High level conclusions

Fuzzer fuzz_probe_analyze is blocked:

The runtime code coverage of fuzz_probe_analyze covers 17.58% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_route is blocked:

The runtime code coverage of fuzz_route covers 14.89% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer fuzz_m2ts_probe is blocked:

The runtime code coverage of fuzz_m2ts_probe covers 11.17% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 12.67% of cyclomatic complexity.

Fuzzers reach 20.49% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

4139 / 20200

Cyclomatic complexity statically reachable by fuzzers

20170 / 159117

Runtime code coverage of functions

5007 / 20200

Warning: The number of runtime covered functions are larger than the number of reachable functions. This means that Fuzz Introspector found there are more functions covered at runtime than what is considered reachable based on the static analysis. This is a limitation in the analysis as anything covered at runtime is by definition reachable by the fuzzers.
This is likely due to a limitation in the static analysis. In this case, the count of functions covered at runtime is the true value, which means this is what should be considered "achieved" by the fuzzer.

Use the project functions table below to query all functions that were not covered at runtime.

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: fuzz_m2ts_probe

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	13052	99.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	56	0.42%
All colors	13108	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
12470	515	gf_m2ts_demux_del	call site: 00515	wm_component_activation_event
133	160	gf_realloc	call site: 00160	gf_url_concatenate
75	329	gf_fclose	call site: 00329	gf_url_concatenate
72	13016	gf_m2ts_demux_del	call site: 13016	gf_rmdir
59	100	gf_fopen_ex	call site: 00100	fio_open
52	7	gf_m2ts_probe_file	call site: 00007	gf_blob_release
39	406	gf_fopen_ex	call site: 00406	gf_mkdir
33	457	gf_fread	call site: 00457	logger_thread
32	294	gf_fclose	call site: 00294	gf_file_delete
20	63	gf_fopen_ex	call site: 00063	gf_fileio_from_blob
19	12987	gf_m2ts_demux_del	call site: 12987	gf_odf_desc_list_del
13	13089	gf_m2ts_demux_del	call site: 13089	gf_m2ts_delete_channel_application_info

Runtime coverage analysis

Covered functions

28

Functions that are reachable but not covered

151

Reachable functions

170

Percentage of reachable functions covered

11.18%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_m2ts_probe.c	8
src/media_tools/mpegts.c	37
src/utils/os_divers.c	29
src/utils/list.c	10
src/utils/os_thread.c	28
src/utils/os_file.c	135
src/utils/alloc.c	5
applications/gpac/gpac.c	28
src/utils/url.c	22
src/utils/error.c	18
src/utils/utf.c	10
applications/gpac_android/src/main/jni/gpac_jni.cpp	21
modules/deprecated/old_arch/widgetman/widgetman.c	98
src/utils/os_config_init.c	7
src/utils/configfile.c	32
src/utils/downloader_emscripten.c	17
src/utils/downloader.c	97
src/utils/downloader_cache.c	101
src/utils/gzio.c	28
src/utils/sha1.c	12
src/utils/downloader_curl.c	18
src/utils/downloader_hmux.c	17
modules/validator/validator.c	9
src/utils/xml_parser.c	84
src/utils/os_net.c	118
src/utils/bitstream.c	48
src/isomedia/isom_store.c	100
src/utils/downloader_nghttp2.c	41
src/utils/downloader_ngtcp2.c	72
src/utils/downloader_ssl.c	61
src/utils/symbian_os.cpp	19
src/filter_core/filter_session.c	24
src/filter_core/filter_queue.c	13
modules/deprecated/old_arch/widgetman/unzip.c	4
src/isomedia/isom_read.c	31
src/isomedia/isom_intern.c	73
src/isomedia/data_map.c	56
src/isomedia/box_funcs.c	40
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	70
src/isomedia/meta.c	11
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	53
src/utils/constants.c	12
src/isomedia/box_code_base.c	36
src/isomedia/stbl_write.c	27
src/isomedia/isom_write.c	56
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	23
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
src/utils/base_encoding.c	9
src/quickjs/quickjs.c	544
src/quickjs/quickjs.h	17
src/quickjs/dtoa.c	48
src/quickjs/cutils.h	11
src/quickjs/list.h	1
src/quickjs/libunicode.h	2
src/quickjs/libunicode.c	1
src/filters/jsfilter.c	73
src/filter_core/filter_props.c	64
src/scenegraph/vrml_js.c	5
src/filter_core/filter_pid.c	47
src/quickjs/quickjs-libc.c	4
src/utils/math.c	15
src/quickjs/libregexp.c	1
src/quickjs/cutils.c	10
src/media_tools/dvb_mpe.c	5
src/media_tools/dsmcc.c	8
src/media_tools/ait.c	6

Fuzzer: fuzz_parse

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	4554	75.1%
gold	[1:9]	44	0.72%
yellow	[10:29]	23	0.37%
greenyellow	[30:49]	14	0.23%
lawngreen	50+	1425	23.5%
All colors	6060	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
458	5059	gf_isom_write	call site: 05059	gf_isom_get_duration
431	2452	gf_odf_write_lang	call site: 02452	gf_odf_write_ipmp
414	5640	gf_fd_fsize	call site: 05640	WriteFlat
411	3218	gf_odf_read_lang	call site: 03218	gf_odf_read_ipmp
340	3809	trak_on_child_box	call site: 03809	gf_odf_desc_copy
245	1800	gf_odf_del_esd_ref	call site: 01800	gf_odf_del_ipmp
224	308	gf_list_del_item	call site: 00308	gf_url_concatenate
150	156	URL_GetProtocolType	call site: 00156	gf_url_concatenate
131	2136	gf_odf_size_descriptor	call site: 02136	gf_odf_size_ipmp
121	5518	gf_isom_get_track	call site: 05518	DoWrite
93	1384	gf_bs_write_u16	call site: 01384	gf_isom_is_identical_sgpd
88	1271	gf_isom_box_new_parent	call site: 01271	gf_isom_is_identical_sgpd

Runtime coverage analysis

Covered functions

1331

Functions that are reachable but not covered

601

Reachable functions

894

Percentage of reachable functions covered

32.77%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_parse.c	18
src/isomedia/isom_intern.c	70
src/utils/alloc.c	5
src/utils/list.c	8
src/isomedia/data_map.c	56
src/utils/os_file.c	118
src/utils/os_config_init.c	4
src/utils/configfile.c	3
src/utils/error.c	13
src/utils/os_divers.c	18
src/utils/os_thread.c	17
applications/gpac/gpac.c	25
src/utils/url.c	22
src/utils/utf.c	10
src/utils/bitstream.c	47
src/isomedia/isom_store.c	100
src/isomedia/box_funcs.c	40
applications/gpac_android/src/main/jni/gpac_jni.cpp	21
src/isomedia/isom_read.c	32
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	70
src/isomedia/meta.c	5
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	53
src/utils/constants.c	2
src/isomedia/box_code_base.c	36
src/isomedia/stbl_write.c	27
src/isomedia/isom_write.c	56
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	16
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
src/utils/base_encoding.c	9

Fuzzer: fuzz_route

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	7026	88.3%
gold	[1:9]	4	0.05%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	922	11.5%
All colors	7952	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
2052	4332	gf_fq_res_add	call site: 04332	js_dump_error
1733	2598	JS_IsUndefined	call site: 02598	jsf_pid_set_property
145	6425	gf_sys_set_console_code	call site: 06425	gf_filter_new_finalize
132	7304	gf_filter_del	call site: 07304	gf_fs_check_gl_provider
126	2017	gf_filter_parse_prop_solve_env_var	call site: 02017	gf_fs_solve_js_script
123	7779	gf_js_delete_runtime	call site: 07779	qjs_uninit_runtime_libc
108	321	URL_GetProtocolType	call site: 00321	gf_url_concatenate
95	1562	gf_opts_get_int	call site: 01562	gf_cfg_load_restrict
84	2513	gf_filter_new_finalize	call site: 02513	jsfs_exec_tasks_custom
84	6918	gf_filter_has_out_caps	call site: 06918	gf_fs_print_filter_outputs
80	2314	filter_parse_dyn_args	call site: 02314	filter_parse_dyn_args
77	6840	gf_fs_thread_proc	call site: 06840	gf_fs_print_debug_info

Runtime coverage analysis

Covered functions

467

Functions that are reachable but not covered

971

Reachable functions

1141

Percentage of reachable functions covered

14.9%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_route.c	15
src/utils/os_divers.c	120
src/utils/error.c	54
src/utils/list.c	8
src/utils/alloc.c	5
src/utils/symbian_os.cpp	27
src/utils/os_config_init.c	77
src/utils/os_file.c	111
src/utils/utf.c	7
src/utils/configfile.c	32
src/utils/os_thread.c	51
applications/gpac/gpac.c	28
src/utils/url.c	22
src/utils/gzio.c	10
applications/gpac_android/src/main/jni/gpac_jni.cpp	21
src/quickjs/quickjs-libc.c	26
src/utils/module.c	42
src/utils/os_net.c	46
src/utils/bitstream.c	31
src/isomedia/isom_store.c	1
src/utils/rmt_ws.c	11
modules/x11_out/x11_out.c	1
src/scenegraph/x3d_nodes.c	3
src/scenegraph/base_scenegraph.c	3
src/filter_core/filter_session.c	133
src/filter_core/filter.c	121
src/utils/constants.c	11
src/filter_core/filter_props.c	64
src/filter_core/filter_queue.c	16
src/filters/reframer.c	4
modules/test_filter/test_filter.c	1
src/filter_core/filter_pid.c	61
src/filter_core/filter_session_js.c	30
src/jsmods/core.c	48
src/quickjs/quickjs.c	555
src/quickjs/quickjs.h	17
src/quickjs/list.h	1
src/quickjs/dtoa.c	48
src/quickjs/cutils.h	11
src/quickjs/libunicode.h	2
src/quickjs/libunicode.c	1
src/filters/jsfilter.c	73
src/scenegraph/vrml_js.c	5
src/utils/math.c	15
src/quickjs/libregexp.c	1
src/quickjs/cutils.c	10
src/filter_core/filter_pck.c	11
src/filters/in_pipe.c	3
src/filters/out_route.c	5
src/filters/in_rtp.c	2
src/utils/gltools.c	1
src/utils/os_module.c	16
modules/alsa/alsa.c	7
modules/droid_out/droid_vout-bitmap.c	2
src/utils/downloader_emscripten.c	3
src/compositor/font_engine.c	11
modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	1
src/utils/path2d.c	1
src/filters/ff_common.c	5

