High level conclusions

Fuzzer fuzz_probe_analyze is blocked:

The runtime code coverage of fuzz_probe_analyze covers 17.58% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_scene is blocked:

The runtime code coverage of fuzz_scene covers 7.160% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_route is blocked:

The runtime code coverage of fuzz_route covers 14.89% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_m2ts_probe is blocked:

The runtime code coverage of fuzz_m2ts_probe covers 11.17% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 12.61% of cyclomatic complexity.

Fuzzers reach 20.41% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

4139 / 20278

Cyclomatic complexity statically reachable by fuzzers

20123 / 159461

Runtime code coverage of functions

3562 / 20278

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_m2ts_probe

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	5134	98.9%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	56	1.07%
All colors	5190	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4551	457	gf_fread	call site: 00457	iso_progressive_read_thread
133	160	gf_realloc	call site: 00160	gf_url_concatenate
87	5083	gf_m2ts_demux_del	call site: 05083	gf_rmdir
75	329	gf_fclose	call site: 00329	gf_url_concatenate
59	100	gf_fopen_ex	call site: 00100	fio_open
52	7	gf_m2ts_probe_file	call site: 00007	gf_blob_release
39	406	gf_fopen_ex	call site: 00406	gf_mkdir
32	294	gf_fclose	call site: 00294	gf_file_delete
20	63	gf_fopen_ex	call site: 00063	gf_fileio_from_blob
20	5053	gf_m2ts_demux_del	call site: 05053	gf_odf_desc_list_del
18	5033	gf_m2ts_demux_del	call site: 05033	gf_m2ts_es_del
13	5171	gf_m2ts_demux_del	call site: 05171	gf_m2ts_delete_channel_application_info

Runtime coverage analysis

Covered functions

28

Functions that are reachable but not covered

151

Reachable functions

170

Percentage of reachable functions covered

11.18%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_m2ts_probe.c	8
src/media_tools/mpegts.c	37
src/utils/os_divers.c	17
src/utils/list.c	8
src/utils/os_thread.c	17
src/utils/os_file.c	122
src/utils/alloc.c	5
applications/gpac/gpac.c	25
src/utils/url.c	22
src/utils/error.c	8
src/utils/utf.c	10
applications/testapps/fmp4demux/main.c	15
src/isomedia/isom_read.c	32
src/isomedia/box_funcs.c	40
src/utils/os_config_init.c	4
src/utils/configfile.c	3
src/isomedia/box_code_base.c	36
src/isomedia/data_map.c	51
src/utils/bitstream.c	41
src/isomedia/isom_store.c	1
src/isomedia/isom_intern.c	59
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	3
src/isomedia/meta.c	5
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	52
src/utils/constants.c	2
src/isomedia/stbl_write.c	23
src/isomedia/isom_write.c	45
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	16
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
src/media_tools/dvb_mpe.c	5
src/utils/symbian_os.cpp	11
src/media_tools/dsmcc.c	8
src/media_tools/ait.c	6

Fuzzer: fuzz_route

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	11389	92.4%
gold	[1:9]	4	0.03%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	931	7.55%
All colors	12324	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2092	1161	gf_bs_read_data	call site: 01161	MergeFragment
2052	8706	gf_fq_res_add	call site: 08706	js_dump_error
1733	6972	JS_IsUndefined	call site: 06972	jsf_pid_set_property
993	3254	gf_bs_read_long_int	call site: 03254	gf_media_nal_rewrite_samples
922	4251	gf_fflush	call site: 04251	gf_media_nal_rewrite_samples
145	10799	gf_sys_set_console_code	call site: 10799	gf_filter_new_finalize
132	11676	gf_filter_del	call site: 11676	gf_fs_check_gl_provider
125	6392	gf_filter_parse_prop_solve_env_var	call site: 06392	gf_fs_solve_js_script
123	947	BS_ReadByte	call site: 00947	senc_Parse
123	12151	gf_js_delete_runtime	call site: 12151	qjs_uninit_runtime_libc
108	321	URL_GetProtocolType	call site: 00321	gf_url_concatenate
95	5938	gf_opts_get_int	call site: 05938	gf_cfg_load_restrict

Runtime coverage analysis

Covered functions

467

Functions that are reachable but not covered

971

Reachable functions

1141

Percentage of reachable functions covered

14.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_route.c	15
src/utils/os_divers.c	121
src/utils/error.c	54
src/utils/list.c	10
src/utils/alloc.c	5
src/utils/symbian_os.cpp	27
src/utils/os_config_init.c	77
src/utils/os_file.c	134
src/utils/utf.c	10
src/utils/configfile.c	32
src/utils/os_thread.c	51
applications/gpac/gpac.c	27
src/utils/url.c	22
src/utils/gzio.c	10
applications/testapps/fmp4demux/main.c	15
src/isomedia/isom_read.c	32
src/isomedia/box_funcs.c	40
src/isomedia/box_code_base.c	36
src/isomedia/data_map.c	51
src/utils/bitstream.c	42
src/isomedia/isom_store.c	1
src/isomedia/isom_intern.c	59
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	3
src/isomedia/meta.c	5
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	52
src/utils/constants.c	12
src/isomedia/stbl_write.c	23
src/isomedia/isom_write.c	45
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	16
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
src/quickjs/quickjs-libc.c	26
applications/testapps/broadcaster/debug.c	3
src/utils/module.c	42
src/utils/os_net.c	46
src/utils/rmt_ws.c	11
modules/x11_out/x11_out.c	1
src/scenegraph/x3d_nodes.c	3
src/scenegraph/base_scenegraph.c	3
src/filter_core/filter_session.c	133
src/filter_core/filter.c	121
src/filter_core/filter_props.c	64
src/filter_core/filter_queue.c	16
src/filters/reframer.c	4
modules/test_filter/test_filter.c	1
src/filter_core/filter_pid.c	61
src/filter_core/filter_session_js.c	30
src/jsmods/core.c	48
src/quickjs/quickjs.c	555
src/quickjs/quickjs.h	17
src/quickjs/list.h	1
src/quickjs/dtoa.c	48
src/quickjs/cutils.h	11
src/quickjs/libunicode.h	2
src/quickjs/libunicode.c	1
src/filters/jsfilter.c	73
src/scenegraph/vrml_js.c	5
src/utils/math.c	15
src/quickjs/libregexp.c	1
src/quickjs/cutils.c	10
src/filter_core/filter_pck.c	11
src/filters/in_pipe.c	3
src/filters/out_route.c	5
src/filters/in_rtp.c	2
src/utils/gltools.c	1
src/utils/os_module.c	16
modules/alsa/alsa.c	7
modules/droid_out/droid_vout-bitmap.c	2
src/utils/downloader_emscripten.c	3
src/compositor/font_engine.c	11
modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	1
src/utils/path2d.c	1
src/filters/ff_common.c	5

Fuzzer: fuzz_parse

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4591	75.3%
gold	[1:9]	44	0.72%
yellow	[10:29]	23	0.37%
greenyellow	[30:49]	14	0.22%
lawngreen	50+	1424	23.3%
All colors	6096	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
549	5541	gf_isom_get_track	call site: 05541	WriteFlat
458	5082	gf_isom_write	call site: 05082	gf_isom_get_duration
431	2481	gf_odf_write_lang	call site: 02481	gf_odf_write_ipmp
411	3247	gf_odf_read_lang	call site: 03247	gf_odf_read_ipmp
338	3834	trak_on_child_box	call site: 03834	gf_odf_desc_copy
245	1829	gf_odf_del_esd_ref	call site: 01829	gf_odf_del_ipmp
224	308	gf_list_del_item	call site: 00308	gf_url_concatenate
150	156	URL_GetProtocolType	call site: 00156	gf_url_concatenate
131	2165	gf_odf_size_descriptor	call site: 02165	gf_odf_size_ipmp
122	1268	gf_isom_box_parse	call site: 01268	gf_isom_is_identical_sgpd
93	1414	gf_bs_write_u16	call site: 01414	gf_isom_is_identical_sgpd
84	1545	sgpd_del_entry	call site: 01545	gf_isom_cenc_merge_saiz_saio

Runtime coverage analysis

Covered functions

1331

Functions that are reachable but not covered

601

Reachable functions

894

Percentage of reachable functions covered

32.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_parse.c	18
src/isomedia/isom_intern.c	70
src/utils/alloc.c	5
src/utils/list.c	8
src/isomedia/data_map.c	56
src/utils/os_file.c	118
src/utils/os_config_init.c	4
src/utils/configfile.c	3
src/utils/error.c	13
src/utils/os_divers.c	18
src/utils/os_thread.c	17
applications/gpac/gpac.c	25
src/utils/url.c	22
src/utils/utf.c	10
src/utils/bitstream.c	46
src/isomedia/isom_store.c	100
src/isomedia/box_funcs.c	40
applications/testapps/fmp4demux/main.c	15
src/isomedia/isom_read.c	44
src/isomedia/box_code_base.c	36
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	70
src/isomedia/meta.c	5
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	53
src/utils/constants.c	2
src/isomedia/stbl_write.c	27
src/isomedia/isom_write.c	56
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	16
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
src/utils/base_encoding.c	9
applications/gpac_android/src/main/jni/gpac_jni.cpp	18

Fuzzer: fuzz_scene

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	29323	95.0%
gold	[1:9]	841	2.72%
yellow	[10:29]	289	0.93%
greenyellow	[30:49]	100	0.32%
lawngreen	50+	290	0.94%
All colors	30843	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4030	21414	gf_dom_add_text_node	call site: 21414	CTXLoad_NodeCallback
3991	1018	gf_bs_read_data	call site: 01018	MergeFragment
3228	14359	gf_mx_del	call site: 14359	gf_sc_focus_switch_ring
2849	8255	gf_node_unregister	call site: 08255	gf_scene_on_node_modified
2485	11106	gf_list_pop_back	call site: 11106	gf_scene_notify_event
2176	26117	gf_path_close	call site: 26117	CTXLoad_NodeCallback
1440	5414	gf_node_new	call site: 05414	AudioBuffer_Create
1017	18029	gf_node_del	call site: 18029	Anchor_Del
907	20504	gf_node_register_iri	call site: 20504	gf_node_replace_child
853	19639	gf_sg_reset	call site: 19639	set_media_url
695	13651	attributes_set_default_value	call site: 13651	CTXLoad_NodeCallback
651	28299	command_buffers_del	call site: 28299	gf_bifs_flush_command_list

