High level conclusions

Fuzzers reach 87.13% of cyclomatic complexity.

Fuzzers reach 81.31% of all functions.

Fuzzers reach 84.93% code coverage.

Reachability and coverage overview

Functions statically reachable by fuzzers

1171 / 1440

Cyclomatic complexity statically reachable by fuzzers

9049 / 10385

Runtime code coverage of functions

1223 / 1440

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzzer_exo

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	148	26.7%
gold	[1:9]	1	0.18%
yellow	[10:29]	5	0.90%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	400	72.2%
All colors	554	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
67	60	init_stream_internal_	call site: 00060	read_callback_ogg_aspect_
28	269	read_metadata_vorbiscomment_	call site: 00269	read_metadata_cuesheet_
8	529	read_frame_	call site: 00529	FLAC__MD5Accumulate
5	39	init_stream_internal_	call site: 00039	safe_realloc_mul_2op_
4	135	FLAC__stream_decoder_flush	call site: 00135	FLAC__ogg_decoder_aspect_flush
3	47	safe_realloc_	call site: 00047	FLAC__ogg_decoder_aspect_finish
3	239	read_metadata_	call site: 00239	abort
3	352	FLAC__stream_decoder_finish	call site: 00352	FLAC__ogg_decoder_aspect_finish
2	140	FLAC__stream_decoder_flush	call site: 00140	FLAC__ogg_decoder_aspect_reset
2	143	FLAC__stream_decoder_reset	call site: 00143	FLAC__MD5Final
2	244	read_metadata_	call site: 00244	FLAC__bitreader_skip_byte_block_aligned_no_crc
2	321	read_metadata_picture_	call site: 00321	FLAC__bitreader_read_byte_block_aligned_no_crc

Runtime coverage analysis

Covered functions

136

Functions that are reachable but not covered

65

Reachable functions

224

Percentage of reachable functions covered

70.98%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/fuzzer_exo.cpp	24
/src/ExoPlayer/extensions/flac/src/main/jni/include/data_source.h	2
/src/flac/src/libFLAC/stream_decoder.c	43
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/format.c	3
/src/flac/src/libFLAC/ogg_decoder_aspect.c	9
/src/ogg/src/framing.c	27
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	6
/src/ExoPlayer/extensions/flac/src/main/jni/include/flac_parser.h	7
/src/flac/src/libFLAC/crc.c	2
/src/flac/src/libFLAC/memory.c	3
/src/flac/src/libFLAC/./include/private/bitmath.h	2
/src/flac/src/libFLAC/fixed.c	3
/src/flac/src/libFLAC/lpc.c	6
/src/flac/src/libFLAC/bitmath.c	1

Fuzzer: fuzzer_seek

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	40	6.08%
gold	[1:9]	3	0.45%
yellow	[10:29]	5	0.76%
greenyellow	[30:49]	2	0.30%
lawngreen	50+	607	92.3%
All colors	657	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
3	252	read_metadata_	call site: 00252	abort
2	144	ogg_sync_buffer	call site: 00144	ogg_sync_clear
2	150	read_callback_ogg_aspect_	call site: 00150	abort
2	356	frame_sync_	call site: 00356	FLAC__bitreader_read_raw_uint32
2	375	read_frame_header_	call site: 00375	abort
2	633	FLAC__stream_decoder_skip_single_link	call site: 00633	FLAC__stream_decoder_process_until_end_of_link
1	8	FLAC__bitreader_new	call site: 00008	FLAC__bitreader_delete
1	57	LLVMFuzzerTestOneInput	call site: 00057	init_file_internal_
1	63	init_FILE_internal_	call site: 00063	get_binary_stdin_
1	68	FLAC__ogg_decoder_aspect_init	call site: 00068	ogg_stream_clear
1	71	FLAC__ogg_decoder_aspect_init	call site: 00071	realloc
1	90	check_size_of_link_allocation_	call site: 00090	realloc

Runtime coverage analysis

Covered functions

183

Functions that are reachable but not covered

13

Reachable functions

193

Percentage of reachable functions covered

93.26%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/seek.cc	3
/src/flac/src/libFLAC/stream_decoder.c	64
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/format.c	3
/src/flac/src/libFLAC/ogg_decoder_aspect.c	15
/src/flac/src/libFLAC/md5.c	6
/src/ogg/src/framing.c	27
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/crc.c	2
/src/flac/src/libFLAC/memory.c	3
/src/flac/src/libFLAC/./include/private/bitmath.h	2
/src/flac/src/libFLAC/fixed.c	3
/src/flac/src/libFLAC/lpc.c	6
/src/flac/src/libFLAC/bitmath.c	1

Fuzzer: fuzzer_decoder

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	97	12.7%
gold	[1:9]	0	0.0%
yellow	[10:29]	14	1.83%
greenyellow	[30:49]	4	0.52%
lawngreen	50+	648	84.9%
All colors	763	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
37	682	FLAC__stream_decoder_get_total_samples	call site: 00682	seek_to_absolute_sample_ogg_
10	451	FLAC__stream_decoder_get_decode_position	call site: 00451	FLAC__stream_decoder_get_input_bytes_unconsumed
7	724	FLAC__stream_decoder_get_bits_per_sample	call site: 00724	FLAC__stream_decoder_process_single
5	199	ogg_stream_pagein	call site: 00199	ogg_stream_clear
2	63	FLAC__stream_decoder_set_metadata_respond_application	call site: 00063	safe_realloc_mul_2op_
2	221	read_callback_ogg_aspect_	call site: 00221	abort
2	463	frame_sync_	call site: 00463	FLAC__bitreader_read_raw_uint32
2	481	read_frame_header_	call site: 00481	abort
1	12	FLAC__bitreader_new	call site: 00012	FLAC__bitreader_delete
1	94	FLAC__stream_decoder_set_metadata_ignore_application	call site: 00094	safe_realloc_mul_2op_
1	110	FLAC__ogg_decoder_aspect_finish	call site: 00110	fclose
1	115	LLVMFuzzerTestOneInput	call site: 00115

Runtime coverage analysis

Covered functions

286

Functions that are reachable but not covered

19

Reachable functions

279

Percentage of reachable functions covered

93.19%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/decoder.cc	4
/src/flac/oss-fuzz/./fuzzing/datasource/datasource.hpp	9
/src/flac/src/libFLAC++/stream_decoder.cpp	35
/src/flac/src/libFLAC/stream_decoder.c	62
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/format.c	3
/src/flac/src/libFLAC/ogg_decoder_aspect.c	16
/src/flac/src/libFLAC/md5.c	6
/src/ogg/src/framing.c	27
/src/flac/oss-fuzz/./fuzzing/memory.hpp	1
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/crc.c	2
/src/flac/src/libFLAC/memory.c	3
/src/flac/src/libFLAC/./include/private/bitmath.h	2
/src/flac/src/libFLAC/fixed.c	3
/src/flac/src/libFLAC/lpc.c	6
/src/flac/src/libFLAC/bitmath.c	1

Fuzzer: fuzzer_encoder

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	423	26.5%
gold	[1:9]	2	0.12%
yellow	[10:29]	2	0.12%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1165	73.1%
All colors	1592	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
81	626	read_metadata_	call site: 00626	read_metadata_cuesheet_
32	970	FLAC__add_metadata_block	call site: 00970	FLAC__bitwriter_write_raw_uint64
30	1316	FLAC__frame_add_header	call site: 01316	FLAC__bitwriter_write_raw_uint32_nocheck
24	1496	update_ogg_metadata_	call site: 01496	simple_ogg_page__get_at
21	462	ogg_page_checksum_set	call site: 00462	process_page_
18	490	_os_body_expand	call site: 00490	FLAC__stream_decoder_reset
14	611	read_metadata_	call site: 00611	read_metadata_seektable_
12	427	FLAC__stream_decoder_init_stream	call site: 00427	FLAC__ogg_decoder_aspect_init
11	449	realloc_	call site: 00449	ogg_sync_pageout
10	711	FLAC__stream_decoder_get_decode_position	call site: 00711	FLAC__stream_decoder_get_input_bytes_unconsumed
9	739	read_frame_header_	call site: 00739	FLAC__bitreader_read_utf8_uint64
9	1300	FLAC__bitwriter_write_utf8_uint32	call site: 01300	FLAC__bitwriter_write_raw_uint32_nocheck