Fuzzer: fuzz_probe_analyze

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	5885	86.0%
gold	[1:9]	25	0.36%
yellow	[10:29]	29	0.42%
greenyellow	[30:49]	3	0.04%
lawngreen	50+	897	13.1%
All colors	6839	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1669	1556	JS_IsUndefined	call site: 01556	jsf_pid_set_property
1232	3428	gf_filter_pid_set_property	call site: 03428	jsf_pid_get_property
670	4675	gf_mx2d_decompose	call site: 04675	js_dump_error
246	6291	gf_filter_del	call site: 06291	gf_fs_check_gl_provider
142	5386	gf_sys_set_console_code	call site: 05386	js_dump_error_exc
84	1471	gf_filter_new_finalize	call site: 01471	jsfs_exec_tasks_custom
84	5880	gf_filter_has_out_caps	call site: 05880	gf_fs_print_filter_outputs
81	6639	gf_fs_unload_script	call site: 06639	gf_js_delete_context
73	5806	gf_net_get_ntp	call site: 05806	gf_fs_print_connections
53	6030	gf_fs_thread_proc	call site: 06030	gf_fq_add
46	790	gf_filter_load_arg_config	call site: 00790	filter_parse_logs
43	966	gf_props_dump	call site: 00966	gf_fs_solve_js_script

Runtime coverage analysis

Covered functions

2631

Functions that are reachable but not covered

886

Reachable functions

1075

Percentage of reachable functions covered

17.58%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_probe_analyze.c	13
src/filter_core/filter_session.c	133
src/utils/error.c	51
src/utils/os_config_init.c	28
src/utils/configfile.c	13
src/utils/list.c	8
src/utils/alloc.c	5
src/utils/url.c	22
src/utils/os_file.c	93
src/utils/os_thread.c	44
applications/gpac/gpac.c	25
src/utils/os_divers.c	17
src/utils/utf.c	7
src/filter_core/filter.c	121
src/utils/constants.c	11
src/filter_core/filter_props.c	64
src/utils/symbian_os.cpp	27
src/filter_core/filter_queue.c	16
src/filters/reframer.c	4
src/utils/os_net.c	1
src/utils/gzio.c	10
applications/gpac_android/src/main/jni/gpac_jni.cpp	21
modules/test_filter/test_filter.c	1
src/filter_core/filter_pid.c	61
src/filter_core/filter_session_js.c	30
src/jsmods/core.c	42
src/quickjs/quickjs.c	555
src/quickjs/quickjs.h	17
src/quickjs/list.h	1
src/quickjs/dtoa.c	48
src/quickjs/cutils.h	11
src/quickjs/libunicode.h	2
src/quickjs/libunicode.c	1
src/filters/jsfilter.c	73
src/scenegraph/vrml_js.c	5
src/quickjs/quickjs-libc.c	4
src/utils/math.c	15
src/quickjs/libregexp.c	1
src/quickjs/cutils.c	10
src/filter_core/filter_pck.c	11
src/filters/in_pipe.c	3
src/filters/out_route.c	5
src/filters/in_rtp.c	2
modules/x11_out/x11_out.c	1
src/scenegraph/x3d_nodes.c	3
src/scenegraph/base_scenegraph.c	3
src/utils/gltools.c	1
src/utils/module.c	27
src/utils/os_module.c	13
modules/alsa/alsa.c	7
modules/droid_out/droid_vout-bitmap.c	2
src/utils/rmt_ws.c	1
src/utils/downloader_emscripten.c	3
src/compositor/font_engine.c	11
modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	1
src/utils/path2d.c	1
src/filters/ff_common.c	5

Fuzzer: fuzz_scene

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	28317	79.1%
gold	[1:9]	471	1.31%
yellow	[10:29]	237	0.66%
greenyellow	[30:49]	189	0.52%
lawngreen	50+	6544	18.3%
All colors	35758	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
4745	25190	gf_sg_route_queue	call site: 25190	gpac_jni_init
3412	14563	gf_bs_read_float	call site: 14563	gf_scene_disconnect
3054	11078	gf_bs_read_data	call site: 11078	widget_package_new
2562	4138	gpac_opt_default	call site: 04138	gf_filter_new_finalize
2210	6702	gf_list_pop_back	call site: 06702	gf_filter_new_finalize
971	9302	dom_event_process	call site: 09302	CTXLoad_NodeCallback
806	20283	Shadow_get_field_index_by_name	call site: 20283	gf_sg_x3d_node_get_field_index_by_name
745	10326	gf_mx_del	call site: 10326	http3_connect
648	3486	gf_node_changed_internal	call site: 03486	gf_scene_on_node_modified
576	24460	gf_svg_attributes_muladd	call site: 24460	gf_smil_apply_additive
496	2022	gf_node_new	call site: 02022	ArcClose2D_Create
491	30342	gf_node_unregister	call site: 30342	gf_node_unregister_children

Runtime coverage analysis

Covered functions

1780

Functions that are reachable but not covered

1508

Reachable functions

3268

Percentage of reachable functions covered

53.86%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
testsuite/oss-fuzzers/fuzz_scene.c	11
src/bifs/bifs_codec.c	34
src/utils/list.c	10
src/utils/alloc.c	5
src/utils/bitstream.c	48
src/utils/os_file.c	134
applications/gpac/gpac.c	28
applications/gpac_android/src/main/jni/gpac_jni.cpp	47
src/utils/os_thread.c	45
src/isomedia/isom_store.c	100
src/bifs/com_dec.c	102
src/bifs/field_decode.c	79
src/scenegraph/vrml_tools.c	121
src/scenegraph/vrml_proto.c	73
src/bifs/bifs_node_tables.c	31
src/scenegraph/base_scenegraph.c	104
src/scenegraph/commands.c	79
src/scenegraph/mpeg4_nodes.c	1393
src/scenegraph/x3d_nodes.c	666
src/scenegraph/svg_types.c	43
src/scenegraph/vrml_script.c	16
src/scenegraph/vrml_interpolators.c	5
src/scenegraph/mpeg4_animators.c	9
src/utils/math.c	64
src/scenegraph/mpeg4_valuator.c	32
src/scenegraph/vrml_route.c	40
src/utils/error.c	55
src/compositor/scene_node_init.c	34
src/compositor/compositor_node_init.c	137
src/compositor/compositor.c	106
src/compositor/mpeg4_animstream.c	30
src/compositor/media_object.c	51
src/compositor/mpeg4_mediacontrol.c	36
src/compositor/mpeg4_inline.c	57
src/compositor/object_manager.c	78
src/filter_core/filter.c	139
src/filter_core/filter_session.c	139
src/utils/os_config_init.c	63
src/utils/configfile.c	32
src/utils/url.c	22
src/utils/os_divers.c	92
src/utils/utf.c	10
src/utils/constants.c	12
src/filter_core/filter_props.c	64
src/utils/symbian_os.cpp	19
src/filter_core/filter_queue.c	16
src/filters/reframer.c	4
src/utils/os_net.c	118
src/utils/gzio.c	28
modules/test_filter/test_filter.c	1
src/filter_core/filter_pid.c	79
src/filter_core/filter_session_js.c	30
src/jsmods/core.c	42
src/quickjs/quickjs.c	555
src/quickjs/quickjs.h	17
src/quickjs/list.h	1
src/quickjs/dtoa.c	48
src/quickjs/cutils.h	11
src/quickjs/libunicode.h	2
src/quickjs/libunicode.c	1
src/filters/jsfilter.c	73
src/scenegraph/vrml_js.c	67
src/quickjs/quickjs-libc.c	5
src/quickjs/libregexp.c	1
src/quickjs/cutils.c	10
src/filter_core/filter_pck.c	11
src/filters/in_pipe.c	3
src/filters/out_route.c	5
src/filters/in_rtp.c	2
src/compositor/scene.c	113
src/scenegraph/dom_events.c	55
src/scenegraph/xml_ns.c	37
src/scenegraph/svg_attributes.c	179
src/utils/path2d.c	27
src/scenegraph/svg_properties.c	4
src/scenegraph/svg_js.c	8
src/filters/load_bt_xmt.c	3
src/compositor/mpeg4_mediasensor.c	12
src/compositor/mpeg4_inputsensor.c	54
src/compositor/clock.c	11
modules/deprecated/old_arch/widgetman/widgetman.c	98
src/utils/downloader_emscripten.c	18
src/utils/downloader.c	97
src/utils/downloader_cache.c	101
src/utils/sha1.c	12
src/utils/downloader_curl.c	18
src/utils/downloader_hmux.c	17
modules/validator/validator.c	9
src/utils/xml_parser.c	84
src/utils/downloader_nghttp2.c	41
src/utils/downloader_ngtcp2.c	72
src/utils/downloader_ssl.c	61
modules/deprecated/old_arch/widgetman/unzip.c	4
src/isomedia/isom_read.c	31
src/isomedia/isom_intern.c	73
src/isomedia/data_map.c	56
src/isomedia/box_funcs.c	40
src/isomedia/track.c	70
src/isomedia/movie_fragments.c	70
src/isomedia/meta.c	11
src/isomedia/stbl_read.c	4
src/isomedia/box_code_drm.c	19
src/isomedia/drm_sample.c	22
src/isomedia/media.c	53
src/isomedia/box_code_base.c	36
src/isomedia/stbl_write.c	27
src/isomedia/isom_write.c	56
src/isomedia/avc_ext.c	67
src/isomedia/sample_descs.c	2
src/odf/odf_codec.c	33
src/odf/desc_private.c	223
src/odf/odf_code.c	53
src/odf/descriptors.c	43
src/odf/slc.c	12
src/odf/ipmpx_code.c	160
src/odf/qos.c	24
applications/mp4box/fileimport.c	23
src/media_tools/media_import.c	15
src/isomedia/media_odf.c	25
src/odf/odf_command.c	34
src/media_tools/av_parsers.c	12
src/isomedia/tx3g.c	20
src/isomedia/box_code_3gpp.c	3
src/utils/base_encoding.c	9
share/nodejs/src/gpac_napi.c	12
src/compositor/audio_render.c	11
src/compositor/audio_mixer.c	7
src/evg/surface.c	7
src/compositor/visual_manager_3d_gl.c	10
src/utils/color.c	10
src/compositor/compositor_2d.c	21
src/compositor/events.c	100
src/compositor/mpeg4_layout.c	13
src/compositor/mpeg4_sensors.c	31
src/compositor/svg_grouping.c	15
modules/droid_out/droid_vout-bitmap.c	2
src/laser/lsr_dec.c	238
src/scenegraph/dom_js.c	13
src/scenegraph/html5_media_js.c	6
src/media_tools/html5_media.c	14
src/media_tools/html5_mse.c	1
src/utils/rmt_ws.c	1
src/scenegraph/smil_anim.c	79
src/scenegraph/smil_timing.c	29
src/compositor/mpeg4_grouping_2d.c	9
src/compositor/visual_manager_3d.c	40
src/compositor/bindable.c	16
src/compositor/navigate.c	62
src/compositor/camera.c	41
src/compositor/visual_manager_2d.c	14
src/compositor/mpeg4_composite.c	30
src/compositor/texturing_gl.c	25
src/compositor/mpeg4_layer_3d.c	9
src/compositor/compositor_3d.c	5
src/compositor/scene_ns.c	42
src/compositor/mpeg4_textures.c	32
modules/demo_is/demo_is.c	8
src/compositor/mpeg4_audio.c	29
src/compositor/audio_input.c	12
src/compositor/mpeg4_timesensor.c	14
src/compositor/texturing.c	14
src/compositor/mpeg4_background2d.c	13
src/compositor/drawable.c	8
src/compositor/mpeg4_bitmap.c	5
src/compositor/mpeg4_geometry_2d.c	7
src/compositor/mpeg4_viewport.c	12
src/compositor/mpeg4_geometry_ils2d.c	7
src/compositor/mpeg4_geometry_ifs2d.c	7
src/compositor/mpeg4_sound.c	4
src/compositor/mpeg4_gradients.c	4
src/compositor/visual_manager.c	10
src/compositor/mesh.c	13
src/evg/stencil.c	11
src/utils/gltools.c	3
src/compositor/mpeg4_form.c	6
src/compositor/mpeg4_grouping.c	3
src/compositor/mpeg4_layer_2d.c	5
src/compositor/mpeg4_path_layout.c	4
src/compositor/mpeg4_grouping_3d.c	8
src/compositor/mpeg4_text.c	6
src/compositor/mpeg4_background.c	20
src/compositor/mpeg4_geometry_3d.c	16
src/compositor/mpeg4_lighting.c	3
src/compositor/x3d_geometry.c	9
src/compositor/hardcoded_protos.c	45
src/compositor/hc_flash_shape.c	6
src/utils/module.c	39
src/compositor/offscreen_cache.c	9
src/utils/os_module.c	13
modules/alsa/alsa.c	7
src/compositor/font_engine.c	22
modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	21
src/filters/ff_common.c	5
src/compositor/svg_geometry.c	3
src/compositor/svg_paint_servers.c	4
src/compositor/svg_text.c	11
src/compositor/svg_media.c	26
src/compositor/svg_font.c	26
src/compositor/svg_filters.c	7
src/bifs/unquantize.c	33
src/bifs/conditional.c	6
src/bifs/script_dec.c	55
src/bifs/predictive_mffield.c	34
src/bifs/arith_decoder.c	9
src/bifs/memory_decoder.c	65

