Fuzz introspector: cgif_rgb_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
11 77 cgif_addframe call site: 00077 doWidthHeightOptim
3 9 cgif_rgb_newgif call site: 00009 fopen64
3 16 initMainHeader call site: 00016 writeDummyBytes
2 21 initAppExtBlock call site: 00021 freeCGIF
1 33 init_col_hash_table call site: 00033 free_col_hash_table
1 44 col_hash call site: 00044 free_col_hash_table
1 56 crawl_decision_tree call site: 00056 free_decision_tree
1 62 get_palette_from_decision_tree call site: 00062 free_decision_tree
1 73 cgif_rgb_addframe call site: 00073 memcmp
1 115 cgif_close call site: 00115 fclose

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 processInput(ByteStream*) [function] [call site] 00001
2 read_gifconfig(ByteStream*, st_cgif_rgb_config*) [function] [call site] 00002
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00003
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00004
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00005
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00006
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00007
2 cgif_rgb_newgif [function] [call site] 00008
3 cgif_newgif [function] [call site] 00009
4 fopen64 [call site] 00010
4 fclose [call site] 00011
4 fclose [call site] 00012
4 cgif_raw_newgif [function] [call site] 00013
5 initMainHeader [function] [call site] 00014
6 calcNextPower2Ex [function] [call site] 00017
5 calcNextPower2Ex [function] [call site] 00018
5 writeDummyBytes [function] [call site] 00019
5 initAppExtBlock [function] [call site] 00020
4 fclose [call site] 00022
2 read_frameconfig(ByteStream*, st_cgif_rgb_frameconfig*, unsigned long) [function] [call site] 00024
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00025
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00026
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00027
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00028
3 readdata(ByteStream*, void*, unsigned long) [function] [call site] 00029
2 cgif_rgb_addframe [function] [call site] 00030
3 get_color_histogram [function] [call site] 00031
4 init_col_hash_table [function] [call site] 00032
5 getNextPrimePower2 [function] [call site] 00033
5 free_col_hash_table [function] [call site] 00034
4 col_hash_collision_count [function] [call site] 00035
5 getPixelVal [function] [call site] 00036
5 memcmp [call site] 00037
4 resize_col_hash_table [function] [call site] 00038
5 getNextPrimePower2 [function] [call site] 00039
5 realloc [call site] 00040
5 realloc [call site] 00041
5 col_hash [function] [call site] 00042
6 getPixelVal [function] [call site] 00043
6 memcmp [call site] 00044
4 free_col_hash_table [function] [call site] 00045
3 quantize_and_dither [function] [call site] 00046
4 hash_to_dense [function] [call site] 00047
4 create_decision_tree [function] [call site] 00049
5 new_tree_node [function] [call site] 00050
6 get_variance [function] [call site] 00051
5 crawl_decision_tree [function] [call site] 00054
6 new_tree_node [function] [call site] 00055
6 new_tree_node [function] [call site] 00056
5 free_decision_tree [function] [call site] 00057
6 free_decision_tree [function] [call site] 00058
7 free_decision_tree [function] [call site] 00059
5 get_palette_from_decision_tree [function] [call site] 00060
6 get_palette_from_decision_tree [function] [call site] 00061
7 get_palette_from_decision_tree [function] [call site] 00062
4 free_decision_tree [function] [call site] 00063
4 get_quantized_dithered_image [function] [call site] 00064
5 get_leave_node_index [function] [call site] 00065
6 get_leave_node_index [function] [call site] 00066
7 get_leave_node_index [function] [call site] 00067
5 get_leave_node_index [function] [call site] 00068
4 free_decision_tree [function] [call site] 00069
4 memcmp [call site] 00070
3 free_col_hash_table [function] [call site] 00072
3 cgif_addframe [function] [call site] 00073
4 memcmp [call site] 00074
4 cmpPixel [function] [call site] 00075
5 memcmp [call site] 00076
4 flushFrame [function] [call site] 00077
5 doWidthHeightOptim [function] [call site] 00078
6 getDiffAreaGlobalPalette [function] [call site] 00079
7 memcmp [call site] 00080
7 memcmp [call site] 00081
5 calcNextPower2Ex [function] [call site] 00087
5 cgif_raw_addframe [function] [call site] 00089
6 calcNextPower2Ex [function] [call site] 00090
6 calcInitCodeLen [function] [call site] 00091
7 calcNextPower2Ex [function] [call site] 00092
6 LZW_GenerateStream [function] [call site] 00097
7 lzw_generate [function] [call site] 00098
8 resetDict [function] [call site] 00099
8 lzw_crawl_tree [function] [call site] 00100
7 create_byte_list [function] [call site] 00104
7 create_byte_list_block [function] [call site] 00105
6 LZW_GenerateStream [function] [call site] 00106
6 writeDummyBytes [function] [call site] 00108
4 freeFrame [function] [call site] 00109
4 copyFrameConfig [function] [call site] 00110
2 read_frameconfig(ByteStream*, st_cgif_rgb_frameconfig*, unsigned long) [function] [call site] 00111
2 cgif_rgb_close [function] [call site] 00112
3 cgif_close [function] [call site] 00113
4 flushFrame [function] [call site] 00114
4 cgif_raw_close [function] [call site] 00115
4 fclose [call site] 00116
4 freeFrame [function] [call site] 00117