Fuzz introspector: croaring_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
22 22 1 :

['art_node_prev_child']

22 50 art_iterator_neighbor_child call site: 00327 /src/croaring/src/art/art.c:1912
2 2 1 :

['art_validate_fail']

2 2 art_internal_validate call site: 00344 /src/croaring/src/art/art.c:2279
2 2 1 :

['exit']

2 2 bitmap32 call site: 00171 /src/croaring_fuzzer.c:43
2 2 1 :

['exit']

2 2 bitmap64 call site: 00405 /src/croaring_fuzzer.c:72
0 2 1 :

['roaring_malloc']

0 4 array_container_grow call site: 00041 /src/croaring/src/containers/array.c:172
0 2 1 :

['roaring_free']

0 2 array_container_create_given_capacity call site: 00036 /src/croaring/src/containers/array.c:59
0 2 1 :

['roaring_free']

0 2 bitset_container_create call site: 00017 /src/croaring/src/containers/bitset.c:84
0 0 None 45 45 container_add call site: 00144 /src/croaring/include/roaring/containers/containers.h:489
0 0 None 5 38 run_container_cardinality call site: 00108 /src/croaring/src/containers/run.c:1067
0 0 None 5 12 bitset_container_compute_cardinality call site: 00072 /src/croaring/src/containers/bitset.c:272
0 0 None 5 5 bitset_container_compute_cardinality call site: 00073 /src/croaring/src/containers/bitset.c:278
0 0 None 5 5 run_container_cardinality call site: 00110 /src/croaring/src/containers/run.c:1071

