Fuzz introspector: fuzz_ranlib_simulation
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
988 988 1 :

['bfd_init_section_compress_status']

990 1016 _bfd_elf_make_section_from_shdr call site: 00000 /src/binutils-gdb/bfd/elf.c:1209
988 988 1 :

['bfd_init_section_compress_status']

990 992 make_a_section_from_file call site: 00000 /src/binutils-gdb/bfd/coffgen.c:249
510 510 2 :

['try_load_plugin', 'build_plugin_list']

510 510 load_plugin call site: 00000 /src/binutils-gdb/bfd/plugin.c:571
266 1675 26 :

['image_write_l', 'alpha_vms_add_qw_reloc', 'dst_restore_location', '_bfd_abort', 'alpha_vms_add_fixup_qr', 'image_set_ptr', 'bfd_getl64', 'alpha_vms_sym_to_ctxt', 'image_write_w', 'bfd_getl32', 'image_write_q', 'alpha_vms_add_lw_reloc', 'alpha_vms_add_fixup_lp', 'alpha_vms_get_sym_value', '_bfd_vms_get_value', 'image_write', 'bfd_getl16', 'alpha_vms_add_fixup_ca', 'dst_retrieve_location', '_bfd_vms_push', 'alpha_vms_fix_sec_rel', 'image_write_b', '_bfd_vms_pop', 'dst_define_location', 'image_inc_ptr', 'alpha_vms_add_fixup_lr']

292 2251 _bfd_vms_slurp_etir call site: 00000 /src/binutils-gdb/bfd/vms-alpha.c:1987
228 261 2 :

['bfd_pef_scan', 'bfd_zalloc']

228 272 bfd_pef_object_p call site: 00000 /src/binutils-gdb/bfd/pef.c:600
203 1241 3 :

['bfd_check_format', 'find_nested_archive', '_bfd_get_elt_at_filepos']

203 1248 _bfd_get_elt_at_filepos call site: 00000 /src/binutils-gdb/bfd/archive.c:706
123 142 7 :

['bfd_get_error', '_bfd_real_fseek', 'bfd_open_file', '_bfd_error_handler', 'bfd_set_error', 'dgettext', 'bfd_errmsg']

123 142 bfd_cache_lookup_worker call site: 00000 /src/binutils-gdb/bfd/cache.c:247
121 165 8 :

['bfd_alloc', 'normalize', 'adjust_relative_path', '_bfd_ar_spacepad', 'strlen', 'bfd_get_filename.42251', 'filename_cmp', 'bfd_is_thin_archive.42236']

121 165 _bfd_construct_extended_name_table call site: 00000 /src/binutils-gdb/bfd/archive.c:1670
82 82 1 :

['bfd_open_file']

82 82 io_reinit call site: 00116 /src/binutils-gdb/bfd/format.c:171
71 73 3 :

['dgettext', 'bfd_link_hash_lookup', '_bfd_error_handler']

71 73 _bfd_vms_get_value call site: 00000 /src/binutils-gdb/bfd/vms-alpha.c:1786
61 138 3 :

['bfd_make_section_with_flags', 'ppcboot_set_arch_mach', 'ppcboot_mkobject']

61 149 ppcboot_object_p call site: 00000 /src/binutils-gdb/bfd/ppcboot.c:181
45 45 2 :

['bfd_perror', 'dgettext']

45 45 _bfd_archive_bsd_update_armap_timestamp call site: 00000 /src/binutils-gdb/bfd/archive.c:2660