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
_main_thread	/src/gpac/applications/gpac/gpac.c	1	['void*']	63	0	13	3	2	6614	0	40539	22740

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

6291 / 20200

Cyclomatic complexity statically reachable by fuzzers

42910 / 159117

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

testsuite/oss-fuzzers/fuzz_m2ts_probe.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_m2ts_demux_del', 'gf_realloc', 'gf_fclose', 'gf_fopen_ex', 'gf_m2ts_probe_file', 'gf_fread']

testsuite/oss-fuzzers/fuzz_parse.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_isom_write', 'gf_odf_write_lang', 'gf_fd_fsize', 'gf_odf_read_lang', 'trak_on_child_box', 'gf_odf_del_esd_ref', 'gf_list_del_item', 'URL_GetProtocolType', 'gf_odf_size_descriptor', 'gf_isom_get_track']

testsuite/oss-fuzzers/fuzz_route.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_fq_res_add', 'JS_IsUndefined', 'gf_sys_set_console_code', 'gf_filter_del', 'gf_filter_parse_prop_solve_env_var', 'gf_js_delete_runtime', 'URL_GetProtocolType', 'gf_opts_get_int', 'gf_filter_new_finalize', 'gf_filter_has_out_caps']

testsuite/oss-fuzzers/fuzz_probe_analyze.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['JS_IsUndefined', 'gf_filter_pid_set_property', 'gf_mx2d_decompose', 'gf_filter_del', 'gf_sys_set_console_code', 'gf_filter_new_finalize', 'gf_filter_has_out_caps', 'gf_fs_unload_script', 'gf_net_get_ntp', 'gf_fs_thread_proc']