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 bitmap32 [function] [call site] 00001
2 roaring_bitmap_portable_deserialize_safe [function] [call site] 00002
3 roaring_malloc [function] [call site] 00003
3 ra_portable_deserialize [function] [call site] 00004
4 ra_init_with_capacity [function] [call site] 00005
5 ra_init [function] [call site] 00006
5 roaring_malloc [function] [call site] 00007
4 bitset_container_create [function] [call site] 00008
5 roaring_malloc [function] [call site] 00009
5 croaring_hardware_support [function] [call site] 00010
6 croaring_detect_supported_architectures [function] [call site] 00011
7 dynamic_croaring_detect_supported_architectures [function] [call site] 00012
8 cpuid [function] [call site] 00013
8 xgetbv [function] [call site] 00014
8 cpuid [function] [call site] 00015
6 croaring_detect_supported_architectures [function] [call site] 00016
5 roaring_aligned_malloc [function] [call site] 00017
5 roaring_free [function] [call site] 00018
5 bitset_container_clear [function] [call site] 00019
4 bitset_container_read [function] [call site] 00020
4 run_container_create [function] [call site] 00021
5 run_container_create_given_capacity [function] [call site] 00022
6 roaring_malloc [function] [call site] 00023
6 roaring_malloc [function] [call site] 00024
6 roaring_free [function] [call site] 00025
4 run_container_read [function] [call site] 00026
5 run_container_grow [function] [call site] 00027
6 roaring_realloc [function] [call site] 00028
6 roaring_free [function] [call site] 00029
6 roaring_free [function] [call site] 00030
6 roaring_malloc [function] [call site] 00031
5 run_container_size_in_bytes [function] [call site] 00032
6 run_container_serialized_size_in_bytes [function] [call site] 00033
4 array_container_create_given_capacity [function] [call site] 00034
5 roaring_malloc [function] [call site] 00035
5 roaring_malloc [function] [call site] 00036
5 roaring_free [function] [call site] 00037
4 array_container_read [function] [call site] 00038
5 array_container_grow [function] [call site] 00039
6 grow_capacity [function] [call site] 00040
6 clamp [function] [call site] 00041
6 roaring_realloc [function] [call site] 00042
6 roaring_free [function] [call site] 00043
6 roaring_free [function] [call site] 00044
6 roaring_malloc [function] [call site] 00045
5 array_container_size_in_bytes [function] [call site] 00046
4 ra_clear [function] [call site] 00047
5 ra_clear_containers [function] [call site] 00048
6 container_free [function] [call site] 00049
7 bitset_container_free [function] [call site] 00050
8 roaring_aligned_free [function] [call site] 00051
8 roaring_free [function] [call site] 00052
7 array_container_free [function] [call site] 00053
8 roaring_free [function] [call site] 00054
8 roaring_free [function] [call site] 00055
7 run_container_free [function] [call site] 00056
8 roaring_free [function] [call site] 00057
8 roaring_free [function] [call site] 00058
7 shared_container_free [function] [call site] 00059
8 croaring_refcount_dec [function] [call site] 00060
8 container_free [function] [call site] 00061
8 roaring_free [function] [call site] 00062
5 ra_clear_without_containers [function] [call site] 00063
6 roaring_free [function] [call site] 00064
3 roaring_free [function] [call site] 00065
3 roaring_bitmap_set_copy_on_write [function] [call site] 00066
2 roaring_bitmap_internal_validate [function] [call site] 00067
3 container_internal_validate [function] [call site] 00068
4 croaring_refcount_get [function] [call site] 00069
4 bitset_container_validate [function] [call site] 00070
5 bitset_container_compute_cardinality [function] [call site] 00071
6 croaring_hardware_support [function] [call site] 00072
6 avx512_vpopcount [function] [call site] 00073
7 simd_sum_epu64 [function] [call site] 00074
8 sum_epu64_256 [function] [call site] 00075
6 avx2_harley_seal_popcount256 [function] [call site] 00076
7 CSA [function] [call site] 00077
7 CSA [function] [call site] 00078
7 CSA [function] [call site] 00079
7 CSA [function] [call site] 00080
7 CSA [function] [call site] 00081
7 CSA [function] [call site] 00082
7 CSA [function] [call site] 00083
7 CSA [function] [call site] 00084
7 CSA [function] [call site] 00085
7 CSA [function] [call site] 00086
7 CSA [function] [call site] 00087
7 CSA [function] [call site] 00088
7 CSA [function] [call site] 00089
7 CSA [function] [call site] 00090
7 CSA [function] [call site] 00091
7 popcount256 [function] [call site] 00092
7 popcount256 [function] [call site] 00093
7 popcount256 [function] [call site] 00094
7 popcount256 [function] [call site] 00095
7 popcount256 [function] [call site] 00096
6 _scalar_bitset_container_compute_cardinality [function] [call site] 00097
7 roaring_hamming [function] [call site] 00098
7 roaring_hamming [function] [call site] 00099
7 roaring_hamming [function] [call site] 00100
7 roaring_hamming [function] [call site] 00101
4 array_container_validate [function] [call site] 00102
4 run_container_validate [function] [call site] 00103