Runtime coverage analysis

Covered functions

242

Functions that are reachable but not covered

3034

Reachable functions

3268

Percentage of reachable functions covered

7.16%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_scene.c	11
src/bifs/bifs_codec.c	34
src/utils/list.c	10
src/utils/alloc.c	5
src/utils/bitstream.c	41
src/utils/os_file.c	126
applications/gpac/gpac.c	27
applications/testapps/fmp4demux/main.c	15
src/utils/os_thread.c	44
src/isomedia/isom_read.c	32
src/isomedia/box_funcs.c	40
src/utils/error.c	49
src/utils/utf.c	10
src/utils/os_config_init.c	31
src/utils/configfile.c	16
src/utils/url.c	22
src/utils/os_divers.c	48
src/isomedia/box_code_base.c	36
src/isomedia/data_map.c	51
src/isomedia/isom_store.c	1
src/isomedia/isom_intern.c	59
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	3
src/isomedia/meta.c	5
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	52
src/utils/constants.c	12
src/isomedia/stbl_write.c	23
src/isomedia/isom_write.c	45
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	16
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
src/bifs/com_dec.c	101
src/bifs/field_decode.c	79
src/scenegraph/vrml_tools.c	121
src/scenegraph/vrml_proto.c	73
src/bifs/bifs_node_tables.c	31
src/scenegraph/base_scenegraph.c	104
src/scenegraph/commands.c	79
src/scenegraph/mpeg4_nodes.c	1393
src/scenegraph/x3d_nodes.c	666
src/scenegraph/svg_types.c	42
src/scenegraph/vrml_script.c	16
src/scenegraph/vrml_interpolators.c	5
src/scenegraph/mpeg4_animators.c	9
src/utils/math.c	64
src/scenegraph/mpeg4_valuator.c	32
src/scenegraph/vrml_route.c	40
src/compositor/scene_node_init.c	34
src/compositor/compositor_node_init.c	137
src/compositor/compositor.c	91
src/compositor/mpeg4_animstream.c	30
src/compositor/media_object.c	51
src/compositor/mpeg4_mediacontrol.c	36
src/compositor/mpeg4_inline.c	57
src/compositor/object_manager.c	78
src/filter_core/filter.c	131
src/filter_core/filter_session.c	87
src/filter_core/filter_props.c	64
src/utils/symbian_os.cpp	7
src/filter_core/filter_queue.c	16
src/filters/reframer.c	4
src/utils/os_net.c	1
src/utils/gzio.c	10
modules/test_filter/test_filter.c	1
src/filter_core/filter_pid.c	76
src/filter_core/filter_session_js.c	21
src/jsmods/core.c	40
src/quickjs/quickjs.c	555
src/quickjs/quickjs.h	17
src/quickjs/list.h	1
src/quickjs/dtoa.c	48
src/quickjs/cutils.h	11
src/quickjs/libunicode.h	2
src/quickjs/libunicode.c	1
src/filters/jsfilter.c	73
src/scenegraph/vrml_js.c	67
src/quickjs/quickjs-libc.c	4
src/quickjs/libregexp.c	1
src/quickjs/cutils.c	10
src/filter_core/filter_pck.c	11
src/filters/in_pipe.c	3
src/filters/out_route.c	5
src/filters/in_rtp.c	2
src/compositor/scene.c	113
src/scenegraph/dom_events.c	55
src/scenegraph/xml_ns.c	37
src/scenegraph/svg_attributes.c	179
src/utils/path2d.c	27
src/scenegraph/svg_properties.c	4
src/scenegraph/svg_js.c	8
src/filters/load_bt_xmt.c	3
src/compositor/mpeg4_mediasensor.c	12
src/compositor/mpeg4_inputsensor.c	55
src/compositor/clock.c	11
share/nodejs/src/gpac_napi.c	12
src/utils/sha1.c	12
src/compositor/audio_render.c	5
src/compositor/audio_mixer.c	7
src/evg/surface.c	7
src/compositor/visual_manager_3d_gl.c	10
src/utils/color.c	10
src/compositor/compositor_2d.c	21
src/compositor/events.c	100
src/compositor/mpeg4_layout.c	13
src/compositor/mpeg4_sensors.c	31
src/compositor/svg_grouping.c	15
modules/droid_out/droid_vout-bitmap.c	2
src/scenegraph/dom_js.c	13
src/scenegraph/html5_media_js.c	6
src/media_tools/html5_media.c	14
src/media_tools/html5_mse.c	1
src/utils/rmt_ws.c	1
src/scenegraph/smil_anim.c	79
src/scenegraph/smil_timing.c	29
src/compositor/mpeg4_grouping_2d.c	9
src/compositor/visual_manager_3d.c	40
src/compositor/bindable.c	16
src/compositor/navigate.c	62
src/compositor/camera.c	41
src/compositor/visual_manager_2d.c	14
src/compositor/mpeg4_composite.c	30
src/compositor/texturing_gl.c	25
src/compositor/mpeg4_layer_3d.c	9
src/compositor/compositor_3d.c	5
src/compositor/scene_ns.c	42
src/compositor/mpeg4_textures.c	32
modules/demo_is/demo_is.c	8
src/compositor/mpeg4_audio.c	29
src/compositor/audio_input.c	12
src/compositor/mpeg4_timesensor.c	14
src/compositor/texturing.c	14
src/compositor/mpeg4_background2d.c	13
src/compositor/drawable.c	8
src/compositor/mpeg4_bitmap.c	5
src/compositor/mpeg4_geometry_2d.c	7
src/compositor/mpeg4_viewport.c	12
src/compositor/mpeg4_geometry_ils2d.c	7
src/compositor/mpeg4_geometry_ifs2d.c	7
src/compositor/mpeg4_sound.c	4
src/compositor/mpeg4_gradients.c	4
src/compositor/visual_manager.c	10
src/compositor/mesh.c	13
src/evg/stencil.c	11
src/utils/gltools.c	2
src/compositor/mpeg4_form.c	6
src/compositor/mpeg4_grouping.c	3
src/compositor/mpeg4_layer_2d.c	5
src/compositor/mpeg4_path_layout.c	4
src/compositor/mpeg4_grouping_3d.c	8
src/compositor/mpeg4_text.c	6
src/compositor/mpeg4_background.c	20
src/compositor/mpeg4_geometry_3d.c	16
src/compositor/mpeg4_lighting.c	3
src/compositor/x3d_geometry.c	9
src/compositor/hardcoded_protos.c	45
src/compositor/hc_flash_shape.c	6
applications/testapps/hevcbench/main.c	42
src/compositor/svg_geometry.c	3
src/compositor/svg_paint_servers.c	4
src/compositor/svg_text.c	11
src/compositor/svg_media.c	26
src/compositor/svg_font.c	26
src/compositor/font_engine.c	11
modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	21
src/compositor/svg_filters.c	7
src/bifs/unquantize.c	33
src/bifs/conditional.c	6
src/bifs/script_dec.c	54
src/bifs/predictive_mffield.c	34
src/bifs/arith_decoder.c	9
src/bifs/memory_decoder.c	63
src/laser/lsr_dec.c	238

Fuzzer: fuzz_probe_analyze

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	9239	81.5%
gold	[1:9]	166	1.46%
yellow	[10:29]	133	1.17%
greenyellow	[30:49]	44	0.38%
lawngreen	50+	1741	15.3%
All colors	11323	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1669	6042	JS_IsUndefined	call site: 06042	jsf_pid_set_property
1232	7914	gf_filter_pid_set_property	call site: 07914	jsf_pid_get_property
670	9161	gf_mx2d_decompose	call site: 09161	js_dump_error
488	3959	gf_bs_read_double	call site: 03959	gf_odf_read_ipmp
484	3158	gf_odf_write_isom_iod	call site: 03158	gf_odf_write_isom_od
328	4562	trak_on_child_box	call site: 04562	gf_odf_desc_copy
247	2558	gf_odf_del_esd_inc	call site: 02558	gf_odf_del_ipmp
246	10775	gf_filter_del	call site: 10775	gf_fs_check_gl_provider
182	5555	gf_isom_oinf_new_entry	call site: 05555	gf_isom_is_identical_sgpd
142	9872	gf_sys_set_console_code	call site: 09872	js_dump_error_exc
137	2889	gf_odf_size_descriptor	call site: 02889	gf_odf_size_ipmp
84	5957	gf_filter_new_finalize	call site: 05957	jsfs_exec_tasks_custom

Runtime coverage analysis

Covered functions

2789

Functions that are reachable but not covered

886

Reachable functions

1075

Percentage of reachable functions covered

17.58%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_probe_analyze.c	13
src/filter_core/filter_session.c	133
src/utils/error.c	51
src/utils/os_config_init.c	28
src/utils/configfile.c	13
src/utils/list.c	10
src/utils/alloc.c	5
src/utils/url.c	22
src/utils/os_file.c	126
src/utils/os_thread.c	44
applications/gpac/gpac.c	27
src/utils/os_divers.c	23
src/utils/utf.c	10
src/filter_core/filter.c	121
src/utils/constants.c	12
src/filter_core/filter_props.c	64
src/utils/symbian_os.cpp	27
src/filter_core/filter_queue.c	16
src/filters/reframer.c	4
src/utils/os_net.c	1
src/utils/gzio.c	10
applications/testapps/fmp4demux/main.c	15
src/isomedia/isom_read.c	32
src/isomedia/box_funcs.c	40
src/isomedia/box_code_base.c	36
src/isomedia/data_map.c	51
src/utils/bitstream.c	41
src/isomedia/isom_store.c	1
src/isomedia/isom_intern.c	59
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	3
src/isomedia/meta.c	5
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	52
src/isomedia/stbl_write.c	23
src/isomedia/isom_write.c	45
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	16
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
modules/test_filter/test_filter.c	1
src/filter_core/filter_pid.c	61
src/filter_core/filter_session_js.c	30
src/jsmods/core.c	42
src/quickjs/quickjs.c	555
src/quickjs/quickjs.h	17
src/quickjs/list.h	1
src/quickjs/dtoa.c	48
src/quickjs/cutils.h	11
src/quickjs/libunicode.h	2
src/quickjs/libunicode.c	1
src/filters/jsfilter.c	73
src/scenegraph/vrml_js.c	5
src/quickjs/quickjs-libc.c	4
src/utils/math.c	15
src/quickjs/libregexp.c	1
src/quickjs/cutils.c	10
src/filter_core/filter_pck.c	11
src/filters/in_pipe.c	3
src/filters/out_route.c	5
src/filters/in_rtp.c	2
modules/x11_out/x11_out.c	1
src/scenegraph/x3d_nodes.c	3
src/scenegraph/base_scenegraph.c	3
src/utils/gltools.c	1
src/utils/module.c	27
src/utils/os_module.c	13
modules/alsa/alsa.c	7
modules/droid_out/droid_vout-bitmap.c	2
src/utils/rmt_ws.c	1
src/utils/downloader_emscripten.c	3
src/compositor/font_engine.c	11
modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	1
src/utils/path2d.c	1
src/filters/ff_common.c	5

