oss-fuzz: bnb_finds_min_waste: Assertion `result_bf.GetWaste() == best_waste’ failed. #34936

1. 
   maflcko commented at 9:59 am on March 27, 2026: member

   https://issues.oss-fuzz.com/issues/496742336:

    0$ echo 'ICAgICAgICAgICD//yAgIP////////////8gICAg//8A/////////yD/////IP+RIJH/kSCR/5r/
    1kf+RkSCR/5GR/5H/kZEgkf+Rkf+R/5GRIJH/kZGR/5H/kZGRIJH/kZGR/5H/kZGRIJH///8A////
    2IP//20AHWvB1BiD//yAgICAgICAg////ICAgIP+R//8A' | base64 --decode > /tmp/oss-fuzz-bnb
    3
    4$ sha1sum /tmp/oss-fuzz-bnb 
    5be3b7458579c6b2205947c3a3bca2d1bd9f25c72  /tmp/oss-fuzz-bnb
    6
    7$ FUZZ=bnb_finds_min_waste ./bld-cmake/bin/fuzz /tmp/oss-fuzz-bnb 
    8INFO: Running with entropic power schedule (0xFF, 100).
    9INFO: Seed: 2277724134
   10INFO: Loaded 1 modules   (415460 inline 8-bit counters): 415460 [0x55877532c1e0, 0x5587753918c4), 
   11INFO: Loaded 1 PC tables (415460 PCs): 415460 [0x5587753918c8,0x5587759e8708), 
   12./bld-cmake/bin/fuzz: Running 1 inputs 1 time(s) each.
   13Running: /tmp/oss-fuzz-bnb
   14
   15fuzz: wallet/test/fuzz/coinselection.cpp:319: void wallet::bnb_finds_min_waste_fuzz_target(FuzzBufferType): Assertion `result_bf.GetWaste() == best_waste' failed.
   16 
   

   Originally posted by @maflcko in #32894

2. maflcko added the label Wallet on Mar 27, 2026
3. 
   fanquake commented at 10:18 am on March 27, 2026: member

   cc @murchandamus
4. 
   murchandamus commented at 3:37 pm on March 27, 2026: member

   Thanks, will try to take a look today.
5. 
   achow101 commented at 0:32 am on March 28, 2026: member

   It’s an int overflow. Fixed in #34939
6. fanquake added this to the milestone 31.0 on Mar 28, 2026

Contributors
maflcko fanquake murchandamus achow101

Labels
Wallet

Milestone
31.0