2 roaring_bitmap_get_cardinality [function] [call site] 00104
3 container_get_cardinality [function] [call site] 00105
4 container_unwrap_shared [function] [call site] 00106
4 run_container_cardinality [function] [call site] 00107
5 croaring_hardware_support [function] [call site] 00108
5 _avx512_run_container_cardinality [function] [call site] 00109
5 croaring_hardware_support [function] [call site] 00110
5 _avx2_run_container_cardinality [function] [call site] 00111
5 _scalar_run_container_cardinality [function] [call site] 00112
2 roaring_bitmap_contains [function] [call site] 00113
3 ra_get_index [function] [call site] 00114
4 binarySearch [function] [call site] 00115
3 ra_get_container_at_index [function] [call site] 00116
3 container_contains [function] [call site] 00117
4 container_unwrap_shared [function] [call site] 00118
4 bitset_container_get [function] [call site] 00119
4 array_container_contains [function] [call site] 00120
4 run_container_contains [function] [call site] 00121
5 interleavedBinarySearch [function] [call site] 00122
2 roaring_bitmap_add [function] [call site] 00123
3 ra_get_index [function] [call site] 00124
3 ra_unshare_container_at_index [function] [call site] 00125
4 get_writable_copy_if_shared [function] [call site] 00126
5 shared_container_extract_copy [function] [call site] 00127
6 croaring_refcount_dec [function] [call site] 00128
6 roaring_free [function] [call site] 00129
6 container_clone [function] [call site] 00130
7 bitset_container_clone [function] [call site] 00131
8 roaring_malloc [function] [call site] 00132
8 croaring_hardware_support [function] [call site] 00133
8 roaring_aligned_malloc [function] [call site] 00134
8 roaring_free [function] [call site] 00135
7 array_container_clone [function] [call site] 00136
8 array_container_create_given_capacity [function] [call site] 00137
7 run_container_clone [function] [call site] 00138
8 run_container_create_given_capacity [function] [call site] 00139
3 ra_get_container_at_index [function] [call site] 00140
3 container_add [function] [call site] 00141
4 get_writable_copy_if_shared [function] [call site] 00142
4 bitset_container_set [function] [call site] 00143
4 array_container_try_add [function] [call site] 00144
5 array_container_empty [function] [call site] 00145
5 array_container_append [function] [call site] 00146
6 array_container_full [function] [call site] 00147
6 array_container_grow [function] [call site] 00148
5 binarySearch [function] [call site] 00149
5 array_container_full [function] [call site] 00150
5 array_container_grow [function] [call site] 00151
4 bitset_container_from_array [function] [call site] 00152
5 bitset_container_create [function] [call site] 00153
5 bitset_container_set [function] [call site] 00154
4 bitset_container_add [function] [call site] 00155
4 run_container_add [function] [call site] 00156
5 interleavedBinarySearch [function] [call site] 00157
5 recoverRoomAtIndex [function] [call site] 00158
5 makeRoomAtIndex [function] [call site] 00159
6 run_container_grow [function] [call site] 00160
3 container_free [function] [call site] 00161
3 ra_set_container_at_index [function] [call site] 00162
3 array_container_create [function] [call site] 00163
4 array_container_create_given_capacity [function] [call site] 00164
3 container_add [function] [call site] 00165
3 ra_insert_new_key_value_at [function] [call site] 00166
4 extend_array [function] [call site] 00167
5 realloc_array [function] [call site] 00168
6 roaring_free [function] [call site] 00169
6 roaring_free [function] [call site] 00170
2 roaring_bitmap_get_cardinality [function] [call site] 00171
2 printf [call site] 00172
2 exit [call site] 00173
2 roaring_bitmap_free [function] [call site] 00174
3 is_frozen [function] [call site] 00175
3 ra_clear [function] [call site] 00176
3 roaring_free [function] [call site] 00177
1 bitmap64 [function] [call site] 00178
2 roaring64_bitmap_portable_deserialize_safe [function] [call site] 00179
3 roaring64_bitmap_create [function] [call site] 00180
4 roaring_malloc [function] [call site] 00181
4 art_init_cleared [function] [call site] 00182
3 roaring_bitmap_portable_deserialize_size [function] [call site] 00183
4 ra_portable_deserialize_size [function] [call site] 00184
3 roaring_bitmap_portable_deserialize_safe [function] [call site] 00185
3 roaring_bitmap_free [function] [call site] 00186
3 move_from_roaring32_offset [function] [call site] 00187
4 ra_get_size [function] [call site] 00188
4 ra_get_key_at_index [function] [call site] 00189
4 ra_get_container_at_index [function] [call site] 00190
4 split_key [function] [call site] 00191
5 __bswap_64 [function] [call site] 00192
4 add_container [function] [call site] 00193
5 allocate_index [function] [call site] 00194
6 extend_containers [function] [call site] 00195
7 roaring_realloc [function] [call site] 00196
6 next_free_container_idx [function] [call site] 00197
5 create_leaf [function] [call site] 00198
4 art_insert [function] [call site] 00199