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
_main_thread	/src/gpac/applications/gpac/gpac.c	1	['void*']	67	0	13	3	2	6610	0	40481	22711

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

6289 / 20278

Cyclomatic complexity statically reachable by fuzzers

42834 / 159461

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

testsuite/oss-fuzzers/fuzz_m2ts_probe.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_fread', 'gf_realloc', 'gf_m2ts_demux_del', 'gf_fclose', 'gf_fopen_ex', 'gf_m2ts_probe_file']

testsuite/oss-fuzzers/fuzz_route.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_bs_read_data', 'gf_fq_res_add', 'JS_IsUndefined', 'gf_bs_read_long_int', 'gf_fflush', 'gf_sys_set_console_code', 'gf_filter_del', 'gf_filter_parse_prop_solve_env_var', 'BS_ReadByte', 'gf_js_delete_runtime']

testsuite/oss-fuzzers/fuzz_parse.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_isom_get_track', 'gf_isom_write', 'gf_odf_write_lang', 'gf_odf_read_lang', 'trak_on_child_box', 'gf_odf_del_esd_ref', 'gf_list_del_item', 'URL_GetProtocolType', 'gf_odf_size_descriptor', 'gf_isom_box_parse']

testsuite/oss-fuzzers/fuzz_scene.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_dom_add_text_node', 'gf_bs_read_data', 'gf_mx_del', 'gf_node_unregister', 'gf_list_pop_back', 'gf_path_close', 'gf_node_new', 'gf_node_del', 'gf_node_register_iri', 'gf_sg_reset']

