Fuzz introspector: fuzz-commit-graph
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
476 476 3 :

['free_untracked', 'strbuf_release', 'free']

476 476 free_untracked_cache call site: 00476 /src/git/dir.c:3591
461 461 1 :

['die']

461 461 xcalloc call site: 00222 /src/git/wrapper.c:153
9 9 2 :

['string_list_clear', 'free']

9 9 resolve_undo_clear_index call site: 00466 /src/git/resolve-undo.c:109
4 26 3 :

['free_commit_graph', 'close_commit_graph_one', 'clear_commit_graph_data_slab']

4 26 close_commit_graph_one call site: 00419 /src/git/commit-graph.c:709
2 2 1 :

['calloc']

463 463 xcalloc call site: 00221 /src/git/wrapper.c:151
2 2 1 :

['abort']

2 2 vreportf call site: 00031 /src/git/usage.c:15
0 551 2 :

['discard_index', 'free']

0 551 discard_split_index call site: 00473 /src/git/split-index.c:399
0 461 2 :

['free', 'xmalloc']

0 461 xrealloc call site: 00076 /src/git/wrapper.c:130
0 30 1 :

['hashmap_clear_']

0 30 free_name_hash call site: 00468 /src/git/name-hash.c:735
0 15 1 :

['hashmap_clear_']

0 15 oidmap_free call site: 00373 /src/git/oidmap.c:26
0 0 1 :

['malloc']

461 463 do_xmalloc call site: 00005 /src/git/wrapper.c:52
0 0 None 32 610 repo_clear call site: 00424 /src/git/repository.c:274

