Fuzz introspector: cms_devicelink_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
172 172 1 :

['cmsSaveProfileToFile']

174 265 cmsCloseProfile call site: 00260 /src/lcms/src/cmsio0.c:1591
34 43 2 :

['_cmsDeleteTagByPos', '_cmsSearchTag']

34 101 cmsWriteTag call site: 00189 /src/lcms/src/cmsio0.c:1803
34 34 1 :

['_cmsDeleteTagByPos']

34 34 _cmsNewTag call site: 00200 /src/lcms/src/cmsio0.c:685
33 33 1 :

['GrowMLUtable']

33 72 AddMLUBlock call site: 00180 /src/lcms/src/cmsnamed.c:150
14 14 3 :

['_cmsLeaveCriticalSectionPrimitive', '_cmsEnterCriticalSectionPrimitive', 'InitContextMutex']

14 14 _cmsGetContext call site: 00008 /src/lcms/src/cmsplugin.c:720
8 34 2 :

['_cmsTagSignature2String', 'cmsSignalError']

8 63 cmsWriteTag call site: 00218 /src/lcms/src/cmsio0.c:1885
2 2 1 :

['cmsCloseIOhandler']

2 60 cmsCloseProfile call site: 00362 /src/lcms/src/cmsio0.c:1602
0 163 3 :

['_cmsFree', 'AddMLUBlock', '_cmsCalloc']

0 163 cmsMLUsetASCII call site: 00240 /src/lcms/src/cmsnamed.c:344
0 32 1 :

['cmsStageFree']

0 32 cmsStageAllocCLut16bitGranular call site: 00083 /src/lcms/src/cmslut.c:599
0 32 1 :

['cmsStageFree']

0 32 cmsStageDup call site: 00000 /src/lcms/src/cmslut.c:1271
0 29 1 :

['_cmsFree']

0 29 freeOneTag call site: 00362 /src/lcms/src/cmsio0.c:1569
0 29 1 :

['_cmsFree']