testsuite/oss-fuzzers/fuzz_probe_analyze.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['JS_IsUndefined', 'gf_filter_pid_set_property', 'gf_mx2d_decompose', 'gf_bs_read_double', 'gf_odf_write_isom_iod', 'trak_on_child_box', 'gf_odf_del_esd_inc', 'gf_filter_del', 'gf_isom_oinf_new_entry', 'gf_sys_set_console_code']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
gf_log_tool_level_on	37	10	27.02%	['fuzz_probe_analyze', 'fuzz_parse', 'fuzz_m2ts_probe', 'fuzz_scene', 'fuzz_route']
gf_fopen_ex	92	42	45.65%	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_probe_analyze']
gf_unregister_file_handle	32	8	25.0%	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_probe_analyze']
dtout_register	35	7	20.0%	['fuzz_probe_analyze', 'fuzz_route']
gf_filter_new	195	85	43.58%	['fuzz_probe_analyze', 'fuzz_route']
gf_filter_parse_prop_solve_env_var	46	21	45.65%	['fuzz_probe_analyze', 'fuzz_route']
gf_filter_ask_rt_reschedule	31	12	38.70%	['fuzz_probe_analyze', 'fuzz_route']
gf_filter_load_arg_config	112	28	25.0%	['fuzz_probe_analyze', 'fuzz_route']
filter_parse_dyn_args	575	201	34.95%	['fuzz_probe_analyze', 'fuzz_route']
gf_filter_sess_reset_graph	37	12	32.43%	['fuzz_probe_analyze', 'fuzz_route']
gf_props_parse_value	553	123	22.24%
gf_props_equal_internal	113	59	52.21%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_reg_all	60	23	38.33%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_add_filter_register	31	14	45.16%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_new	162	79	48.76%
gf_fs_push_arg	73	36	49.31%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_stop	43	9	20.93%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_sema_io	42	6	14.28%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_load_filter_internal	112	32	28.57%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_unload_script	36	9	25.0%	['fuzz_probe_analyze', 'fuzz_route']
init_cuda_sdk	36	19	52.77%	['fuzz_probe_analyze', 'fuzz_route']
cuInit	275	5	1.818%	['fuzz_probe_analyze', 'fuzz_route']
routein_on_event_file	170	24	14.11%	['fuzz_route']
routein_finalize	64	21	32.81%	['fuzz_route']
gf_route_dmx_new_internal	82	33	40.24%	['fuzz_route']
gf_route_dmx_process_object	68	12	17.64%	['fuzz_route']
gf_sys_set_console_code	49	26	53.06%	['fuzz_probe_analyze', 'fuzz_route']
default_log_callback_color	33	18	54.54%	['fuzz_probe_analyze', 'fuzz_route']
gf_error_to_string	89	30	33.70%	['fuzz_probe_analyze', 'fuzz_parse', 'fuzz_m2ts_probe', 'fuzz_scene', 'fuzz_route']
gf_parse_lfrac	71	27	38.02%	['fuzz_probe_analyze', 'fuzz_route']
gf_modules_refresh_module_directories	36	19	52.77%	['fuzz_route']
gf_modules_load_filter	33	11	33.33%	['fuzz_route']
gf_cfg_init	138	39	28.26%	['fuzz_route']
create_default_config	94	41	43.61%	['fuzz_route']
gf_sys_refresh_cache	35	11	31.42%	['fuzz_route']
gf_enum_directory	100	53	53.0%	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze']
gf_netcap_setup	186	56	30.10%	['fuzz_route']
gf_sk_setup_multicast_ex	273	38	13.91%	['fuzz_route']
gf_sk_group_unregister	44	16	36.36%	['fuzz_probe_analyze', 'fuzz_route']
gf_sk_group_select	117	34	29.05%	['fuzz_probe_analyze', 'fuzz_route']
gf_sk_receive_internal	86	24	27.90%	['fuzz_route']
inet_addr_from_name	32	4	12.5%	['fuzz_route']
netcap_filter_pck	92	12	13.04%	['fuzz_route']
gf_isom_datamap_new	62	34	54.83%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_fdm_new	104	36	34.61%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_open_file	77	37	48.05%	['fuzz_parse']
gf_isom_write	53	27	50.94%	['fuzz_probe_analyze', 'fuzz_parse']
gf_odf_desc_add_desc	52	13	25.0%	['fuzz_parse']
gf_bs_write_data	78	34	43.58%	['fuzz_probe_analyze', 'fuzz_parse']
BS_WriteByte	60	19	31.66%	['fuzz_probe_analyze', 'fuzz_route', 'fuzz_parse', 'fuzz_scene']
gf_cenc_key_info_get_iv_size	31	6	19.35%	['fuzz_parse']
gf_url_concatenate_ex	238	106	44.53%	['fuzz_probe_analyze', 'fuzz_route', 'fuzz_parse']
lsr_read_command_list	153	50	32.67%	['fuzz_scene']
lsr_read_add_replace_insert	413	33	7.990%	['fuzz_scene']
lsr_read_id	80	38	47.5%	['fuzz_scene']
lsr_translate_anim_value	129	10	7.751%	['fuzz_scene']
lsr_translate_anim_values	140	21	15.0%	['fuzz_scene']
lsr_read_byte_align_string_list	83	38	45.78%	['fuzz_scene']
lsr_to_dom_key	46	20	43.47%	['fuzz_scene']
lsr_read_an_anim_value	186	101	54.30%	['fuzz_scene']
lsr_translate_anim_trans_value	107	25	23.36%	['fuzz_scene']
lsr_read_float_list	42	23	54.76%	['fuzz_scene']
lsr_read_delete	52	16	30.76%	['fuzz_scene']
lsr_read_send_event	62	23	37.09%	['fuzz_scene']
gf_lsr_anim_type_to_attribute	272	8	2.941%	['fuzz_scene']
gf_sg_reset	129	52	40.31%	['fuzz_scene']
gf_node_free	32	9	28.12%	['fuzz_scene']
gf_node_del	45	22	48.88%	['fuzz_scene']
gf_node_new	41	21	51.21%	['fuzz_scene']
gf_dom_get_key_type	89	24	26.96%	['fuzz_scene']
gf_svg_attributes_copy	227	71	31.27%	['fuzz_scene']
gf_svg_node_del	46	18	39.13%	['fuzz_scene']
attributes_set_default_value	122	7	5.737%	['fuzz_scene']
gf_filter_connect_source_internal	87	17	19.54%	['fuzz_probe_analyze']
gf_filter_pck_set_property_full	43	16	37.20%	['fuzz_probe_analyze']
gf_filter_pid_configure	378	207	54.76%	['fuzz_probe_analyze']
gf_filter_pid_needs_explicit_resolution	67	32	47.76%	['fuzz_probe_analyze']
gf_filter_pid_connect_task	73	21	28.76%	['fuzz_probe_analyze']
gf_filter_pid_init_task	850	383	45.05%	['fuzz_probe_analyze']
gf_filter_pid_merge_properties_internal	53	28	52.83%	['fuzz_probe_analyze']
evt_get_refstr	31	15	48.38%	['fuzz_probe_analyze']
gf_props_dump_val	179	92	51.39%	['fuzz_probe_analyze', 'fuzz_route']
gf_props_dump	51	28	54.90%	['fuzz_probe_analyze', 'fuzz_route']
gf_fs_solve_js_script	35	10	28.57%	['fuzz_probe_analyze', 'fuzz_route']
uncv_parse_config	260	36	13.84%	['fuzz_probe_analyze']
dashdmx_io_on_dash_event	218	86	39.44%	['fuzz_probe_analyze']
dashdmx_process	250	28	11.20%	['fuzz_probe_analyze']
dashdmx_load_source	100	39	39.0%	['fuzz_probe_analyze']
dashdmx_configure_pid	150	48	32.0%	['fuzz_probe_analyze']
dashdmx_initialize	140	72	51.42%	['fuzz_probe_analyze']
dashdmx_process_event	200	16	8.0%	['fuzz_probe_analyze']
gsfdmx_read_prop	156	23	14.74%	['fuzz_probe_analyze']
gsfdmx_tune	70	25	35.71%	['fuzz_probe_analyze']
m2tsdmx_on_event	337	89	26.40%	['fuzz_probe_analyze']
m2tsdmx_declare_pid	447	185	41.38%	['fuzz_probe_analyze']
m2tsdmx_send_packet	106	55	51.88%	['fuzz_probe_analyze']
m2tdmx_merge_props	62	3	4.838%	['fuzz_probe_analyze']
m2tsdmx_send_sl_packet	86	15	17.44%	['fuzz_probe_analyze']
m2tsdmx_process_event	96	52	54.16%	['fuzz_probe_analyze']
filelist_process	751	73	9.720%	['fuzz_probe_analyze']
filelist_load_next	294	84	28.57%	['fuzz_probe_analyze']
filelist_next_url	338	69	20.41%	['fuzz_probe_analyze']
filelist_check_implicit_cat	62	26	41.93%	['fuzz_probe_analyze']
filelist_configure_pid	219	21	9.589%	['fuzz_probe_analyze']
filelist_initialize	91	11	12.08%	['fuzz_probe_analyze']
filelist_process_event	45	11	24.44%	['fuzz_probe_analyze']
filein_process	252	106	42.06%	['fuzz_probe_analyze']
filein_initialize_ex	153	64	41.83%	['fuzz_probe_analyze']
filein_process_event	86	38	44.18%	['fuzz_probe_analyze']
rtpin_process	262	43	16.41%	['fuzz_probe_analyze']
rtpin_initialize	76	13	17.10%	['fuzz_probe_analyze']
rtpin_process_event	114	9	7.894%	['fuzz_probe_analyze']
rtpin_load_sdp	55	19	34.54%	['fuzz_probe_analyze']
gf_inspect_dump_nalu_internal	646	310	47.98%	['fuzz_probe_analyze']
gf_inspect_dump_obu_internal	130	63	48.46%	['fuzz_probe_analyze']
gf_inspect_dump_prores_internal	122	14	11.47%	['fuzz_probe_analyze']
gf_inspect_dump_opus_internal	41	18	43.90%	['fuzz_probe_analyze']
inspect_process	132	52	39.39%	['fuzz_probe_analyze']
inspect_dump_property	226	110	48.67%	['fuzz_probe_analyze']
inspect_configure_pid	155	70	45.16%	['fuzz_probe_analyze']
isor_declare_objects	233	84	36.05%	['fuzz_probe_analyze']
isor_declare_track	880	429	48.75%	['fuzz_probe_analyze']
isor_get_chapters	79	15	18.98%	['fuzz_probe_analyze']
isoffin_configure_pid	54	23	42.59%	['fuzz_probe_analyze']
isoffin_initialize	37	14	37.83%	['fuzz_probe_analyze']
isoffin_process_event	272	80	29.41%
isor_reader_check_config	118	11	9.322%	['fuzz_probe_analyze']
isor_set_sample_groups_and_aux_data	46	22	47.82%	['fuzz_probe_analyze']
txtin_finalize	33	15	45.45%	['fuzz_probe_analyze']
txtin_process	156	41	26.28%	['fuzz_probe_analyze']
txtin_configure_pid_ex	212	84	39.62%	['fuzz_probe_analyze']
txtin_process_webvtt	37	18	48.64%	['fuzz_probe_analyze']
txtin_probe_duration	162	72	44.44%	['fuzz_probe_analyze']
txtin_process_texml	334	13	3.892%	['fuzz_probe_analyze']
txtin_texml_setup	59	26	44.06%	['fuzz_probe_analyze']
ac4dmx_configure_pid	33	12	36.36%	['fuzz_probe_analyze']
ac4dmx_process_event	46	25	54.34%	['fuzz_probe_analyze']
adts_dmx_process_event	55	28	50.90%	['fuzz_probe_analyze']
amrdmx_configure_pid	38	15	39.47%	['fuzz_probe_analyze']
av1dmx_configure_pid	33	15	45.45%	['fuzz_probe_analyze']
av1dmx_process	95	47	49.47%	['fuzz_probe_analyze']
av1dmx_process_event	57	26	45.61%	['fuzz_probe_analyze']
flac_dmx_process_event	56	24	42.85%	['fuzz_probe_analyze']
img_process	205	85	41.46%	['fuzz_probe_analyze']
mhas_dmx_configure_pid	34	15	44.11%	['fuzz_probe_analyze']
mhas_dmx_process_event	56	24	42.85%	['fuzz_probe_analyze']
mp3_dmx_process_event	56	28	50.0%	['fuzz_probe_analyze']
naludmx_start_nalu	66	34	51.51%	['fuzz_probe_analyze']
naludmx_enqueue_or_dispatch	86	40	46.51%
naludmx_initialize	34	15	44.11%	['fuzz_probe_analyze']
naludmx_process_event	83	39	46.98%	['fuzz_probe_analyze']
proresdmx_process	93	43	46.23%	['fuzz_probe_analyze']
proresdmx_process_event	65	26	40.0%	['fuzz_probe_analyze']
pcmreframe_process	222	119	53.60%	['fuzz_probe_analyze']
rawvidreframe_configure_pid	103	22	21.35%	['fuzz_probe_analyze']
seiloader_set_type	48	9	18.75%	['fuzz_probe_analyze']
gf_sdp_info_parse	230	13	5.652%	['fuzz_probe_analyze']
gf_isom_nalu_sample_rewrite	385	96	24.93%	['fuzz_probe_analyze']
stsz_box_write	40	13	32.5%	['fuzz_probe_analyze']
stsz_box_size	48	8	16.66%	['fuzz_probe_analyze']
sgpd_write_entry	110	8	7.272%	['fuzz_probe_analyze', 'fuzz_parse']
sgpd_size_entry	60	8	13.33%	['fuzz_probe_analyze']
gf_isom_box_write_header	55	15	27.27%	['fuzz_probe_analyze']
gf_isom_fdm_get_data	43	18	41.86%	['fuzz_probe_analyze', 'fuzz_parse']
MergeFragment	125	53	42.4%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_probe_file_range	32	10	31.25%	['fuzz_probe_analyze']
gf_isom_get_user_data	110	38	34.54%	['fuzz_probe_analyze']
gf_isom_apple_enum_tag_ex	151	60	39.73%	['fuzz_probe_analyze']
gf_isom_sample_get_subsamples_buffer	37	8	21.62%	['fuzz_probe_analyze']
gf_isom_enum_sample_group	79	31	39.24%	['fuzz_probe_analyze']
gf_isom_get_y3d_info	52	15	28.84%	['fuzz_probe_analyze']
gf_isom_enum_sample_aux_data	85	41	48.23%	['fuzz_probe_analyze']
gf_isom_video_sample_entry_write	80	19	23.75%	['fuzz_probe_analyze']
stbl_SearchSAPs	76	8	10.52%	['fuzz_probe_analyze']
stbl_RemoveDTS	111	25	22.52%	['fuzz_probe_analyze', 'fuzz_parse']
MergeTrack	665	307	46.16%	['fuzz_probe_analyze', 'fuzz_parse']
gf_iamf_get_obu_name	38	17	44.73%	['fuzz_probe_analyze']
gf_opus_parse_packet_header	172	47	27.32%	['fuzz_probe_analyze']
gf_dash_setup_groups	295	110	37.28%	['fuzz_probe_analyze']
gf_dash_group_enum_descriptor	37	11	29.72%	['fuzz_probe_analyze']
gf_dash_get_segment_duration	105	31	29.52%	['fuzz_probe_analyze']
gf_dash_process_internal	111	24	21.62%	['fuzz_probe_analyze']
ls_hls_purge_segments	44	14	31.81%	['fuzz_probe_analyze']
gf_dash_group_timeline_setup_single	759	20	2.635%	['fuzz_probe_analyze']
dash_setup_period_and_groups	78	39	50.0%	['fuzz_probe_analyze']
gf_dash_setup_period	398	138	34.67%	['fuzz_probe_analyze']
gf_dash_setup_single_index_mode	248	13	5.241%	['fuzz_probe_analyze']
gf_dash_resolve_url	69	33	47.82%
gf_dash_download_init_segment	219	76	34.70%	['fuzz_probe_analyze']
gf_dash_set_group_representation	273	122	44.68%	['fuzz_probe_analyze']
m3u8_setup_timeline	32	5	15.62%	['fuzz_probe_analyze']
gf_media_map_esd	82	41	50.0%	['fuzz_probe_analyze']
gf_media_map_item_esd	208	71	34.13%	['fuzz_probe_analyze']
rfc_6381_get_codec_aac	39	15	38.46%	['fuzz_probe_analyze']
gf_mpd_representation_free	66	28	42.42%	['fuzz_probe_analyze']
gf_m3u8_to_mpd	128	68	53.12%	['fuzz_probe_analyze']
gf_m3u8_solve_representation_xlink	248	113	45.56%	['fuzz_probe_analyze']
gf_mpd_resolve_url	415	59	14.21%	['fuzz_probe_analyze']
gf_m3u8_fill_mpd_struct	603	196	32.50%	['fuzz_probe_analyze']
mpeg2ps_seek_frame	48	12	25.0%	['fuzz_probe_analyze']
gf_m2ts_get_adaptation_field	155	85	54.83%	['fuzz_probe_analyze']
gf_m2ts_process_pmt	640	315	49.21%	['fuzz_probe_analyze']
gf_m2ts_process_tdt_tot	80	13	16.25%	['fuzz_probe_analyze']
gf_odf_avc_cfg_read	103	55	53.39%
swf_place_obj	116	62	53.44%	['fuzz_probe_analyze']
swf_def_font	102	30	29.41%	['fuzz_probe_analyze']
swf_def_text	80	36	45.0%	['fuzz_probe_analyze']
swf_actions	73	30	41.09%	['fuzz_probe_analyze']
swf_get_tag_name	110	48	43.63%	['fuzz_probe_analyze']
swf_init_decompress	43	10	23.25%	['fuzz_probe_analyze']
gf_codec_id_from_isobmf	122	17	13.93%	['fuzz_probe_analyze']
gf_pixel_get_size_info	250	10	4.0%	['fuzz_probe_analyze']
gf_dm_sess_del	58	3	5.172%	['fuzz_probe_analyze', 'fuzz_route']
gf_gzread	83	33	39.75%	['fuzz_probe_analyze']
check_header	48	20	41.66%	['fuzz_probe_analyze']
gf_net_parse_date	90	28	31.11%	['fuzz_probe_analyze']
gf_sha1_update	32	17	53.12%	['fuzz_probe_analyze']
gf_xml_sax_parse_file	57	29	50.87%	['fuzz_probe_analyze']
gf_xml_dump_string	32	13	40.62%	['fuzz_probe_analyze']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

