Fuzz introspector: fuzz-commit-graph
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
414 416 3 :

['die', 'error', 'const_error.52762']

414 416 memory_limit_check call site: 00006 /src/git/wrapper.c:26
28 28 1 :

['git_configset_clear']

60 659 repo_clear call site: 00463 /src/git/repository.c:344
25 25 1 :

['submodule_cache_free']

32 631 repo_clear call site: 00480 /src/git/repository.c:349
23 23 1 :

['clear_pattern_list']

27 33 release_index call site: 00516 /src/git/read-cache.c:2466
3 3 1 :

['promisor_remote_clear']

7 106 repo_clear call site: 00496 /src/git/repository.c:359
2 2 1 :

['abort']

2 2 vreportf call site: 00034 /src/git/usage.c:16
0 0 None 836 1280 validate_cache_entries call site: 00499 /src/git/read-cache.c:2494
0 0 None 425 425 free_untracked_cache call site: 00516 /src/git/dir.c:3687
0 0 None 416 833 xrealloc call site: 00079 /src/git/wrapper.c:131
0 0 None 414 416 do_xmalloc call site: 00005 /src/git/wrapper.c:53
0 0 None 414 414 xcalloc call site: 00258 /src/git/wrapper.c:152
0 0 None 16 22 close_commit_graph call site: 00457 /src/git/commit-graph.c:834