Runtime coverage analysis

Covered functions

353

Functions that are reachable but not covered

90

Reachable functions

466

Percentage of reachable functions covered

80.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/encoder.cc	3
/src/flac/oss-fuzz/./fuzzing/datasource/datasource.hpp	14
/src/flac/src/libFLAC++/stream_encoder.cpp	52
/src/flac/src/libFLAC/stream_encoder.c	79
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	5
/src/flac/src/libFLAC/format.c	14
/src/flac/oss-fuzz/./fuzzing/memory.hpp	1
/src/flac/src/libFLAC/cpu.c	5
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_decoder.c	39
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	9
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5

Fuzzer: fuzzer_reencoder

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	254	15.4%
gold	[1:9]	10	0.60%
yellow	[10:29]	14	0.85%
greenyellow	[30:49]	22	1.33%
lawngreen	50+	1347	81.7%
All colors	1647	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
31	1004	FLAC__bitwriter_write_utf8_uint32	call site: 01004	FLAC__bitwriter_write_utf8_uint64
24	1191	update_ogg_metadata_	call site: 01191	simple_ogg_page__get_at
23	820	FLAC__memory_alloc_aligned_uint32_array	call site: 00820	FLAC__window_gauss
15	849	FLAC__window_tukey	call site: 00849	FLAC__window_punchout_tukey
10	569	FLAC__stream_decoder_get_decode_position	call site: 00569	FLAC__stream_decoder_get_input_bytes_unconsumed
9	1609	FLAC__stream_decoder_process_until_end_of_stream	call site: 01609	FLAC__stream_decoder_finish_link
5	52	FLAC__stream_encoder_set_apodization	call site: 00052	strtod
5	58	FLAC__stream_encoder_set_apodization	call site: 00058	strtod
5	993	FLAC__bitwriter_write_utf8_uint32	call site: 00993	FLAC__bitwriter_write_raw_uint32_nocheck
5	1217	update_metadata_	call site: 01217	FLAC__format_seektable_sort
5	1328	init_stream_internal_	call site: 01328	pthread_mutex_destroy
4	338	read_callback_ogg_aspect_	call site: 00338	FLAC__stream_decoder_reset

Runtime coverage analysis

Covered functions

436

Functions that are reachable but not covered

71

Reachable functions

494

Percentage of reachable functions covered

85.63%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/reencoder.cc	5
/src/flac/oss-fuzz/./fuzzing/datasource/datasource.hpp	10
/src/flac/src/libFLAC++/stream_encoder.cpp	52
/src/flac/src/libFLAC/stream_encoder.c	78
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	6
/src/flac/src/libFLAC/format.c	14
/src/flac/src/libFLAC++/stream_decoder.cpp	16
/src/flac/src/libFLAC/stream_decoder.c	44
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	10
/src/flac/oss-fuzz/./fuzzing/memory.hpp	1
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5
/src/flac/src/libFLAC/metadata_object.c	4

Fuzzer: fuzzer_tool_metaflac

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	346	13.0%
gold	[1:9]	42	1.58%
yellow	[10:29]	133	5.00%
greenyellow	[30:49]	58	2.18%
lawngreen	50+	2077	78.2%
All colors	2656	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
59	748	realloc_	call site: 00748	process_page_
13	45	share___getopt_internal	call site: 00045	fprintf
12	1737	FLAC__metadata_chain_write	call site: 01737	abort
9	2442	read_frame_	call site: 02442	FLAC__stream_decoder_finish_link
8	2430	read_frame_	call site: 02430	FLAC__MD5Accumulate
7	1864	utf8_encode	call site: 01864	FLAC__metadata_object_vorbiscomment_entry_from_name_value_pair
7	2500	get_one_metadata_block_	call site: 02500	FLAC__stream_decoder_init_ogg_file
6	1872	utf8len_	call site: 01872	FLAC__metadata_object_vorbiscomment_append_comment
5	69	append_shorthand_operation	call site: 00069	die
5	740	init_stream_internal_	call site: 00740	read_callback_ogg_aspect_
4	305	append_argument	call site: 00305	safe_realloc_mul_2op_
4	721	init_stream_internal_	call site: 00721	safe_realloc_mul_2op_

Runtime coverage analysis

Covered functions

402

Functions that are reachable but not covered

127

Reachable functions

522

Percentage of reachable functions covered

75.67%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/tool_metaflac.c	1
/src/flac/oss-fuzz/./../src/metaflac/main.c	1
/src/flac/oss-fuzz/../src/metaflac/options.c	24
/src/flac/src/share/getopt/getopt1.c	1
/src/flac/src/share/getopt/getopt.c	3
/src/flac/oss-fuzz/../src/metaflac/utils.c	9
/src/flac/oss-fuzz/../include/share/alloc.h	5
/src/flac/src/libFLAC/format.c	12
/src/flac/oss-fuzz/../include/share/safe_str.h	1
/src/flac/src/share/grabbag/alloc.c	1
/src/flac/oss-fuzz/../src/metaflac/usage.c	4
/src/flac/oss-fuzz/../src/metaflac/operations.c	16
/src/flac/src/libFLAC/metadata_iterators.c	87
/src/flac/src/libFLAC/metadata_object.c	53
/src/flac/src/libFLAC/stream_decoder.c	54
/src/flac/src/libFLAC/../../include/share/alloc.h	12
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	10
/src/ogg/src/framing.c	27
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/libFLAC/memory.c	3
/src/flac/src/libFLAC/crc.c	2
/src/flac/src/share/utf8/utf8.c	5
/src/flac/src/share/utf8/iconvert.c	1
/src/flac/src/share/../../include/share/alloc.h	6
/src/flac/src/libFLAC/bitwriter.c	14
/src/flac/src/libFLAC/stream_encoder_framing.c	1
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_streaminfo.c	1
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_vorbiscomment.c	8
/src/flac/src/share/grabbag/file.c	3
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_cuesheet.c	3
/src/flac/src/share/grabbag/cuesheet.c	9
/src/flac/src/share/../../include/share/safe_str.h	1
/src/flac/src/share/grabbag/snprintf.c	1
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_picture.c	3
/src/flac/src/share/grabbag/picture.c	7
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_seektable.c	4
/src/flac/src/share/grabbag/seektable.c	1
/src/flac/src/libFLAC/./include/private/bitmath.h	2
/src/flac/src/libFLAC/fixed.c	3
/src/flac/src/libFLAC/lpc.c	6
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/share/grabbag/replaygain.c	19
/src/flac/src/share/replaygain_analysis/replaygain_analysis.c	10