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 initialize_the_repository [function] [call site] 00001
2 raw_object_store_new [function] [call site] 00002
3 xmalloc [function] [call site] 00003
4 do_xmalloc [function] [call site] 00004
5 memory_limit_check [function] [call site] 00005
6 git_env_ulong [function] [call site] 00006
7 getenv [call site] 00007
7 git_parse_ulong [function] [call site] 00008
8 git_parse_unsigned [function] [call site] 00009
9 strchr [call site] 00010
9 __errno_location [call site] 00011
9 __errno_location [call site] 00012
9 strtoumax [function] [call site] 00013
10 __strtoul_internal [call site] 00014
9 get_unit_factor [function] [call site] 00015
10 strcasecmp [call site] 00016
10 strcasecmp [call site] 00017
10 strcasecmp [call site] 00018
9 __errno_location [call site] 00019
7 _ [function] [call site] 00020
8 dcgettext [call site] 00021
7 die [function] [call site] 00022
8 fwrite [call site] 00023
8 common_exit [function] [call site] 00024
9 check_bug_if_BUG [function] [call site] 00025
10 BUG_fl [function] [call site] 00026
11 BUG_vfl [function] [call site] 00027
12 BUG_vfl_common [function] [call site] 00028
13 snprintf [call site] 00029
13 vreportf [function] [call site] 00030
14 strlen [call site] 00031
14 fprintf [call site] 00032
14 abort [call site] 00033
14 vsnprintf [call site] 00034
14 fflush [call site] 00035
14 write_in_full [function] [call site] 00036
15 xwrite [function] [call site] 00037
16 write [call site] 00038
16 __errno_location [call site] 00039
16 handle_nonblock [function] [call site] 00040
17 poll [call site] 00041
15 __errno_location [call site] 00042
12 abort [call site] 00043
12 trace2_cmd_error_va_fl [function] [call site] 00044
13 tr2_dst_trace_want [function] [call site] 00045
14 tr2_dst_get_trace_fd [function] [call site] 00046
15 tr2_sysenv_get [function] [call site] 00047
16 BUG_fl [function] [call site] 00048
16 getenv [call site] 00049
16 xstrdup [function] [call site] 00050
17 strdup [call site] 00051
17 die [function] [call site] 00052
18 exit [call site] 00053
15 strcmp [call site] 00054
15 strcasecmp [call site] 00055
15 strcmp [call site] 00056
15 strlen [call site] 00057
15 atoi [function] [call site] 00058
16 strtol [call site] 00059
15 is_absolute_path [function] [call site] 00060
16 git_is_dir_sep [function] [call site] 00061
15 is_directory [function] [call site] 00062
16 stat64 [function] [call site] 00063
17 __xstat64 [call site] 00064
15 tr2_dst_try_auto_path [function] [call site] 00065
16 tr2_sid_get [function] [call site] 00066
17 tr2_sid_compute [function] [call site] 00067
18 getenv [call site] 00068
18 strbuf_addstr [function] [call site] 00069
19 strlen [call site] 00070
19 strbuf_add [function] [call site] 00071
20 strbuf_grow [function] [call site] 00072
21 die [function] [call site] 00073
21 st_mult [function] [call site] 00074
22 die [function] [call site] 00075
21 xrealloc [function] [call site] 00076
22 xmalloc [function] [call site] 00077
22 memory_limit_check [function] [call site] 00078
23 error [function] [call site] 00079
23 die [function] [call site] 00080
22 realloc [call site] 00081
22 die [function] [call site] 00082
20 strbuf_setlen [function] [call site] 00083
21 BUG_fl [function] [call site] 00084
21 __assert_fail [call site] 00085
18 strbuf_addch [function] [call site] 00086
19 strbuf_avail [function] [call site] 00087
19 strbuf_grow [function] [call site] 00088
18 tr2_sid_append_my_sid_component [function] [call site] 00089
19 getpid [call site] 00090
19 tr2_tbuf_utc_datetime [function] [call site] 00091
20 gettimeofday [call site] 00092
20 gmtime_r [call site] 00093
20 xsnprintf [function] [call site] 00094
21 vsnprintf [call site] 00095
21 BUG_fl [function] [call site] 00096
21 BUG_fl [function] [call site] 00097
19 strbuf_addstr [function] [call site] 00098
19 strbuf_addch [function] [call site] 00099
19 xgethostname [function] [call site] 00100
20 gethostname [call site] 00101
19 strbuf_add [function] [call site] 00102
19 strlen [call site] 00103
19 hash_to_hex_algop_r [function] [call site] 00104
19 strbuf_addch [function] [call site] 00105
19 strbuf_add [function] [call site] 00106
19 strbuf_addf [function] [call site] 00107
20 strbuf_vaddf [function] [call site] 00108