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 initialize_repository [function] [call site] 00001
2 raw_object_store_new [function] [call site] 00002
3 xmalloc [function] [call site] 00003
4 do_xmalloc [function] [call site] 00004
5 memory_limit_check [function] [call site] 00005
6 git_env_ulong [function] [call site] 00006
7 getenv [call site] 00007
7 git_parse_ulong [function] [call site] 00008
8 git_parse_unsigned [function] [call site] 00009
9 strchr [call site] 00010
9 __errno_location [call site] 00011
9 __errno_location [call site] 00012
9 strtoumax [call site] 00013
9 __errno_location [call site] 00014
9 __errno_location [call site] 00015
9 get_unit_factor [function] [call site] 00016
10 strcasecmp [call site] 00017
10 strcasecmp [call site] 00018
10 strcasecmp [call site] 00019
9 __errno_location [call site] 00020
9 __errno_location [call site] 00021
9 __errno_location [call site] 00022
7 die [function] [call site] 00025
8 fputs [call site] 00026
8 common_exit [function] [call site] 00027
9 check_bug_if_BUG [function] [call site] 00028
10 BUG_fl [function] [call site] 00029
11 BUG_vfl [function] [call site] 00030
12 BUG_vfl_common [function] [call site] 00031
13 snprintf [call site] 00032
13 vreportf [function] [call site] 00033
14 strlen [call site] 00034
14 fprintf [call site] 00035
14 abort [call site] 00036
14 vsnprintf [call site] 00037
14 fprintf [call site] 00039
14 fflush [call site] 00040
14 write_in_full [function] [call site] 00041
15 xwrite [function] [call site] 00042
16 write [call site] 00043
16 __errno_location [call site] 00044
16 __errno_location [call site] 00045
16 handle_nonblock [function] [call site] 00046
17 poll [call site] 00047
15 __errno_location [call site] 00048
12 abort [call site] 00049
12 trace2_cmd_error_va_fl [function] [call site] 00050
13 tr2_dst_trace_want [function] [call site] 00051
14 tr2_dst_get_trace_fd [function] [call site] 00052
15 tr2_sysenv_get [function] [call site] 00053
16 getenv [call site] 00055
16 xstrdup [function] [call site] 00056
17 strdup [call site] 00057
15 strcmp [call site] 00060
15 strcasecmp [call site] 00061
15 strcmp [call site] 00062
15 strlen [call site] 00063
15 atoi [call site] 00064
15 is_absolute_path [function] [call site] 00065
16 git_is_dir_sep [function] [call site] 00066
15 is_directory [function] [call site] 00067
15 tr2_dst_try_auto_path [function] [call site] 00068
16 tr2_sid_get [function] [call site] 00069
17 tr2_sid_compute [function] [call site] 00070
18 getenv [call site] 00071
18 strbuf_addstr [function] [call site] 00072
19 strlen [call site] 00073
19 strbuf_add [function] [call site] 00074
20 strbuf_setlen [function] [call site] 00087
21 __assert_fail [call site] 00089
18 strbuf_addch [function] [call site] 00090
19 strbuf_avail [function] [call site] 00091
19 strbuf_grow [function] [call site] 00092
18 tr2_sid_append_my_sid_component [function] [call site] 00093
19 getpid [call site] 00094
19 tr2_tbuf_utc_datetime [function] [call site] 00095
20 gmtime_r [call site] 00096
19 strbuf_addstr [function] [call site] 00102
19 strbuf_addch [function] [call site] 00103
19 xgethostname [function] [call site] 00104
20 gethostname [call site] 00105
19 strbuf_add [function] [call site] 00106
19 strlen [call site] 00107
19 hash_to_hex_algop_r [function] [call site] 00108
19 strbuf_addch [function] [call site] 00109
19 strbuf_add [function] [call site] 00110
19 strbuf_addf [function] [call site] 00111
20 strbuf_vaddf [function] [call site] 00112
21 strbuf_avail [function] [call site] 00113
21 strbuf_grow [function] [call site] 00114
21 vsnprintf [call site] 00115
21 strbuf_avail [function] [call site] 00118
21 strbuf_grow [function] [call site] 00119
21 vsnprintf [call site] 00120
21 strbuf_avail [function] [call site] 00121
21 strbuf_setlen [function] [call site] 00123
18 setenv [call site] 00124
16 strrchr [call site] 00125
16 strbuf_addstr [function] [call site] 00126
16 git_is_dir_sep [function] [call site] 00127
16 strbuf_addch [function] [call site] 00128
16 strbuf_addstr [function] [call site] 00129
16 tr2_dst_too_many_files [function] [call site] 00130
17 tr2_sysenv_get [function] [call site] 00131
17 strbuf_addstr [function] [call site] 00132
17 git_is_dir_sep [function] [call site] 00133
17 strbuf_addbuf [function] [call site] 00134
18 strbuf_grow [function] [call site] 00135
18 strbuf_setlen [function] [call site] 00136
17 strbuf_addstr [function] [call site] 00137
17 opendir [call site] 00138
17 readdir64 [call site] 00139
17 closedir [call site] 00140
17 open64 [call site] 00141
17 strbuf_release [function] [call site] 00142
18 strbuf_init [function] [call site] 00143
19 strbuf_grow [function] [call site] 00144