testsuite/oss-fuzzers/fuzz_scene.c

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['gf_sg_route_queue', 'gf_bs_read_float', 'gf_bs_read_data', 'gpac_opt_default', 'gf_list_pop_back', 'dom_event_process', 'Shadow_get_field_index_by_name', 'gf_mx_del', 'gf_node_changed_internal', 'gf_svg_attributes_muladd']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
gf_log_tool_level_on	37	10	27.02%	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_parse', 'fuzz_scene', 'fuzz_m2ts_probe']
gf_fopen_ex	92	42	45.65%	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_parse', 'fuzz_m2ts_probe']
gf_unregister_file_handle	32	8	25.0%	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_parse', 'fuzz_m2ts_probe']
gf_isom_datamap_new	62	34	54.83%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_fdm_new	104	36	34.61%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_open_file	77	37	48.05%	['fuzz_parse']
gf_isom_write	53	27	50.94%	['fuzz_probe_analyze', 'fuzz_parse']
gf_odf_desc_add_desc	52	13	25.0%	['fuzz_parse']
gf_bs_write_data	79	35	44.30%	['fuzz_probe_analyze', 'fuzz_parse']
BS_WriteByte	60	19	31.66%	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene', 'fuzz_parse']
gf_cenc_key_info_get_iv_size	31	6	19.35%	['fuzz_parse']
gf_url_concatenate_ex	238	104	43.69%	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_parse']
dtout_register	35	7	20.0%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_path_escape_colon_ex	76	23	30.26%	['fuzz_route', 'fuzz_probe_analyze']
gf_filter_new	195	85	43.58%	['fuzz_route', 'fuzz_probe_analyze']
gf_filter_parse_prop_solve_env_var	46	9	19.56%	['fuzz_route', 'fuzz_probe_analyze']
gf_filter_ask_rt_reschedule	31	12	38.70%	['fuzz_route']
gf_filter_load_arg_config	112	28	25.0%	['fuzz_route', 'fuzz_probe_analyze']
filter_parse_dyn_args	575	201	34.95%	['fuzz_route', 'fuzz_probe_analyze']
gf_filter_sess_reset_graph	37	12	32.43%	['fuzz_route', 'fuzz_probe_analyze']
gf_props_parse_value	553	120	21.69%
gf_props_equal_internal	113	59	52.21%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_reg_all	60	23	38.33%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_add_filter_register	31	14	45.16%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_new	162	79	48.76%
gf_fs_push_arg	73	36	49.31%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_stop	43	9	20.93%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_sema_io	42	6	14.28%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_load_filter_internal	112	32	28.57%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_unload_script	36	9	25.0%	['fuzz_route', 'fuzz_probe_analyze']
init_cuda_sdk	36	19	52.77%	['fuzz_route', 'fuzz_probe_analyze']
cuInit	275	5	1.818%	['fuzz_route', 'fuzz_probe_analyze']
routein_on_event_file	170	24	14.11%	['fuzz_route']
routein_finalize	64	21	32.81%	['fuzz_route']
gf_route_dmx_new_internal	82	33	40.24%	['fuzz_route']
gf_route_dmx_process_object	68	12	17.64%	['fuzz_route']
gf_sys_set_console_code	49	26	53.06%	['fuzz_route', 'fuzz_probe_analyze']
default_log_callback_color	33	18	54.54%	['fuzz_route', 'fuzz_probe_analyze']
gf_error_to_string	89	28	31.46%	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_parse', 'fuzz_scene', 'fuzz_m2ts_probe']
gf_parse_lfrac	71	27	38.02%	['fuzz_route', 'fuzz_probe_analyze']
gf_modules_refresh_module_directories	36	19	52.77%	['fuzz_route']
gf_modules_load_filter	33	11	33.33%	['fuzz_route']
gf_cfg_init	138	39	28.26%	['fuzz_route']
create_default_config	94	41	43.61%	['fuzz_route']
gf_sys_refresh_cache	35	11	31.42%	['fuzz_route']
gf_enum_directory	100	53	53.0%	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_m2ts_probe']
gf_url_colon_suffix	71	35	49.29%	['fuzz_route', 'fuzz_probe_analyze']
gf_netcap_setup	186	56	30.10%	['fuzz_route']
gf_sk_setup_multicast_ex	273	38	13.91%	['fuzz_route']
gf_sk_group_unregister	44	16	36.36%	['fuzz_route', 'fuzz_probe_analyze']
gf_sk_group_select	117	33	28.20%	['fuzz_route']
gf_sk_receive_internal	86	24	27.90%	['fuzz_route']
inet_addr_from_name	32	4	12.5%	['fuzz_route']
netcap_filter_pck	92	12	13.04%	['fuzz_route']
gf_filter_connect_source_internal	87	17	19.54%	['fuzz_probe_analyze']
gf_filter_pck_set_property_full	43	16	37.20%	['fuzz_probe_analyze']
gf_filter_pid_remove	33	16	48.48%	['fuzz_probe_analyze']
gf_filter_pid_configure	378	207	54.76%	['fuzz_probe_analyze']
gf_filter_pid_needs_explicit_resolution	67	32	47.76%	['fuzz_probe_analyze']
gf_filter_pid_connect_task	73	21	28.76%	['fuzz_probe_analyze']
gf_filter_pid_init_task	850	383	45.05%	['fuzz_probe_analyze']
gf_filter_pid_merge_properties_internal	53	28	52.83%	['fuzz_probe_analyze']
evt_get_refstr	31	7	22.58%	['fuzz_probe_analyze']
init_evt	54	16	29.62%	['fuzz_probe_analyze']
gf_props_dump_val	179	92	51.39%	['fuzz_route', 'fuzz_probe_analyze']
gf_props_dump	51	26	50.98%	['fuzz_route', 'fuzz_probe_analyze']
gf_fs_solve_js_script	35	10	28.57%	['fuzz_route', 'fuzz_probe_analyze']
uncv_parse_config	260	36	13.84%	['fuzz_probe_analyze']
dashdmx_io_on_dash_event	218	24	11.00%	['fuzz_probe_analyze']
dashdmx_process	250	23	9.2%	['fuzz_probe_analyze']
dashdmx_configure_pid	150	48	32.0%	['fuzz_probe_analyze']
dashdmx_initialize	140	72	51.42%	['fuzz_probe_analyze']
dashdmx_process_event	200	16	8.0%	['fuzz_probe_analyze']
gsfdmx_read_prop	156	20	12.82%	['fuzz_probe_analyze']
gsfdmx_tune	70	25	35.71%	['fuzz_probe_analyze']
m2tsdmx_on_event	337	85	25.22%	['fuzz_probe_analyze']
m2tsdmx_declare_pid	447	185	41.38%	['fuzz_probe_analyze']
m2tsdmx_send_packet	106	55	51.88%	['fuzz_probe_analyze']
m2tdmx_merge_props	62	3	4.838%	['fuzz_probe_analyze']
m2tsdmx_process_event	96	52	54.16%	['fuzz_probe_analyze']
filelist_process	751	73	9.720%	['fuzz_probe_analyze']
filelist_load_next	294	84	28.57%	['fuzz_probe_analyze']
filelist_next_url	338	69	20.41%	['fuzz_probe_analyze']
filelist_check_implicit_cat	62	26	41.93%	['fuzz_probe_analyze']
filelist_configure_pid	219	21	9.589%	['fuzz_probe_analyze']
filelist_initialize	91	11	12.08%	['fuzz_probe_analyze']
filelist_process_event	45	11	24.44%	['fuzz_probe_analyze']
filein_process	252	106	42.06%	['fuzz_probe_analyze']
filein_initialize_ex	153	64	41.83%	['fuzz_probe_analyze']
filein_process_event	86	38	44.18%	['fuzz_probe_analyze']
gf_inspect_dump_nalu_internal	646	308	47.67%	['fuzz_probe_analyze']
gf_inspect_dump_obu_internal	130	63	48.46%	['fuzz_probe_analyze']
gf_inspect_dump_prores_internal	122	14	11.47%	['fuzz_probe_analyze']
gf_inspect_dump_opus_internal	41	11	26.82%	['fuzz_probe_analyze']
inspect_process	132	52	39.39%	['fuzz_probe_analyze']
inspect_dump_property	226	100	44.24%	['fuzz_probe_analyze']
inspect_configure_pid	155	70	45.16%	['fuzz_probe_analyze']
isor_declare_objects	233	84	36.05%	['fuzz_probe_analyze']
isor_declare_track	880	406	46.13%	['fuzz_probe_analyze']
isor_get_chapters	79	15	18.98%	['fuzz_probe_analyze']
isoffin_configure_pid	54	23	42.59%	['fuzz_probe_analyze']
isoffin_initialize	37	14	37.83%	['fuzz_probe_analyze']
isoffin_process	397	215	54.15%	['fuzz_probe_analyze']
isoffin_process_event	272	80	29.41%
isor_reader_get_sample	291	121	41.58%
isor_reader_check_config	118	10	8.474%	['fuzz_probe_analyze']
isor_set_sample_groups_and_aux_data	46	22	47.82%	['fuzz_probe_analyze']
gf_text_get_utf_type	42	15	35.71%	['fuzz_probe_analyze']
txtin_finalize	33	15	45.45%	['fuzz_probe_analyze']
txtin_process	156	41	26.28%	['fuzz_probe_analyze']
txtin_configure_pid_ex	212	84	39.62%	['fuzz_probe_analyze']
txtin_process_webvtt	37	18	48.64%	['fuzz_probe_analyze']
txtin_probe_duration	162	67	41.35%	['fuzz_probe_analyze']
txtin_process_texml	334	13	3.892%	['fuzz_probe_analyze']
txtin_texml_setup	59	16	27.11%	['fuzz_probe_analyze']
ac4dmx_configure_pid	33	12	36.36%	['fuzz_probe_analyze']
ac4dmx_process_event	46	25	54.34%	['fuzz_probe_analyze']
adts_dmx_process_event	55	28	50.90%	['fuzz_probe_analyze']
amrdmx_configure_pid	38	15	39.47%	['fuzz_probe_analyze']
av1dmx_configure_pid	33	15	45.45%	['fuzz_probe_analyze']
av1dmx_process	95	47	49.47%	['fuzz_probe_analyze']
av1dmx_process_event	57	26	45.61%	['fuzz_probe_analyze']
flac_dmx_process_event	56	24	42.85%	['fuzz_probe_analyze']
img_process	205	85	41.46%	['fuzz_probe_analyze']
img_probe_data	32	14	43.75%	['fuzz_probe_analyze']
mhas_dmx_configure_pid	34	15	44.11%	['fuzz_probe_analyze']
mhas_dmx_process_event	56	24	42.85%	['fuzz_probe_analyze']
mp3_dmx_process_event	56	28	50.0%	['fuzz_probe_analyze']
naludmx_start_nalu	66	34	51.51%	['fuzz_probe_analyze']
naludmx_enqueue_or_dispatch	86	40	46.51%
naludmx_initialize	34	15	44.11%	['fuzz_probe_analyze']
naludmx_process_event	83	37	44.57%	['fuzz_probe_analyze']
proresdmx_process	93	43	46.23%	['fuzz_probe_analyze']
proresdmx_process_event	65	26	40.0%	['fuzz_probe_analyze']
pcmreframe_process	222	119	53.60%	['fuzz_probe_analyze']
seiloader_set_type	48	9	18.75%	['fuzz_probe_analyze']
gf_isom_nalu_sample_rewrite	385	48	12.46%	['fuzz_probe_analyze']
stsz_box_write	40	16	40.0%	['fuzz_probe_analyze']
stsz_box_size	48	5	10.41%	['fuzz_probe_analyze']
sgpd_write_entry	110	8	7.272%	['fuzz_probe_analyze', 'fuzz_parse']
sgpd_size_entry	60	8	13.33%	['fuzz_probe_analyze']
gf_isom_box_write_header	55	15	27.27%	['fuzz_probe_analyze']
gf_isom_fdm_get_data	43	18	41.86%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_cenc_has_saiz_saio_full	113	33	29.20%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_cenc_get_sample_aux_info	74	21	28.37%	['fuzz_probe_analyze']
MergeFragment	125	51	40.8%	['fuzz_probe_analyze', 'fuzz_parse']
gf_isom_probe_file_range	32	10	31.25%	['fuzz_probe_analyze']
gf_isom_get_edit_list_type	31	17	54.83%	['fuzz_probe_analyze']
gf_isom_get_user_data	110	38	34.54%	['fuzz_probe_analyze']
gf_isom_apple_enum_tag_ex	151	60	39.73%	['fuzz_probe_analyze']
gf_isom_sample_get_subsamples_buffer	37	8	21.62%	['fuzz_probe_analyze']
gf_isom_enum_sample_group	79	31	39.24%	['fuzz_probe_analyze']
gf_isom_get_y3d_info	52	15	28.84%	['fuzz_probe_analyze']
gf_isom_enum_sample_aux_data	85	9	10.58%	['fuzz_probe_analyze']
gf_isom_video_sample_entry_write	80	19	23.75%	['fuzz_probe_analyze']
stbl_RemoveDTS	111	18	16.21%	['fuzz_probe_analyze', 'fuzz_parse']
MergeTrack	667	216	32.38%	['fuzz_probe_analyze', 'fuzz_parse']
gf_iamf_get_obu_name	38	14	36.84%	['fuzz_probe_analyze']
gf_opus_parse_packet_header	172	40	23.25%	['fuzz_probe_analyze']
gf_ac4_get_channel_count_from_speaker_group_index_mask	64	32	50.0%	['fuzz_probe_analyze']
gf_dash_setup_groups	295	110	37.28%	['fuzz_probe_analyze']
gf_dash_get_segment_duration	105	30	28.57%	['fuzz_probe_analyze']
gf_dash_process_internal	111	18	16.21%	['fuzz_probe_analyze']
dash_setup_period_and_groups	78	11	14.10%	['fuzz_probe_analyze']
gf_dash_setup_period	398	133	33.41%	['fuzz_probe_analyze']
gf_dash_setup_single_index_mode	248	13	5.241%	['fuzz_probe_analyze']
gf_dash_set_group_representation	273	55	20.14%	['fuzz_probe_analyze']
gf_img_parse	132	69	52.27%	['fuzz_probe_analyze']
gf_media_map_esd	82	41	50.0%	['fuzz_probe_analyze']
gf_media_map_item_esd	208	71	34.13%	['fuzz_probe_analyze']
rfc_6381_get_codec_aac	39	15	38.46%	['fuzz_probe_analyze']
parse_attributes	409	170	41.56%	['fuzz_probe_analyze']
gf_mpd_representation_free	66	25	37.87%	['fuzz_probe_analyze']
gf_m3u8_to_mpd	128	68	53.12%	['fuzz_probe_analyze']
gf_m3u8_solve_representation_xlink	248	46	18.54%	['fuzz_probe_analyze']
gf_m3u8_fill_mpd_struct	603	196	32.50%	['fuzz_probe_analyze']
mpeg2ps_seek_frame	48	12	25.0%	['fuzz_probe_analyze']
gf_m2ts_get_adaptation_field	155	84	54.19%	['fuzz_probe_analyze']
gf_m2ts_process_pmt	640	307	47.96%	['fuzz_probe_analyze']
gf_m2ts_process_tdt_tot	80	13	16.25%	['fuzz_probe_analyze']
gf_odf_avc_cfg_read	103	55	53.39%
swf_place_obj	116	62	53.44%	['fuzz_probe_analyze']
swf_actions	73	30	41.09%	['fuzz_probe_analyze']
swf_def_bits_jpeg	121	48	39.66%	['fuzz_probe_analyze']
swf_get_tag_name	110	40	36.36%	['fuzz_probe_analyze']
swf_init_decompress	43	10	23.25%	['fuzz_probe_analyze']
gf_codec_id_from_isobmf	122	17	13.93%	['fuzz_probe_analyze']
gf_dm_sess_del	58	3	5.172%	['fuzz_route', 'fuzz_probe_analyze']
gf_gzread	83	33	39.75%	['fuzz_probe_analyze']
check_header	48	20	41.66%	['fuzz_probe_analyze']
gf_sha1_update	32	17	53.12%	['fuzz_probe_analyze']
gf_xml_sax_parse_file	57	29	50.87%	['fuzz_probe_analyze']
gf_xml_dump_string	32	13	40.62%	['fuzz_probe_analyze']
xml_translate_xml_string	73	37	50.68%	['fuzz_probe_analyze']
BM_ParseGlobalQuantizer	31	17	54.83%	['fuzz_scene']
lsr_read_add_replace_insert	415	208	50.12%	['fuzz_scene']
lsr_translate_anim_value	129	47	36.43%	['fuzz_scene']
lsr_read_update_value_indexed	118	40	33.89%	['fuzz_scene']
gf_sg_mpeg4_node_get_field_index_by_name	394	84	21.31%	['fuzz_scene']
PerceptualParameters_get_aq_info	120	64	53.33%	['fuzz_scene']
Quadric_get_aq_info	48	12	25.0%	['fuzz_scene']
gf_svg_attributes_copy	227	97	42.73%	['fuzz_scene']
gf_svg_node_del	46	25	54.34%	['fuzz_scene']
attributes_set_default_value	122	7	5.737%	['fuzz_scene']