21 strbuf_avail [function] [call site] 00109
21 strbuf_grow [function] [call site] 00110
21 vsnprintf [call site] 00111
21 BUG_fl [function] [call site] 00112
21 strbuf_avail [function] [call site] 00113
21 strbuf_grow [function] [call site] 00114
21 vsnprintf [call site] 00115
21 strbuf_avail [function] [call site] 00116
21 BUG_fl [function] [call site] 00117
21 strbuf_setlen [function] [call site] 00118
18 setenv [call site] 00119
16 strrchr [call site] 00120
16 strbuf_addstr [function] [call site] 00121
16 git_is_dir_sep [function] [call site] 00122
16 strbuf_addch [function] [call site] 00123
16 strbuf_addstr [function] [call site] 00124
16 tr2_dst_too_many_files [function] [call site] 00125
17 tr2_sysenv_get [function] [call site] 00126
17 atoi [function] [call site] 00127
17 strbuf_addstr [function] [call site] 00128
17 git_is_dir_sep [function] [call site] 00129
17 strbuf_addbuf [function] [call site] 00130
18 strbuf_setlen [function] [call site] 00131
17 strbuf_addstr [function] [call site] 00132
17 stat64 [function] [call site] 00133
17 opendir [call site] 00134
17 readdir64 [call site] 00135
17 closedir [call site] 00136
17 open64 [call site] 00137
17 strbuf_release [function] [call site] 00138
18 strbuf_init [function] [call site] 00139
19 strbuf_grow [function] [call site] 00140
17 strbuf_release [function] [call site] 00141
16 strbuf_setlen [function] [call site] 00142
16 strbuf_addf [function] [call site] 00143
16 open64 [call site] 00144
16 strbuf_release [function] [call site] 00145
16 tr2_dst_want_warning [function] [call site] 00146
17 tr2_sysenv_get [function] [call site] 00147
17 atoi [function] [call site] 00148
16 tr2_sysenv_display_name [function] [call site] 00149
17 BUG_fl [function] [call site] 00150
16 warning [function] [call site] 00151
16 tr2_dst_want_warning [function] [call site] 00152
16 tr2_sysenv_display_name [function] [call site] 00153
16 __errno_location [call site] 00154
16 warning [function] [call site] 00155
16 tr2_dst_trace_disable [function] [call site] 00156
17 close [call site] 00157
16 strbuf_release [function] [call site] 00158
16 strbuf_release [function] [call site] 00159
15 tr2_dst_try_path [function] [call site] 00160
16 tr2_dst_want_warning [function] [call site] 00161
16 tr2_sysenv_display_name [function] [call site] 00162
16 __errno_location [call site] 00163
16 warning [function] [call site] 00164
16 tr2_dst_trace_disable [function] [call site] 00165
15 starts_with [function] [call site] 00166
15 tr2_dst_try_unix_domain_socket [function] [call site] 00167
16 skip_prefix [function] [call site] 00168
16 skip_prefix [function] [call site] 00169
16 skip_prefix [function] [call site] 00170
16 tr2_dst_want_warning [function] [call site] 00171
16 tr2_sysenv_display_name [function] [call site] 00172
16 warning [function] [call site] 00173
16 tr2_dst_trace_disable [function] [call site] 00174
16 is_absolute_path [function] [call site] 00175
16 strlen [call site] 00176
16 tr2_dst_want_warning [function] [call site] 00177
16 tr2_sysenv_display_name [function] [call site] 00178
16 warning [function] [call site] 00179
16 tr2_dst_trace_disable [function] [call site] 00180
16 tr2_dst_try_uds_connect [function] [call site] 00181
17 socket [call site] 00182
17 gitstrlcpy [function] [call site] 00183
18 strlen [call site] 00184
17 connect [call site] 00185
17 __errno_location [call site] 00186
16 __errno_location [call site] 00187
16 tr2_dst_try_uds_connect [function] [call site] 00188
16 tr2_dst_want_warning [function] [call site] 00189
16 tr2_sysenv_display_name [function] [call site] 00190
16 __errno_location [call site] 00191
16 warning [function] [call site] 00192
16 tr2_dst_trace_disable [function] [call site] 00193
15 tr2_dst_malformed_warning [function] [call site] 00194
16 tr2_sysenv_display_name [function] [call site] 00195
16 warning [function] [call site] 00196
15 tr2_dst_trace_disable [function] [call site] 00197
12 common_exit [function] [call site] 00198
13 trace2_cmd_exit_fl [function] [call site] 00199
14 trace_git_fsync_stats [function] [call site] 00200
15 log_trace_fsync_if [function] [call site] 00201
16 trace2_data_intmax_fl [function] [call site] 00202
17 strbuf_addf [function] [call site] 00203