0 29 cmsMLUalloc call site: 00173 /src/lcms/src/cmsnamed.c:48

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 cmsCreateInkLimitingDeviceLink [function] [call site] 00001
2 cmsCreateInkLimitingDeviceLinkTHR [function] [call site] 00002
3 cmsSignalError [function] [call site] 00003
4 vsnprintf [call site] 00004
4 _cmsContextGetClientChunk [function] [call site] 00005
5 cmsSignalError [function] [call site] 00006
5 __assert_fail [call site] 00007
5 _cmsGetContext [function] [call site] 00008
6 InitContextMutex [function] [call site] 00009
6 _cmsEnterCriticalSectionPrimitive [function] [call site] 00010
7 pthread_mutex_lock [call site] 00011
6 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00012
7 pthread_mutex_unlock [call site] 00013
6 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00014
3 cmsSignalError [function] [call site] 00015
3 cmsCreateProfilePlaceholder [function] [call site] 00016
4 _cmsMallocZero [function] [call site] 00017
5 _cmsContextGetClientChunk [function] [call site] 00018
4 _cmsGetTime [function] [call site] 00019
5 time [call site] 00020
5 gmtime_r [call site] 00021
4 _cmsCreateMutex [function] [call site] 00022
5 _cmsContextGetClientChunk [function] [call site] 00023
4 _cmsFree [function] [call site] 00024
5 _cmsContextGetClientChunk [function] [call site] 00025
3 cmsSetProfileVersion [function] [call site] 00026
4 BaseToBase [function] [call site] 00027
3 cmsSetDeviceClass [function] [call site] 00028
3 cmsSetColorSpace [function] [call site] 00029
3 cmsSetPCS [function] [call site] 00030
3 cmsSetHeaderRenderingIntent [function] [call site] 00031
3 cmsPipelineAlloc [function] [call site] 00032
4 _cmsMallocZero [function] [call site] 00033
4 BlessLUT [function] [call site] 00034
5 cmsPipelineGetPtrToFirstStage [function] [call site] 00035
5 cmsPipelineGetPtrToLastStage [function] [call site] 00036
4 _cmsFree [function] [call site] 00037
3 cmsChannelsOf [function] [call site] 00038
4 cmsChannelsOfColorSpace [function] [call site] 00039
3 cmsStageAllocCLut16bit [function] [call site] 00040
4 cmsStageAllocCLut16bitGranular [function] [call site] 00041
5 __assert_fail [call site] 00042
5 cmsSignalError [function] [call site] 00043
5 _cmsStageAllocPlaceholder [function] [call site] 00044
6 _cmsMallocZero [function] [call site] 00045
5 EvaluateCLUTfloatIn16 [function] [call site] 00046
6 __assert_fail [call site] 00047
6 __assert_fail [call site] 00048
6 FromFloatTo16 [function] [call site] 00049
7 _cmsQuickSaturateWord [function] [call site] 00050
8 _cmsQuickFloorWord [function] [call site] 00051
9 _cmsQuickFloor [function] [call site] 00052
6 From16ToFloat [function] [call site] 00053
5 CLUTElemDup [function] [call site] 00054
6 _cmsMallocZero [function] [call site] 00055
6 _cmsDupMem [function] [call site] 00056
7 _cmsContextGetClientChunk [function] [call site] 00057
6 _cmsDupMem [function] [call site] 00058
6 _cmsComputeInterpParamsEx [function] [call site] 00059
7 cmsSignalError [function] [call site] 00060
7 _cmsMallocZero [function] [call site] 00061
7 _cmsSetInterpolationRoutine [function] [call site] 00062
8 _cmsContextGetClientChunk [function] [call site] 00063
8 DefaultInterpolatorsFactory [function] [call site] 00064
7 cmsSignalError [function] [call site] 00065
7 _cmsFree [function] [call site] 00066
6 _cmsFree [function] [call site] 00067
6 _cmsFree [function] [call site] 00068
5 CLutElemTypeFree [function] [call site] 00069
6 _cmsFree [function] [call site] 00070
6 _cmsFreeInterpParams [function] [call site] 00071
7 _cmsFree [function] [call site] 00072
6 _cmsFree [function] [call site] 00073
5 _cmsMallocZero [function] [call site] 00074
5 cmsStageFree [function] [call site] 00075
6 _cmsFree [function] [call site] 00076
5 CubeSize [function] [call site] 00077
6 __assert_fail [call site] 00078
5 cmsStageFree [function] [call site] 00079
5 _cmsCalloc [function] [call site] 00080
6 _cmsContextGetClientChunk [function] [call site] 00081
5 cmsStageFree [function] [call site] 00082
5 _cmsComputeInterpParamsEx [function] [call site] 00083
5 cmsStageFree [function] [call site] 00084
3 cmsStageSampleCLut16bit [function] [call site] 00085
4 CubeSize [function] [call site] 00086
4 _cmsQuantizeVal [function] [call site] 00087
5 _cmsQuickSaturateWord [function] [call site] 00088