Fuzzer: fuzzer_tool_flac

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	930	23.3%
gold	[1:9]	160	4.01%
yellow	[10:29]	71	1.78%
greenyellow	[30:49]	58	1.45%
lawngreen	50+	2768	69.4%
All colors	3987	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
247	3699	FLAC__metadata_chain_delete	call site: 03699	grabbag__replaygain_store_to_file_title
115	3579	chain_read_	call site: 03579	chain_read_ogg_cb_
30	2229	FLAC__bitwriter_write_utf8_uint32	call site: 02229	FLAC__bitwriter_write_utf8_uint64
29	2041	FLAC__memory_alloc_aligned_uint64_array	call site: 02041	FLAC__memory_alloc_aligned_uint32_array
24	1425	seek_to_absolute_sample_ogg_	call site: 01425	FLAC__stream_decoder_process_until_end_of_metadata
20	2555	FLAC__stream_encoder_get_state	call site: 02555	EncoderSession_destroy
18	3035	EncoderSession_init_encoder	call site: 03035	FLAC__metadata_object_vorbiscomment_replace_comment
17	535	simple_iterator_free_guts_	call site: 00535	set_file_stats_
15	2076	FLAC__window_tukey	call site: 02076	FLAC__window_punchout_tukey
13	63	share___getopt_internal	call site: 00063	fprintf
12	240	iconvert	call site: 00240	safe_malloc_add_2op_
11	932	write_callback	call site: 00932	strlen_console

Runtime coverage analysis

Covered functions

616

Functions that are reachable but not covered

208

Reachable functions

793

Percentage of reachable functions covered

73.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/tool_flac.c	1
/src/flac/oss-fuzz/./../src/flac/main.c	24
/src/flac/src/libFLAC/metadata_object.c	49
/src/flac/src/libFLAC/../../include/share/alloc.h	12
/src/flac/oss-fuzz/../src/flac/utils.c	20
/src/flac/src/share/getopt/getopt1.c	1
/src/flac/src/share/getopt/getopt.c	3
/src/flac/src/share/grabbag/picture.c	7
/src/flac/src/share/../../include/share/alloc.h	6
/src/flac/src/share/grabbag/file.c	7
/src/flac/oss-fuzz/../src/flac/vorbiscomment.c	6
/src/flac/src/share/utf8/utf8.c	4
/src/flac/src/share/utf8/iconvert.c	1
/src/flac/src/libFLAC/format.c	17
/src/flac/src/share/grabbag/snprintf.c	2
/src/flac/src/share/grabbag/replaygain.c	19
/src/flac/src/share/replaygain_analysis/replaygain_analysis.c	10
/src/flac/oss-fuzz/../src/flac/local_string_utils.c	2
/src/flac/oss-fuzz/../src/flac/foreign_metadata.c	22
/src/flac/src/libFLAC/metadata_iterators.c	95
/src/flac/oss-fuzz/../include/share/alloc.h	5
/src/flac/oss-fuzz/../src/flac/decode.c	25
/src/flac/oss-fuzz/../src/flac/analyze.c	7
/src/flac/src/libFLAC/stream_decoder.c	66
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	16
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/share/replaygain_synthesis/replaygain_synthesis.c	8
/src/flac/src/share/../../include/share/safe_str.h	1
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/oss-fuzz/../src/flac/encode.c	40
/src/flac/src/libFLAC/stream_encoder.c	75
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	6
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5
/src/flac/src/share/grabbag/cuesheet.c	7
/src/flac/src/share/grabbag/seektable.c	1
/src/flac/oss-fuzz/../include/share/safe_str.h	1

Fuzzer: fuzzer_metadata

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	124	6.80%
gold	[1:9]	10	0.54%
yellow	[10:29]	45	2.46%
greenyellow	[30:49]	20	1.09%
lawngreen	50+	1623	89.0%
All colors	1822	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
6	1810	chain_rewrite_file_	call site: 01810	set_file_stats_
5	197	ogg_stream_pagein	call site: 00197	ogg_stream_clear
5	886	transport_tempfile_	call site: 00886	cleanup_tempfile_
4	495	set_file_stats_	call site: 00495	chown
4	839	local_snprintf	call site: 00839	safe_malloc_
3	158	read_callback_ogg_aspect_	call site: 00158	check_size_of_link_allocation_
3	220	read_callback_ogg_aspect_	call site: 00220	abort
3	347	read_metadata_	call site: 00347	abort
3	1461	vorbiscomment_set_entry_	call site: 01461	ensure_null_terminated_
3	1796	chain_rewrite_file_	call site: 01796	get_equivalent_status_
2	35	FLAC__metadata_object_clone	call site: 00035	FLAC__metadata_object_delete
2	40	FLAC__metadata_object_clone	call site: 00040	safe_malloc_

Runtime coverage analysis

Covered functions

473

Functions that are reachable but not covered

54

Reachable functions

681

Percentage of reachable functions covered

92.07%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/metadata.cc	4
/src/flac/src/libFLAC++/metadata.cpp	127
/src/flac/src/libFLAC/metadata_object.c	73
/src/flac/src/libFLAC/../../include/share/alloc.h	9
/src/flac/src/libFLAC/memory.c	1
/src/flac/src/libFLAC/metadata_iterators.c	119
/src/flac/src/libFLAC/stream_decoder.c	36
/src/flac/src/libFLAC/bitreader.c	20
/src/flac/src/libFLAC/format.c	9
/src/flac/src/libFLAC/ogg_decoder_aspect.c	9
/src/ogg/src/framing.c	27
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	3
/src/flac/src/libFLAC/crc.c	1
/src/flac/src/libFLAC++/../../include/FLAC++/metadata.h	24
/src/flac/oss-fuzz/../include/FLAC++/metadata.h	8
/src/flac/src/libFLAC++/../../include/share/alloc.h	3

Fuzzer: fuzzer_encoder_v2

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	408	26.4%
gold	[1:9]	9	0.58%
yellow	[10:29]	5	0.32%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	1122	72.6%
All colors	1544	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
68	225	safe_malloc_	call site: 00225	read_metadata_cuesheet_
54	1323	FLAC__bitreader_init	call site: 01323	read_callback_
30	752	FLAC__frame_add_header	call site: 00752	FLAC__bitwriter_write_raw_uint32_nocheck
23	565	FLAC__memory_alloc_aligned_uint32_array	call site: 00565	FLAC__window_gauss
15	594	FLAC__window_tukey	call site: 00594	FLAC__window_punchout_tukey
15	736	FLAC__bitwriter_write_utf8_uint32	call site: 00736	FLAC__bitwriter_write_raw_uint32_nocheck
13	210	read_metadata_	call site: 00210	read_metadata_vorbiscomment_
10	297	FLAC__stream_decoder_get_decode_position	call site: 00297	FLAC__stream_decoder_get_input_bytes_unconsumed
9	325	read_frame_header_	call site: 00325	FLAC__bitreader_read_utf8_uint64
8	1314	FLAC__stream_decoder_init_stream	call site: 01314	FLAC__ogg_decoder_aspect_init
7	1533	LLVMFuzzerTestOneInput	call site: 01533	FLAC__stream_encoder_get_verify_decoder_error_stats
6	463	read_frame_	call site: 00463	write_audio_frame_to_client_

Runtime coverage analysis

Covered functions

328

Functions that are reachable but not covered

71

Reachable functions

362

Percentage of reachable functions covered

80.39%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/encoder_v2.cc	2
/src/flac/src/libFLAC/stream_encoder.c	78
/src/flac/src/libFLAC/../../include/share/alloc.h	12
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	5
/src/flac/src/libFLAC/format.c	17
/src/flac/src/libFLAC/stream_decoder.c	40
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/libFLAC/md5.c	6
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5
/src/flac/src/libFLAC/ogg_decoder_aspect.c	9
/src/flac/src/libFLAC/metadata_object.c	34
/src/flac/src/libFLAC/cpu.c	5