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

gpac.c

Target file: /src/gpac/applications/gpac/gpac.c
Target functions: _main_thread

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target _main_thread */
  UNKNOWN_TYPE unknown_0;
  _main_thread(unknown_0);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/gpac/src/filters/out_sock.c	[]	[]
/src/gpac/src/media_tools/vobsub.c	[]	[]
/src/gpac/modules/directfb_out/directfb_out.c	[]	[]
/src/gpac/src/isomedia/box_code_drm.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/utils/sha256.c	[]	[]
/src/gpac/src/media_tools/webvtt.c	[]	[]
/src/gpac/src/filter_core/filter_session.h	[]	[]
/src/gpac/share/nodejs/src/gpac_napi.c	['fuzz_scene']	[]
/src/gpac/src/quickjs/quickjs-libc.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/bs_split.c	[]	[]
/src/gpac/src/laser/lsr_tables.c	[]	[]
/src/gpac/src/media_tools/m2ts_mux.c	[]	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_probe_analyze.c	['fuzz_probe_analyze']	['fuzz_probe_analyze']
/src/gpac/src/bifs/script_dec.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/rewrite_ac4.c	[]	[]
/src/gpac/src/filters/reframe_latm.c	[]	[]
/src/gpac/include/gpac/main.h	[]	[]
/src/gpac/src/compositor/compositor_3d.c	['fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_composite.c	['fuzz_scene']	[]
/src/gpac/applications/generators/WebGLGen/main.c	[]	[]
/src/gpac/src/filters/reframe_ac4.c	[]	[]
/src/gpac/src/utils/configfile.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route']
/src/gpac/src/media_tools/html5_mse.c	['fuzz_scene']	[]
/src/gpac/applications/generators/SVG/v3.c	[]	[]
/src/gpac/src/compositor/mesh.c	['fuzz_scene']	[]
/src/gpac/src/utils/md5.c	[]	[]
/src/gpac/src/odf/descriptors.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/dec_webcodec.c	[]	[]
/src/gpac/src/filters/unittests/ut_dec_scte35.c	[]	[]
/src/gpac/src/utils/zutil.c	[]	[]
/src/gpac/src/evg/ftgrays.c	[]	[]
/src/gpac/modules/dx_hw/dx_audio.c	[]	[]
/src/gpac/src/scenegraph/vrml_interpolators.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_scte35.c	[]	[]
/src/gpac/src/utils/module.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/applications/gpac_android/src/main/jni/gpac_jni.cpp	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/out_rtp.c	[]	[]
/src/gpac/include/gpac/internal/ietf_dev.h	[]	[]
/src/gpac/modules/demo_is/demo_is.c	['fuzz_scene']	[]
/src/gpac/src/utils/downloader_cache.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/isomedia/media_odf.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/widgetman/unzip.h	[]	[]
/src/gpac/src/filters/mux_gsf.c	[]	[]
/src/gpac/src/filters/enc_cc.c	[]	[]
/src/gpac/src/compositor/mpeg4_background2d.c	['fuzz_scene']	[]
/src/gpac/src/utils/gltools.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/modules/droid_out/droid_vout-bitmap.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/utils/os_config_init.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']
/src/gpac/src/export.cpp	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACMediaController.h	[]	[]
/src/gpac/modules/ft_font/ft_font.c	[]	[]
/src/gpac/src/compositor/texturing.c	['fuzz_scene']	[]
/src/gpac/src/evg/raster_565.c	[]	[]
/src/gpac/modules/dx_hw/dx_window.c	[]	[]
/src/gpac/src/compositor/mpeg4_form.c	['fuzz_scene']	[]
/src/gpac/src/compositor/svg_font.c	['fuzz_scene']	[]
/src/gpac/applications/gpac/gpac.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/applications/generators/SVG/v2.c	[]	[]
/src/gpac/modules/deprecated/old_arch/widgetman/wgt_load.c	[]	[]
/src/gpac/src/compositor/audio_mixer.c	['fuzz_scene']	[]
/src/gpac/include/gpac/color.h	[]	[]
/src/gpac/src/quickjs/cutils.h	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/dec_opensvc.c	[]	[]
/src/gpac/include/gpac/tools.h	[]	[]
/src/gpac/src/utils/token.c	[]	[]
/src/gpac/src/filters/reframe_h263.c	[]	[]
/src/gpac/modules/dx_hw/dx_hw.h	[]	[]
/src/gpac/src/compositor/mpeg4_geometry_ils2d.c	['fuzz_scene']	[]
/src/gpac/applications/mp4box/fileimport.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/src/filter_core/filter_register.c	[]	[]
/src/gpac/src/filter_core/filter_queue.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/droid_cam/droid_cam.c	[]	[]
/src/gpac/src/odf/ipmpx_dump.c	[]	[]
/src/gpac/src/filters/ff_common.h	[]	[]
/src/gpac/src/crypto/g_crypt_openssl.c	[]	[]
/src/gpac/modules/sdl_out/sdl_out.c	[]	[]
/src/gpac/src/compositor/hardcoded_protos.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_demux.c	[]	[]
/src/gpac/modules/dektec_out/dektec_video_decl.c	[]	[]
/src/gpac/modules/deprecated/old_arch/audio_filter/audio_filter.c	[]	[]
/src/gpac/src/filters/ff_enc.c	[]	[]
/src/gpac/src/filters/dec_mad.c	[]	[]
/src/gpac/applications/generators/SVG/laser.c	[]	[]
/src/gpac/src/compositor/media_object.c	['fuzz_scene']	[]
/src/gpac/src/scenegraph/svg_types.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/sei_load.c	[]	[]
/src/gpac/modules/deprecated/old_arch/hyb_in/fm_fake_pull.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_rend.cpp	[]	[]
/src/gpac/src/utils/downloader_nghttp2.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/media_tools/mpeg2_ps.c	[]	[]
/src/gpac/src/compositor/mpeg4_viewport.c	['fuzz_scene']	[]
/src/gpac/modules/dektec_out/dektec_video.cpp	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACPlatinum.cpp	[]	[]
/src/gpac/src/bifs/bifs_node_tables.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/dec_j2k.c	[]	[]
/src/gpac/src/utils/error.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']
/src/gpac/applications/mp4box/filedump.c	[]	[]
/src/gpac/src/utils/uni_bidi.c	[]	[]
/src/gpac/src/filters/enc_jpg.c	[]	[]
/src/gpac/src/isomedia/box_dump.c	[]	[]
/src/gpac/modules/dektec_out/dektec_video_old.cpp	[]	[]
/src/gpac/src/scene_manager/scene_manager.c	[]	[]
/src/gpac/src/media_tools/route_dmx.c	[]	[]
/src/gpac/src/utils/xml_bin_custom.c	[]	[]
/src/gpac/modules/wav_out/wav_out.c	[]	[]
/src/gpac/src/jsmods/core.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route']
/src/gpac/modules/deprecated/ios_cam/ios_cam.c	[]	[]
/src/gpac/src/isomedia/isom_write.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/bifs/bifs_codec.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/ietf/rtsp_common.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_texture.cpp	[]	[]
/src/gpac/src/isomedia/box_code_apple.c	[]	[]
/src/gpac/src/media_tools/mpegts.c	['fuzz_m2ts_probe']	['fuzz_m2ts_probe']
/src/gpac/src/odf/ipmpx_parse.c	[]	[]
/src/gpac/src/filters/dec_theora.c	[]	[]
/src/gpac/src/compositor/mpeg4_gradients.c	['fuzz_scene']	[]
/src/gpac/src/quickjs/list.h	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/odf/desc_private.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/in_rtp_sdp.c	[]	[]
/src/gpac/src/scene_manager/loader_svg.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACFileMediaServer.h	[]	[]
/src/gpac/src/compositor/svg_paint_servers.c	['fuzz_scene']	[]
/src/gpac/src/utils/list.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']
/src/gpac/src/filters/in_pipe.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/compositor/mpeg4_inline.c	['fuzz_scene']	[]
/src/gpac/src/jsmods/webgl.c	[]	[]
/src/gpac/src/compositor/bindable.c	['fuzz_scene']	[]
/src/gpac/src/compositor/svg_base.c	[]	[]
/src/gpac/src/filters/dasher.c	[]	[]
/src/gpac/src/filters/in_dvb4linux.c	[]	[]
/src/gpac/src/filter_core/filter.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/out_pipe.c	[]	[]
/src/gpac/modules/droid_out/droid_vout.c	[]	[]
/src/gpac/src/filters/reframe_flac.c	[]	[]
/src/gpac/src/filters/dec_nvdec.c	[]	[]
/src/gpac/src/ietf/rtp_pck_mpeg12.c	[]	[]
/src/gpac/src/compositor/mpeg4_lighting.c	['fuzz_scene']	[]
/src/gpac/src/utils/utf.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/utils/zutil.h	[]	[]
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_decode.c	[]	[]
/src/gpac/src/filters/dec_uncv.c	[]	[]
/src/gpac/src/compositor/mpeg4_layer_3d.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/osd/osd.c	[]	[]
/src/gpac/src/filters/reframe_rawpcm.c	[]	[]
/src/gpac/src/isomedia/stbl_read.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/compositor/visual_manager_3d.c	['fuzz_scene']	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_scene.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/in_route.c	[]	[]
/src/gpac/src/filters/rewrite_mp4v.c	[]	[]
/src/gpac/src/evg/raster_argb.c	[]	[]
/src/gpac/src/ietf/rtsp_response.c	[]	[]
/src/gpac/src/odf/odf_codec.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/applications/generators/SVG/main.c	[]	[]
/src/gpac/src/evg/rast_soft.h	[]	[]
/src/gpac/src/bifs/field_encode.c	[]	[]
/src/gpac/modules/validator/validator.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/utils/os_divers.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/old_arch/rvc_dec/rvc_dec.c	[]	[]
/src/gpac/src/scenegraph/vrml_proto.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/write_qcp.c	[]	[]
/src/gpac/src/scenegraph/svg_properties.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/compositor/gl_inc.h	[]	[]
/src/gpac/src/utils/symbian_os.cpp	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']
/src/gpac/src/filters/dec_laser.c	[]	[]
/src/gpac/include/gpac/filters.h	[]	[]
/src/gpac/src/bifs/com_enc.c	[]	[]
/src/gpac/src/compositor/object_manager.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_openhevc.c	[]	[]
/src/gpac/src/filters/dmx_gsf.c	[]	[]
/src/gpac/src/compositor/compositor.c	['fuzz_scene']	[]
/src/gpac/src/scene_manager/loader_bt.c	[]	[]
/src/gpac/src/quickjs/quickjs.h	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/compositor/visual_manager_2d_draw.c	[]	[]
/src/gpac/src/filters/hevcmerge.c	[]	[]
/src/gpac/src/quickjs/libunicode.h	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/out_route.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/reframe_mp3.c	[]	[]
/src/gpac/src/compositor/mpeg4_animstream.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_mhas.c	[]	[]
/src/gpac/applications/mp4box/live.c	[]	[]
/src/gpac/src/scenegraph/xml_ns.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/compositor/svg_grouping.c	['fuzz_scene']	[]
/src/gpac/src/jsmods/evg.c	[]	[]
/src/gpac/src/filters/dec_bifs.c	[]	[]