3 InkLimitingSampler [function] [call site] 00089
4 _cmsQuickSaturateWord [function] [call site] 00090
4 _cmsQuickSaturateWord [function] [call site] 00091
4 _cmsQuickSaturateWord [function] [call site] 00092
3 _cmsStageAllocIdentityCurves [function] [call site] 00093
4 cmsStageAllocToneCurves [function] [call site] 00094
5 _cmsStageAllocPlaceholder [function] [call site] 00095
5 EvaluateCurves [function] [call site] 00096
6 __assert_fail [call site] 00097
6 cmsEvalToneCurveFloat [function] [call site] 00098
7 __assert_fail [call site] 00099
7 _cmsQuickSaturateWord [function] [call site] 00100
7 cmsEvalToneCurve16 [function] [call site] 00101
8 __assert_fail [call site] 00102
7 EvalSegmentedFn [function] [call site] 00103
5 CurveSetDup [function] [call site] 00104
6 _cmsMallocZero [function] [call site] 00105
6 _cmsCalloc [function] [call site] 00106
6 cmsDupToneCurve [function] [call site] 00107
7 AllocateToneCurveStruct [function] [call site] 00108
8 cmsSignalError [function] [call site] 00109
8 cmsSignalError [function] [call site] 00110
8 _cmsMallocZero [function] [call site] 00111
8 _cmsCalloc [function] [call site] 00112
8 _cmsCalloc [function] [call site] 00113
8 _cmsCalloc [function] [call site] 00114
8 _cmsCalloc [function] [call site] 00115
8 _cmsComputeInterpParams [function] [call site] 00116
9 _cmsComputeInterpParamsEx [function] [call site] 00117
8 _cmsDupMem [function] [call site] 00118
8 GetParametricCurveByType [function] [call site] 00119
9 _cmsContextGetClientChunk [function] [call site] 00120
9 IsInSet [function] [call site] 00121
9 IsInSet [function] [call site] 00122
8 _cmsComputeInterpParams [function] [call site] 00123
8 _cmsFree [function] [call site] 00124
8 _cmsFree [function] [call site] 00125
8 _cmsFree [function] [call site] 00126
8 _cmsFree [function] [call site] 00127
8 _cmsFree [function] [call site] 00128
8 _cmsFree [function] [call site] 00129
8 _cmsFree [function] [call site] 00130
6 cmsFreeToneCurve [function] [call site] 00131
7 _cmsFreeInterpParams [function] [call site] 00132
7 _cmsFree [function] [call site] 00133
7 _cmsFree [function] [call site] 00134
7 _cmsFreeInterpParams [function] [call site] 00135
7 _cmsFree [function] [call site] 00136
7 _cmsFree [function] [call site] 00137
7 _cmsFree [function] [call site] 00138
7 _cmsFree [function] [call site] 00139
6 _cmsFree [function] [call site] 00140
6 _cmsFree [function] [call site] 00141
5 CurveSetElemTypeFree [function] [call site] 00142
6 __assert_fail [call site] 00143
6 cmsFreeToneCurve [function] [call site] 00144
6 _cmsFree [function] [call site] 00145
6 _cmsFree [function] [call site] 00146
5 _cmsMallocZero [function] [call site] 00147
5 cmsStageFree [function] [call site] 00148
5 _cmsCalloc [function] [call site] 00149
5 cmsStageFree [function] [call site] 00150
5 cmsBuildGamma [function] [call site] 00151
6 cmsBuildParametricToneCurve [function] [call site] 00152
7 GetParametricCurveByType [function] [call site] 00153
7 __assert_fail [call site] 00154
7 cmsSignalError [function] [call site] 00155
7 cmsBuildSegmentedToneCurve [function] [call site] 00156
8 __assert_fail [call site] 00157
8 EntriesByGamma [function] [call site] 00158
8 AllocateToneCurveStruct [function] [call site] 00159
8 EvalSegmentedFn [function] [call site] 00160
8 _cmsQuickSaturateWord [function] [call site] 00161
5 cmsDupToneCurve [function] [call site] 00162
5 cmsStageFree [function] [call site] 00163
3 cmsPipelineInsertStage [function] [call site] 00164
4 BlessLUT [function] [call site] 00165
3 cmsPipelineInsertStage [function] [call site] 00166
3 _cmsStageAllocIdentityCurves [function] [call site] 00167
3 cmsPipelineInsertStage [function] [call site] 00168
3 SetTextTags [function] [call site] 00169
4 cmsGetProfileContextID [function] [call site] 00170
4 cmsMLUalloc [function] [call site] 00171
5 _cmsMallocZero [function] [call site] 00172
5 _cmsCalloc [function] [call site] 00173
5 _cmsFree [function] [call site] 00174
4 cmsMLUalloc [function] [call site] 00175
4 cmsMLUsetWide [function] [call site] 00176
5 strTo16 [function] [call site] 00177
5 strTo16 [function] [call site] 00178
5 mywcslen [function] [call site] 00179
5 AddMLUBlock [function] [call site] 00180
6 GrowMLUtable [function] [call site] 00181
7 _cmsRealloc [function] [call site] 00182