Fuzzer: /src/flac/oss-fuzz/decoder.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	128	16.7%
gold	[1:9]	2	0.26%
yellow	[10:29]	19	2.49%
greenyellow	[30:49]	8	1.04%
lawngreen	50+	606	79.4%
All colors	763	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
5	127	FLAC::Decoder::Stream::~Stream()	call site: 00127	__cxa_begin_catch
5	199	ogg_stream_pagein	call site: 00199	ogg_stream_clear
5	705	FLAC__ogg_decoder_aspect_skip_link	call site: 00705	FLAC__stream_decoder_process_until_end_of_metadata
4	94	FLAC__stream_decoder_set_metadata_ignore_application	call site: 00094	safe_realloc_mul_2op_
3	27	FLAC__stream_decoder_set_decode_chained_stream	call site: 00027
3	36	FLAC__stream_decoder_set_ogg_serial_number	call site: 00036
3	53	FLAC__stream_decoder_set_metadata_respond	call site: 00053
3	75	FLAC__stream_decoder_set_metadata_respond_all	call site: 00075
3	84	FLAC__stream_decoder_set_metadata_ignore	call site: 00084
3	113	FLAC__stream_decoder_finish	call site: 00113
3	221	read_callback_ogg_aspect_	call site: 00221	abort
3	278	FLAC::Decoder::Stream::init_ogg()	call site: 00278

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

12

Reachable functions

279

Percentage of reachable functions covered

95.7%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/decoder.cc	4
/src/flac/oss-fuzz/./fuzzing/datasource/datasource.hpp	9
/src/flac/src/libFLAC++/stream_decoder.cpp	35
/src/flac/src/libFLAC/stream_decoder.c	62
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/format.c	3
/src/flac/src/libFLAC/ogg_decoder_aspect.c	16
/src/flac/src/libFLAC/md5.c	6
/src/ogg/src/framing.c	27
/src/flac/oss-fuzz/./fuzzing/memory.hpp	1
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/crc.c	2
/src/flac/src/libFLAC/memory.c	3
/src/flac/src/libFLAC/./include/private/bitmath.h	2
/src/flac/src/libFLAC/fixed.c	3
/src/flac/src/libFLAC/lpc.c	6
/src/flac/src/libFLAC/bitmath.c	1

Fuzzer: /src/flac/oss-fuzz/tool_metaflac.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	247	9.29%
gold	[1:9]	42	1.58%
yellow	[10:29]	135	5.08%
greenyellow	[30:49]	59	2.22%
lawngreen	50+	2173	81.8%
All colors	2656	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
13	45	share___getopt_internal	call site: 00045	fprintf
12	1737	FLAC__metadata_chain_write	call site: 01737	abort
7	2500	get_one_metadata_block_	call site: 02500	FLAC__stream_decoder_init_ogg_file
5	69	append_shorthand_operation	call site: 00069	die
5	781	ogg_stream_pagein	call site: 00781	ogg_stream_clear
4	305	append_argument	call site: 00305	safe_realloc_mul_2op_
4	1679	local_snprintf	call site: 01679	safe_malloc_
4	1724	cleanup_tempfile_	call site: 01724	cleanup_tempfile_
3	41	share___getopt_internal	call site: 00041	strchr
3	804	read_callback_ogg_aspect_	call site: 00804	abort
3	868	vorbiscomment_entry_array_copy_	call site: 00868	FLAC__metadata_object_delete
3	1584	FLAC__metadata_chain_write	call site: 01584	abort

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

72

Reachable functions

522

Percentage of reachable functions covered

86.21%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/tool_metaflac.c	1
/src/flac/oss-fuzz/./../src/metaflac/main.c	1
/src/flac/oss-fuzz/../src/metaflac/options.c	24
/src/flac/src/share/getopt/getopt1.c	1
/src/flac/src/share/getopt/getopt.c	3
/src/flac/oss-fuzz/../src/metaflac/utils.c	9
/src/flac/oss-fuzz/../include/share/alloc.h	5
/src/flac/src/libFLAC/format.c	12
/src/flac/oss-fuzz/../include/share/safe_str.h	1
/src/flac/src/share/grabbag/alloc.c	1
/src/flac/oss-fuzz/../src/metaflac/usage.c	4
/src/flac/oss-fuzz/../src/metaflac/operations.c	16
/src/flac/src/libFLAC/metadata_iterators.c	87
/src/flac/src/libFLAC/metadata_object.c	53
/src/flac/src/libFLAC/stream_decoder.c	54
/src/flac/src/libFLAC/../../include/share/alloc.h	12
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	10
/src/ogg/src/framing.c	27
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/libFLAC/memory.c	3
/src/flac/src/libFLAC/crc.c	2
/src/flac/src/share/utf8/utf8.c	5
/src/flac/src/share/utf8/iconvert.c	1
/src/flac/src/share/../../include/share/alloc.h	6
/src/flac/src/libFLAC/bitwriter.c	14
/src/flac/src/libFLAC/stream_encoder_framing.c	1
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_streaminfo.c	1
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_vorbiscomment.c	8
/src/flac/src/share/grabbag/file.c	3
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_cuesheet.c	3
/src/flac/src/share/grabbag/cuesheet.c	9
/src/flac/src/share/../../include/share/safe_str.h	1
/src/flac/src/share/grabbag/snprintf.c	1
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_picture.c	3
/src/flac/src/share/grabbag/picture.c	7
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_seektable.c	4
/src/flac/src/share/grabbag/seektable.c	1
/src/flac/src/libFLAC/./include/private/bitmath.h	2
/src/flac/src/libFLAC/fixed.c	3
/src/flac/src/libFLAC/lpc.c	6
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/share/grabbag/replaygain.c	19
/src/flac/src/share/replaygain_analysis/replaygain_analysis.c	10

Fuzzer: /src/flac/oss-fuzz/metadata.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	137	7.51%
gold	[1:9]	23	1.26%
yellow	[10:29]	49	2.68%
greenyellow	[30:49]	21	1.15%
lawngreen	50+	1592	87.3%
All colors	1822	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
17	486	simple_iterator_free_guts_	call site: 00486	set_file_stats_
7	271	FLAC__format_entropy_coding_method_partitioned_rice_contents_clear	call site: 00271	FLAC__stream_decoder_init_ogg_file
5	197	ogg_stream_pagein	call site: 00197	ogg_stream_clear
5	886	transport_tempfile_	call site: 00886	cleanup_tempfile_
4	839	local_snprintf	call site: 00839	safe_malloc_
3	54	vorbiscomment_entry_array_copy_	call site: 00054	FLAC__metadata_object_delete
3	220	read_callback_ogg_aspect_	call site: 00220	abort
2	0	EP	call site: 00000	mkstemps
2	35	FLAC__metadata_object_clone	call site: 00035	FLAC__metadata_object_delete
2	40	FLAC__metadata_object_clone	call site: 00040	safe_malloc_
2	68	copy_track_	call site: 00068	FLAC__metadata_object_delete
2	214	ogg_sync_buffer	call site: 00214	ogg_sync_clear

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

47

Reachable functions

681

Percentage of reachable functions covered

93.1%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/metadata.cc	4
/src/flac/src/libFLAC++/metadata.cpp	127
/src/flac/src/libFLAC/metadata_object.c	73
/src/flac/src/libFLAC/../../include/share/alloc.h	9
/src/flac/src/libFLAC/memory.c	1
/src/flac/src/libFLAC/metadata_iterators.c	119
/src/flac/src/libFLAC/stream_decoder.c	36
/src/flac/src/libFLAC/bitreader.c	20
/src/flac/src/libFLAC/format.c	9
/src/flac/src/libFLAC/ogg_decoder_aspect.c	9
/src/ogg/src/framing.c	27
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	3
/src/flac/src/libFLAC/crc.c	1
/src/flac/src/libFLAC++/../../include/FLAC++/metadata.h	24
/src/flac/oss-fuzz/../include/FLAC++/metadata.h	8
/src/flac/src/libFLAC++/../../include/share/alloc.h	3