5 art_leaf_create [function] [call site] 00200
6 art_allocate_index [function] [call site] 00201
7 art_extend [function] [call site] 00202
8 roaring_realloc [function] [call site] 00203
8 art_get_node [function] [call site] 00204
9 art_to_ref [function] [call site] 00205
9 art_deref [function] [call site] 00206
10 art_ref_typecode [function] [call site] 00207
10 art_ref_index [function] [call site] 00208
8 art_get_node [function] [call site] 00209
8 art_node_set_next_free [function] [call site] 00210
7 art_next_free [function] [call site] 00211
8 art_to_ref [function] [call site] 00212
8 art_node_get_next_free [function] [call site] 00213
9 art_ref_typecode [function] [call site] 00214
9 art_deref [function] [call site] 00215
6 art_to_ref [function] [call site] 00216
5 art_insert_at [function] [call site] 00217
6 art_is_leaf [function] [call site] 00218
7 art_ref_typecode [function] [call site] 00219
6 art_deref [function] [call site] 00220
6 art_common_prefix [function] [call site] 00221
6 art_node4_create [function] [call site] 00222
7 art_allocate_index [function] [call site] 00223
7 art_init_inner_node [function] [call site] 00224
6 art_node_insert_leaf [function] [call site] 00225
7 art_node4_insert [function] [call site] 00226
8 art_get_ref [function] [call site] 00227
9 art_get_index [function] [call site] 00228
9 art_to_ref [function] [call site] 00229
8 art_node16_create [function] [call site] 00230
9 art_allocate_index [function] [call site] 00231
9 art_init_inner_node [function] [call site] 00232
8 art_node16_insert [function] [call site] 00233
9 art_get_ref [function] [call site] 00234
9 art_node48_create [function] [call site] 00235
10 art_allocate_index [function] [call site] 00236
10 art_init_inner_node [function] [call site] 00237
9 art_node48_insert [function] [call site] 00238
10 roaring_trailing_zeroes [function] [call site] 00239
10 art_get_ref [function] [call site] 00240
10 art_node256_create [function] [call site] 00241
11 art_allocate_index [function] [call site] 00242
11 art_init_inner_node [function] [call site] 00243
10 art_node_free [function] [call site] 00244
11 art_get_index [function] [call site] 00245
11 art_node_set_next_free [function] [call site] 00246
10 art_node256_insert [function] [call site] 00247
11 art_get_ref [function] [call site] 00248
10 art_node256_insert [function] [call site] 00249
9 art_node_free [function] [call site] 00250
9 art_node48_insert [function] [call site] 00251
8 art_node_free [function] [call site] 00252
8 art_node16_insert [function] [call site] 00253
7 art_node16_insert [function] [call site] 00254
7 art_node48_insert [function] [call site] 00255
7 art_node256_insert [function] [call site] 00256
6 art_node_insert_leaf [function] [call site] 00257
6 art_deref [function] [call site] 00258
6 art_common_prefix [function] [call site] 00259
6 roaring_malloc [function] [call site] 00260
6 art_node4_create [function] [call site] 00261
6 roaring_free [function] [call site] 00262
6 art_deref [function] [call site] 00263
6 art_node4_insert [function] [call site] 00264
6 art_deref [function] [call site] 00265
6 art_node_insert_leaf [function] [call site] 00266
6 art_ref_typecode [function] [call site] 00267
6 art_find_child [function] [call site] 00268
7 art_node4_find_child [function] [call site] 00269
7 art_node16_find_child [function] [call site] 00270
7 art_node48_find_child [function] [call site] 00271
7 art_node256_find_child [function] [call site] 00272
6 art_insert_at [function] [call site] 00273
7 art_deref [function] [call site] 00274
7 art_replace [function] [call site] 00275
8 art_node4_replace [function] [call site] 00276
8 art_node16_replace [function] [call site] 00277
8 art_node48_replace [function] [call site] 00278
8 art_node256_replace [function] [call site] 00279
7 art_node_insert_leaf [function] [call site] 00280
5 art_deref [function] [call site] 00281
3 roaring_bitmap_free [function] [call site] 00282
3 roaring64_bitmap_free [function] [call site] 00283
4 art_init_iterator [function] [call site] 00284
5 art_node_init_iterator [function] [call site] 00285
6 art_is_leaf [function] [call site] 00286
6 art_deref [function] [call site] 00287
6 art_ref_typecode [function] [call site] 00288
6 art_node_next_child [function] [call site] 00289
7 art_node4_next_child [function] [call site] 00290
7 art_node16_next_child [function] [call site] 00291
7 art_node48_next_child [function] [call site] 00292
7 art_node256_next_child [function] [call site] 00293
6 art_iterator_down [function] [call site] 00294
7 art_deref [function] [call site] 00295
7 art_ref_typecode [function] [call site] 00296
7 art_node_child_at [function] [call site] 00297
8 art_node4_child_at [function] [call site] 00298
8 art_node16_child_at [function] [call site] 00299
8 art_node48_child_at [function] [call site] 00300
8 art_node256_child_at [function] [call site] 00301
6 art_ref_typecode [function] [call site] 00302
6 art_node_prev_child [function] [call site] 00303
7 art_node4_prev_child [function] [call site] 00304