8 _cmsContextGetClientChunk [function] [call site] 00183
6 SearchMLUEntry [function] [call site] 00184
6 GrowMLUpool [function] [call site] 00185
7 _cmsRealloc [function] [call site] 00186
4 cmsMLUsetWide [function] [call site] 00187
4 cmsWriteTag [function] [call site] 00188
5 _cmsLockMutex [function] [call site] 00189
6 _cmsContextGetClientChunk [function] [call site] 00190
5 _cmsSearchTag [function] [call site] 00191
6 SearchOneTag [function] [call site] 00192
5 _cmsDeleteTagByPos [function] [call site] 00193
6 __assert_fail [call site] 00194
6 __assert_fail [call site] 00195
6 _cmsFree [function] [call site] 00196
5 _cmsUnlockMutex [function] [call site] 00197
6 _cmsContextGetClientChunk [function] [call site] 00198
5 _cmsNewTag [function] [call site] 00199
6 _cmsSearchTag [function] [call site] 00200
6 _cmsDeleteTagByPos [function] [call site] 00201
6 cmsSignalError [function] [call site] 00202
5 _cmsGetTagDescriptor [function] [call site] 00203
6 _cmsContextGetClientChunk [function] [call site] 00204
5 cmsSignalError [function] [call site] 00205
5 cmsGetProfileVersion [function] [call site] 00206
6 BaseToBase [function] [call site] 00207
5 IsTypeSupported [function] [call site] 00208
5 _cmsTagSignature2String [function] [call site] 00209
6 _cmsAdjustEndianess32 [function] [call site] 00210
5 _cmsTagSignature2String [function] [call site] 00211
5 cmsSignalError [function] [call site] 00212
5 _cmsGetTagTypeHandler [function] [call site] 00213
6 _cmsContextGetClientChunk [function] [call site] 00214
6 GetHandler [function] [call site] 00215
5 _cmsTagSignature2String [function] [call site] 00216
5 _cmsTagSignature2String [function] [call site] 00217
5 cmsSignalError [function] [call site] 00218
5 _cmsTagSignature2String [function] [call site] 00219
5 _cmsTagSignature2String [function] [call site] 00220
5 cmsSignalError [function] [call site] 00221
5 _cmsUnlockMutex [function] [call site] 00222
5 _cmsUnlockMutex [function] [call site] 00223
4 cmsWriteTag [function] [call site] 00224
4 cmsMLUfree [function] [call site] 00225
5 _cmsFree [function] [call site] 00226
5 _cmsFree [function] [call site] 00227
5 _cmsFree [function] [call site] 00228
4 cmsMLUfree [function] [call site] 00229
3 cmsWriteTag [function] [call site] 00230
3 SetSeqDescTag [function] [call site] 00231
4 cmsGetProfileContextID [function] [call site] 00232
4 cmsAllocProfileSequenceDescription [function] [call site] 00233
5 _cmsMallocZero [function] [call site] 00234
5 _cmsCalloc [function] [call site] 00235
5 _cmsFree [function] [call site] 00236
4 cmsMLUsetASCII [function] [call site] 00237
5 strlen [call site] 00238
5 strTo16 [function] [call site] 00239
5 strTo16 [function] [call site] 00240
5 AddMLUBlock [function] [call site] 00241
5 _cmsCalloc [function] [call site] 00242
5 AddMLUBlock [function] [call site] 00243
5 _cmsFree [function] [call site] 00244
4 cmsMLUsetASCII [function] [call site] 00245
4 _cmsWriteProfileSequence [function] [call site] 00246
5 cmsWriteTag [function] [call site] 00247
5 cmsGetEncodedICCversion [function] [call site] 00248
5 cmsWriteTag [function] [call site] 00249
4 cmsFreeProfileSequenceDescription [function] [call site] 00250
5 cmsMLUfree [function] [call site] 00251
5 cmsMLUfree [function] [call site] 00252
5 cmsMLUfree [function] [call site] 00253
5 _cmsFree [function] [call site] 00254
5 _cmsFree [function] [call site] 00255
3 cmsPipelineFree [function] [call site] 00256
4 cmsStageFree [function] [call site] 00257
4 _cmsFree [function] [call site] 00258
3 cmsPipelineFree [function] [call site] 00259
3 cmsCloseProfile [function] [call site] 00260
4 cmsSaveProfileToFile [function] [call site] 00261
5 cmsGetProfileContextID [function] [call site] 00262
5 cmsOpenIOhandlerFromFile [function] [call site] 00263
6 __assert_fail [call site] 00264
6 __assert_fail [call site] 00265
6 _cmsMallocZero [function] [call site] 00266
6 _cmsFree [function] [call site] 00267
6 cmsSignalError [function] [call site] 00268
6 _cmsFree [function] [call site] 00269
6 cmsSignalError [function] [call site] 00270
6 fopen [call site] 00271
6 _cmsFree [function] [call site] 00272
6 cmsSignalError [function] [call site] 00273
6 cmsfilelength [function] [call site] 00274
7 ftell [call site] 00275
7 fseek [call site] 00276
