Fuzz introspector: cms_cgats_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
54 54 1 :

['DupPluginIntentsList']

54 54 _cmsAllocIntentsPluginChunk call site: 00122 /src/lcms/src/cmscnvrt.c:137
54 54 1 :

['DupPluginCurvesList']

54 54 _cmsAllocCurvesPluginChunk call site: 00096 /src/lcms/src/cmsgamma.c:111
54 54 1 :

['DupPluginOptimizationList']

54 54 _cmsAllocOptimizationPluginChunk call site: 00127 /src/lcms/src/cmsopt.c:1860
54 54 1 :

['DupFormatterFactoryList']

54 54 _cmsAllocFormattersPluginChunk call site: 00103 /src/lcms/src/cmspack.c:3945
54 54 1 :

['DupTagTypeList']

54 54 _cmsAllocTagTypePluginChunk call site: 00109 /src/lcms/src/cmstypes.c:5969
54 54 1 :

['DupTagTypeList']

54 54 _cmsAllocMPETypePluginChunk call site: 00114 /src/lcms/src/cmstypes.c:5983
54 54 1 :

['DupTagList']

54 54 _cmsAllocTagPluginChunk call site: 00117 /src/lcms/src/cmstypes.c:6173
54 54 1 :

['DupPluginTransformList']

54 54 _cmsAllocTransformPluginChunk call site: 00134 /src/lcms/src/cmsxform.c:667
53 190 6 :

['SynError', 'StringAppend', 'StringCat', 'NextCh', 'StringClear', 'isidchar']

53 190 InSymbol call site: 00392 /src/lcms/src/cmscgats.c:953
5 35 2 :

['SynError', 'NoMeta']

5 35 Check call site: 00421 /src/lcms/src/cmscgats.c:585
2 2 1 :

['fclose']

2 2 NextCh call site: 00340 /src/lcms/src/cmscgats.c:600
0 62 2 :

['SynError', 'AllocTable']