7 art_node16_prev_child [function] [call site] 00305
7 art_node48_prev_child [function] [call site] 00306
7 art_node256_prev_child [function] [call site] 00307
6 art_iterator_valid_loc [function] [call site] 00308
7 art_deref [function] [call site] 00309
4 is_frozen64 [function] [call site] 00310
4 get_container [function] [call site] 00311
5 get_index [function] [call site] 00312
4 roaring_free [function] [call site] 00313
4 get_container [function] [call site] 00314
4 get_typecode [function] [call site] 00315
4 container_free [function] [call site] 00316
4 art_iterator_next [function] [call site] 00317
5 art_iterator_move [function] [call site] 00318
6 art_iterator_ref [function] [call site] 00319
6 art_is_leaf [function] [call site] 00320
6 art_iterator_up [function] [call site] 00321
7 art_iterator_node [function] [call site] 00322
8 art_iterator_ref [function] [call site] 00323
8 art_deref [function] [call site] 00324
6 art_iterator_invalid_loc [function] [call site] 00325
6 art_iterator_neighbor_child [function] [call site] 00326
7 art_deref [function] [call site] 00327
7 art_ref_typecode [function] [call site] 00328
7 art_node_next_child [function] [call site] 00329
7 art_ref_typecode [function] [call site] 00330
7 art_node_prev_child [function] [call site] 00331
7 art_iterator_down [function] [call site] 00332
6 art_node_init_iterator [function] [call site] 00333
6 art_iterator_up_and_move [function] [call site] 00334
7 art_iterator_up [function] [call site] 00335
7 art_iterator_invalid_loc [function] [call site] 00336
7 art_iterator_move [function] [call site] 00337
4 is_frozen64 [function] [call site] 00338
4 art_free [function] [call site] 00339
5 roaring_free [function] [call site] 00340
4 roaring_free [function] [call site] 00341
4 roaring_free [function] [call site] 00342
2 roaring64_bitmap_internal_validate [function] [call site] 00343
3 art_internal_validate [function] [call site] 00344
4 art_internal_validate_at [function] [call site] 00345
5 art_validate_fail [function] [call site] 00346
5 art_is_leaf [function] [call site] 00347
5 art_deref [function] [call site] 00348
5 art_compare_prefix [function] [call site] 00349
6 memcmp [call site] 00350
5 art_validate_fail [function] [call site] 00351
5 art_deref [function] [call site] 00352
5 art_ref_typecode [function] [call site] 00353
5 art_node4_internal_validate [function] [call site] 00354
6 art_internal_validate_at [function] [call site] 00355
7 art_node16_internal_validate [function] [call site] 00356
8 art_internal_validate_at [function] [call site] 00357
9 art_node48_internal_validate [function] [call site] 00358
10 roaring_trailing_zeroes [function] [call site] 00359
10 roaring_trailing_zeroes [function] [call site] 00360
10 art_internal_validate_at [function] [call site] 00361
11 art_node256_internal_validate [function] [call site] 00362
12 art_internal_validate_at [function] [call site] 00363
13 art_validate_fail [function] [call site] 00364
4 art_validate_fail [function] [call site] 00365
3 roaring64_leaf_internal_validate [function] [call site] 00366
4 get_container [function] [call site] 00367
4 get_typecode [function] [call site] 00368
4 container_internal_validate [function] [call site] 00369
2 roaring64_bitmap_get_cardinality [function] [call site] 00370
3 art_init_iterator [function] [call site] 00371
3 get_container [function] [call site] 00372
3 get_typecode [function] [call site] 00373
3 container_get_cardinality [function] [call site] 00374
3 art_iterator_next [function] [call site] 00375
2 roaring64_bitmap_contains [function] [call site] 00376
3 split_key [function] [call site] 00377
3 art_find [function] [call site] 00378
4 art_find_at [function] [call site] 00379
5 art_is_leaf [function] [call site] 00380
5 art_deref [function] [call site] 00381
5 art_deref [function] [call site] 00382
5 art_common_prefix [function] [call site] 00383
5 art_ref_typecode [function] [call site] 00384
5 art_find_child [function] [call site] 00385
5 art_common_prefix [function] [call site] 00386
3 get_container [function] [call site] 00387
3 get_typecode [function] [call site] 00388
3 container_contains [function] [call site] 00389
2 roaring64_bitmap_add [function] [call site] 00390
3 split_key [function] [call site] 00391
3 art_find [function] [call site] 00392
3 containerptr_roaring64_bitmap_add [function] [call site] 00393
4 get_typecode [function] [call site] 00394
4 get_container [function] [call site] 00395
4 container_add [function] [call site] 00396
4 container_free [function] [call site] 00397
4 replace_container [function] [call site] 00398
5 get_index [function] [call site] 00399
5 create_leaf [function] [call site] 00400
4 array_container_create [function] [call site] 00401
4 container_add [function] [call site] 00402
4 add_container [function] [call site] 00403
4 art_insert [function] [call site] 00404
2 roaring64_bitmap_get_cardinality [function] [call site] 00405
2 printf [call site] 00406
2 exit [call site] 00407
2 roaring64_bitmap_free [function] [call site] 00408