17 trace2_data_string_fl [function] [call site] 00204
18 getnanotime [function] [call site] 00205
19 highres_nanos [function] [call site] 00206
20 clock_gettime [call site] 00207
19 gettimeofday_nanos [function] [call site] 00208
20 gettimeofday [call site] 00209
19 gettimeofday_nanos [function] [call site] 00210
19 highres_nanos [function] [call site] 00211
18 tr2tls_absolute_elapsed [function] [call site] 00212
18 tr2tls_region_elasped_self [function] [call site] 00213
19 tr2tls_get_self [function] [call site] 00214
20 pthread_getspecific [call site] 00215
20 getnanotime [function] [call site] 00216
20 tr2tls_create_self [function] [call site] 00217
21 xcalloc [function] [call site] 00218
22 die [function] [call site] 00219
22 memory_limit_check [function] [call site] 00220
22 calloc [call site] 00221
22 calloc [call site] 00222
22 die [function] [call site] 00223
21 xcalloc [function] [call site] 00224
21 tr2tls_locked_increment [function] [call site] 00225
22 pthread_mutex_unlock [call site] 00226
21 strbuf_addf [function] [call site] 00227
21 strbuf_addstr [function] [call site] 00228
21 strbuf_setlen [function] [call site] 00229
21 strbuf_detach [function] [call site] 00230
22 strbuf_grow [function] [call site] 00231
22 strbuf_init [function] [call site] 00232
21 pthread_setspecific [call site] 00233
18 tr2_dst_trace_want [function] [call site] 00234
17 strbuf_release [function] [call site] 00235
15 log_trace_fsync_if [function] [call site] 00236
14 trace2_collect_process_info [function] [call site] 00237
15 trace2_is_enabled [function] [call site] 00238
15 getppid [call site] 00239
15 push_ancestry_name [function] [call site] 00240
16 stat_parent_pid [function] [call site] 00241
17 strbuf_addf [function] [call site] 00242
17 git_fopen [function] [call site] 00243
18 fopen64 [call site] 00244
18 fopen64 [call site] 00245
18 fileno [call site] 00246
18 fstat64 [function] [call site] 00247
19 __fxstat64 [call site] 00248
18 fclose [call site] 00249
18 fclose [call site] 00250
18 __errno_location [call site] 00251
17 strbuf_fread [function] [call site] 00252
18 strbuf_grow [function] [call site] 00253
18 fread [call site] 00254
18 strbuf_setlen [function] [call site] 00255
18 strbuf_release [function] [call site] 00256
17 parse_proc_stat [function] [call site] 00257
18 strrchr [call site] 00258
18 strchr [call site] 00259
18 strtol [call site] 00260
17 fclose [call site] 00261
17 strbuf_release [function] [call site] 00262
17 strbuf_release [function] [call site] 00263
16 strvec_push [function] [call site] 00264
17 xstrdup [function] [call site] 00265
17 strvec_push_nodup [function] [call site] 00266
18 st_mult [function] [call site] 00267
18 xrealloc [function] [call site] 00268
16 push_ancestry_name [function] [call site] 00269
15 trace2_cmd_ancestry_fl [function] [call site] 00270
16 tr2_dst_trace_want [function] [call site] 00271
15 strvec_clear [function] [call site] 00272
16 strvec_init [function] [call site] 00273
14 getnanotime [function] [call site] 00274
14 tr2tls_absolute_elapsed [function] [call site] 00275
14 tr2_dst_trace_want [function] [call site] 00276
12 exit [call site] 00277
12 abort [call site] 00278
5 die [function] [call site] 00279
5 error [function] [call site] 00280
3 hashmap_init [function] [call site] 00281
4 alloc_table [function] [call site] 00282
5 xcalloc [function] [call site] 00283
3 pack_map_entry_cmp [function] [call site] 00284
4 strcmp [call site] 00285
3 pthread_mutex_init [call site] 00286
2 remote_state_new [function] [call site] 00287
3 xmalloc [function] [call site] 00288
3 hashmap_init [function] [call site] 00289
3 remotes_hash_cmp [function] [call site] 00290
4 strncmp [call site] 00291
3 hashmap_init [function] [call site] 00292
3 branches_hash_cmp [function] [call site] 00293
4 strncmp [call site] 00294
4 strcmp [call site] 00295
2 parsed_object_pool_new [function] [call site] 00296
3 xmalloc [function] [call site] 00297
3 allocate_alloc_state [function] [call site] 00298
4 xcalloc [function] [call site] 00299
3 allocate_alloc_state [function] [call site] 00300
3 allocate_alloc_state [function] [call site] 00301
3 allocate_alloc_state [function] [call site] 00302
3 allocate_alloc_state [function] [call site] 00303
3 xcalloc [function] [call site] 00304