gpac.c

Target file: /src/gpac/applications/gpac/gpac.c
Target functions: _main_thread

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target _main_thread */
  UNKNOWN_TYPE unknown_0;
  _main_thread(unknown_0);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/gpac/src/crypto/g_crypt_tinyaes.c	[]	[]
/src/gpac/src/filters/reframe_ac3.c	[]	[]
/src/gpac/src/compositor/hc_flash_shape.c	['fuzz_scene']	[]
/src/gpac/src/filters/ff_dec.c	[]	[]
/src/gpac/src/filters/dec_mpeghdec.c	[]	[]
/src/gpac/src/filters/dec_xvid.c	[]	[]
/src/gpac/src/ietf/rtsp_command.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACFileMediaServer.cpp	[]	[]
/src/gpac/src/compositor/svg_paint_servers.c	['fuzz_scene']	[]
/src/gpac/src/scenegraph/svg_properties.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_openhevc.c	[]	[]
/src/gpac/src/utils/utf.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/include/gpac/internal/odf_parse_common.h	[]	[]
/src/gpac/modules/dx_hw/dx_audio.c	[]	[]
/src/gpac/src/compositor/mesh_tesselate.c	[]	[]
/src/gpac/src/filters/in_http.c	[]	[]
/src/gpac/src/odf/desc_private.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/compositor/object_manager.c	['fuzz_scene']	[]
/src/gpac/src/filter_core/filter_register.c	[]	[]
/src/gpac/src/filters/in_rtp_signaling.c	[]	[]
/src/gpac/src/filters/in_rtp_rtsp.c	[]	[]
/src/gpac/src/quickjs/dtoa.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/utils/sha1.c	['fuzz_scene']	[]
/src/gpac/src/odf/oci_codec.c	[]	[]
/src/gpac/src/filters/write_nhnt.c	[]	[]
/src/gpac/src/isomedia/movie_fragments.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/src/bifs/unquantize.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/media.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/scenegraph/html5_media_js.c	['fuzz_scene']	[]
/src/gpac/src/quickjs/cutils.h	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/utils/downloader_ssl.c	[]	[]
/src/gpac/src/compositor/audio_input.c	['fuzz_scene']	[]
/src/gpac/src/compositor/scene.c	['fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_mediacontrol.c	['fuzz_scene']	[]
/src/gpac/src/compositor/drawable.c	['fuzz_scene']	[]
/src/gpac/src/filters/evg_rescale.c	[]	[]
/src/gpac/src/scenegraph/mpeg4_valuator.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/isom_tools.c	[]	[]
/src/gpac/src/filters/reframe_mp3.c	[]	[]
/src/gpac/src/bifs/bifs_node_tables.c	['fuzz_scene']	[]
/src/gpac/applications/generators/WebGLGen/main.c	[]	[]
/src/gpac/modules/validator/validator.c	[]	[]
/src/gpac/src/isomedia/isom_write.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/bifs/arith_decoder.c	['fuzz_scene']	[]
/src/gpac/src/scenegraph/smil_timing.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/box_dump.c	[]	[]
/src/gpac/modules/sdl_out/sdl_out.c	[]	[]
/src/gpac/src/filters/enc_cc.c	[]	[]
/src/gpac/src/filters/reframe_mpgvid.c	[]	[]
/src/gpac/src/bifs/script_dec.c	['fuzz_scene']	[]
/src/gpac/src/filters/dmx_mpegps.c	[]	[]
/src/gpac/src/filters/io_fcryp.c	[]	[]
/src/gpac/src/bifs/field_encode.c	[]	[]
/src/gpac/src/isomedia/box_code_apple.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACMediaController.h	[]	[]
/src/gpac/modules/sdl_out/video.c	[]	[]
/src/gpac/applications/testapps/mp4mux/main.c	[]	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_route.c	['fuzz_route']	['fuzz_route']
/src/gpac/src/filters/rewind.c	[]	[]
/src/gpac/applications/testapps/ts2hds/f4v.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACPlatinum.cpp	[]	[]
/src/gpac/src/media_tools/media_export.c	[]	[]
/src/gpac/src/scenegraph/qjs_common.h	[]	[]
/src/gpac/src/compositor/svg_font.c	['fuzz_scene']	[]
/src/gpac/src/jsmods/evg.c	[]	[]
/src/gpac/src/isomedia/box_code_drm.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/filters/filelist.c	[]	[]
/src/gpac/src/media_tools/avilib.c	[]	[]
/src/gpac/src/filters/dec_webvtt.c	[]	[]
/src/gpac/src/filters/dec_bifs.c	[]	[]
/src/gpac/src/scene_manager/scene_manager.c	[]	[]
/src/gpac/src/media_tools/dash_client.c	[]	[]
/src/gpac/src/compositor/mesh_collide.c	[]	[]
/src/gpac/src/utils/os_module.c	['fuzz_route', 'fuzz_probe_analyze']	['fuzz_route']
/src/gpac/src/scene_manager/loader_svg.c	[]	[]
/src/gpac/modules/deprecated/old_arch/hyb_in/fm_fake_push.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GenericDevice.cpp	[]	[]
/src/gpac/src/quickjs/quickjs-libc.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/compositor/mpeg4_inline.c	['fuzz_scene']	[]
/src/gpac/modules/alsa/alsa.c	['fuzz_route', 'fuzz_probe_analyze']	[]
/src/gpac/src/compositor/mpeg4_sensors.c	['fuzz_scene']	[]
/src/gpac/applications/testapps/broadcaster/sdp_generator.c	[]	[]
/src/gpac/modules/x11_out/x11_out.h	[]	[]
/src/gpac/src/media_tools/crypt_tools.c	[]	[]
/src/gpac/src/compositor/mpeg4_mediasensor.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_j2k.c	[]	[]
/src/gpac/applications/testapps/hevcbench/defbench.h	[]	[]
/src/gpac/src/bifs/quantize.c	[]	[]
/src/gpac/src/scenegraph/mpeg4_nodes.c	['fuzz_scene']	[]
/src/gpac/src/utils/sha256.c	[]	[]
/src/gpac/modules/deprecated/epoc_hw/epoc_vout.cpp	[]	[]
/src/gpac/src/utils/configfile.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route']
/src/gpac/src/quickjs/libunicode.h	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/include/gpac/constants.h	[]	[]
/src/gpac/src/isomedia/box_code_meta.c	[]	[]
/src/gpac/modules/dx_hw/dx_window.c	[]	[]
/src/gpac/modules/deprecated/old_arch/rvc_dec/rvc_dec.c	[]	[]
/src/gpac/applications/generators/SVG/v1.c	[]	[]
/src/gpac/modules/dektec_out/dektec_video.cpp	[]	[]
/src/gpac/modules/caca_out/caca_out.c	[]	[]
/src/gpac/src/isomedia/meta.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/quickjs/quickjs.h	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/evg/raster_argb.c	[]	[]
/src/gpac/src/filters/ff_avf.c	[]	[]
/src/gpac/src/filters/dec_ttml.c	[]	[]
/src/gpac/src/filters/isoffin_read_ch.c	[]	[]
/src/gpac/applications/gpac/gpac_help.c	[]	[]
/src/gpac/src/isomedia/box_code_3gpp.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/old_arch/hyb_in/hyb_in.c	[]	[]
/src/gpac/applications/testapps/udptsseg/main.c	[]	[]
/src/gpac/src/filters/dec_ttxt.c	[]	[]
/src/gpac/src/compositor/compositor_2d.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_amr.c	[]	[]
/src/gpac/include/gpac/internal/isomedia_dev.h	[]	[]
/src/gpac/src/media_tools/mpeg2_ps.c	[]	[]
/src/gpac/applications/testapps/broadcaster/RTP_serv_generator.c	[]	[]
/src/gpac/src/scenegraph/vrml_js.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/scene_manager/text_to_bifs.c	[]	[]
/src/gpac/applications/mp4box/fileimport.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/filters/dmx_avi.c	[]	[]
/src/gpac/src/filters/ff_common.h	[]	[]
/src/gpac/src/isomedia/hint_track.c	[]	[]
/src/gpac/src/compositor/mpeg4_geometry_2d.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_in.h	[]	[]
/src/gpac/src/evg/rast_soft.h	[]	[]
/src/gpac/applications/testapps/dmbrs/main.c	[]	[]
/src/gpac/src/compositor/compositor_node_init.c	['fuzz_scene']	[]
/src/gpac/src/utils/downloader.h	[]	[]
/src/gpac/src/compositor/visual_manager_2d.c	['fuzz_scene']	[]
/src/gpac/src/ietf/rtp.c	[]	[]
/src/gpac/src/filters/dec_laser.c	[]	[]
/src/gpac/src/ietf/rtp_pck_3gpp.c	[]	[]
/src/gpac/src/odf/odf_parse.c	[]	[]
/src/gpac/src/utils/zutil.h	[]	[]
/src/gpac/src/utils/downloader_nghttp2.c	[]	[]
/src/gpac/src/utils/gzio.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/src/compositor/mpeg4_grouping.c	['fuzz_scene']	[]
/src/gpac/src/evg/raster_yuv.c	[]	[]
/src/gpac/src/filters/dec_webcodec.c	[]	[]
/src/gpac/src/filters/avin_web.c	[]	[]
/src/gpac/applications/testapps/ts2hds/f4m.c	[]	[]
/src/gpac/src/filters/dmx_nhnt.c	[]	[]
/src/gpac/modules/deprecated/old_arch/psvr/psvr.c	[]	[]
/src/gpac/applications/mp4box/mp4box.c	[]	[]
/src/gpac/src/filters/rewrite_ac4.c	[]	[]
/src/gpac/src/filters/write_qcp.c	[]	[]
/src/gpac/src/isomedia/stbl_read.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/odf/odf_code.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/scene_manager/loader_isom.c	[]	[]
/src/gpac/src/laser/lsr_tables.c	[]	[]
/src/gpac/modules/deprecated/ios_cam/CameraObject.h	[]	[]
/src/gpac/src/quickjs/cutils.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/modules/dx_hw/dx_hw.h	[]	[]
/src/gpac/src/filters/reframe_truehd.c	[]	[]
/src/gpac/src/bifs/field_decode.c	['fuzz_scene']	[]
/src/gpac/src/utils/constants.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/media_tools/isom_hinter.c	[]	[]
/src/gpac/src/odf/odf_dump.c	[]	[]
/src/gpac/src/filters/dmx_ogg.c	[]	[]
/src/gpac/src/compositor/mpeg4_lighting.c	['fuzz_scene']	[]
/src/gpac/modules/directfb_out/directfb_wrapper.c	[]	[]
/src/gpac/src/filters/mux_ts.c	[]	[]
/src/gpac/src/filters/reframe_adts.c	[]	[]
/src/gpac/src/filters/decrypt_cenc_isma.c	[]	[]
/src/gpac/include/tests.h	[]	[]
/src/gpac/src/isomedia/track.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/scenegraph/smil_anim.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_av1.c	[]	[]
/src/gpac/src/filters/out_video.c	[]	[]
/src/gpac/src/compositor/visual_manager_3d_gl.c	['fuzz_scene']	[]
/src/gpac/src/filter_core/filter_session.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/in_rtp_sdp.c	[]	[]
/src/gpac/src/filters/enc_jpg.c	[]	[]
/src/gpac/src/bifs/script_enc.c	[]	[]
/src/gpac/src/compositor/audio_render.c	['fuzz_scene']	[]
/src/gpac/src/filters/rewrite_obu.c	[]	[]
/src/gpac/modules/deprecated/old_arch/osd/osd.c	[]	[]
/src/gpac/src/crypto/tiny_aes.c	[]	[]
/src/gpac/src/filters/mux_avi.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACMediaController.cpp	[]	[]
/src/gpac/src/bifs/com_dec.c	['fuzz_scene']	[]
/src/gpac/src/utils/module.c	['fuzz_route', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/applications/testapps/atscdmx/main.c	[]	[]
/src/gpac/src/compositor/mpeg4_geometry_ifs2d.c	['fuzz_scene']	[]
/src/gpac/applications/testapps/ts2udp/main.c	[]	[]
/src/gpac/src/media_tools/saf.c	[]	[]
/src/gpac/src/compositor/mpeg4_viewport.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/drm_sample.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/share/nodejs/src/gpac_napi.h	[]	[]
/src/gpac/src/filters/dec_vtb.c	[]	[]
/src/gpac/src/isomedia/hinting.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_rend.cpp	[]	[]
/src/gpac/src/scenegraph/vrml_route.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/modules/deprecated/old_arch/ui_rec/ui_rec.c	[]	[]