7 ftell [call site] 00277
7 fseek [call site] 00278
6 fclose [call site] 00279
6 _cmsFree [function] [call site] 00280
6 cmsSignalError [function] [call site] 00281
6 fopen [call site] 00282
6 _cmsFree [function] [call site] 00283
6 cmsSignalError [function] [call site] 00284
6 _cmsFree [function] [call site] 00285
6 strncpy [call site] 00286
5 cmsSaveProfileToIOhandler [function] [call site] 00287
6 __assert_fail [call site] 00288
6 _cmsLockMutex [function] [call site] 00289
6 cmsGetProfileContextID [function] [call site] 00290
6 cmsOpenIOhandlerFromNULL [function] [call site] 00291
7 _cmsMallocZero [function] [call site] 00292
7 _cmsMallocZero [function] [call site] 00293
7 _cmsFree [function] [call site] 00294
6 _cmsUnlockMutex [function] [call site] 00295
6 _cmsWriteHeader [function] [call site] 00296
7 _cmsAdjustEndianess32 [function] [call site] 00297
7 _cmsAdjustEndianess32 [function] [call site] 00298
7 _cmsAdjustEndianess32 [function] [call site] 00299
7 _cmsAdjustEndianess32 [function] [call site] 00300
7 _cmsAdjustEndianess32 [function] [call site] 00301
7 _cmsAdjustEndianess32 [function] [call site] 00302
7 _cmsEncodeDateTimeNumber [function] [call site] 00303
8 __assert_fail [call site] 00304
8 __assert_fail [call site] 00305
8 _cmsAdjustEndianess16 [function] [call site] 00306
8 _cmsAdjustEndianess16 [function] [call site] 00307
8 _cmsAdjustEndianess16 [function] [call site] 00308
8 _cmsAdjustEndianess16 [function] [call site] 00309
8 _cmsAdjustEndianess16 [function] [call site] 00310
8 _cmsAdjustEndianess16 [function] [call site] 00311
7 _cmsAdjustEndianess32 [function] [call site] 00312
7 _cmsAdjustEndianess32 [function] [call site] 00313
7 _cmsAdjustEndianess32 [function] [call site] 00314
7 _cmsAdjustEndianess32 [function] [call site] 00315
7 _cmsAdjustEndianess32 [function] [call site] 00316
7 _cmsAdjustEndianess64 [function] [call site] 00317
8 __assert_fail [call site] 00318
7 _cmsAdjustEndianess32 [function] [call site] 00319
7 cmsD50_XYZ [function] [call site] 00320
7 _cmsDoubleTo15Fixed16 [function] [call site] 00321
7 _cmsAdjustEndianess32 [function] [call site] 00322
7 cmsD50_XYZ [function] [call site] 00323
7 _cmsDoubleTo15Fixed16 [function] [call site] 00324
7 _cmsAdjustEndianess32 [function] [call site] 00325
7 cmsD50_XYZ [function] [call site] 00326
7 _cmsDoubleTo15Fixed16 [function] [call site] 00327
7 _cmsAdjustEndianess32 [function] [call site] 00328
7 _cmsAdjustEndianess32 [function] [call site] 00329
7 _cmsWriteUInt32Number [function] [call site] 00330
8 __assert_fail [call site] 00331
8 _cmsAdjustEndianess32 [function] [call site] 00332
7 _cmsAdjustEndianess32 [function] [call site] 00333
7 _cmsAdjustEndianess32 [function] [call site] 00334
7 _cmsAdjustEndianess32 [function] [call site] 00335
6 SaveTags [function] [call site] 00336
7 cmsGetProfileVersion [function] [call site] 00337
7 _cmsMalloc [function] [call site] 00338
8 _cmsContextGetClientChunk [function] [call site] 00339
7 _cmsFree [function] [call site] 00340
7 _cmsWriteAlignment [function] [call site] 00341
8 __assert_fail [call site] 00342
7 _cmsGetTagDescriptor [function] [call site] 00343
7 _cmsGetTagTypeHandler [function] [call site] 00344
7 cmsSignalError [function] [call site] 00345
7 _cmsWriteTypeBase [function] [call site] 00346
8 __assert_fail [call site] 00347
8 _cmsAdjustEndianess32 [function] [call site] 00348
7 _cmsTagSignature2String [function] [call site] 00349
7 cmsSignalError [function] [call site] 00350
7 _cmsWriteAlignment [function] [call site] 00351
6 SetLinks [function] [call site] 00352
7 _cmsSearchTag [function] [call site] 00353
6 _cmsWriteHeader [function] [call site] 00354
6 SaveTags [function] [call site] 00355
6 cmsCloseIOhandler [function] [call site] 00356
6 _cmsUnlockMutex [function] [call site] 00357
6 cmsCloseIOhandler [function] [call site] 00358
6 _cmsUnlockMutex [function] [call site] 00359
5 cmsCloseIOhandler [function] [call site] 00360
5 remove [call site] 00361
4 freeOneTag [function] [call site] 00362
5 _cmsFree [function] [call site] 00363
4 cmsCloseIOhandler [function] [call site] 00364
4 _cmsDestroyMutex [function] [call site] 00365
5 _cmsContextGetClientChunk [function] [call site] 00366
4 _cmsFree [function] [call site] 00367
1 cmsCloseProfile [function] [call site] 00368