3 allocate_commit_buffer_slab [function] [call site] 00305
4 xmalloc [function] [call site] 00306
4 init_buffer_slab [function] [call site] 00307
5 init_buffer_slab_with_stride [function] [call site] 00308
2 index_state_init [function] [call site] 00309
2 repo_set_hash_algo [function] [call site] 00310
1 parse_commit_graph [function] [call site] 00311
2 get_be32 [function] [call site] 00312
2 _ [function] [call site] 00313
2 error [function] [call site] 00314
2 _ [function] [call site] 00315
2 error [function] [call site] 00316
2 oid_version [function] [call site] 00317
3 hash_algo_by_ptr [function] [call site] 00318
3 _ [function] [call site] 00319
3 die [function] [call site] 00320
2 _ [function] [call site] 00321
2 oid_version [function] [call site] 00322
2 error [function] [call site] 00323
2 alloc_commit_graph [function] [call site] 00324
3 xcalloc [function] [call site] 00325
2 _ [function] [call site] 00326
2 error [function] [call site] 00327
2 init_chunkfile [function] [call site] 00328
3 xcalloc [function] [call site] 00329
2 read_table_of_contents [function] [call site] 00330
3 st_mult [function] [call site] 00331
3 xrealloc [function] [call site] 00332
3 get_be32 [function] [call site] 00333
3 get_be64 [function] [call site] 00334
4 get_be32 [function] [call site] 00335
4 get_be32 [function] [call site] 00336
3 _ [function] [call site] 00337
3 error [function] [call site] 00338
3 get_be64 [function] [call site] 00339
3 _ [function] [call site] 00340
3 error [function] [call site] 00341
3 _ [function] [call site] 00342
3 error [function] [call site] 00343
3 get_be32 [function] [call site] 00344
3 _ [function] [call site] 00345
2 pair_chunk [function] [call site] 00346
3 read_chunk [function] [call site] 00347
2 read_chunk [function] [call site] 00348
2 graph_read_oid_lookup [function] [call site] 00349
2 pair_chunk [function] [call site] 00350
2 pair_chunk [function] [call site] 00351
2 pair_chunk [function] [call site] 00352
2 pair_chunk [function] [call site] 00353
2 pair_chunk [function] [call site] 00354
2 pair_chunk [function] [call site] 00355
2 read_chunk [function] [call site] 00356
2 graph_read_bloom_data [function] [call site] 00357
3 get_be32 [function] [call site] 00358
3 xmalloc [function] [call site] 00359
3 get_be32 [function] [call site] 00360
3 get_be32 [function] [call site] 00361
2 init_bloom_filters [function] [call site] 00362
3 init_bloom_filter_slab [function] [call site] 00363
4 init_bloom_filter_slab_with_stride [function] [call site] 00364
2 oidread [function] [call site] 00365
3 hash_algo_by_ptr [function] [call site] 00366
2 verify_commit_graph_lite [function] [call site] 00367
3 error [function] [call site] 00368
2 free_chunkfile [function] [call site] 00369
2 free_chunkfile [function] [call site] 00370
1 repo_clear [function] [call site] 00371
2 raw_object_store_clear [function] [call site] 00372
3 oidmap_free [function] [call site] 00373
4 hashmap_clear_ [function] [call site] 00374
5 free_individual_entries [function] [call site] 00375
6 hashmap_iter_init [function] [call site] 00376
6 hashmap_iter_next [function] [call site] 00377
3 pthread_mutex_destroy [call site] 00378
3 free_commit_graph [function] [call site] 00379
4 munmap [call site] 00380
3 free_object_directories [function] [call site] 00381
4 free_object_directory [function] [call site] 00382
5 odb_clear_loose_cache [function] [call site] 00383
6 oidtree_clear [function] [call site] 00384
7 mem_pool_discard [function] [call site] 00385
7 oidtree_init [function] [call site] 00386
8 cb_init [function] [call site] 00387
8 mem_pool_init [function] [call site] 00388
9 mem_pool_alloc_block [function] [call site] 00389
10 st_add [function] [call site] 00390
11 die [function] [call site] 00391
10 xmalloc [function] [call site] 00392
4 kh_destroy_odb_path_map [function] [call site] 00393
5 kh_release_odb_path_map [function] [call site] 00394
3 close_object_store [function] [call site] 00395
4 BUG_fl [function] [call site] 00396
4 close_pack [function] [call site] 00397
5 close_pack_windows [function] [call site] 00398
6 die [function] [call site] 00399
5 close_pack_fd [function] [call site] 00400
6 close [call site] 00401
5 close_pack_index [function] [call site] 00402
