From a350c0fcf49bdfd618807bf31c2029661364aefe Mon Sep 17 00:00:00 2001
From: Josh Grant <joshua.m.grant@gmail.com>
Date: Fri, 2 Dec 2022 15:35:03 -0500
Subject: [PATCH 1/2] analyzer example of out-of-memory bug

---
 .idea/workspace.xml                            |  4 ++--
 .../codeintelligence/processing/Analyzer.java  | 18 ++++++++++++++++++
 src/test/java/AnalyzerFuzzTest.java            | 15 +++++++++++++++
 3 files changed, 35 insertions(+), 2 deletions(-)
 create mode 100644 src/main/java/org/codeintelligence/processing/Analyzer.java
 create mode 100644 src/test/java/AnalyzerFuzzTest.java

diff --git a/.idea/workspace.xml b/.idea/workspace.xml
index dfa0399..51b8a3a 100644
--- a/.idea/workspace.xml
+++ b/.idea/workspace.xml
@@ -5,9 +5,9 @@
   </component>
   <component name="ChangeListManager">
     <list default="true" id="50d8d03f-dcd0-47c3-bb9b-d8f15969166a" name="Changes" comment="">
-      <change afterPath="$PROJECT_DIR$/src/test/java/Log4JFuzzTest.java" afterDir="false" />
+      <change afterPath="$PROJECT_DIR$/src/main/java/org/codeintelligence/processing/Analyzer.java" afterDir="false" />
+      <change afterPath="$PROJECT_DIR$/src/test/java/AnalyzerFuzzTest.java" afterDir="false" />
       <change beforePath="$PROJECT_DIR$/.idea/workspace.xml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/workspace.xml" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/pom.xml" beforeDir="false" afterPath="$PROJECT_DIR$/pom.xml" afterDir="false" />
     </list>
     <option name="SHOW_DIALOG" value="false" />
     <option name="HIGHLIGHT_CONFLICTS" value="true" />
diff --git a/src/main/java/org/codeintelligence/processing/Analyzer.java b/src/main/java/org/codeintelligence/processing/Analyzer.java
new file mode 100644
index 0000000..de4b32e
--- /dev/null
+++ b/src/main/java/org/codeintelligence/processing/Analyzer.java
@@ -0,0 +1,18 @@
+package org.codeintelligence.processing;
+
+import java.util.ArrayList;
+
+public class Analyzer {
+
+    public void complexProcessing(int[] input) {
+        ArrayList<Integer> integers = new ArrayList<>();
+        // copy the array
+        int pos = 0;
+        while (pos >= 0 && pos < input.length) {
+            integers.add(input[pos]);
+            pos = input[pos] + 1;
+        }
+        // process the copy
+    }
+
+}
diff --git a/src/test/java/AnalyzerFuzzTest.java b/src/test/java/AnalyzerFuzzTest.java
new file mode 100644
index 0000000..2e94397
--- /dev/null
+++ b/src/test/java/AnalyzerFuzzTest.java
@@ -0,0 +1,15 @@
+import com.code_intelligence.jazzer.api.FuzzedDataProvider;
+import com.code_intelligence.jazzer.junit.FuzzTest;
+import org.codeintelligence.processing.Analyzer;
+
+
+public class AnalyzerFuzzTest {
+
+    @FuzzTest
+    void fuzzComplexProcessing(FuzzedDataProvider data) {
+        Analyzer underTest = new Analyzer();
+
+        underTest.complexProcessing(data.consumeInts(10));
+    }
+
+}

From 16fddadc73fc4912ed03b9e94659c045bab3e16c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 2 Dec 2022 20:36:27 +0000
Subject: [PATCH 2/2] Bump log4j-core from 2.14.0 to 2.17.1

Bumps log4j-core from 2.14.0 to 2.17.1.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 155e4ed..495b908 100644
--- a/pom.xml
+++ b/pom.xml
@@ -43,7 +43,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.14.0</version>
+            <version>2.17.1</version>
         </dependency>
     </dependencies>