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 getpid [call site] 00001
1 fopen [call site] 00002
1 fwrite [call site] 00003
1 fclose [call site] 00004
1 open [call site] 00005
1 bfd_fdopenr [function] [call site] 00006
2 fcntl [call site] 00007
2 __errno_location [call site] 00008
2 close [call site] 00009
2 __errno_location [call site] 00010
2 bfd_set_error [function] [call site] 00011
3 _bfd_abort [function] [call site] 00012
4 dgettext [call site] 00013
4 _bfd_error_handler [function] [call site] 00014
4 dgettext [call site] 00015
4 _bfd_error_handler [function] [call site] 00016
4 dgettext [call site] 00017
4 _bfd_error_handler [function] [call site] 00018
4 _exit [call site] 00019
2 _bfd_abort [function] [call site] 00020
2 bfd_fopen [function] [call site] 00021
3 _bfd_new_bfd [function] [call site] 00022
4 bfd_zmalloc [function] [call site] 00023
5 bfd_malloc [function] [call site] 00024
6 bfd_set_error [function] [call site] 00025
6 bfd_set_error [function] [call site] 00026
4 objalloc_create [function] [call site] 00027
4 bfd_set_error [function] [call site] 00028
4 bfd_hash_table_init_n [function] [call site] 00029
5 bfd_set_error [function] [call site] 00030
5 objalloc_create [function] [call site] 00031
5 bfd_set_error [function] [call site] 00032
5 _objalloc_alloc [function] [call site] 00033
6 _objalloc_alloc [function] [call site] 00034
5 bfd_hash_table_free [function] [call site] 00035
6 objalloc_free [function] [call site] 00036
5 bfd_set_error [function] [call site] 00037
4 bfd_section_hash_newfunc [function] [call site] 00038
5 bfd_hash_allocate [function] [call site] 00039
6 _objalloc_alloc [function] [call site] 00040
6 bfd_set_error [function] [call site] 00041
5 bfd_hash_newfunc [function] [call site] 00042
6 bfd_hash_allocate [function] [call site] 00043
4 objalloc_free [function] [call site] 00044
3 close [call site] 00045
3 bfd_find_target [function] [call site] 00046
4 getenv [call site] 00047
4 strcmp [call site] 00048
4 find_target [function] [call site] 00049
5 strcmp [call site] 00050
5 fnmatch [call site] 00051
5 bfd_set_error [function] [call site] 00052
3 close [call site] 00053
3 _bfd_delete_bfd [function] [call site] 00054
4 bfd_hash_table_free [function] [call site] 00055
4 objalloc_free [function] [call site] 00056
4 bfd_get_filename [function] [call site] 00057
3 fdopen [call site] 00058
3 _bfd_real_fopen [function] [call site] 00059
4 fopen64 [call site] 00060
4 close_on_exec [function] [call site] 00061
5 fileno [call site] 00062
5 fcntl [call site] 00063
5 fcntl [call site] 00064
3 bfd_set_error [function] [call site] 00065
3 close [call site] 00066
3 _bfd_delete_bfd [function] [call site] 00067
3 bfd_set_filename [function] [call site] 00068
4 strlen [call site] 00069
4 bfd_alloc [function] [call site] 00070
5 bfd_set_error [function] [call site] 00071
5 _objalloc_alloc [function] [call site] 00072
5 bfd_set_error [function] [call site] 00073
4 bfd_set_error [function] [call site] 00074
3 fclose [call site] 00075
3 _bfd_delete_bfd [function] [call site] 00076
3 bfd_cache_init [function] [call site] 00077
4 bfd_assert [function] [call site] 00078
5 dgettext [call site] 00079
4 bfd_cache_max_open [function] [call site] 00080
5 getrlimit [call site] 00081
5 sysconf [call site] 00082
4 close_one [function] [call site] 00083
5 _bfd_real_ftell [function] [call site] 00084
6 ftello64 [call site] 00085
5 bfd_cache_delete [function] [call site] 00086
6 fclose [call site] 00087
6 bfd_set_error [function] [call site] 00088
6 snip [function] [call site] 00089
4 insert [function] [call site] 00090
3 fclose [call site] 00091
3 _bfd_delete_bfd [function] [call site] 00092
3 bfd_set_cacheable [function] [call site] 00093
1 close [call site] 00094
1 bfd_check_format [function] [call site] 00095
2 bfd_check_format_matches [function] [call site] 00096
3 bfd_set_error [function] [call site] 00097
3 bfd_malloc [function] [call site] 00098
3 bfd_set_error_handler [function] [call site] 00099