5 close_pack_revindex [function] [call site] 00403
6 munmap [call site] 00404
5 close_pack_mtimes [function] [call site] 00405
6 munmap [call site] 00406
5 oidset_clear [function] [call site] 00407
6 kh_release_oid_set [function] [call site] 00408
6 oidset_init [function] [call site] 00409
7 kh_resize_oid_set [function] [call site] 00410
8 st_mult [function] [call site] 00411
8 xmalloc [function] [call site] 00412
8 oidhash_by_value [function] [call site] 00413
9 oidhash [function] [call site] 00414
4 close_midx [function] [call site] 00415
5 close_midx [function] [call site] 00416
6 munmap [call site] 00417
4 close_commit_graph [function] [call site] 00418
5 close_commit_graph_one [function] [call site] 00419
6 clear_commit_graph_data_slab [function] [call site] 00420
6 close_commit_graph_one [function] [call site] 00421
7 free_commit_graph [function] [call site] 00422
3 hashmap_clear_ [function] [call site] 00423
2 parsed_object_pool_clear [function] [call site] 00424
3 free_tree_buffer [function] [call site] 00425
3 release_commit_memory [function] [call site] 00426
4 set_commit_tree [function] [call site] 00427
4 free_commit_buffer [function] [call site] 00428
5 buffer_slab_peek [function] [call site] 00429
4 free_commit_list [function] [call site] 00430
5 pop_commit [function] [call site] 00431
3 release_tag_memory [function] [call site] 00432
3 free_commit_buffer_slab [function] [call site] 00433
4 clear_buffer_slab [function] [call site] 00434
3 clear_alloc_state [function] [call site] 00435
3 clear_alloc_state [function] [call site] 00436
3 clear_alloc_state [function] [call site] 00437
3 clear_alloc_state [function] [call site] 00438
3 clear_alloc_state [function] [call site] 00439
3 stat_validity_clear [function] [call site] 00440
2 git_configset_clear [function] [call site] 00441
3 hashmap_iter_first [function] [call site] 00442
4 hashmap_iter_init [function] [call site] 00443
4 hashmap_iter_next [function] [call site] 00444
3 container_of_or_null_offset [function] [call site] 00445
3 string_list_clear [function] [call site] 00446
3 hashmap_iter_next [function] [call site] 00447
3 hashmap_clear_ [function] [call site] 00448
2 submodule_cache_free [function] [call site] 00449
3 submodule_cache_clear [function] [call site] 00450
4 hashmap_iter_first [function] [call site] 00451
4 container_of_or_null_offset [function] [call site] 00452
4 free_one_config [function] [call site] 00453
4 hashmap_iter_next [function] [call site] 00454
4 hashmap_clear_ [function] [call site] 00455
4 hashmap_clear_ [function] [call site] 00456
2 discard_index [function] [call site] 00457
3 release_index [function] [call site] 00458
4 validate_cache_entries [function] [call site] 00459
5 should_validate_cache_entries [function] [call site] 00460
6 getenv [call site] 00461
5 mem_pool_contains [function] [call site] 00462
5 mem_pool_contains [function] [call site] 00463
5 BUG_fl [function] [call site] 00464
5 validate_cache_entries [function] [call site] 00465
4 resolve_undo_clear_index [function] [call site] 00466
5 string_list_clear [function] [call site] 00467
4 free_name_hash [function] [call site] 00468
5 hashmap_clear_ [function] [call site] 00469
5 hashmap_clear_ [function] [call site] 00470
4 cache_tree_free [function] [call site] 00471
5 cache_tree_free [function] [call site] 00472
4 discard_split_index [function] [call site] 00473
5 discard_index [function] [call site] 00474
6 index_state_init [function] [call site] 00475
4 free_untracked_cache [function] [call site] 00476
5 strbuf_release [function] [call site] 00477
5 free_untracked [function] [call site] 00478
6 free_untracked [function] [call site] 00479
4 clear_pattern_list [function] [call site] 00480
5 hashmap_clear_ [function] [call site] 00481
5 hashmap_clear_ [function] [call site] 00482
4 should_validate_cache_entries [function] [call site] 00483
4 mem_pool_discard [function] [call site] 00484
2 promisor_remote_clear [function] [call site] 00485
2 remote_state_clear [function] [call site] 00486
3 remote_clear [function] [call site] 00487
3 hashmap_clear_ [function] [call site] 00488
3 hashmap_clear_ [function] [call site] 00489
2 repo_clear_path_cache [function] [call site] 00490
1 free_commit_graph [function] [call site] 00491