/src/gpac/include/gpac/internal/bifs_dev.h	[]	[]
/src/gpac/src/compositor/mpeg4_mediacontrol.c	['fuzz_scene']	[]
/src/gpac/src/ietf/rtp_depacketizer.c	[]	[]
/src/gpac/src/filters/write_tx3g.c	[]	[]
/src/gpac/src/evg/raster3d.c	[]	[]
/src/gpac/src/media_tools/isom_tools.c	[]	[]
/src/gpac/src/evg/surface.c	['fuzz_scene']	[]
/src/gpac/src/evg/raster_yuv.c	[]	[]
/src/gpac/src/filters/dmx_avi.c	[]	[]
/src/gpac/src/utils/gzio.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_probe_analyze']
/src/gpac/src/media_tools/m3u8.c	[]	[]
/src/gpac/src/utils/sha1.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/scenegraph/qjs_common.h	[]	[]
/src/gpac/src/odf/odf_code.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/isomedia/box_code_3gpp.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/utils/math.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_probe_analyze', 'fuzz_scene']
/src/gpac/src/quickjs/libunicode.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/dec_mediacodec_jni.c	[]	[]
/src/gpac/src/filter_core/filter_pck.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_probe_analyze']
/src/gpac/src/filters/out_http.c	[]	[]
/src/gpac/src/scenegraph/vrml_route.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/evg/stencil.c	['fuzz_scene']	[]
/src/gpac/src/compositor/scene.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_amr.c	[]	[]
/src/gpac/src/filters/hevcsplit.c	[]	[]
/src/gpac/modules/test_filter/test_filter.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/encrypt_cenc_isma.c	[]	[]
/src/gpac/src/isomedia/box_funcs.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/rewrite_nalu.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_font.cpp	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/utils/xml_parser.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/isomedia/box_code_adobe.c	[]	[]
/src/gpac/src/quickjs/quickjs-opcode.h	[]	[]
/src/gpac/src/utils/rmt_ws.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/include/gpac/thread.h	[]	[]
/src/gpac/src/media_tools/reedsolomon.c	[]	[]
/src/gpac/src/scene_manager/encode_isom.c	[]	[]
/src/gpac/include/gpac/internal/odf_parse_common.h	[]	[]
/src/gpac/src/scenegraph/smil_anim.c	['fuzz_scene']	[]
/src/gpac/src/compositor/svg_text.c	['fuzz_scene']	[]
/src/gpac/src/filters/decrypt_cenc_isma.c	[]	[]
/src/gpac/src/filters/reframe_truehd.c	[]	[]
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_in.h	[]	[]
/src/gpac/src/utils/color.c	['fuzz_scene']	[]
/src/gpac/src/compositor/audio_input.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_prores.c	[]	[]
/src/gpac/src/filters/write_vtt.c	[]	[]
/src/gpac/src/odf/ipmpx_code.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/src/filters/reframe_qcp.c	[]	[]
/src/gpac/include/gpac/internal/mesh.h	[]	[]
/src/gpac/src/compositor/x3d_geometry.c	['fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_geometry_3d.c	['fuzz_scene']	[]
/src/gpac/src/filters/mux_isom.c	[]	[]
/src/gpac/src/filters/reframe_rawvid.c	[]	[]
/src/gpac/modules/deprecated/old_arch/netctrl/netctrl.c	[]	[]
/src/gpac/src/odf/odf_command.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/src/filters/dec_cc.c	[]	[]
/src/gpac/src/compositor/mesh_collide.c	[]	[]
/src/gpac/applications/gpac/gpac_help.c	[]	[]
/src/gpac/src/media_tools/dsmcc.c	['fuzz_m2ts_probe']	[]
/src/gpac/src/bifs/predictive_mffield.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/tx3g.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/src/scene_manager/loader_xmt.c	[]	[]
/src/gpac/src/filters/dec_webvtt.c	[]	[]
/src/gpac/src/filters/write_generic.c	[]	[]
/src/gpac/src/odf/odf_dump.c	[]	[]
/src/gpac/src/compositor/visual_manager_3d_gl.c	['fuzz_scene']	[]
/src/gpac/src/filters/in_rtp_rtsp.c	[]	[]
/src/gpac/applications/generators/SVG/v1.c	[]	[]
/src/gpac/src/bifs/field_decode.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/in_rtp.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/testsuite/oss-fuzzers/fuzz_route.c	['fuzz_route']	['fuzz_route']
/src/gpac/modules/deprecated/old_arch/avcap/avcap.cpp	[]	[]
/src/gpac/src/scenegraph/mpeg4_valuator.c	['fuzz_scene']	[]
/src/gpac/src/scenegraph/vrml_js.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/bifs/unquantize.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/unittests/tests.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_priv.h	[]	[]
/src/gpac/modules/deprecated/old_arch/hyb_in/hyb_in.c	[]	[]
/src/gpac/src/filters/evg_rescale.c	[]	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_parse.c	['fuzz_parse']	['fuzz_parse']
/src/gpac/src/utils/unicode.c	[]	[]
/src/gpac/src/media_tools/isom_hinter.c	[]	[]
/src/gpac/src/odf/odf_parse.c	[]	[]
/src/gpac/src/utils/url.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/droid_mpegv/droid_mpegv.c	[]	[]
/src/gpac/src/filters/unittests/ut_dec_cc.c	[]	[]
/src/gpac/src/filter_core/filter_pid.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/dmx_nhml.c	[]	[]
/src/gpac/include/gpac/module.h	[]	[]
/src/gpac/src/utils/os_module.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route']
/src/gpac/src/scenegraph/x3d_nodes.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/odf/qos.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACMediaController.cpp	[]	[]
/src/gpac/src/filters/in_http.c	[]	[]
/src/gpac/testsuite/oss-fuzzers/fuzz_m2ts_probe.c	['fuzz_m2ts_probe']	['fuzz_m2ts_probe']
/src/gpac/src/media_tools/id3.c	[]	[]
/src/gpac/src/isomedia/movie_fragments.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/src/laser/lsr_enc.c	[]	[]
/src/gpac/src/filters/dec_img.c	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACMediaRenderer.cpp	[]	[]
/src/gpac/modules/deprecated/old_arch/opencv_is/opencv_is.c	[]	[]
/src/gpac/src/filters/base_filter_example.c	[]	[]
/src/gpac/src/bifs/script_enc.c	[]	[]
/src/gpac/src/compositor/svg_external.c	[]	[]
/src/gpac/src/filters/in_rtp_stream.c	[]	[]
/src/gpac/src/filters/isoffin_read.c	[]	[]
/src/gpac/modules/deprecated/old_arch/hyb_in/fm_fake_push.c	[]	[]
/src/gpac/src/media_tools/dvb_mpe.c	['fuzz_m2ts_probe']	[]
/src/gpac/src/scenegraph/dom_events.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/media_tools/img.c	[]	[]
/src/gpac/src/utils/downloader_curl.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/scene_manager/loader_qt.c	[]	[]
/src/gpac/src/filters/write_nhnt.c	[]	[]
/src/gpac/src/compositor/mpeg4_geometry_ifs2d.c	['fuzz_scene']	[]
/src/gpac/src/filters/bs_agg.c	[]	[]
/src/gpac/src/utils/os_thread.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/compositor/offscreen_cache.c	['fuzz_scene']	[]
/src/gpac/src/scenegraph/vrml_tools.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/dmx_ogg.c	[]	[]
/src/gpac/src/media_tools/dash_client.c	[]	[]
/src/gpac/src/filters/isoffin_read_ch.c	[]	[]
/src/gpac/src/ietf/rtp_pck_mpeg4.c	[]	[]
/src/gpac/src/filters/ttml_conv.c	[]	[]
/src/gpac/src/scene_manager/swf_svg.c	[]	[]
/src/gpac/src/filter_core/filter_session_js.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/rewind.c	[]	[]
/src/gpac/src/filters/reframe_adts.c	[]	[]
/src/gpac/modules/caca_out/caca_out.c	[]	[]
/src/gpac/src/filters/ff_rescale.c	[]	[]
/src/gpac/src/scenegraph/mpeg4_nodes.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/dec_vorbis.c	[]	[]
/src/gpac/modules/deprecated/old_arch/wiiis/wiiis.c	[]	[]
/src/gpac/src/laser/lsr_dec.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/modules/deprecated/old_arch/platinum/GenericDevice.cpp	[]	[]
/src/gpac/src/filters/load_text.c	[]	[]
/src/gpac/modules/deprecated/oss_audio/oss.c	[]	[]
/src/gpac/src/utils/symbian_net.cpp	[]	[]
/src/gpac/src/filters/mux_ogg.c	[]	[]
/src/gpac/src/filters/dec_odf.c	[]	[]
/src/gpac/src/odf/oci_codec.c	[]	[]
/src/gpac/src/compositor/drawable.c	['fuzz_scene']	[]
/src/gpac/src/ietf/sdp.c	[]	[]
/src/gpac/src/filters/vcrop.c	[]	[]
/src/gpac/modules/deprecated/old_arch/widgetman/widgetman.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/compositor/scene_node_init.c	['fuzz_scene']	[]
/src/gpac/modules/dx_hw/dx_video.c	[]	[]
/src/gpac/src/compositor/compositor_node_init.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/crypt_tools.c	[]	[]
/src/gpac/src/filters/dmx_vobsub.c	[]	[]
/src/gpac/src/jsmods/storage.c	[]	[]
/src/gpac/src/isomedia/hinting.c	[]	[]
/src/gpac/src/utils/bitstream.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_scene']	['fuzz_parse', 'fuzz_route', 'fuzz_scene']
/src/gpac/src/compositor/camera.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/mpd.c	[]	[]
/src/gpac/src/isomedia/box_code_base.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/modules/sdl_out/video.c	[]	[]
/src/gpac/applications/generators/SVG/html.c	[]	[]
/src/gpac/src/crypto/g_crypt.c	[]	[]
/src/gpac/src/compositor/mpeg4_bitmap.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/media_import.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/src/quickjs/cutils.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/utils/path2d_stroker.c	[]	[]
/src/gpac/src/ietf/rtcp.c	[]	[]
/src/gpac/modules/deprecated/old_arch/gdip_raster/gdip_grad.cpp	[]	[]
/src/gpac/include/gpac/maths.h	[]	[]
/src/gpac/src/compositor/mpeg4_mediasensor.c	['fuzz_scene']	[]
/src/gpac/share/nodejs/src/gpac_napi.h	[]	[]
/src/gpac/src/filters/reframe_ac3.c	[]	[]
/src/gpac/src/scenegraph/dom_js.c	['fuzz_scene']	[]
/src/gpac/src/utils/path2d.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_scene']
/src/gpac/src/compositor/mpeg4_sensors.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACFileMediaServer.cpp	[]	[]
/src/gpac/src/ietf/rtsp_session.c	[]	[]
/src/gpac/src/filters/dec_xvid.c	[]	[]
/src/gpac/applications/mp4box/mp4box.h	[]	[]
/src/gpac/src/filters/in_rtp_signaling.c	[]	[]
/src/gpac/src/quickjs/libregexp.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/ff_dmx.c	[]	[]
/src/gpac/modules/deprecated/old_arch/mse_in/mse_in.c	[]	[]
/src/gpac/src/compositor/navigate.c	['fuzz_scene']	[]
/src/gpac/src/filters/dmx_dash.c	[]	[]
/src/gpac/src/isomedia/data_map.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/bsrw.c	[]	[]
/src/gpac/applications/mp4box/mp4box.c	[]	[]
/src/gpac/src/bifs/com_dec.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/compositor/visual_manager_2d.h	[]	[]