/src/gpac/src/compositor/gl_inc.h	[]	[]
/src/gpac/src/scenegraph/html5_mse_js.c	[]	[]
/src/gpac/src/filter_core/filter_props.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/include/gpac/internal/mesh.h	[]	[]
/src/gpac/modules/dx_hw/dx_video.c	[]	[]
/src/gpac/src/utils/xml_bin_custom.c	[]	[]
/src/gpac/src/compositor/hardcoded_protos.c	['fuzz_scene']	[]
/src/gpac/src/utils/os_net.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/scenegraph/xml_ns.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/utils/symbian_net.cpp	[]	[]
/src/gpac/src/filters/jsfilter.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/testsuite/oss-fuzzers/fuzz_m2ts_probe.c	['fuzz_m2ts_probe']	['fuzz_m2ts_probe']
/src/gpac/src/filters/out_audio.c	[]	[]
/src/gpac/src/utils/error.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']
/src/gpac/src/filters/dmx_gsf.c	[]	[]
/src/gpac/src/evg/surface.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACPlatinum.h	[]	[]
/src/gpac/applications/generators/SVG/html.c	[]	[]
/src/gpac/src/compositor/mpeg4_bitmap.c	['fuzz_scene']	[]
/src/gpac/src/filter_core/filter_pid.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/scene_manager/loader_bt.c	[]	[]
/src/gpac/src/scenegraph/vrml_script.c	['fuzz_scene']	[]
/src/gpac/src/filters/out_http.c	[]	[]
/src/gpac/src/isomedia/iff.c	[]	[]
/src/gpac/src/utils/unicode.c	[]	[]
/src/gpac/src/utils/dlmalloc.c	[]	[]
/src/gpac/src/filters/out_rtp.c	[]	[]
/src/gpac/src/scenegraph/dom_js.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_mhas.c	[]	[]
/src/gpac/src/filters/base_filter_example.c	[]	[]
/src/gpac/src/filters/dec_cc.c	[]	[]
/src/gpac/src/filters/reframe_prores.c	[]	[]
/src/gpac/src/filters/reframe_rawpcm.c	[]	[]
/src/gpac/src/media_tools/dvb_mpe.c	['fuzz_m2ts_probe']	[]
/src/gpac/src/media_tools/m2ts_mux.c	[]	[]
/src/gpac/applications/testapps/mpedemux/main.c	[]	[]
/src/gpac/src/jsmods/webgl.h	[]	[]
/src/gpac/src/compositor/mpeg4_textures.c	['fuzz_scene']	[]
/src/gpac/src/filters/ff_mx.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/modules/deprecated/old_arch/widgetman/widget.c	[]	[]
/src/gpac/src/utils/path2d.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_scene']
/src/gpac/modules/deprecated/old_arch/gapi/gapi.cpp	[]	[]
/src/gpac/src/compositor/offscreen_cache.c	[]	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_parse.c	['fuzz_parse']	['fuzz_parse']
/src/gpac/applications/testapps/broadcaster/broadcaster.c	[]	[]
/src/gpac/src/utils/downloader.c	[]	[]
/src/gpac/src/filters/vflip.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_priv.h	[]	[]
/src/gpac/src/media_tools/vobsub.c	[]	[]
/src/gpac/include/gpac/setup.h	[]	[]
/src/gpac/modules/deprecated/old_arch/netctrl/netctrl.c	[]	[]
/src/gpac/src/filters/in_route.c	[]	[]
/src/gpac/src/scenegraph/svg_types.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/applications/generators/SVG/main.c	[]	[]
/src/gpac/src/media_tools/m3u8.c	[]	[]
/src/gpac/src/scene_manager/swf_parse.c	[]	[]
/src/gpac/src/ietf/rtcp.c	[]	[]
/src/gpac/modules/deprecated/old_arch/widgetman/widgetman.c	[]	[]
/src/gpac/modules/jack/jack.c	[]	[]
/src/gpac/src/utils/downloader_ngtcp2.c	[]	[]
/src/gpac/src/filters/dec_img.c	[]	[]
/src/gpac/src/evg/raster3d.c	[]	[]
/src/gpac/src/isomedia/ttml.c	[]	[]
/src/gpac/applications/generators/X3D/main.c	[]	[]
/src/gpac/src/filters/dec_opensvc.c	[]	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_scene.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/quickjs/libregexp.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/modules/deprecated/old_arch/wiiis/wiiis.c	[]	[]
/src/gpac/src/compositor/mesh.c	['fuzz_scene']	[]
/src/gpac/src/compositor/svg_text.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_vorbis.c	[]	[]
/src/gpac/src/scenegraph/svg_js.c	['fuzz_scene']	[]
/src/gpac/src/compositor/visual_manager_3d.c	['fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_inputsensor.c	['fuzz_scene']	[]
/src/gpac/applications/gpac/compositor_tools.c	[]	[]
/src/gpac/src/filters/out_sock.c	[]	[]
/src/gpac/modules/deprecated/old_arch/audio_filter/audio_filter.c	[]	[]
/src/gpac/src/utils/base_encoding.c	['fuzz_parse']	['fuzz_parse']
/src/gpac/src/filters/out_route.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/compositor/mpeg4_path_layout.c	['fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_layer_3d.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/data_map.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/utils/os_divers.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/old_arch/hyb_in/fm_fake_pull.c	[]	[]
/src/gpac/src/filters/restamp.c	[]	[]
/src/gpac/src/utils/bitstream.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']
/src/gpac/src/odf/odf_command.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/filters/dmx_m2ts.c	[]	[]
/src/gpac/applications/testapps/broadcaster/debug.c	['fuzz_route']	[]
/src/gpac/src/crypto/g_crypt.c	[]	[]
/src/gpac/modules/ft_font/ft_font.c	[]	[]
/src/gpac/applications/testapps/fmp4demux/main.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/utils/os_config_init.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']
/src/gpac/src/filters/dec_mediacodec_jni.c	[]	[]
/src/gpac/src/filters/reframe_h263.c	[]	[]
/src/gpac/src/media_tools/reedsolomon.c	[]	[]
/src/gpac/applications/generators/SVG/v3.c	[]	[]
/src/gpac/src/isomedia/isom_intern.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/include/gpac/tools.h	[]	[]
/src/gpac/src/evg/ftgrays.c	[]	[]
/src/gpac/src/filters/hevcmerge.c	[]	[]
/src/gpac/src/filter_core/filter.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/odf/ipmpx_parse.c	[]	[]
/src/gpac/include/gpac/modules/codec.h	[]	[]
/src/gpac/src/ietf/rtsp_session.c	[]	[]
/src/gpac/applications/testapps/broadcaster/RTP_serv_packetizer.c	[]	[]
/src/gpac/src/media_tools/id3.c	[]	[]
/src/gpac/src/scene_manager/swf_bifs.c	[]	[]
/src/gpac/modules/dektec_out/dektec_video_old.cpp	[]	[]
/src/gpac/src/compositor/texturing_gl.c	['fuzz_scene']	[]
/src/gpac/src/ietf/rtp_streamer.c	[]	[]
/src/gpac/src/filters/dec_nvdec_sdk.c	[]	[]
/src/gpac/src/scenegraph/dom_events.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/bifs/bifs_codec.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/modules/directfb_out/directfb_out.c	[]	[]
/src/gpac/modules/deprecated/ios_cam/ios_cam.c	[]	[]
/src/gpac/src/media_tools/html5_media.c	['fuzz_scene']	[]
/src/gpac/src/scenegraph/vrml_proto.c	['fuzz_scene']	[]
/src/gpac/src/filters/in_sock.c	[]	[]
/src/gpac/src/odf/odf_codec.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/quickjs/quickjs-opcode.h	[]	[]
/src/gpac/applications/gpac_android/src/main/jni/gpac_jni.cpp	['fuzz_parse']	[]
/src/gpac/src/utils/md5.c	[]	[]
/src/gpac/src/filters/bs_split.c	[]	[]
/src/gpac/modules/deprecated/ios_mpegv/ios_mpegv.c	[]	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_probe_analyze.c	['fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/modules/droid_out/droid_vout-bitmap.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/isomedia/isom_read.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/jsmods/WebGLRenderingContextBase.c	[]	[]
/src/gpac/src/filters/dec_nvdec.c	[]	[]
/src/gpac/src/scenegraph/base_scenegraph.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_scene']
/src/gpac/src/scenegraph/vrml_tools.c	['fuzz_scene']	[]
/src/gpac/src/filters/isoffin_read.c	[]	[]
/src/gpac/src/compositor/mpeg4_grouping_3d.c	['fuzz_scene']	[]
/src/gpac/src/filters/vcrop.c	[]	[]
/src/gpac/src/compositor/svg_grouping.c	['fuzz_scene']	[]
/src/gpac/src/odf/ipmpx_dump.c	[]	[]
/src/gpac/src/quickjs/libunicode.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/applications/gpac/carbon_hook.c	[]	[]
/src/gpac/src/media_tools/av_parsers.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/scenegraph/x3d_nodes.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/compositor/svg_media.c	['fuzz_scene']	[]
/src/gpac/src/filters/out_file.c	[]	[]
/src/gpac/src/filters/isoffin_load.c	[]	[]
/src/gpac/src/scene_manager/encode_isom.c	[]	[]
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_load.c	[]	[]
/src/gpac/src/quickjs/list.h	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/isomedia/isom_store.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/modules/deprecated/oss_audio/oss.c	[]	[]
/src/gpac/src/filters/reframe_flac.c	[]	[]
/src/gpac/src/crypto/g_crypt_openssl.c	[]	[]
/src/gpac/src/odf/slc.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/bifs/conditional.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_rawvid.c	[]	[]
/src/gpac/src/media_tools/media_import.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/src/bifs/memory_decoder.c	['fuzz_scene']	[]
/src/gpac/src/compositor/clock.c	['fuzz_scene']	[]
/src/gpac/src/compositor/visual_manager.c	['fuzz_scene']	[]
/src/gpac/src/utils/downloader_hmux.c	[]	[]
/src/gpac/src/media_tools/dash_segmenter.c	[]	[]
/src/gpac/src/filters/reframe_nalu.c	[]	[]
/src/gpac/src/compositor/media_object.c	['fuzz_scene']	[]
/src/gpac/src/utils/xml_parser.c	[]	[]
/src/gpac/modules/deprecated/epoc_hw/epoc_codec.cpp	[]	[]
/src/gpac/src/utils/math.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_scene', 'fuzz_probe_analyze']
/src/gpac/src/jsmods/scene_js.c	[]	[]
/src/gpac/src/filters/in_file.c	[]	[]
/src/gpac/src/utils/token.c	[]	[]
/src/gpac/src/media_tools/gpac_ogg.c	[]	[]
/src/gpac/include/gpac/internal/bifs_dev.h	[]	[]
/src/gpac/src/utils/downloader_emscripten.c	['fuzz_route', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/compositor/mpeg4_timesensor.c	['fuzz_scene']	[]
/src/gpac/applications/mp4box/mp4box.h	[]	[]
/src/gpac/applications/generators/SVG/laser.c	[]	[]
/src/gpac/src/filter_core/filter_queue.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/applications/generators/MPEG4/main.c	[]	[]
/src/gpac/modules/deprecated/old_arch/libplayer/libplayer.c	[]	[]
/src/gpac/src/compositor/font_engine.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_texture.cpp	[]	[]
/src/gpac/src/evg/raster_565.c	[]	[]
/src/gpac/src/scene_manager/scene_stats.c	[]	[]
/src/gpac/include/gpac/svg_types.h	[]	[]
/src/gpac/modules/deprecated/old_arch/mse_in/mse_in.c	[]	[]
/src/gpac/src/utils/gltools.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/compositor/audio_mixer.c	['fuzz_scene']	[]
/src/gpac/src/odf/qos.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/filters/reframe_qcp.c	[]	[]
/src/gpac/src/compositor/camera.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/route_dmx.c	[]	[]