Fuzzer: /src/flac/oss-fuzz/seek.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	94	14.3%
gold	[1:9]	2	0.30%
yellow	[10:29]	6	0.91%
greenyellow	[30:49]	7	1.06%
lawngreen	50+	548	83.4%
All colors	657	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
8	176	file_eof_callback_	call site: 00176	FLAC__stream_decoder_process_until_end_of_stream
5	127	ogg_stream_pagein	call site: 00127	ogg_stream_clear
5	589	FLAC__ogg_decoder_aspect_skip_link	call site: 00589	FLAC__stream_decoder_process_until_end_of_metadata
4	652	FLAC__stream_decoder_get_link_lengths	call site: 00652	FLAC__stream_decoder_delete
3	150	read_callback_ogg_aspect_	call site: 00150	abort
3	551	FLAC__stream_decoder_skip_single_frame	call site: 00551	FLAC__stream_decoder_seek_absolute
3	566	FLAC__stream_decoder_get_total_samples	call site: 00566	seek_to_absolute_sample_ogg_
2	56	FLAC__stream_decoder_set_decode_chained_stream	call site: 00056	FLAC__stream_decoder_init_ogg_file
2	144	ogg_sync_buffer	call site: 00144	ogg_sync_clear
2	208	FLAC__bitreader_skip_byte_block_aligned_no_crc	call site: 00208	FLAC__bitreader_read_raw_uint32
2	356	frame_sync_	call site: 00356	FLAC__bitreader_read_raw_uint32
2	375	read_frame_header_	call site: 00375	abort

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

11

Reachable functions

193

Percentage of reachable functions covered

94.3%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/seek.cc	3
/src/flac/src/libFLAC/stream_decoder.c	64
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/format.c	3
/src/flac/src/libFLAC/ogg_decoder_aspect.c	15
/src/flac/src/libFLAC/md5.c	6
/src/ogg/src/framing.c	27
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/crc.c	2
/src/flac/src/libFLAC/memory.c	3
/src/flac/src/libFLAC/./include/private/bitmath.h	2
/src/flac/src/libFLAC/fixed.c	3
/src/flac/src/libFLAC/lpc.c	6
/src/flac/src/libFLAC/bitmath.c	1

Fuzzer: /src/flac/oss-fuzz/reencoder.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	351	21.3%
gold	[1:9]	4	0.24%
yellow	[10:29]	8	0.48%
greenyellow	[30:49]	7	0.42%
lawngreen	50+	1277	77.5%
All colors	1647	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
35	1312	FLAC__ogg_encoder_aspect_init	call site: 01312	resize_buffers_
31	1004	FLAC__bitwriter_write_utf8_uint32	call site: 01004	FLAC__bitwriter_write_utf8_uint64
10	1490	FLAC::Encoder::Stream::set_rice_parameter_search_dist(unsigned int)	call site: 01490	abort
9	989	FLAC__bitwriter_write_utf8_uint32	call site: 00989	FLAC__bitwriter_write_raw_uint32_nocheck
8	1356	verify_write_callback_	call site: 01356	write_bitbuffer_
5	52	FLAC__stream_encoder_set_apodization	call site: 00052	strtod
5	58	FLAC__stream_encoder_set_apodization	call site: 00058	strtod
5	315	ogg_stream_pagein	call site: 00315	ogg_stream_clear
5	1082	FLAC__bitwriter_write_rice_signed_block	call site: 01082	FLAC__bitwriter_write_raw_uint32
5	1443	FLAC__add_metadata_block	call site: 01443	write_bitbuffer_
5	1468	FLAC::Encoder::Stream::init_ogg()	call site: 01468
4	1090	add_residual_partitioned_rice_	call site: 01090	FLAC__bitwriter_write_raw_uint32

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

40

Reachable functions

494

Percentage of reachable functions covered

91.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/reencoder.cc	5
/src/flac/oss-fuzz/./fuzzing/datasource/datasource.hpp	10
/src/flac/src/libFLAC++/stream_encoder.cpp	52
/src/flac/src/libFLAC/stream_encoder.c	78
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	6
/src/flac/src/libFLAC/format.c	14
/src/flac/src/libFLAC++/stream_decoder.cpp	16
/src/flac/src/libFLAC/stream_decoder.c	44
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	10
/src/flac/oss-fuzz/./fuzzing/memory.hpp	1
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5
/src/flac/src/libFLAC/metadata_object.c	4

Fuzzer: /src/flac/oss-fuzz/encoder_v2.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	309	20.0%
gold	[1:9]	6	0.38%
yellow	[10:29]	9	0.58%
greenyellow	[30:49]	7	0.45%
lawngreen	50+	1213	78.5%
All colors	1544	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
36	1265	FLAC__ogg_encoder_aspect_init	call site: 01265	resize_buffers_
31	751	FLAC__bitwriter_write_utf8_uint32	call site: 00751	FLAC__bitwriter_write_utf8_uint64
13	1236	FLAC__stream_encoder_set_metadata	call site: 01236	FLAC__stream_encoder_init_ogg_file
11	1064	FLAC__stream_encoder_set_streamable_subset	call site: 01064	FLAC__stream_encoder_set_do_qlp_coeff_prec_search
11	1532	FLAC__stream_encoder_get_resolved_state_string	call site: 01532	FLAC__stream_encoder_delete
9	736	FLAC__bitwriter_write_utf8_uint32	call site: 00736	FLAC__bitwriter_write_raw_uint32_nocheck
8	1397	verify_write_callback_	call site: 01397	write_bitbuffer_
6	1486	FLAC__add_metadata_block	call site: 01486	write_bitbuffer_
5	48	FLAC__stream_encoder_set_apodization	call site: 00048	strtod
5	54	FLAC__stream_encoder_set_apodization	call site: 00054	strtod
5	503	ogg_stream_iovecin	call site: 00503	ogg_stream_clear
5	828	FLAC__bitwriter_write_rice_signed_block	call site: 00828	FLAC__bitwriter_write_raw_uint32

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

35

Reachable functions

362

Percentage of reachable functions covered

90.33%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/encoder_v2.cc	2
/src/flac/src/libFLAC/stream_encoder.c	78
/src/flac/src/libFLAC/../../include/share/alloc.h	12
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	5
/src/flac/src/libFLAC/format.c	17
/src/flac/src/libFLAC/stream_decoder.c	40
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/libFLAC/md5.c	6
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5
/src/flac/src/libFLAC/ogg_decoder_aspect.c	9
/src/flac/src/libFLAC/metadata_object.c	34
/src/flac/src/libFLAC/cpu.c	5

Fuzzer: /src/flac/oss-fuzz/encoder.cc

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	319	20.0%
gold	[1:9]	4	0.25%
yellow	[10:29]	8	0.50%
greenyellow	[30:49]	7	0.43%
lawngreen	50+	1254	78.7%
All colors	1592	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
31	1315	FLAC__bitwriter_write_utf8_uint32	call site: 01315	FLAC__bitwriter_write_utf8_uint64
26	277	FLAC__ogg_encoder_aspect_init	call site: 00277	safe_calloc_
25	1030	FLAC::Encoder::Stream::init_ogg()	call site: 01030	abort
9	306	FLAC__bitwriter_free	call site: 00306	resize_buffers_
9	1300	FLAC__bitwriter_write_utf8_uint32	call site: 01300	FLAC__bitwriter_write_raw_uint32_nocheck
6	245	FLAC__stream_encoder_set_num_threads	call site: 00245
5	52	FLAC__stream_encoder_set_apodization	call site: 00052	strtod
5	58	FLAC__stream_encoder_set_apodization	call site: 00058	strtod
5	254	FLAC__stream_encoder_init_stream	call site: 00254	FLAC__format_sample_rate_is_subset
5	482	ogg_stream_pagein	call site: 00482	ogg_stream_clear
5	532	verify_write_callback_	call site: 00532	FLAC__bitwriter_write_raw_uint32
5	1005	FLAC__add_metadata_block	call site: 01005	write_bitbuffer_