17 strbuf_release [function] [call site] 00145
16 strbuf_setlen [function] [call site] 00146
16 strbuf_addf [function] [call site] 00147
16 open64 [call site] 00148
16 strbuf_release [function] [call site] 00149
16 tr2_dst_want_warning [function] [call site] 00150
17 tr2_sysenv_get [function] [call site] 00151
16 tr2_sysenv_display_name [function] [call site] 00152
16 tr2_dst_want_warning [function] [call site] 00155
16 tr2_sysenv_display_name [function] [call site] 00156
16 __errno_location [call site] 00157
16 tr2_dst_trace_disable [function] [call site] 00159
17 close [call site] 00160
16 strbuf_release [function] [call site] 00161
16 strbuf_release [function] [call site] 00162
15 tr2_dst_try_path [function] [call site] 00163
16 open64 [call site] 00164
16 tr2_dst_want_warning [function] [call site] 00165
16 tr2_sysenv_display_name [function] [call site] 00166
16 __errno_location [call site] 00167
16 tr2_dst_trace_disable [function] [call site] 00169
15 starts_with [function] [call site] 00170
15 tr2_dst_try_unix_domain_socket [function] [call site] 00171
16 skip_prefix [function] [call site] 00172
16 skip_prefix [function] [call site] 00173
16 skip_prefix [function] [call site] 00174
16 tr2_dst_want_warning [function] [call site] 00175
16 tr2_sysenv_display_name [function] [call site] 00176
16 tr2_dst_trace_disable [function] [call site] 00178
16 is_absolute_path [function] [call site] 00179
16 strlen [call site] 00180
16 tr2_dst_want_warning [function] [call site] 00181
16 tr2_sysenv_display_name [function] [call site] 00182
16 tr2_dst_trace_disable [function] [call site] 00184
16 tr2_dst_try_uds_connect [function] [call site] 00185
17 socket [call site] 00186
17 gitstrlcpy [function] [call site] 00187
18 strlen [call site] 00188
17 connect [call site] 00189
17 close [call site] 00190
17 __errno_location [call site] 00191
16 __errno_location [call site] 00192
16 tr2_dst_try_uds_connect [function] [call site] 00193
16 tr2_dst_want_warning [function] [call site] 00194
16 tr2_sysenv_display_name [function] [call site] 00195
16 __errno_location [call site] 00196
16 tr2_dst_trace_disable [function] [call site] 00198
15 tr2_dst_malformed_warning [function] [call site] 00199
16 tr2_sysenv_display_name [function] [call site] 00200
15 tr2_dst_trace_disable [function] [call site] 00202
12 common_exit [function] [call site] 00203
13 trace2_cmd_exit_fl [function] [call site] 00204
14 trace2_collect_process_info [function] [call site] 00205
15 trace2_is_enabled [function] [call site] 00206
15 getppid [call site] 00207
15 push_ancestry_name [function] [call site] 00208
16 stat_parent_pid [function] [call site] 00209
17 strbuf_addf [function] [call site] 00210
17 git_fopen [function] [call site] 00211
18 fopen64 [call site] 00212
18 fileno [call site] 00213
18 fclose [call site] 00214
18 fclose [call site] 00215
18 __errno_location [call site] 00216
17 strbuf_fread [function] [call site] 00217
18 strbuf_grow [function] [call site] 00218
18 fread [call site] 00219
18 strbuf_setlen [function] [call site] 00220
18 strbuf_release [function] [call site] 00221
17 parse_proc_stat [function] [call site] 00222
18 strchr [call site] 00223
18 strtol [call site] 00224
18 strbuf_add [function] [call site] 00225
17 fclose [call site] 00226
17 strbuf_release [function] [call site] 00227
17 strbuf_release [function] [call site] 00228
16 strvec_push [function] [call site] 00229
17 strvec_push_nodup [function] [call site] 00231
16 push_ancestry_name [function] [call site] 00234
17 strbuf_release [function] [call site] 00235
15 trace2_cmd_ancestry_fl [function] [call site] 00236
16 tr2_dst_trace_want [function] [call site] 00237
15 strvec_clear [function] [call site] 00238
16 strvec_init [function] [call site] 00239
14 getnanotime [function] [call site] 00240
15 highres_nanos [function] [call site] 00241
16 clock_gettime [call site] 00242
15 gettimeofday_nanos [function] [call site] 00243
16 gettimeofday [call site] 00244
15 gettimeofday_nanos [function] [call site] 00245
15 highres_nanos [function] [call site] 00246
14 tr2tls_absolute_elapsed [function] [call site] 00247
14 tr2_dst_trace_want [function] [call site] 00248
12 exit [call site] 00249
5 const_error [function] [call site] 00252
3 hashmap_init [function] [call site] 00253
4 alloc_table [function] [call site] 00254
5 xcalloc [function] [call site] 00255
6 memory_limit_check [function] [call site] 00257
6 calloc [call site] 00258
6 calloc [call site] 00259
3 pack_map_entry_cmp [function] [call site] 00261
4 strcmp [call site] 00262
3 pthread_mutex_init [call site] 00263
2 remote_state_new [function] [call site] 00264
3 hashmap_init [function] [call site] 00266
3 remotes_hash_cmp [function] [call site] 00267
