oss-fuzz: bnb_finds_min_waste: Assertion `result_bf.GetWaste() == best_waste' failed. #34936

1. 
   maflcko commented at 9:59 AM on March 27, 2026: member

   https://issues.oss-fuzz.com/issues/496742336:

   $ echo 'ICAgICAgICAgICD//yAgIP////////////8gICAg//8A/////////yD/////IP+RIJH/kSCR/5r/
   kf+RkSCR/5GR/5H/kZEgkf+Rkf+R/5GRIJH/kZGR/5H/kZGRIJH/kZGR/5H/kZGRIJH///8A////
   IP//20AHWvB1BiD//yAgICAgICAg////ICAgIP+R//8A' | base64 --decode > /tmp/oss-fuzz-bnb
   
   $ sha1sum /tmp/oss-fuzz-bnb 
   be3b7458579c6b2205947c3a3bca2d1bd9f25c72  /tmp/oss-fuzz-bnb
   
   $ FUZZ=bnb_finds_min_waste ./bld-cmake/bin/fuzz /tmp/oss-fuzz-bnb 
   INFO: Running with entropic power schedule (0xFF, 100).
   INFO: Seed: 2277724134
   INFO: Loaded 1 modules   (415460 inline 8-bit counters): 415460 [0x55877532c1e0, 0x5587753918c4), 
   INFO: Loaded 1 PC tables (415460 PCs): 415460 [0x5587753918c8,0x5587759e8708), 
   ./bld-cmake/bin/fuzz: Running 1 inputs 1 time(s) each.
   Running: /tmp/oss-fuzz-bnb
   
   fuzz: wallet/test/fuzz/coinselection.cpp:319: void wallet::bnb_finds_min_waste_fuzz_target(FuzzBufferType): Assertion `result_bf.GetWaste() == best_waste' failed.
    
   

   Originally posted by @maflcko in #32894

2. maflcko added the label Wallet on Mar 27, 2026
3. 
   fanquake commented at 10:18 AM on March 27, 2026: member

   cc @murchandamus

4. 
   murchandamus commented at 3:37 PM on March 27, 2026: member

   Thanks, will try to take a look today.

5. 
   achow101 commented at 12:32 AM on March 28, 2026: member

   It's an int overflow. Fixed in #34939

6. fanquake added this to the milestone 31.0 on Mar 28, 2026
7. fanquake closed this on Mar 30, 2026

   ---

8. deadmanoz referenced this in commit 826819a510 on Mar 30, 2026

Milestone
31.0