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

35

Reachable functions

466

Percentage of reachable functions covered

92.49%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/encoder.cc	3
/src/flac/oss-fuzz/./fuzzing/datasource/datasource.hpp	14
/src/flac/src/libFLAC++/stream_encoder.cpp	52
/src/flac/src/libFLAC/stream_encoder.c	79
/src/flac/src/libFLAC/../../include/share/alloc.h	10
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	5
/src/flac/src/libFLAC/format.c	14
/src/flac/oss-fuzz/./fuzzing/memory.hpp	1
/src/flac/src/libFLAC/cpu.c	5
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_decoder.c	39
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	9
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5

Fuzzer: /src/flac/oss-fuzz/tool_flac.c

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	796	19.9%
gold	[1:9]	157	3.93%
yellow	[10:29]	130	3.26%
greenyellow	[30:49]	67	1.68%
lawngreen	50+	2837	71.1%
All colors	3987	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
88	318	flac__vorbiscomment_add	call site: 00318	flac__vorbiscomment_add
51	407	flac_snprintf	call site: 00407	do_it
35	3224	FLAC__ogg_encoder_aspect_init	call site: 03224	resize_buffers_
30	2229	FLAC__bitwriter_write_utf8_uint32	call site: 02229	FLAC__bitwriter_write_utf8_uint64
20	91	parse_option	call site: 00091	grabbag__picture_parse_specification
20	2555	FLAC__stream_encoder_get_state	call site: 02555	EncoderSession_destroy
17	535	simple_iterator_free_guts_	call site: 00535	set_file_stats_
14	63	share___getopt_internal	call site: 00063	parse_option
12	204	flac__vorbiscomment_add	call site: 00204	utf8_encode
12	3203	EncoderSession_init_encoder	call site: 03203	init_file_internal_
11	932	write_callback	call site: 00932	strlen_console
11	947	write_callback	call site: 00947	stats_print_name_and_stream_number

Runtime coverage analysis

Covered functions

1224

Functions that are reachable but not covered

112

Reachable functions

793

Percentage of reachable functions covered

85.88%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
/src/flac/oss-fuzz/tool_flac.c	1
/src/flac/oss-fuzz/./../src/flac/main.c	24
/src/flac/src/libFLAC/metadata_object.c	49
/src/flac/src/libFLAC/../../include/share/alloc.h	12
/src/flac/oss-fuzz/../src/flac/utils.c	20
/src/flac/src/share/getopt/getopt1.c	1
/src/flac/src/share/getopt/getopt.c	3
/src/flac/src/share/grabbag/picture.c	7
/src/flac/src/share/../../include/share/alloc.h	6
/src/flac/src/share/grabbag/file.c	7
/src/flac/oss-fuzz/../src/flac/vorbiscomment.c	6
/src/flac/src/share/utf8/utf8.c	4
/src/flac/src/share/utf8/iconvert.c	1
/src/flac/src/libFLAC/format.c	17
/src/flac/src/share/grabbag/snprintf.c	2
/src/flac/src/share/grabbag/replaygain.c	19
/src/flac/src/share/replaygain_analysis/replaygain_analysis.c	10
/src/flac/oss-fuzz/../src/flac/local_string_utils.c	2
/src/flac/oss-fuzz/../src/flac/foreign_metadata.c	22
/src/flac/src/libFLAC/metadata_iterators.c	95
/src/flac/oss-fuzz/../include/share/alloc.h	5
/src/flac/oss-fuzz/../src/flac/decode.c	25
/src/flac/oss-fuzz/../src/flac/analyze.c	7
/src/flac/src/libFLAC/stream_decoder.c	66
/src/flac/src/libFLAC/bitreader.c	30
/src/flac/src/libFLAC/ogg_decoder_aspect.c	16
/src/ogg/src/framing.c	32
/src/flac/src/libFLAC/cpu.c	5
/src/flac/src/libFLAC/md5.c	6
/src/flac/src/share/replaygain_synthesis/replaygain_synthesis.c	8
/src/flac/src/share/../../include/share/safe_str.h	1
/src/flac/src/libFLAC/crc.c	3
/src/flac/src/libFLAC/memory.c	7
/src/flac/src/libFLAC/./include/private/bitmath.h	4
/src/flac/src/libFLAC/fixed.c	7
/src/flac/src/libFLAC/lpc.c	17
/src/flac/src/libFLAC/bitmath.c	1
/src/flac/oss-fuzz/../src/flac/encode.c	40
/src/flac/src/libFLAC/stream_encoder.c	75
/src/flac/src/libFLAC/bitwriter.c	25
/src/flac/src/libFLAC/ogg_encoder_aspect.c	6
/src/flac/src/libFLAC/window.c	17
/src/flac/src/libFLAC/stream_encoder_framing.c	8
/src/flac/src/libFLAC/ogg_helper.c	5
/src/flac/src/share/grabbag/cuesheet.c	7
/src/flac/src/share/grabbag/seektable.c	1
/src/flac/oss-fuzz/../include/share/safe_str.h	1

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
FLAC::Decoder::FuzzerStream::metadata_callback(FLAC__StreamMetadataconst*)	/src/flac/oss-fuzz/decoder.cc	2	['N/A', 'N/A']	8	0	327	67	11	79	0	344	37
FLAC__fixed_compute_best_predictor_intrin_sse2	/src/flac/src/libFLAC/fixed_intrin_sse2.c	3	['N/A', 'int', 'N/A']	1	0	1328	118	36	2	0	40	36
FLAC__fixed_compute_best_predictor_intrin_ssse3	/src/flac/src/libFLAC/fixed_intrin_ssse3.c	3	['N/A', 'int', 'N/A']	1	0	1197	118	36	2	0	40	36
FLAC::Metadata::Chain::write(bool,void*,FLAC__IOCallbacks,void*,FLAC__IOCallbacks)	/src/flac/src/libFLAC++/metadata.cpp	6	['N/A', 'bool', 'N/A', 'N/A', 'N/A', 'N/A']	8	0	45	5	2	42	0	228	35

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

1192 / 1440

Cyclomatic complexity statically reachable by fuzzers

9193 / 10385

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/src/fuzzer_exo.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['init_stream_internal_', 'read_metadata_vorbiscomment_', 'read_frame_', 'FLAC__stream_decoder_flush', 'safe_realloc_', 'read_metadata_', 'FLAC__stream_decoder_finish', 'FLAC__stream_decoder_reset']

/src/flac/oss-fuzz/seek.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['read_metadata_', 'ogg_sync_buffer', 'read_callback_ogg_aspect_', 'frame_sync_', 'read_frame_header_', 'FLAC__stream_decoder_skip_single_link', 'FLAC__bitreader_new', 'LLVMFuzzerTestOneInput', 'init_FILE_internal_', 'FLAC__ogg_decoder_aspect_init']

/src/flac/oss-fuzz/decoder.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['FLAC__stream_decoder_get_total_samples', 'FLAC__stream_decoder_get_decode_position', 'FLAC__stream_decoder_get_bits_per_sample', 'ogg_stream_pagein', 'FLAC__stream_decoder_set_metadata_respond_application', 'read_callback_ogg_aspect_', 'frame_sync_', 'read_frame_header_', 'FLAC__bitreader_new', 'FLAC__stream_decoder_set_metadata_ignore_application']

/src/flac/oss-fuzz/encoder.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['read_metadata_', 'FLAC__add_metadata_block', 'FLAC__frame_add_header', 'update_ogg_metadata_', 'ogg_page_checksum_set', '_os_body_expand', 'FLAC__stream_decoder_init_stream', 'realloc_', 'FLAC__stream_decoder_get_decode_position']