4 xstrncmpz [function] [call site] 00268
5 strncmp [call site] 00269
4 strcmp [call site] 00270
3 hashmap_init [function] [call site] 00271
3 branches_hash_cmp [function] [call site] 00272
4 xstrncmpz [function] [call site] 00273
4 strcmp [call site] 00274
2 parsed_object_pool_new [function] [call site] 00275
3 allocate_alloc_state [function] [call site] 00277
3 allocate_alloc_state [function] [call site] 00279
3 allocate_alloc_state [function] [call site] 00280
3 allocate_alloc_state [function] [call site] 00281
3 allocate_alloc_state [function] [call site] 00282
3 allocate_commit_buffer_slab [function] [call site] 00284
4 init_buffer_slab [function] [call site] 00286
5 init_buffer_slab_with_stride [function] [call site] 00287
2 index_state_init [function] [call site] 00290
2 set_default_hash_algo [function] [call site] 00291
3 getenv [call site] 00292
3 hash_algo_by_name [function] [call site] 00293
4 strcmp [call site] 00294
3 repo_set_hash_algo [function] [call site] 00295
1 repo_set_hash_algo [function] [call site] 00296
1 parse_commit_graph [function] [call site] 00297
2 const_error [function] [call site] 00301
2 const_error [function] [call site] 00304
2 oid_version [function] [call site] 00310
2 const_error [function] [call site] 00312
2 alloc_commit_graph [function] [call site] 00313
2 const_error [function] [call site] 00317
2 init_chunkfile [function] [call site] 00318
2 read_chunk [function] [call site] 00344
2 const_error [function] [call site] 00358
2 read_chunk [function] [call site] 00359
2 graph_read_oid_lookup [function] [call site] 00360
2 const_error [function] [call site] 00366
2 read_chunk [function] [call site] 00367
2 graph_read_commit_data [function] [call site] 00368
2 const_error [function] [call site] 00374
2 pair_chunk [function] [call site] 00375
3 read_chunk [function] [call site] 00376
2 pair_chunk [function] [call site] 00377
2 read_chunk [function] [call site] 00378
2 graph_read_generation_data [function] [call site] 00379
2 pair_chunk [function] [call site] 00383
2 read_chunk [function] [call site] 00384
2 graph_read_bloom_index [function] [call site] 00385
2 read_chunk [function] [call site] 00388
2 init_bloom_filters [function] [call site] 00396
3 init_bloom_filter_slab [function] [call site] 00397
4 init_bloom_filter_slab_with_stride [function] [call site] 00398
2 oidread [function] [call site] 00399
3 hash_algo_by_ptr [function] [call site] 00400
2 free_chunkfile [function] [call site] 00401
2 free_chunkfile [function] [call site] 00402
1 repo_clear [function] [call site] 00403
2 raw_object_store_clear [function] [call site] 00404
3 oidmap_free [function] [call site] 00405
4 hashmap_clear_ [function] [call site] 00406
5 free_individual_entries [function] [call site] 00407
6 hashmap_iter_init [function] [call site] 00408
6 hashmap_iter_next [function] [call site] 00409
3 pthread_mutex_destroy [call site] 00410
3 free_commit_graph [function] [call site] 00411
4 munmap [call site] 00412
3 free_object_directories [function] [call site] 00413
4 free_object_directory [function] [call site] 00414
5 odb_clear_loose_cache [function] [call site] 00415
6 oidtree_clear [function] [call site] 00416
7 mem_pool_discard [function] [call site] 00417
7 oidtree_init [function] [call site] 00418
8 mem_pool_init [function] [call site] 00420
9 mem_pool_alloc_block [function] [call site] 00421
5 loose_object_map_clear [function] [call site] 00425
6 kh_destroy_oid_map [function] [call site] 00426
7 kh_release_oid_map [function] [call site] 00427
6 kh_destroy_oid_map [function] [call site] 00428
4 kh_destroy_odb_path_map [function] [call site] 00429
5 kh_release_odb_path_map [function] [call site] 00430
3 close_object_store [function] [call site] 00431
4 close_pack [function] [call site] 00433
5 close_pack_windows [function] [call site] 00434
5 close_pack_fd [function] [call site] 00437
6 close [call site] 00438
5 close_pack_index [function] [call site] 00439
6 munmap [call site] 00440
5 close_pack_revindex [function] [call site] 00441
6 munmap [call site] 00442
5 close_pack_mtimes [function] [call site] 00443
6 munmap [call site] 00444
5 oidset_clear [function] [call site] 00445
6 kh_release_oid_set [function] [call site] 00446
6 oidset_init [function] [call site] 00447
7 kh_resize_oid_set [function] [call site] 00448
4 close_midx [function] [call site] 00453
5 close_midx [function] [call site] 00454
6 close_midx [function] [call site] 00455
7 munmap [call site] 00456
4 close_commit_graph [function] [call site] 00457
5 clear_commit_graph_data_slab [function] [call site] 00458
5 deinit_bloom_filters [function] [call site] 00459
6 deep_clear_bloom_filter_slab [function] [call site] 00460
5 free_commit_graph [function] [call site] 00461