0 62 cmsIT8SetTable call site: 00261 /src/lcms/src/cmscgats.c:1426

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 cmsCreateContext [function] [call site] 00001
2 InitContextMutex [function] [call site] 00002
2 _cmsFindMemoryPlugin [function] [call site] 00003
2 _cmsInstallAllocFunctions [function] [call site] 00004
2 _cmsMalloc [function] [call site] 00005
3 _cmsContextGetClientChunk [function] [call site] 00006
4 cmsSignalError [function] [call site] 00007
5 vsnprintf [call site] 00008
5 _cmsContextGetClientChunk [function] [call site] 00009
6 __assert_fail [call site] 00010
6 _cmsGetContext [function] [call site] 00011
7 InitContextMutex [function] [call site] 00012
7 _cmsEnterCriticalSectionPrimitive [function] [call site] 00013
8 pthread_mutex_lock [call site] 00014
7 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00015
8 pthread_mutex_unlock [call site] 00016
7 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00017
2 _cmsEnterCriticalSectionPrimitive [function] [call site] 00018
2 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00019
2 _cmsCreateSubAlloc [function] [call site] 00020
3 _cmsMallocZero [function] [call site] 00021
4 _cmsContextGetClientChunk [function] [call site] 00022
3 _cmsCreateSubAllocChunk [function] [call site] 00023
4 _cmsMallocZero [function] [call site] 00024
4 _cmsMalloc [function] [call site] 00025
4 _cmsFree [function] [call site] 00026
5 _cmsContextGetClientChunk [function] [call site] 00027
2 cmsDeleteContext [function] [call site] 00029
3 cmsUnregisterPlugins [function] [call site] 00030
4 cmsUnregisterPluginsTHR [function] [call site] 00031
5 _cmsRegisterMemHandlerPlugin [function] [call site] 00032
6 _cmsContextGetClientChunk [function] [call site] 00033
6 _cmsInstallAllocFunctions [function] [call site] 00034
5 _cmsRegisterInterpPlugin [function] [call site] 00035
6 _cmsContextGetClientChunk [function] [call site] 00036
5 _cmsRegisterTagTypePlugin [function] [call site] 00037
6 RegisterTypesPlugin [function] [call site] 00038
7 _cmsContextGetClientChunk [function] [call site] 00039
7 _cmsPluginMalloc [function] [call site] 00040
8 _cmsGetContext [function] [call site] 00041
8 _cmsCreateSubAlloc [function] [call site] 00042
8 cmsSignalError [function] [call site] 00043
8 _cmsSubAlloc [function] [call site] 00044
9 _cmsCreateSubAllocChunk [function] [call site] 00045
5 _cmsRegisterTagPlugin [function] [call site] 00046
6 _cmsContextGetClientChunk [function] [call site] 00047
6 _cmsPluginMalloc [function] [call site] 00048
5 _cmsRegisterFormattersPlugin [function] [call site] 00049
6 _cmsContextGetClientChunk [function] [call site] 00050
6 _cmsPluginMalloc [function] [call site] 00051
5 _cmsRegisterRenderingIntentPlugin [function] [call site] 00052
6 _cmsContextGetClientChunk [function] [call site] 00053
6 _cmsPluginMalloc [function] [call site] 00054
6 strncpy [call site] 00055
5 _cmsRegisterParametricCurvesPlugin [function] [call site] 00056
6 _cmsContextGetClientChunk [function] [call site] 00057
6 _cmsPluginMalloc [function] [call site] 00058
5 _cmsRegisterMultiProcessElementPlugin [function] [call site] 00059
6 RegisterTypesPlugin [function] [call site] 00060
5 _cmsRegisterOptimizationPlugin [function] [call site] 00061
6 _cmsContextGetClientChunk [function] [call site] 00062
6 _cmsPluginMalloc [function] [call site] 00063
5 _cmsRegisterTransformPlugin [function] [call site] 00064
6 _cmsContextGetClientChunk [function] [call site] 00065
6 _cmsPluginMalloc [function] [call site] 00066
5 _cmsRegisterMutexPlugin [function] [call site] 00067
6 _cmsContextGetClientChunk [function] [call site] 00068
5 _cmsRegisterParallelizationPlugin [function] [call site] 00069
6 _cmsContextGetClientChunk [function] [call site] 00070
3 _cmsSubAllocDestroy [function] [call site] 00071
3 InitContextMutex [function] [call site] 00075
3 cmsUnregisterPluginsTHR [function] [call site] 00076
3 _cmsSubAllocDestroy [function] [call site] 00077
3 _cmsEnterCriticalSectionPrimitive [function] [call site] 00078
3 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00079
2 _cmsAllocLogErrorChunk [function] [call site] 00081
3 _cmsSubAllocDup [function] [call site] 00082
4 _cmsSubAlloc [function] [call site] 00083
2 _cmsAllocAlarmCodesChunk [function] [call site] 00084
3 _cmsSubAllocDup [function] [call site] 00085
2 _cmsAllocAdaptationStateChunk [function] [call site] 00086
3 _cmsSubAllocDup [function] [call site] 00087
2 _cmsAllocMemPluginChunk [function] [call site] 00088
3 __assert_fail [call site] 00089
3 _cmsSubAllocDup [function] [call site] 00090
2 _cmsAllocInterpPluginChunk [function] [call site] 00091
3 __assert_fail [call site] 00092
3 __assert_fail [call site] 00093
3 _cmsSubAllocDup [function] [call site] 00094
2 _cmsAllocCurvesPluginChunk [function] [call site] 00095
3 __assert_fail [call site] 00096
3 DupPluginCurvesList [function] [call site] 00097
4 __assert_fail [call site] 00098
4 _cmsSubAllocDup [function] [call site] 00099
4 _cmsSubAllocDup [function] [call site] 00100
3 _cmsSubAllocDup [function] [call site] 00101
2 _cmsAllocFormattersPluginChunk [function] [call site] 00102
3 __assert_fail [call site] 00103
3 DupFormatterFactoryList [function] [call site] 00104
4 __assert_fail [call site] 00105
4 _cmsSubAllocDup [function] [call site] 00106
4 _cmsSubAllocDup [function] [call site] 00107
3 _cmsSubAllocDup [function] [call site] 00108
2 _cmsAllocTagTypePluginChunk [function] [call site] 00109