/src/gpac/src/jsmods/xhr.c	[]	[]
/src/gpac/src/filters/in_dvb4linux.c	[]	[]
/src/gpac/src/compositor/svg_external.c	[]	[]
/src/gpac/src/filters/unittests/ut_dec_cc.c	[]	[]
/src/gpac/src/filters/unittests/ut_dec_scte35.c	[]	[]
/src/gpac/modules/demo_is/demo_is.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/dsmcc.c	['fuzz_m2ts_probe']	[]
/src/gpac/src/scene_manager/scene_engine.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACMediaRenderer.cpp	[]	[]
/src/gpac/src/ietf/rtp_depacketizer.c	[]	[]
/src/gpac/src/scene_manager/loader_qt.c	[]	[]
/src/gpac/src/filters/ff_dmx.c	[]	[]
/src/gpac/src/compositor/mpeg4_geometry_3d.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/html5_mse.c	['fuzz_scene']	[]
/src/gpac/unittests/tests.c	[]	[]
/src/gpac/src/compositor/mpeg4_composite.c	['fuzz_scene']	[]
/src/gpac/src/filters/in_pipe.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/include/gpac/maths.h	[]	[]
/src/gpac/src/compositor/svg_base.c	[]	[]
/src/gpac/src/filters/write_vtt.c	[]	[]
/src/gpac/src/filters/dmx_saf.c	[]	[]
/src/gpac/src/filters/ff_bsf.c	[]	[]
/src/gpac/include/gpac/internal/ietf_dev.h	[]	[]
/src/gpac/src/compositor/mpeg4_gradients.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_img.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_grad.cpp	[]	[]
/src/gpac/modules/deprecated/old_arch/freenect/freenect.c	[]	[]
/src/gpac/src/compositor/compositor_3d.c	['fuzz_scene']	[]
/src/gpac/src/ietf/rtp_pck_mpeg4.c	[]	[]
/src/gpac/src/ietf/rtsp_response.c	[]	[]
/src/gpac/src/filters/out_rtsp.c	[]	[]
/src/gpac/src/utils/alloc.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/export.cpp	[]	[]
/src/gpac/src/filters/dmx_nhml.c	[]	[]
/src/gpac/src/filters/dec_ac52.c	[]	[]
/src/gpac/include/gpac/filters.h	[]	[]
/src/gpac/src/utils/os_thread.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/utils/list.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']
/src/gpac/src/utils/downloader_curl.c	[]	[]
/src/gpac/src/evg/raster_rgb.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACFileMediaServer.h	[]	[]
/src/gpac/src/media_tools/ait.c	['fuzz_m2ts_probe']	[]
/src/gpac/src/compositor/navigate.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/box_code_base.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/old_arch/widgetman/unzip.h	[]	[]
/src/gpac/src/filters/reframe_latm.c	[]	[]
/src/gpac/src/filters/rewrite_nalu.c	[]	[]
/src/gpac/src/isomedia/media_odf.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/filters/tilesplit.c	[]	[]
/src/gpac/applications/gpac/gpac.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/modules/dx_hw/dx_2d.c	[]	[]
/src/gpac/src/jsmods/webgl.c	[]	[]
/src/gpac/src/scenegraph/mpeg4_animators.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_theora.c	[]	[]
/src/gpac/src/laser/lsr_dec.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/mux_isom.c	[]	[]
/src/gpac/src/media_tools/mpegts.c	['fuzz_m2ts_probe']	['fuzz_m2ts_probe']
/src/gpac/src/filters/write_tx3g.c	[]	[]
/src/gpac/src/ietf/sdp.c	[]	[]
/src/gpac/src/filters/sei_load.c	[]	[]
/src/gpac/modules/deprecated/droid_mpegv/droid_mpegv.c	[]	[]
/src/gpac/src/scenegraph/vrml_interpolators.c	['fuzz_scene']	[]
/src/gpac/src/compositor/texturing.c	['fuzz_scene']	[]
/src/gpac/src/scene_manager/loader_xmt.c	[]	[]
/src/gpac/applications/generators/SVG/v2.c	[]	[]
/src/gpac/modules/deprecated/old_arch/widgetman/wgt_load.c	[]	[]
/src/gpac/src/scenegraph/commands.c	['fuzz_scene']	[]
/src/gpac/modules/dektec_out/dektec_video_decl.c	[]	[]
/src/gpac/modules/droid_out/droid_vout.c	[]	[]
/src/gpac/src/compositor/visual_manager_2d.h	[]	[]
/src/gpac/src/filters/reframe_ac4.c	[]	[]
/src/gpac/src/filters/dmx_dash.c	[]	[]
/src/gpac/src/compositor/mpeg4_layer_2d.c	['fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_grouping_2d.c	['fuzz_scene']	[]
/src/gpac/src/filters/ff_common.c	['fuzz_route', 'fuzz_probe_analyze']	[]
/src/gpac/src/scene_manager/scene_dump.c	[]	[]
/src/gpac/src/compositor/events.c	['fuzz_scene']	[]
/src/gpac/src/filters/load_text.c	[]	[]
/src/gpac/src/jsmods/core.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route']
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_decode.c	[]	[]
/src/gpac/src/evg/stencil.c	['fuzz_scene']	[]
/src/gpac/src/filters/bs_agg.c	[]	[]
/src/gpac/src/filters/mux_gsf.c	[]	[]
/src/gpac/applications/testapps/segmp4demux/main.c	[]	[]
/src/gpac/src/filters/hevcsplit.c	[]	[]
/src/gpac/src/isomedia/stbl_write.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/src/odf/ipmpx_code.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/include/gpac/module.h	[]	[]
/src/gpac/applications/mp4box/filedump.c	[]	[]
/src/gpac/src/odf/descriptors.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/filters/dasher.c	[]	[]
/src/gpac/modules/deprecated/droid_cam/droid_cam.c	[]	[]
/src/gpac/src/filters/load_svg.c	[]	[]
/src/gpac/src/jsmods/storage.c	[]	[]
/src/gpac/src/compositor/mpeg4_sound.c	['fuzz_scene']	[]
/src/gpac/src/filters/ff_rescale.c	[]	[]
/src/gpac/src/compositor/mpeg4_text.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_faad.c	[]	[]
/src/gpac/src/filters/in_route_repair.c	[]	[]
/src/gpac/src/filters/rewrite_mhas.c	[]	[]
/src/gpac/src/compositor/mpeg4_audio.c	['fuzz_scene']	[]
/src/gpac/modules/test_filter/test_filter.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/compositor/scene_ns.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/img.c	[]	[]
/src/gpac/src/filters/bsrw.c	[]	[]
/src/gpac/src/utils/path2d_stroker.c	[]	[]
/src/gpac/src/media_tools/mpd.c	[]	[]
/src/gpac/src/scenegraph/svg_attributes.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/compositor/mpeg4_animstream.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_demux.c	[]	[]
/src/gpac/src/filters/dmx_ghi.c	[]	[]
/src/gpac/src/utils/zutil.c	[]	[]
/src/gpac/src/filter_core/filter_session_js.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/bifs/predictive_mffield.c	['fuzz_scene']	[]
/src/gpac/src/utils/os_file.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/compositor/mpeg4_background.c	['fuzz_scene']	[]
/src/gpac/applications/testapps/broadcaster/RTP_serv_sender.c	[]	[]
/src/gpac/src/compositor/scene_node_init.c	['fuzz_scene']	[]
/src/gpac/applications/testapps/svg2bifs/main.c	[]	[]
/src/gpac/src/filters/dmx_vobsub.c	[]	[]
/src/gpac/src/ietf/rtp_packetizer.c	[]	[]
/src/gpac/src/compositor/compositor.c	['fuzz_scene']	[]
/src/gpac/src/utils/downloader_cache.c	[]	[]
/src/gpac/src/quickjs/quickjs.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/filters/enc_png.c	[]	[]
/src/gpac/src/ietf/rtsp_common.c	[]	[]
/src/gpac/src/compositor/svg_filters.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/platinum/GenericDevice.h	[]	[]
/src/gpac/applications/testapps/mpeg2ts/main.c	[]	[]
/src/gpac/src/laser/lsr_enc.c	[]	[]
/src/gpac/src/filters/dec_mediacodec.c	[]	[]
/src/gpac/src/compositor/bindable.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_uncv.c	[]	[]
/src/gpac/src/isomedia/box_code_adobe.c	[]	[]
/src/gpac/applications/testapps/hevcbench/main.c	['fuzz_scene']	[]
/src/gpac/src/filters/compose.c	[]	[]
/src/gpac/src/compositor/svg_geometry.c	['fuzz_scene']	[]
/src/gpac/src/filters/rewrite_adts.c	[]	[]
/src/gpac/src/utils/rmt_ws.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	[]
/src/gpac/src/filters/out_pipe.c	[]	[]
/src/gpac/src/filters/rewrite_mp4v.c	[]	[]
/src/gpac/src/filters/encrypt_cenc_isma.c	[]	[]
/src/gpac/include/gpac/main.h	[]	[]
/src/gpac/src/bifs/com_enc.c	[]	[]
/src/gpac/modules/deprecated/old_arch/avcap/avcap.cpp	[]	[]
/src/gpac/src/isomedia/avc_ext.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/filters/ff_enc.c	[]	[]
/src/gpac/modules/pulseaudio/pulseaudio.c	[]	[]
/src/gpac/applications/testapps/loadcompare/loadcompare.c	[]	[]
/src/gpac/src/filters/inspect.c	[]	[]
/src/gpac/modules/x11_out/x11_out.c	['fuzz_route', 'fuzz_probe_analyze']	[]
/src/gpac/include/gpac/thread.h	[]	[]
/src/gpac/src/filters/enc_webcodec.c	[]	[]
/src/gpac/src/filters/resample_audio.c	[]	[]
/src/gpac/src/filters/dec_scte35.c	[]	[]
/src/gpac/src/compositor/mpeg4_geometry_ils2d.c	['fuzz_scene']	[]
/src/gpac/src/utils/url.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/media_tools/webvtt.c	[]	[]
/src/gpac/src/isomedia/tx3g.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/src/filters/load_bt_xmt.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_odf.c	[]	[]
/src/gpac/src/filters/unit_test_filter.c	[]	[]
/src/gpac/src/isomedia/sample_descs.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/src/filter_core/filter_session.h	[]	[]
/src/gpac/src/utils/symbian_os.cpp	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']
/src/gpac/src/ietf/rtp_pck_mpeg12.c	[]	[]
/src/gpac/include/gpac/color.h	[]	[]
/src/gpac/src/utils/color.c	['fuzz_scene']	[]
/src/gpac/share/nodejs/src/gpac_napi.c	['fuzz_scene']	[]
/src/gpac/src/compositor/visual_manager_2d_draw.c	[]	[]
/src/gpac/src/compositor/x3d_geometry.c	['fuzz_scene']	[]
/src/gpac/modules/droid_audio/droidaudio.c	[]	[]
/src/gpac/modules/deprecated/epoc_hw/epoc_aout.cpp	[]	[]
/src/gpac/src/scene_manager/swf_svg.c	[]	[]
/src/gpac/modules/sdl_out/audio.c	[]	[]
/src/gpac/src/filters/write_generic.c	[]	[]
/src/gpac/src/compositor/mpeg4_background2d.c	['fuzz_scene']	[]
/src/gpac/src/filters/write_nhml.c	[]	[]
/src/gpac/src/filters/ttml_conv.c	[]	[]
/src/gpac/src/filter_core/filter_pck.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/src/compositor/mpeg4_layout.c	['fuzz_scene']	[]
/src/gpac/src/filters/unframer.c	[]	[]
/src/gpac/src/filters/tileagg.c	[]	[]
/src/gpac/applications/testapps/ts2hds/main.c	[]	[]
/src/gpac/src/filters/reframer.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/tssplit.c	[]	[]
/src/gpac/modules/deprecated/old_arch/opencv_is/opencv_is.c	[]	[]
/src/gpac/src/filters/in_rtp.c	['fuzz_route', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/old_arch/widgetman/unzip.c	[]	[]
/src/gpac/src/filters/mux_ogg.c	[]	[]
/src/gpac/src/compositor/mpeg4_form.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/box_funcs.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_parse', 'fuzz_scene', 'fuzz_probe_analyze']	['fuzz_parse', 'fuzz_probe_analyze']
/src/gpac/applications/mp4box/live.c	[]	[]
/src/gpac/src/filters/dec_mad.c	[]	[]
/src/gpac/modules/wav_out/wav_out.c	[]	[]
/src/gpac/src/utils/uni_bidi.c	[]	[]
/src/gpac/src/filters/in_rtp_stream.c	[]	[]