/src/gpac/src/utils/base_encoding.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/dmx_nhnt.c	[]	[]
/src/gpac/src/utils/downloader.h	[]	[]
/src/gpac/modules/deprecated/old_arch/widgetman/widget.c	[]	[]
/src/gpac/src/scenegraph/smil_timing.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/reframer.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/out_audio.c	[]	[]
/src/gpac/include/gpac/modules/codec.h	[]	[]
/src/gpac/src/scenegraph/base_scenegraph.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_scene']
/src/gpac/src/scenegraph/html5_mse_js.c	[]	[]
/src/gpac/modules/deprecated/old_arch/ui_rec/ui_rec.c	[]	[]
/src/gpac/src/compositor/scene_ns.c	['fuzz_scene']	[]
/src/gpac/src/compositor/visual_manager.c	['fuzz_scene']	[]
/src/gpac/src/filter_core/filter_props.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filter_core/filter_session.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/applications/gpac/carbon_hook.c	[]	[]
/src/gpac/modules/deprecated/old_arch/widgetman/unzip.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/filters/ff_dec.c	[]	[]
/src/gpac/src/filters/out_rtsp.c	[]	[]
/src/gpac/src/compositor/compositor_2d.c	['fuzz_scene']	[]
/src/gpac/src/filters/dec_mediacodec.c	[]	[]
/src/gpac/src/compositor/mpeg4_grouping_3d.c	['fuzz_scene']	[]
/src/gpac/src/filters/compose.c	[]	[]
/src/gpac/modules/x11_out/x11_out.h	[]	[]
/src/gpac/src/filters/ff_common.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/scene_manager/scene_dump.c	[]	[]
/src/gpac/src/isomedia/sample_descs.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/ff_bsf.c	[]	[]
/src/gpac/src/filters/dec_mpeghdec.c	[]	[]
/src/gpac/src/filters/dec_ac52.c	[]	[]
/src/gpac/src/quickjs/quickjs.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_inputsensor.c	['fuzz_scene']	[]
/src/gpac/src/filters/dmx_ghi.c	[]	[]
/src/gpac/src/filters/dmx_saf.c	[]	[]
/src/gpac/src/crypto/tiny_aes.c	[]	[]
/src/gpac/include/gpac/setup.h	[]	[]
/src/gpac/src/bifs/conditional.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/filters/vflip.c	[]	[]
/src/gpac/src/compositor/hc_flash_shape.c	['fuzz_scene']	[]
/src/gpac/applications/generators/MPEG4/main.c	[]	[]
/src/gpac/src/compositor/mpeg4_layer_2d.c	['fuzz_scene']	[]
/src/gpac/modules/x11_out/x11_out.c	['fuzz_route', 'fuzz_probe_analyze']	[]
/src/gpac/src/filters/reframe_av1.c	[]	[]
/src/gpac/src/ietf/rtp_streamer.c	[]	[]
/src/gpac/src/isomedia/iff.c	[]	[]
/src/gpac/src/bifs/memory_decoder.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/media_tools/saf.c	[]	[]
/src/gpac/include/tests.h	[]	[]
/src/gpac/src/compositor/clock.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_nalu.c	[]	[]
/src/gpac/src/utils/os_file.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/dec_nvdec_sdk.c	[]	[]
/src/gpac/src/scenegraph/mpeg4_animators.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/modules/dx_hw/dx_2d.c	[]	[]
/src/gpac/src/filters/unit_test_filter.c	[]	[]
/src/gpac/src/filters/dec_vtb.c	[]	[]
/src/gpac/src/filters/mux_ts.c	[]	[]
/src/gpac/applications/gpac/compositor_tools.c	[]	[]
/src/gpac/src/compositor/mpeg4_grouping_2d.c	['fuzz_scene']	[]
/src/gpac/src/scene_manager/scene_stats.c	[]	[]
/src/gpac/src/compositor/svg_geometry.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/drm_sample.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/compositor/mpeg4_grouping.c	['fuzz_scene']	[]
/src/gpac/src/filters/unframer.c	[]	[]
/src/gpac/src/quickjs/dtoa.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/tssplit.c	[]	[]
/src/gpac/src/isomedia/meta.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/jsmods/WebGLRenderingContextBase.c	[]	[]
/src/gpac/src/compositor/events.c	['fuzz_scene']	[]
/src/gpac/src/filters/filelist.c	[]	[]
/src/gpac/src/compositor/svg_media.c	['fuzz_scene']	[]
/src/gpac/src/utils/os_net.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route']
/src/gpac/modules/deprecated/epoc_hw/epoc_vout.cpp	[]	[]
/src/gpac/src/ietf/rtsp_command.c	[]	[]
/src/gpac/src/bifs/arith_decoder.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/ios_cam/CameraObject.h	[]	[]
/src/gpac/src/media_tools/avilib.c	[]	[]
/src/gpac/src/compositor/visual_manager_2d.c	['fuzz_scene']	[]
/src/gpac/src/filters/write_nhml.c	[]	[]
/src/gpac/src/compositor/mpeg4_textures.c	['fuzz_scene']	[]
/src/gpac/src/utils/downloader.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/isomedia/stbl_write.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	[]
/src/gpac/src/scenegraph/vrml_script.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/modules/alsa/alsa.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/out_video.c	[]	[]
/src/gpac/modules/deprecated/old_arch/libplayer/libplayer.c	[]	[]
/src/gpac/src/scene_manager/text_to_bifs.c	[]	[]
/src/gpac/src/filters/dec_ttxt.c	[]	[]
/src/gpac/src/utils/alloc.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/jsmods/scene_js.c	[]	[]
/src/gpac/src/isomedia/isom_read.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/modules/pulseaudio/pulseaudio.c	[]	[]
/src/gpac/src/scene_manager/swf_bifs.c	[]	[]
/src/gpac/src/compositor/mesh_tesselate.c	[]	[]
/src/gpac/src/filters/reframe_img.c	[]	[]
/src/gpac/modules/deprecated/epoc_hw/epoc_codec.cpp	[]	[]
/src/gpac/modules/deprecated/old_arch/platinum/GPACPlatinum.h	[]	[]
/src/gpac/src/scenegraph/svg_js.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/hint_track.c	[]	[]
/src/gpac/src/filters/tilesplit.c	[]	[]
/src/gpac/src/compositor/mpeg4_path_layout.c	['fuzz_scene']	[]
/src/gpac/src/scene_manager/swf_parse.c	[]	[]
/src/gpac/modules/deprecated/old_arch/psvr/psvr.c	[]	[]
/src/gpac/src/utils/downloader_emscripten.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/src/filters/load_svg.c	[]	[]
/src/gpac/src/filters/dmx_mpegps.c	[]	[]
/src/gpac/include/gpac/internal/isomedia_dev.h	[]	[]
/src/gpac/src/compositor/mpeg4_geometry_2d.c	['fuzz_scene']	[]
/src/gpac/src/media_tools/dash_segmenter.c	[]	[]
/src/gpac/src/utils/downloader_ngtcp2.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/isomedia/media.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/rewrite_mhas.c	[]	[]
/src/gpac/src/ietf/rtp_packetizer.c	[]	[]
/src/gpac/src/odf/slc.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/media_tools/media_export.c	[]	[]
/src/gpac/modules/directfb_out/directfb_wrapper.c	[]	[]
/src/gpac/src/utils/dlmalloc.c	[]	[]
/src/gpac/include/gpac/svg_types.h	[]	[]
/src/gpac/src/isomedia/box_code_meta.c	[]	[]
/src/gpac/include/gpac/constants.h	[]	[]
/src/gpac/src/filters/restamp.c	[]	[]
/src/gpac/src/compositor/mpeg4_background.c	['fuzz_scene']	[]
/src/gpac/src/filters/rewrite_obu.c	[]	[]
/src/gpac/src/scenegraph/svg_attributes.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/ffmpeg_load.c	[]	[]
/src/gpac/modules/jack/jack.c	[]	[]
/src/gpac/src/compositor/mpeg4_sound.c	['fuzz_scene']	[]
/src/gpac/modules/sdl_out/audio.c	[]	[]
/src/gpac/src/compositor/mpeg4_timesensor.c	['fuzz_scene']	[]
/src/gpac/src/filters/in_sock.c	[]	[]
/src/gpac/src/filters/in_file.c	[]	[]
/src/gpac/src/media_tools/gpac_ogg.c	[]	[]
/src/gpac/src/filters/io_fcryp.c	[]	[]
/src/gpac/modules/deprecated/ios_mpegv/ios_mpegv.c	[]	[]
/src/gpac/src/compositor/font_engine.c	['fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	[]
/src/gpac/src/filters/dec_ttml.c	[]	[]
/src/gpac/src/scene_manager/scene_engine.c	[]	[]
/src/gpac/src/filters/jsfilter.c	['fuzz_m2ts_probe', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_route', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/old_arch/gapi/gapi.cpp	[]	[]
/src/gpac/src/isomedia/ttml.c	[]	[]
/src/gpac/src/filters/ff_avf.c	[]	[]
/src/gpac/src/jsmods/xhr.c	[]	[]
/src/gpac/modules/droid_audio/droidaudio.c	[]	[]
/src/gpac/src/filters/resample_audio.c	[]	[]
/src/gpac/src/filters/tileagg.c	[]	[]
/src/gpac/src/evg/raster_rgb.c	[]	[]
/src/gpac/src/media_tools/ait.c	['fuzz_m2ts_probe']	[]
/src/gpac/src/media_tools/html5_media.c	['fuzz_scene']	[]
/src/gpac/src/filters/avin_web.c	[]	[]
/src/gpac/src/isomedia/avc_ext.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/filters/dec_faad.c	[]	[]
/src/gpac/src/filters/out_file.c	[]	[]
/src/gpac/src/filters/load_bt_xmt.c	['fuzz_scene']	[]
/src/gpac/src/isomedia/isom_intern.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/media_tools/av_parsers.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/ietf/rtp_pck_3gpp.c	[]	[]
/src/gpac/src/scenegraph/html5_media_js.c	['fuzz_scene']	[]
/src/gpac/src/ietf/rtp.c	[]	[]
/src/gpac/src/compositor/mpeg4_audio.c	['fuzz_scene']	[]
/src/gpac/src/crypto/g_crypt_tinyaes.c	[]	[]
/src/gpac/src/isomedia/track.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_scene']	['fuzz_parse']
/src/gpac/src/utils/constants.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze', 'fuzz_scene']	['fuzz_parse', 'fuzz_route', 'fuzz_probe_analyze']
/src/gpac/modules/deprecated/epoc_hw/epoc_aout.cpp	[]	[]
/src/gpac/src/filters/inspect.c	[]	[]
/src/gpac/src/filters/enc_png.c	[]	[]
/src/gpac/src/filters/rewrite_adts.c	[]	[]
/src/gpac/src/scenegraph/commands.c	['fuzz_scene']	['fuzz_scene']
/src/gpac/src/jsmods/webgl.h	[]	[]
/src/gpac/src/filters/isoffin_load.c	[]	[]
/src/gpac/src/compositor/texturing_gl.c	['fuzz_scene']	[]
/src/gpac/src/compositor/audio_render.c	['fuzz_scene']	[]
/src/gpac/src/scene_manager/loader_isom.c	[]	[]
/src/gpac/src/utils/downloader_hmux.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/compositor/svg_filters.c	['fuzz_scene']	[]
/src/gpac/src/filters/reframe_mpgvid.c	[]	[]
/src/gpac/src/compositor/mpeg4_text.c	['fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/freenect/freenect.c	[]	[]
/src/gpac/applications/generators/X3D/main.c	[]	[]
/src/gpac/src/filters/ff_mx.c	[]	[]
/src/gpac/src/isomedia/isom_store.c	['fuzz_m2ts_probe', 'fuzz_parse', 'fuzz_route', 'fuzz_scene']	[]
/src/gpac/modules/deprecated/old_arch/platinum/GenericDevice.h	[]	[]
/src/gpac/src/filters/dmx_m2ts.c	[]	[]
/src/gpac/src/filters/enc_webcodec.c	[]	[]
/src/gpac/src/filters/mux_avi.c	[]	[]
/src/gpac/src/filters/in_route_repair.c	[]	[]
/src/gpac/src/bifs/quantize.c	[]	[]
/src/gpac/src/utils/downloader_ssl.c	['fuzz_m2ts_probe', 'fuzz_scene']	[]
/src/gpac/src/compositor/mpeg4_layout.c	['fuzz_scene']	[]