/src/flac/oss-fuzz/reencoder.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['FLAC__bitwriter_write_utf8_uint32', 'update_ogg_metadata_', 'FLAC__memory_alloc_aligned_uint32_array', 'FLAC__window_tukey', 'FLAC__stream_decoder_get_decode_position', 'FLAC__stream_decoder_process_until_end_of_stream', 'FLAC__stream_encoder_set_apodization', 'update_metadata_']

/src/flac/oss-fuzz/tool_metaflac.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['realloc_', 'share___getopt_internal', 'FLAC__metadata_chain_write', 'read_frame_', 'utf8_encode', 'get_one_metadata_block_', 'utf8len_', 'append_shorthand_operation', 'init_stream_internal_']

/src/flac/oss-fuzz/tool_flac.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['FLAC__metadata_chain_delete', 'chain_read_', 'FLAC__bitwriter_write_utf8_uint32', 'FLAC__memory_alloc_aligned_uint64_array', 'seek_to_absolute_sample_ogg_', 'FLAC__stream_encoder_get_state', 'EncoderSession_init_encoder', 'simple_iterator_free_guts_', 'FLAC__window_tukey', 'share___getopt_internal']

/src/flac/oss-fuzz/metadata.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['chain_rewrite_file_', 'ogg_stream_pagein', 'transport_tempfile_', 'set_file_stats_', 'local_snprintf', 'read_callback_ogg_aspect_', 'read_metadata_', 'vorbiscomment_set_entry_']

/src/flac/oss-fuzz/encoder_v2.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['safe_malloc_', 'FLAC__bitreader_init', 'FLAC__frame_add_header', 'FLAC__memory_alloc_aligned_uint32_array', 'FLAC__window_tukey', 'FLAC__bitwriter_write_utf8_uint32', 'read_metadata_', 'FLAC__stream_decoder_get_decode_position', 'read_frame_header_', 'FLAC__stream_decoder_init_stream']

/src/flac/oss-fuzz/decoder.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['FLAC::Decoder::Stream::~Stream()', 'ogg_stream_pagein', 'FLAC__ogg_decoder_aspect_skip_link', 'FLAC__stream_decoder_set_metadata_ignore_application', 'FLAC__stream_decoder_set_decode_chained_stream', 'FLAC__stream_decoder_set_ogg_serial_number', 'FLAC__stream_decoder_set_metadata_respond', 'FLAC__stream_decoder_set_metadata_respond_all', 'FLAC__stream_decoder_set_metadata_ignore', 'FLAC__stream_decoder_finish']

/src/flac/oss-fuzz/tool_metaflac.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['share___getopt_internal', 'FLAC__metadata_chain_write', 'get_one_metadata_block_', 'append_shorthand_operation', 'ogg_stream_pagein', 'append_argument', 'local_snprintf', 'cleanup_tempfile_', 'read_callback_ogg_aspect_']

/src/flac/oss-fuzz/metadata.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['simple_iterator_free_guts_', 'FLAC__format_entropy_coding_method_partitioned_rice_contents_clear', 'ogg_stream_pagein', 'transport_tempfile_', 'local_snprintf', 'vorbiscomment_entry_array_copy_', 'read_callback_ogg_aspect_', 'FLAC__metadata_object_clone']

/src/flac/oss-fuzz/seek.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['file_eof_callback_', 'ogg_stream_pagein', 'FLAC__ogg_decoder_aspect_skip_link', 'FLAC__stream_decoder_get_link_lengths', 'read_callback_ogg_aspect_', 'FLAC__stream_decoder_skip_single_frame', 'FLAC__stream_decoder_get_total_samples', 'FLAC__stream_decoder_set_decode_chained_stream', 'ogg_sync_buffer', 'FLAC__bitreader_skip_byte_block_aligned_no_crc']

/src/flac/oss-fuzz/reencoder.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['FLAC__ogg_encoder_aspect_init', 'FLAC__bitwriter_write_utf8_uint32', 'FLAC::Encoder::Stream::set_rice_parameter_search_dist(unsigned int)', 'verify_write_callback_', 'FLAC__stream_encoder_set_apodization', 'ogg_stream_pagein', 'FLAC__bitwriter_write_rice_signed_block', 'FLAC__add_metadata_block']

/src/flac/oss-fuzz/encoder_v2.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['FLAC__ogg_encoder_aspect_init', 'FLAC__bitwriter_write_utf8_uint32', 'FLAC__stream_encoder_set_metadata', 'FLAC__stream_encoder_set_streamable_subset', 'FLAC__stream_encoder_get_resolved_state_string', 'verify_write_callback_', 'FLAC__add_metadata_block', 'FLAC__stream_encoder_set_apodization']

/src/flac/oss-fuzz/encoder.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['FLAC__bitwriter_write_utf8_uint32', 'FLAC__ogg_encoder_aspect_init', 'FLAC::Encoder::Stream::init_ogg()', 'FLAC__bitwriter_free', 'FLAC__stream_encoder_set_num_threads', 'FLAC__stream_encoder_set_apodization', 'FLAC__stream_encoder_init_stream', 'ogg_stream_pagein']

/src/flac/oss-fuzz/tool_flac.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['flac__vorbiscomment_add', 'flac_snprintf', 'FLAC__ogg_encoder_aspect_init', 'FLAC__bitwriter_write_utf8_uint32', 'parse_option', 'FLAC__stream_encoder_get_state', 'simple_iterator_free_guts_', 'share___getopt_internal', 'EncoderSession_init_encoder']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
verify_write_callback_	39	16	41.02%	['/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', 'fuzzer_encoder', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder.cc', 'fuzzer_encoder_v2', 'fuzzer_reencoder', '/src/flac/oss-fuzz/tool_flac.c', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/decoder.cc', 'fuzzer_tool_flac']
get_equivalent_status_	31	10	32.25%	['/src/flac/oss-fuzz/tool_metaflac.c', 'fuzzer_metadata', 'fuzzer_tool_metaflac', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/tool_flac.c', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/decoder.cc', 'fuzzer_tool_flac']
transport_tempfile_	42	19	45.23%	['/src/flac/oss-fuzz/tool_metaflac.c', 'fuzzer_metadata', 'fuzzer_tool_metaflac', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/tool_flac.c', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/decoder.cc', 'fuzzer_tool_flac']
share___getopt_internal	326	164	50.30%	['/src/flac/oss-fuzz/tool_metaflac.c', 'fuzzer_tool_metaflac', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/tool_flac.c', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/decoder.cc', 'fuzzer_tool_flac']
write_to_flac_	46	25	54.34%	['/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/tool_flac.c', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/decoder.cc', 'fuzzer_tool_flac']
write_to_iff_	56	26	46.42%	['/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/tool_flac.c', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/decoder.cc', 'fuzzer_tool_flac']

