Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
17	90	cairo_surface_destroy	call site: {node_id}	cairo_device_destroy
5	39	cairo_list_is_empty	call site: {node_id}	_cairo_surface_detach_snapshot
4	77	cairo_region_destroy	call site: {node_id}	_cairo_region_fini
3	8	fuzzer_get_tmpfile	call site: {node_id}
3	12	fuzzer_get_tmpfile	call site: {node_id}
3	73	_cairo_surface_finish	call site: {node_id}	_cairo_damage_destroy
2	2	fuzzer_get_tmpfile	call site: {node_id}
2	5	fuzzer_get_tmpfile	call site: {node_id}
2	50	_cairo_surface_detach_snapshot	call site: {node_id}	_cairo_surface_detach_snapshot
2	86	_cairo_region_fini	call site: {node_id}
1	20	fuzzer_release_tmpfile	call site: {node_id}
1	24	cairo_image_surface_get_format	call site: {node_id}

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           fuzzer_get_tmpfile

[function] [call site] 00001


             strdup

[call site] 00002


             perror

[call site] 00003


             abort

[call site] 00004


             mkstemp

[call site] 00005


             perror

[call site] 00006


             abort

[call site] 00007


             fdopen

[call site] 00008


             perror

[call site] 00009


             close

[call site] 00010


             abort

[call site] 00011


             fwrite

[call site] 00012


             close

[call site] 00013


             fprintf

[call site] 00014


             abort

[call site] 00015


             fclose

[call site] 00016


           cairo_image_surface_create_from_png

[call site] 00017


           cairo_surface_status

[function] [call site] 00018


           fuzzer_release_tmpfile

[function] [call site] 00019


             unlink

[call site] 00020


             perror

[call site] 00021


             free

[call site] 00022


           cairo_image_surface_get_format

[function] [call site] 00023


             _cairo_surface_is_image

[function] [call site] 00024


             _cairo_error_throw

[call site] 00025


           cairo_image_surface_create_for_data

[call site] 00026


           cairo_surface_status

[function] [call site] 00027


           cairo_surface_destroy

[function] [call site] 00028


             CAIRO_REFERENCE_COUNT_IS_INVALID

[call site] 00029


             assert

[call site] 00030


             CAIRO_REFERENCE_COUNT_HAS_REFERENCE

[call site] 00031


             _cairo_reference_count_dec_and_test

[call site] 00032


             assert

[call site] 00033


             _cairo_surface_finish_snapshots

[function] [call site] 00034


               _cairo_surface_flush

[function] [call site] 00035


                 _cairo_surface_detach_snapshots

[function] [call site] 00036


                   _cairo_surface_has_snapshots

[function] [call site] 00037


                     cairo_list_is_empty

[function] [call site] 00038


                       cairo_list_validate

[function] [call site] 00039


                         cairo_list_foreach

[call site] 00040


                         _cairo_list_validate

[function] [call site] 00041


                           assert

[call site] 00042


                           assert

[call site] 00043


                   _cairo_surface_detach_snapshot

[function] [call site] 00044


                     assert

[call site] 00045


                     cairo_list_del

[function] [call site] 00046


                       _cairo_list_del

[function] [call site] 00047


                         __cairo_list_del

[function] [call site] 00048


                       cairo_list_init

[function] [call site] 00049


                     cairo_surface_destroy

[function] [call site] 00050


                   cairo_list_first_entry

[call site] 00051


                 _cairo_surface_detach_snapshot

[function] [call site] 00052


                 _cairo_surface_detach_mime_data

[function] [call site] 00053


                   _cairo_surface_has_mime_data

[function] [call site] 00054


                   _cairo_user_data_array_fini

[function] [call site] 00055


                     _cairo_array_index

[function] [call site] 00056


                       assert

[call site] 00057


                     _cairo_array_fini

[function] [call site] 00058


                       free

[call site] 00059


                   _cairo_user_data_array_init

[function] [call site] 00060


                     _cairo_array_init

[function] [call site] 00061


                 __cairo_surface_flush

[function] [call site] 00062


             CAIRO_REFERENCE_COUNT_GET_VALUE

[call site] 00063


             _cairo_surface_finish

[function] [call site] 00064


               unlikely

[call site] 00065


               _cairo_surface_set_error

[function] [call site] 00066


                 _cairo_status_set_error

[call site] 00067


                 _cairo_error

[function] [call site] 00068


                   assert

[call site] 00069


                   _cairo_status_is_error

[call site] 00070


               assert

[call site] 00071


               assert

[call site] 00072


               _cairo_surface_has_snapshots

[function] [call site] 00073


             _cairo_damage_destroy

[function] [call site] 00074


               free

[call site] 00075


               cairo_region_destroy

[function] [call site] 00076


                 CAIRO_REFERENCE_COUNT_IS_INVALID

[call site] 00077


                 assert

[call site] 00078


                 CAIRO_REFERENCE_COUNT_HAS_REFERENCE

[call site] 00079


                 _cairo_reference_count_dec_and_test

[call site] 00080


                 _cairo_region_fini

[function] [call site] 00081


                   assert

[call site] 00082


                   CAIRO_REFERENCE_COUNT_HAS_REFERENCE

[call site] 00083


                   pixman_region32_fini

[call site] 00084

VG

[call site] 00085


                   VALGRIND_MAKE_MEM_UNDEFINED

[call site] 00086


                 free

[call site] 00087


               free

[call site] 00088


             _cairo_user_data_array_fini

[function] [call site] 00089


             _cairo_user_data_array_fini

[function] [call site] 00090


             cairo_pattern_destroy

[call site] 00091


             cairo_device_destroy

[function] [call site] 00092


               CAIRO_REFERENCE_COUNT_IS_INVALID

[call site] 00093


               assert

[call site] 00094


               CAIRO_REFERENCE_COUNT_HAS_REFERENCE

[call site] 00095


               _cairo_reference_count_dec_and_test

[call site] 00096


               cairo_device_finish

[function] [call site] 00097


                 CAIRO_REFERENCE_COUNT_IS_INVALID

[call site] 00098


                 cairo_device_flush

[function] [call site] 00099


                   unlikely

[call site] 00100


                   _cairo_device_set_error

[function] [call site] 00101


                     _cairo_status_set_error

[call site] 00102


                     _cairo_error

[function] [call site] 00103


               assert

[call site] 00104


               CAIRO_MUTEX_FINI

[call site] 00105


               _cairo_user_data_array_fini

[function] [call site] 00106


             _cairo_font_options_fini

[function] [call site] 00107


               free

[call site] 00108


               free

[call site] 00109


             assert

[call site] 00110


             assert

[call site] 00111


             _cairo_surface_has_snapshots

[function] [call site] 00112


             assert

[call site] 00113


             CAIRO_REFERENCE_COUNT_HAS_REFERENCE

[call site] 00114


             free

[call site] 00115


           fuzzer_release_tmpfile

[function] [call site] 00116


           cairo_surface_write_to_png

[call site] 00117


           cairo_surface_destroy

[function] [call site] 00118


           cairo_surface_destroy

[function] [call site] 00119


           fuzzer_release_tmpfile

[function] [call site] 00120