescriptorEv _ZN7android11BnInterfaceINS_13ICameraClientEE10onAsBinderEv _ZN7android11BnInterfaceINS_22ICameraDeviceCallbacksEE10onAsBinderEv _ZNK7android22ICameraDeviceCallbacks22getInterfaceDescriptorEv _ZNK7android13ICameraClient22getInterfaceDescriptorEv _ZN7android13ICameraClient10descriptorE _ZN7android22ICameraDeviceCallbacks10descriptorE _ZN7android7BBinderD2Ev _ZN7android22ICameraDeviceCallbacksD2Ev calloc _ZTVN7android23BnCameraDeviceCallbacksE _ZTTN7android23BnCameraDeviceCallbacksE pthread_cond_destroy pthread_mutex_destroy _ZN7android13ICameraClientD2Ev _ZTVN7android11BnInterfaceINS_13ICameraClientEEE _ZTTN7android11BnInterfaceINS_13ICameraClientEEE _ZTVN7android14BnCameraClientE _ZTTN7android14BnCameraClientE _ZN7android2spINS_15IServiceManagerEED2Ev _ZN7android2spINS_15IServiceManagerEED1Ev _ZN7android2spINS_14ICameraServiceEED2Ev _ZN7android2spINS_14ICameraServiceEED1Ev _ZN7android10IInterface8asBinderEPKS0_ _ZN7android14ICameraService11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android22ICameraDeviceCallbacksC2Ev _ZN7android7BBinderC2Ev pthread_mutex_init pthread_cond_init _ZN7android13ICameraClientC2Ev _ZN7android19ICameraServiceProxy11asInterfaceERKNS_2spINS_7IBinderEEE memcpy pthread_mutex_lock pthread_cond_broadcast pthread_mutex_unlock _ZN7android23BnCameraDeviceCallbacks10onTransactEjRKNS_6ParcelEPS1_j _ZThn4_N7android23BnCameraDeviceCallbacks10onTransactEjRKNS_6ParcelEPS1_j _ZN7android14BnCameraClient10onTransactEjRKNS_6ParcelEPS1_j _ZThn4_N7android14BnCameraClient10onTransactEjRKNS_6ParcelEPS1_j _ZN7android19IMediaPlayerService11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android2spINS_19IMediaPlayerServiceEED2Ev _ZN7android2spINS_15IMediaCodecListEED2Ev _ZN7android6Camera7connectEiRKNS_8String16Ei open _ZN7android6Parcel19writeFileDescriptorEib _ZN7android2spINS_22IGraphicBufferProducerEED2Ev _ZN7android2spINS_22IGraphicBufferProducerEED1Ev _ZN7android6Parcel12writeInplaceEj _ZNK7android6Parcel9dataAvailEv _ZN7android11BnInterfaceINS_12IOMXObserverEE10onAsBinderEv _ZNK7android12IOMXObserver22getInterfaceDescriptorEv _ZdaPv _ZTVN7android4ListIjEE _ZTVN7android4ListINS_7String8EEE _ZTVN7android4ListINS_4IOMX13ComponentInfoEEE _ZN7android12IOMXObserver10descriptorE _ZN7android12IOMXObserverD2Ev _ZTVN7android11BnInterfaceINS_12IOMXObserverEEE _ZTTN7android11BnInterfaceINS_12IOMXObserverEEE _ZN7android12IOMXObserverC2Ev _ZTTN7android13BnOMXObserverE _ZTVN7android13BnOMXObserverE _Znaj printf putchar _ZN7android2spINS_7IMemoryEED2Ev _ZN7android2spINS_7IMemoryEED1Ev _ZTVN7android4ListINS_2spINS_7IMemoryEEEEE _ZN7android2spINS_10IInterfaceEED2Ev _ZN7android2spINS_10IInterfaceEED1Ev _ZN7android12MemoryDealerC1EjPKcj _ZN7android6Parcel12writeCStringEPKc malloc free _ZN7android6Parcel5writeEPKvj malloc_usable_size read _ZN7android13BnOMXObserver10onTransactEjRKNS_6ParcelEPS1_j _ZThn4_N7android13BnOMXObserver10onTransactEjRKNS_6ParcelEPS1_j _ZN7android19IProcessInfoService11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android13IRadioService11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android7String8C1Ev _ZN7android11BnInterfaceINS_22IResourceManagerClientEE10onAsBinderEv _ZN7android7String8C1EPKc _ZNK7android22IResourceManagerClient22getInterfaceDescriptorEv _ZNK7android6VectorINS_13MediaResourceEE12do_constructEPvj _ZN7android13MediaResourceC1Ev _ZTVN7android6VectorINS_13MediaResourceEEE _ZN7android22IResourceManagerClient10descriptorE _ZN7android22IResourceManagerClientD2Ev _ZTVN7android11BnInterfaceINS_22IResourceManagerClientEEE _ZTTN7android11BnInterfaceINS_22IResourceManagerClientEEE _ZTVN7android23BnResourceManagerClientE _ZTTN7android23BnResourceManagerClientE _ZNK7android6VectorINS_13MediaResourceEE10do_destroyEPvj _ZN7android22IResourceManagerClientC2Ev _ZN7android10VectorImplC2Ejj _ZN7android10VectorImpl8insertAtEPKvjj _ZN7android13MediaResourceC1ENS_7String8Ey _ZN7android22kResourceGraphicMemoryE _ZN7android23IResourceManagerService11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android13MediaResourceC1ENS_7String8ES1_y _ZN7android23kResourceNonSecureCodecE _ZN7android19kResourceVideoCodecE _ZN7android7String8C1ERKS0_ _ZNK7android6VectorINS_13MediaResourceEE7do_copyEPvPKvj _ZNK7android6VectorINS_13MediaResourceEE8do_splatEPvPKvj _ZNK7android6VectorINS_13MediaResourceEE15do_move_forwardEPvPKvj _ZNK7android6VectorINS_13MediaResourceEE16do_move_backwardEPvPKvj _ZN7android23BnResourceManagerClient10onTransactEjRKNS_6ParcelEPS1_j _ZThn4_N7android23BnResourceManagerClient10onTransactEjRKNS_6ParcelEPS1_j _ZN7android13ISensorServer11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android22ISoundTriggerHwService11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android21SurfaceComposerClient17getBuiltInDisplayEi _ZN7android16ISurfaceComposer11asInterfaceERKNS_2spINS_7IBinderEEE _ZN7android2spINS_7IBinderEEC2ERKS2_ _ZN7android2spINS_7IBinderEEC1ERKS2_ _ZNK7android6Parcel17readExceptionCodeEv _ZN7android8String165setToERKS0_ _end _edata __bss_start libstagefright.so libmedia.so libutils.so libstagefright_foundation.so libgui.so libcutils.so liblog.so libcamera_client.so libradio.so libsoundtrigger.so libui.so libbinder.so libc++.so libm.so 
fuzz starts ends ICameraRecordingProxyListener BnCameraRecordingProxyListener, DATA_CALLBACK_TIMESTAMP dataCallback, start to fuzz android.hardware.ICameraRecordingProxyListener cannot list codec nodes: %d %s Roles: %s fuzzing srvCode: %d fuzzDefaultTransact: %d media.player mediaPlayerService == NULL service == NULL LIST_NODES: 3 ALLOCATE_NODE: 4 OMX.qcom.video.decoder.h263 error: %d, node: %d USE_BUFFER: 13 error: %d, bufferId:%d EMPTY_BUFFER: 25 OMX.qcom.video.decoder.avc %s node allocation fails getConfig error: %d setParameter, err: %d useBuffer, err: %d setParameter, change actualcount setParameter, change actualcount, err: %d freeNode, err: %d OMX.qcom.video.encoder.avc.secure OMX.qcom.video.decoder.mpeg2 getParameter err: %d OMX.qcom.video.encoder.avc OMX.google.mp3.decoder OMX.google.vp8.encoder OMX.MTK.VIDEO.DECODER.MPEG4 port 0: %u buffers of size %u port 1: %u buffers of size %u set %u useBuffer, port index 0, err: %d, num: %d useBuffer, port index 1, err: %d, num: %d sendCommand, err: %d emptyBuffer, err: %d fillBuffer, err: %d OMX.google.raw.decoder node: %d free node: %d port index 0, allocateBuffer, err: %d, buffer_data: %p port index 0, setParameter, err: %d port index 0, allocateBuffer, err: %d OMX.qcom.video.decoder.avc.secure port index 1, setParameter, err: %d useBuffer, port index 0, err: %d allocateBuffer, port index 0, err: %d SET_CONFIG: 10 GET_CONFIG: 9 malloc_usable_size(params): %d setParameter useBuffer 0, port index 0, err: %d useBuffer 0, port index 1, err: %d OMX.google.flac.encoder OMX.google.mpeg2.decoder /data/local/tmp/MainconceptLogo_MPEG2_ES_720x576.m2v cannot open file: %s read %d bytes: failed setParameter, QOMX_INDEXDOWNSCALAR, err: %d setParameter, EnableAndroidNativeBuffersParams, err: %d -----------decode--------- OMX.qcom.video.decoder.hevc /data/local/tmp/inputbuffer.data ---------encode---------- OMX.qcom.video.encoder.mpeg4 input port, setParameter, err: %d output port, setParameter, err: %d useBuffer, port index 