3 hashmap_clear_ [function] [call site] 00462
2 parsed_object_pool_clear [function] [call site] 00463
3 free_tree_buffer [function] [call site] 00464
3 release_commit_memory [function] [call site] 00465
4 set_commit_tree [function] [call site] 00466
4 free_commit_buffer [function] [call site] 00467
5 buffer_slab_peek [function] [call site] 00468
4 free_commit_list [function] [call site] 00469
5 pop_commit [function] [call site] 00470
3 release_tag_memory [function] [call site] 00471
3 free_commit_buffer_slab [function] [call site] 00472
4 clear_buffer_slab [function] [call site] 00473
3 clear_alloc_state [function] [call site] 00474
3 clear_alloc_state [function] [call site] 00475
3 clear_alloc_state [function] [call site] 00476
3 clear_alloc_state [function] [call site] 00477
3 clear_alloc_state [function] [call site] 00478
3 stat_validity_clear [function] [call site] 00479
2 git_configset_clear [function] [call site] 00480
3 hashmap_iter_first [function] [call site] 00481
4 hashmap_iter_init [function] [call site] 00482
4 hashmap_iter_next [function] [call site] 00483
3 container_of_or_null_offset [function] [call site] 00484
3 string_list_clear [function] [call site] 00485
3 hashmap_iter_next [function] [call site] 00486
3 hashmap_clear_ [function] [call site] 00487
2 submodule_cache_free [function] [call site] 00488
3 submodule_cache_clear [function] [call site] 00489
4 hashmap_iter_first [function] [call site] 00490
4 container_of_or_null_offset [function] [call site] 00491
4 free_one_config [function] [call site] 00492
4 hashmap_iter_next [function] [call site] 00493
4 hashmap_clear_ [function] [call site] 00494
4 hashmap_clear_ [function] [call site] 00495
2 discard_index [function] [call site] 00496
3 release_index [function] [call site] 00497
4 validate_cache_entries [function] [call site] 00498
5 should_validate_cache_entries [function] [call site] 00499
6 getenv [call site] 00500
5 mem_pool_contains [function] [call site] 00502
5 mem_pool_contains [function] [call site] 00503
5 validate_cache_entries [function] [call site] 00505
4 resolve_undo_clear_index [function] [call site] 00506
5 string_list_clear [function] [call site] 00507
4 free_name_hash [function] [call site] 00508
5 hashmap_clear_ [function] [call site] 00509
5 hashmap_clear_ [function] [call site] 00510
4 cache_tree_free [function] [call site] 00511
5 cache_tree_free [function] [call site] 00512
4 discard_split_index [function] [call site] 00513
5 discard_index [function] [call site] 00514
6 index_state_init [function] [call site] 00515
4 free_untracked_cache [function] [call site] 00516
5 strbuf_release [function] [call site] 00517
5 free_untracked [function] [call site] 00518
6 free_untracked [function] [call site] 00519
4 clear_pattern_list [function] [call site] 00520
5 clear_pattern_entry_hashmap [function] [call site] 00521
6 hashmap_iter_first [function] [call site] 00522
6 container_of_or_null_offset [function] [call site] 00523
6 hashmap_iter_next [function] [call site] 00524
6 hashmap_clear_ [function] [call site] 00525
5 clear_pattern_entry_hashmap [function] [call site] 00526
4 should_validate_cache_entries [function] [call site] 00527
4 mem_pool_discard [function] [call site] 00528
2 promisor_remote_clear [function] [call site] 00529
2 remote_state_clear [function] [call site] 00530
3 remote_clear [function] [call site] 00531
4 strvec_clear [function] [call site] 00532
4 strvec_clear [function] [call site] 00533
3 rewrites_release [function] [call site] 00534
3 rewrites_release [function] [call site] 00535
3 hashmap_clear_ [function] [call site] 00536
3 hashmap_iter_first [function] [call site] 00537
3 container_of_or_null_offset [function] [call site] 00538
3 branch_release [function] [call site] 00539
4 refspec_item_clear [function] [call site] 00540
3 hashmap_iter_next [function] [call site] 00541
3 hashmap_clear_ [function] [call site] 00542
2 hashmap_iter_first [function] [call site] 00543
2 container_of_or_null_offset [function] [call site] 00544
2 ref_store_release [function] [call site] 00545
2 hashmap_iter_next [function] [call site] 00546
2 strmap_clear [function] [call site] 00547
3 strmap_free_entries_ [function] [call site] 00548
4 hashmap_iter_first [function] [call site] 00549
4 hashmap_iter_next [function] [call site] 00550
3 hashmap_clear_ [function] [call site] 00551
2 hashmap_iter_first [function] [call site] 00552
2 container_of_or_null_offset [function] [call site] 00553
2 ref_store_release [function] [call site] 00554
2 hashmap_iter_next [function] [call site] 00555
2 strmap_clear [function] [call site] 00556
2 repo_clear_path_cache [function] [call site] 00557
1 free_commit_graph [function] [call site] 00558