Directories in report

Directory
/src/gpac/applications/generators/X3D/
/src/gpac/modules/deprecated/old_arch/widgetman/
/src/gpac/src/odf/
/src/gpac/modules/pulseaudio/
/src/gpac/modules/deprecated/old_arch/freenect/
/src/gpac/src/quickjs/
/src/gpac/modules/deprecated/old_arch/ui_rec/
/src/gpac/applications/gpac/
/src/gpac/src/scenegraph/
/src/gpac/src/filters/unittests/
/src/gpac/modules/deprecated/ios_mpegv/
/src/gpac/src/utils/
/src/gpac/unittests/
/src/gpac/applications/gpac_android/src/main/jni/
/src/gpac/modules/deprecated/old_arch/hyb_in/
/src/gpac/modules/test_filter/
/src/gpac/modules/deprecated/old_arch/platinum/
/src/gpac/modules/sdl_out/
/src/gpac/modules/jack/
/src/gpac/include/
/src/gpac/src/filter_core/
/src/gpac/modules/droid_audio/
/src/gpac/modules/deprecated/old_arch/mse_in/
/src/gpac/applications/generators/SVG/
/src/gpac/modules/deprecated/old_arch/avcap/
/src/gpac/applications/generators/WebGLGen/
/src/gpac/src/ietf/
/src/gpac/modules/dx_hw/
/src/gpac/modules/deprecated/old_arch/netctrl/
/src/gpac/src/evg/
/src/gpac/modules/deprecated/old_arch/opencv_is/
/src/gpac/src/
/src/gpac/modules/deprecated/ios_cam/
/src/gpac/modules/deprecated/old_arch/osd/
/src/gpac/src/compositor/
/src/gpac/modules/deprecated/old_arch/libplayer/
/src/gpac/src/laser/
/src/gpac/src/filters/
/src/gpac/testsuite/oss-fuzzers/
/src/gpac/modules/deprecated/old_arch/ffmpeg_in/
/src/gpac/modules/deprecated/epoc_hw/
/src/gpac/modules/deprecated/old_arch/gapi/
/src/gpac/modules/ft_font/
/src/gpac/modules/directfb_out/
/src/gpac/src/scene_manager/
/src/gpac/src/bifs/
/src/gpac/src/crypto/
/src/gpac/applications/mp4box/
/src/gpac/modules/deprecated/old_arch/gdip_raster/
/src/gpac/include/gpac/
/src/gpac/src/isomedia/
/src/gpac/modules/alsa/
/src/gpac/modules/droid_out/
/src/gpac/modules/deprecated/oss_audio/
/src/gpac/modules/deprecated/droid_mpegv/
/src/gpac/modules/deprecated/old_arch/wiiis/
/src/gpac/modules/x11_out/
/src/gpac/modules/validator/
/src/gpac/include/gpac/modules/
/src/gpac/include/gpac/internal/
/src/gpac/modules/wav_out/
/src/gpac/modules/dektec_out/
/src/gpac/src/media_tools/
/src/gpac/src/jsmods/
/src/gpac/applications/generators/MPEG4/
/src/gpac/modules/deprecated/old_arch/rvc_dec/
/src/gpac/modules/caca_out/
/src/gpac/modules/deprecated/old_arch/psvr/
/src/gpac/modules/deprecated/droid_cam/
/src/gpac/modules/demo_is/
/src/gpac/share/nodejs/src/
/src/gpac/modules/deprecated/old_arch/audio_filter/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers

This section contains multiple tables, each table contains a list of sink functions/methods found in the project for one of the CWE supported by the sink analyser, together with information like which fuzzers statically reach the sink functions/methods and possible call path to that sink functions/methods if it is not statically reached by any fuzzers. Column 1 is the function/method name of the sink functions/methods found in the project. Column 2 lists all fuzzers (or no fuzzers at all) that have covered that particular function method statically. Column 3 shows a list of possible call paths to reach the specific function/method call if none of the fuzzers cover the target function/method calls. Lastly, column 4 shows possible fuzzer blockers that prevent an existing fuzzer from reaching the target sink functions/methods dynamically.

Sink functions/methods found for CWE79

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
getenv	['fuzz_route', 'fuzz_probe_analyze']	N/A	N/A

Sink functions/methods found for CWE787

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
malloc	[]	Path 1 Path 2	N/A
realloc	[]	Path 1 Path 2	N/A

Sink functions/methods found for CWE416

Target sink	Reached by fuzzer	Function call path	Possible branch blockers
free	['fuzz_scene', 'fuzz_parse']	N/A	N/A