3 null_error_handler [function] [call site] 00100
3 _bfd_set_error_handler_caching [function] [call site] 00101
4 bfd_set_error_handler [function] [call site] 00102
3 bfd_preserve_save [function] [call site] 00103
4 bfd_alloc [function] [call site] 00104
4 bfd_hash_table_init [function] [call site] 00105
5 bfd_hash_table_init_n [function] [call site] 00106
4 bfd_section_hash_newfunc [function] [call site] 00107
3 bfd_seek [function] [call site] 00108
4 bfd_is_thin_archive [function] [call site] 00109
4 bfd_set_error [function] [call site] 00110
4 __errno_location [call site] 00111
4 bfd_set_error [function] [call site] 00112
4 bfd_set_error [function] [call site] 00113
3 bfd_reinit [function] [call site] 00114
4 io_reinit [function] [call site] 00115
5 bfd_cache_close [function] [call site] 00116
6 bfd_cache_delete [function] [call site] 00117
5 bfd_open_file [function] [call site] 00118
6 bfd_cache_max_open [function] [call site] 00119
6 close_one [function] [call site] 00120
6 bfd_get_filename [function] [call site] 00121
6 _bfd_real_fopen [function] [call site] 00122
6 bfd_get_filename [function] [call site] 00123
6 _bfd_real_fopen [function] [call site] 00124
6 bfd_get_filename [function] [call site] 00125
6 _bfd_real_fopen [function] [call site] 00126
6 bfd_get_filename [function] [call site] 00127
6 stat [call site] 00128
6 bfd_get_filename [function] [call site] 00129
6 unlink_if_ordinary [function] [call site] 00130
7 lstat [call site] 00131
7 unlink [call site] 00132
6 bfd_get_filename [function] [call site] 00133
6 _bfd_real_fopen [function] [call site] 00134
6 bfd_set_error [function] [call site] 00135
6 bfd_cache_init [function] [call site] 00136
4 bfd_section_list_clear [function] [call site] 00137
3 bfd_release [function] [call site] 00138
4 objalloc_free_block [function] [call site] 00139
5 abort [call site] 00140
3 bfd_alloc [function] [call site] 00141
3 bfd_seek [function] [call site] 00142
3 bfd_has_map [function] [call site] 00143
3 bfd_get_error [function] [call site] 00144
3 bfd_preserve_save [function] [call site] 00145
3 bfd_preserve_restore [function] [call site] 00146
4 bfd_hash_table_free [function] [call site] 00147
4 io_reinit [function] [call site] 00148
4 bfd_release [function] [call site] 00149
3 bfd_reinit [function] [call site] 00150
3 bfd_release [function] [call site] 00151
3 bfd_seek [function] [call site] 00152
3 bfd_assert [function] [call site] 00153
3 bfd_preserve_finish [function] [call site] 00154
4 bfd_hash_table_free [function] [call site] 00155
3 bfd_preserve_finish [function] [call site] 00156
3 bfd_set_error_handler [function] [call site] 00157
3 _bfd_per_xvec_warn [function] [call site] 00158
4 bfd_malloc [function] [call site] 00159
3 print_warnmsg [function] [call site] 00160
4 fflush [call site] 00161
4 _bfd_get_error_program_name [function] [call site] 00162
4 fprintf [call site] 00163
4 fputs [call site] 00164
4 fputc [call site] 00165
4 fflush [call site] 00166
3 _bfd_per_xvec_warn [function] [call site] 00167
3 clear_warnmsg [function] [call site] 00168
3 bfd_set_error [function] [call site] 00169
3 bfd_set_error [function] [call site] 00170
3 bfd_preserve_finish [function] [call site] 00171
3 bfd_preserve_restore [function] [call site] 00172
3 bfd_set_error_handler [function] [call site] 00173
3 _bfd_per_xvec_warn [function] [call site] 00174
3 print_warnmsg [function] [call site] 00175
3 clear_warnmsg [function] [call site] 00176
1 bfd_close [function] [call site] 00177
2 bfd_close_all_done [function] [call site] 00178
3 _maybe_make_executable [function] [call site] 00179
4 bfd_get_filename [function] [call site] 00180
4 stat [call site] 00181
4 umask [call site] 00182
4 umask [call site] 00183
4 bfd_get_filename [function] [call site] 00184
4 chmod [call site] 00185
3 _bfd_delete_bfd [function] [call site] 00186
1 bfd_has_map [function] [call site] 00187
1 bfd_close [function] [call site] 00188
1 bfd_is_thin_archive [function] [call site] 00189
1 bfd_close [function] [call site] 00190
1 unlink [call site] 00191