1, err: %d OMX.Nvidia.h264.decode.secure OMX.Nvidia.h265.decode.secure OMX.Nvidia.render.crt.overlay.argb8888 OMX.Nvidia.mp3.decoder port 0, setParameter: %d /data/local/tmp/test.mp3 allocateBufferWithBackup, port index 0, err: %d fd: %d, size: %d %s node allocation fails OMX.google.g711.alaw.decoder -----------decode OMX.google.vp9.decoder OMX.qcom.audio.encoder.aac %p OMX.google.h264.encoder -----------encode------------ outpu port, setParameter, err: %d allocateBuffer, err: %d, buffer_data: %p %x -----------decode------------ OMX.google.gsm.decoder OMX.google.amrwb.decoder allocateBufferWithBackup, port index 1, err: %d useBuffer 0, port index 1, err: %d, mem: %p OMX.google.h264.decoder OMX.google.hevc.decoder /data/local/tmp/hevc_frame.data OMX.google.vorbis.decoder /data/local/tmp/v.data disable ports free buffers free buffers done enable ports OMX.google.opus.decoder /data/local/tmp/opus.data OMX.google.aac.decoder /data/local/tmp/MainconceptLogo_AAC_ADTS.aac storeMetaDataInBuffers: %d OMX.google.mpeg4.encoder useBuffer 0, port index 0, size: %d, err: %d memory->pointer(): %p, %d useBuffer 0, port index 1, size: %d, err: %d OMX.google.mpeg4.decoder memory->pointer(): %p, content: 0x%x, %d OMX.google.amrwb.encoder cannot get the media player service cannot get the OMX interface codec list is empty OMX.Nvidia.h265.decode fuzzIOMXCodec: %s cannot allocate input buffers: %d bytes from %d bytes cannot allocate output buffers: %d bytes from %d void _Unwind_Resume(_Unwind_Exception *) external/libcxxabi/src/Unwind/Unwind-EHABI.cpp _Unwind_Resume() can't return _Unwind_VRS_Result _Unwind_VRS_Set(_Unwind_Context *, _Unwind_VRS_RegClass, uint32_t, _Unwind_VRS_DataRepresentation, void *) unsupported register class _Unwind_VRS_Result _Unwind_VRS_Pop(_Unwind_Context *, _Unwind_VRS_RegClass, uint32_t, _Unwind_VRS_DataRepresentation) _Unwind_Reason_Code unwind_phase2(unw_context_t *, _Unwind_Exception *, bool) during phase1 personality function said it would stop here, but now in phase2 it did not stop here libunwind: %s %s:%d - %s _Unwind_VRS_Result _Unwind_VRS_Get_Internal(_Unwind_Context *, _Unwind_VRS_RegClass, uint32_t, _Unwind_VRS_DataRepresentation, void *) external/libcxxabi/src/Unwind/UnwindCursor.hpp uint32_t libunwind::Registers_arm::getRegister(int) external/libcxxabi/src/Unwind/Registers.hpp unsupported arm register void libunwind::Registers_arm::setRegister(int, uint32_t) unw_fpreg_t libunwind::Registers_arm::getFloatRegister(int) Unknown ARM float register void libunwind::Registers_arm::setFloatRegister(int, unw_fpreg_t) bool libunwind::UnwindCursor<libunwind::LocalAddressSpace, libunwind::Registers_arm>::getInfoFromEHABISection(pint_t, const libunwind::UnwindInfoSections &) [A = libunwind::LocalAddressSpace, R = libunwind::Registers_arm] unknown personality routine index inlined table detected but pr function requires extra words pc lr sp r0 r1 r2 r3 r4 r5 r6 r7 r8 r9 r10 r11 r12 s0 s1 s2 s3 s4 s5 s6 s7 s8 s9 s10 s11 s12 s13 s14 s15 s16 s17 s18 s19 s20 s21 s22 s23 s24 s25 s26 s27 s28 s29 s30 s31 d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 d10 d11 d12 d13 d14 d15 d16 d17 d18 d19 d20 d21 d22 d23 d24 d25 d26 d27 d28 d29 d30 d31 unknown register
GCC: (GNU) 4.9.x-google 20140827 (prerelease) clang version 3.6
.shstrtab .interp .note.android.ident .note.gnu.build-id .dynsym .dynstr .gnu.hash .gnu.version .gnu.version_r .rel.dyn .rel.plt .text .ARM.exidx .rodata .ARM.extab .data.rel.ro.local .preinit_array .init_array .fini_array .data.rel.ro .dynamic .got .bss .comment .note.gnu.gold-version .ARM.attributes .gnu_debuglink