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
	[]	[]
/src/flac/src/libFLAC/fixed_intrin_avx2.c	[]	[]
/src/flac/oss-fuzz/../src/metaflac/utils.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/oss-fuzz/../src/metaflac/options.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/src/libFLAC/fixed_intrin_ssse3.c	[]	[]
/src/flac/src/share/grabbag/replaygain.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/fixed_intrin_sse42.c	[]	[]
/src/flac/src/libFLAC++/metadata.cpp	['fuzzer_metadata', '/src/flac/oss-fuzz/metadata.cc']	['fuzzer_metadata', '/src/flac/oss-fuzz/metadata.cc']
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_picture.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/src/share/grabbag/alloc.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']
/src/flac/src/libFLAC++/../../include/FLAC++/encoder.h	[]	[]
/src/flac/src/share/../../include/share/safe_str.h	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/oss-fuzz/./fuzzing/exception.hpp	[]	[]
/src/flac/src/share/grabbag/seektable.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/share/grabbag/snprintf.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/stream_decoder.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/share/utf8/utf8.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/metadata_object.c	['fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/fixed.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/tool_metaflac.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']
/src/flac/oss-fuzz/../src/metaflac/operations.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/src/share/getopt/getopt.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/usr/local/bin/../include/c++/v1/stdexcept	[]	[]
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_seektable.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/oss-fuzz/../include/share/safe_str.h	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/libFLAC/stream_encoder_intrin_avx2.c	[]	[]
/src/flac/src/libFLAC/lpc.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../src/flac/utils.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/oss-fuzz/./../src/flac/main.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/libFLAC/stream_encoder_intrin_ssse3.c	[]	[]
/src/flac/oss-fuzz/tool_flac.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/fixed_intrin_sse2.c	[]	[]
/usr/local/bin/../include/c++/v1/__exception/exception.h	[]	[]
/src/ExoPlayer/extensions/flac/src/main/jni/include/flac_parser.h	['fuzzer_exo']	['fuzzer_exo']
/src/flac/src/share/replaygain_analysis/replaygain_analysis.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/seek.cc	['fuzzer_seek', '/src/flac/oss-fuzz/seek.cc']	['fuzzer_seek', '/src/flac/oss-fuzz/seek.cc']
/src/flac/oss-fuzz/metadata.cc	['fuzzer_metadata', '/src/flac/oss-fuzz/metadata.cc']	['fuzzer_metadata', '/src/flac/oss-fuzz/metadata.cc']
/src/ExoPlayer/extensions/flac/src/main/jni/include/data_source.h	['fuzzer_exo']	['fuzzer_exo']
/src/fuzzer_exo.cpp	['fuzzer_exo']	['fuzzer_exo']
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_vorbiscomment.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/src/share/grabbag/cuesheet.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/stream_encoder_intrin_sse2.c	[]	[]
/src/flac/src/libFLAC/./include/private/bitmath.h	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/libFLAC/ogg_decoder_aspect.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/metadata_iterators.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/crc.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/ogg/src/framing.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../include/FLAC++/encoder.h	[]	[]
/src/flac/src/libFLAC/lpc_intrin_fma.c	[]	[]
/src/flac/src/libFLAC/../../include/share/alloc.h	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/oss-fuzz/./fuzzing/datasource/datasource.hpp	['fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder.cc']	[]
/src/flac/src/libFLAC/format.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/ogg_encoder_aspect.c	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/md5.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/./../src/metaflac/main.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/oss-fuzz/./fuzzing/memory.hpp	['fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder.cc']	[]
/src/flac/src/libFLAC++/../../include/FLAC++/metadata.h	['fuzzer_metadata', '/src/flac/oss-fuzz/metadata.cc']	[]
/src/flac/src/libFLAC/bitreader.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../src/flac/encode.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/libFLAC/stream_encoder.c	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/lpc_intrin_sse2.c	[]	[]
/src/flac/src/libFLAC/stream_encoder_framing.c	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../include/FLAC++/metadata.h	['fuzzer_metadata', '/src/flac/oss-fuzz/metadata.cc']	[]
/src/flac/src/libFLAC++/../../include/share/alloc.h	['fuzzer_metadata', '/src/flac/oss-fuzz/metadata.cc']	[]
/src/flac/oss-fuzz/encoder.cc	['fuzzer_encoder', '/src/flac/oss-fuzz/encoder.cc']	['fuzzer_encoder', '/src/flac/oss-fuzz/encoder.cc']
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_streaminfo.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/src/libFLAC++/../../include/FLAC++/decoder.h	[]	[]
/src/flac/oss-fuzz/./fuzzing/types.hpp	[]	[]
/src/flac/oss-fuzz/../src/flac/analyze.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/oss-fuzz/../src/flac/vorbiscomment.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/libFLAC/window.c	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC++/stream_decoder.cpp	['fuzzer_decoder', 'fuzzer_reencoder', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/reencoder.cc']	['fuzzer_decoder', 'fuzzer_reencoder', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/reencoder.cc']
/src/flac/src/libFLAC/lpc_intrin_sse41.c	[]	[]
/src/flac/src/share/getopt/getopt1.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../src/flac/foreign_metadata.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/share/grabbag/picture.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../src/flac/decode.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/libFLAC/ogg_helper.c	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/memory.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/share/replaygain_synthesis/replaygain_synthesis.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../include/share/alloc.h	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/src/libFLAC/lpc_intrin_avx2.c	[]	[]
/src/flac/src/libFLAC++/stream_encoder.cpp	['fuzzer_encoder', 'fuzzer_reencoder', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder.cc']	['fuzzer_encoder', 'fuzzer_reencoder', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder.cc']
/usr/local/bin/../include/c++/v1/string	[]	[]
/src/flac/src/share/grabbag/file.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/reencoder.cc	['fuzzer_reencoder', '/src/flac/oss-fuzz/reencoder.cc']	['fuzzer_reencoder', '/src/flac/oss-fuzz/reencoder.cc']
/src/flac/oss-fuzz/../src/metaflac/operations_shorthand_cuesheet.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]
/src/flac/src/libFLAC/bitwriter.c	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/encoder_v2.cc	['fuzzer_encoder_v2', '/src/flac/oss-fuzz/encoder_v2.cc']	['fuzzer_encoder_v2', '/src/flac/oss-fuzz/encoder_v2.cc']
/src/flac/oss-fuzz/../src/flac/local_string_utils.c	['fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_flac.c']	[]
/src/flac/oss-fuzz/decoder.cc	['fuzzer_decoder', '/src/flac/oss-fuzz/decoder.cc']	['fuzzer_decoder', '/src/flac/oss-fuzz/decoder.cc']
/src/flac/src/libFLAC/cpu.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_metadata', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/metadata.cc', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/libFLAC/bitmath.c	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_exo', 'fuzzer_seek', 'fuzzer_decoder', 'fuzzer_encoder', 'fuzzer_reencoder', 'fuzzer_tool_metaflac', 'fuzzer_tool_flac', 'fuzzer_encoder_v2', '/src/flac/oss-fuzz/decoder.cc', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/seek.cc', '/src/flac/oss-fuzz/reencoder.cc', '/src/flac/oss-fuzz/encoder_v2.cc', '/src/flac/oss-fuzz/encoder.cc', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/src/share/utf8/iconvert.c	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']	['fuzzer_tool_metaflac', 'fuzzer_tool_flac', '/src/flac/oss-fuzz/tool_metaflac.c', '/src/flac/oss-fuzz/tool_flac.c']
/src/flac/oss-fuzz/../src/metaflac/usage.c	['fuzzer_tool_metaflac', '/src/flac/oss-fuzz/tool_metaflac.c']	[]

Directories in report

Directory
/src/flac/src/share/getopt/
/src/flac/src/libFLAC/../../include/share/
/src/flac/oss-fuzz/
/src/flac/src/libFLAC/
/src/flac/oss-fuzz/./fuzzing/
/src/ogg/src/
/src/flac/src/share/replaygain_synthesis/
/src/flac/oss-fuzz/../include/FLAC++/
/src/flac/oss-fuzz/./fuzzing/datasource/
/src/flac/oss-fuzz/./../src/metaflac/
/src/flac/src/libFLAC/./include/private/
/src/flac/src/share/replaygain_analysis/
/src/flac/oss-fuzz/../src/flac/
/src/flac/oss-fuzz/./../src/flac/
/src/flac/src/libFLAC++/
/src/flac/src/share/utf8/
/src/flac/src/share/../../include/share/
/src/
/src/ExoPlayer/extensions/flac/src/main/jni/include/
/src/flac/src/share/grabbag/
/src/flac/src/libFLAC++/../../include/FLAC++/
/src/flac/src/libFLAC++/../../include/share/
/src/flac/oss-fuzz/../src/metaflac/
/src/flac/oss-fuzz/../include/share/
/usr/local/bin/../include/c++/v1/
/usr/local/bin/../include/c++/v1/__exception/