Directories in report

Directory
/src/gpac/applications/testapps/mpeg2ts/
/src/gpac/modules/deprecated/old_arch/osd/
/src/gpac/applications/testapps/segmp4demux/
/src/gpac/modules/deprecated/old_arch/gdip_raster/
/src/gpac/src/crypto/
/src/gpac/modules/deprecated/old_arch/opencv_is/
/src/gpac/applications/gpac/
/src/gpac/src/jsmods/
/src/gpac/modules/deprecated/old_arch/netctrl/
/src/gpac/modules/alsa/
/src/gpac/src/filters/
/src/gpac/modules/deprecated/old_arch/hyb_in/
/src/gpac/modules/ft_font/
/src/gpac/src/filter_core/
/src/gpac/include/gpac/
/src/gpac/modules/deprecated/old_arch/widgetman/
/src/gpac/modules/deprecated/old_arch/freenect/
/src/gpac/modules/deprecated/old_arch/platinum/
/src/gpac/modules/caca_out/
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/
/src/gpac/modules/deprecated/epoc_hw/
/src/gpac/testsuite/oss-fuzzers/
/src/gpac/src/ietf/
/src/gpac/applications/testapps/mpedemux/
/src/gpac/modules/deprecated/old_arch/mse_in/
/src/gpac/src/bifs/
/src/gpac/modules/deprecated/ios_mpegv/
/src/gpac/modules/deprecated/old_arch/audio_filter/
/src/gpac/applications/generators/WebGLGen/
/src/gpac/src/media_tools/
/src/gpac/modules/deprecated/oss_audio/
/src/gpac/modules/validator/
/src/gpac/modules/deprecated/old_arch/gapi/
/src/gpac/src/
/src/gpac/src/laser/
/src/gpac/applications/testapps/fmp4demux/
/src/gpac/src/filters/unittests/
/src/gpac/unittests/
/src/gpac/modules/deprecated/droid_cam/
/src/gpac/applications/testapps/dmbrs/
/src/gpac/modules/sdl_out/
/src/gpac/applications/gpac_android/src/main/jni/
/src/gpac/modules/deprecated/old_arch/ui_rec/
/src/gpac/modules/deprecated/old_arch/psvr/
/src/gpac/share/nodejs/src/
/src/gpac/modules/wav_out/
/src/gpac/applications/testapps/ts2hds/
/src/gpac/modules/demo_is/
/src/gpac/modules/dx_hw/
/src/gpac/applications/generators/X3D/
/src/gpac/modules/deprecated/old_arch/rvc_dec/
/src/gpac/modules/droid_audio/
/src/gpac/src/compositor/
/src/gpac/modules/jack/
/src/gpac/modules/deprecated/ios_cam/
/src/gpac/modules/x11_out/
/src/gpac/include/gpac/internal/
/src/gpac/include/
/src/gpac/applications/mp4box/
/src/gpac/modules/deprecated/old_arch/libplayer/
/src/gpac/modules/deprecated/old_arch/avcap/
/src/gpac/src/quickjs/
/src/gpac/modules/deprecated/droid_mpegv/
/src/gpac/modules/test_filter/
/src/gpac/modules/deprecated/old_arch/wiiis/
/src/gpac/include/gpac/modules/
/src/gpac/applications/testapps/hevcbench/
/src/gpac/applications/testapps/svg2bifs/
/src/gpac/src/scene_manager/
/src/gpac/src/isomedia/
/src/gpac/applications/testapps/broadcaster/
/src/gpac/src/utils/
/src/gpac/modules/droid_out/
/src/gpac/modules/pulseaudio/
/src/gpac/applications/testapps/udptsseg/
/src/gpac/applications/testapps/loadcompare/
/src/gpac/applications/testapps/mp4mux/
/src/gpac/applications/generators/SVG/
/src/gpac/src/odf/
/src/gpac/applications/testapps/atscdmx/
/src/gpac/src/evg/
/src/gpac/applications/testapps/ts2udp/
/src/gpac/applications/generators/MPEG4/
/src/gpac/modules/directfb_out/
/src/gpac/src/scenegraph/
/src/gpac/modules/dektec_out/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
getenv	['fuzz_probe_analyze', 'fuzz_route']	N/A	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
malloc	[]	Path 1 Path 2	N/A
realloc	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE416

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
free	['fuzz_scene', 'fuzz_parse']	N/A	N/A