3 DupTagTypeList [function] [call site] 00110
4 _cmsSubAllocDup [function] [call site] 00111
4 _cmsSubAllocDup [function] [call site] 00112
3 _cmsSubAllocDup [function] [call site] 00113
2 _cmsAllocMPETypePluginChunk [function] [call site] 00114
3 DupTagTypeList [function] [call site] 00115
3 _cmsSubAllocDup [function] [call site] 00116
2 _cmsAllocTagPluginChunk [function] [call site] 00117
3 DupTagList [function] [call site] 00118
4 _cmsSubAllocDup [function] [call site] 00119
4 _cmsSubAllocDup [function] [call site] 00120
3 _cmsSubAllocDup [function] [call site] 00121
2 _cmsAllocIntentsPluginChunk [function] [call site] 00122
3 DupPluginIntentsList [function] [call site] 00123
4 _cmsSubAllocDup [function] [call site] 00124
4 _cmsSubAllocDup [function] [call site] 00125
3 _cmsSubAllocDup [function] [call site] 00126
2 _cmsAllocOptimizationPluginChunk [function] [call site] 00127
3 DupPluginOptimizationList [function] [call site] 00128
4 __assert_fail [call site] 00129
4 __assert_fail [call site] 00130
4 _cmsSubAllocDup [function] [call site] 00131
4 _cmsSubAllocDup [function] [call site] 00132
3 _cmsSubAllocDup [function] [call site] 00133
2 _cmsAllocTransformPluginChunk [function] [call site] 00134
3 DupPluginTransformList [function] [call site] 00135
4 _cmsSubAllocDup [function] [call site] 00136
4 _cmsSubAllocDup [function] [call site] 00137
3 _cmsSubAllocDup [function] [call site] 00138
2 _cmsAllocMutexPluginChunk [function] [call site] 00139
3 _cmsSubAllocDup [function] [call site] 00140
2 _cmsAllocParallelizationPluginChunk [function] [call site] 00141
3 _cmsSubAllocDup [function] [call site] 00142
2 cmsPluginTHR [function] [call site] 00143
3 cmsSignalError [function] [call site] 00144
3 cmsSignalError [function] [call site] 00145
3 _cmsRegisterMemHandlerPlugin [function] [call site] 00146
3 _cmsRegisterInterpPlugin [function] [call site] 00147
3 _cmsRegisterTagTypePlugin [function] [call site] 00148
3 _cmsRegisterTagPlugin [function] [call site] 00149
3 _cmsRegisterFormattersPlugin [function] [call site] 00150
3 _cmsRegisterRenderingIntentPlugin [function] [call site] 00151
3 _cmsRegisterParametricCurvesPlugin [function] [call site] 00152
3 _cmsRegisterMultiProcessElementPlugin [function] [call site] 00153
3 _cmsRegisterOptimizationPlugin [function] [call site] 00154
3 _cmsRegisterTransformPlugin [function] [call site] 00155
3 _cmsRegisterMutexPlugin [function] [call site] 00156
3 _cmsRegisterParallelizationPlugin [function] [call site] 00157
3 cmsSignalError [function] [call site] 00158
2 cmsDeleteContext [function] [call site] 00159
1 cmsIT8Alloc [function] [call site] 00160
2 _cmsMallocZero [function] [call site] 00161
2 AllocTable [function] [call site] 00162
2 AllocChunk [function] [call site] 00163
3 AllocBigBlock [function] [call site] 00164
4 _cmsMallocZero [function] [call site] 00165
4 _cmsMallocZero [function] [call site] 00166
2 StringAlloc [function] [call site] 00168
3 AllocChunk [function] [call site] 00169
3 AllocChunk [function] [call site] 00170
2 StringAlloc [function] [call site] 00171
2 strcpy [call site] 00172
2 cmsIT8SetSheetType [function] [call site] 00173
3 GetTable [function] [call site] 00174
4 SynError [function] [call site] 00175
5 vsnprintf [call site] 00176
5 snprintf [call site] 00177
5 cmsSignalError [function] [call site] 00178
3 strncpy [call site] 00179
2 AddAvailableProperty [function] [call site] 00180
3 AddToList [function] [call site] 00181
4 IsAvailableOnList [function] [call site] 00182
5 cmsstrcasecmp [function] [call site] 00183
6 toupper [call site] 00184
6 toupper [call site] 00185
5 cmsstrcasecmp [function] [call site] 00186
4 cmsstrcasecmp [function] [call site] 00187
4 cmsstrcasecmp [function] [call site] 00188
4 AllocChunk [function] [call site] 00190
4 AllocString [function] [call site] 00192
5 strlen [call site] 00193
5 AllocChunk [function] [call site] 00194
4 AllocString [function] [call site] 00195
4 AllocString [function] [call site] 00196
2 AddAvailableSampleID [function] [call site] 00197
3 AddToList [function] [call site] 00198
1 cmsIT8SetSheetType [function] [call site] 00199
1 cmsIT8SetPropertyStr [function] [call site] 00200
1 cmsIT8SetPropertyUncooked [function] [call site] 00203
1 cmsIT8SetPropertyStr [function] [call site] 00206
1 cmsIT8SetPropertyDbl [function] [call site] 00207
2 snprintf [call site] 00208
2 AddToList [function] [call site] 00210
1 cmsIT8SetPropertyDbl [function] [call site] 00211
1 cmsIT8SetPropertyHex [function] [call site] 00212
2 snprintf [call site] 00213
2 AddToList [function] [call site] 00215
1 cmsIT8SetPropertyDbl [function] [call site] 00216
1 cmsIT8SetPropertyDbl [function] [call site] 00217
1 cmsIT8SetDataFormat [function] [call site] 00218
2 SetDataFormat [function] [call site] 00219
3 AllocateDataFormat [function] [call site] 00221
4 cmsIT8GetProperty [function] [call site] 00223
5 IsAvailableOnList [function] [call site] 00225
4 AllocChunk [function] [call site] 00229
3 AllocString [function] [call site] 00232
1 cmsIT8SetDataFormat [function] [call site] 00233
1 cmsIT8SetDataFormat [function] [call site] 00234
1 cmsIT8SetDataFormat [function] [call site] 00235
1 sprintf [call site] 00236
1 cmsIT8SetDataRowCol [function] [call site] 00237
2 __assert_fail [call site] 00238
2 SetData [function] [call site] 00239
3 AllocateDataSet [function] [call site] 00241
4 cmsIT8GetProperty [function] [call site] 00243
4 cmsIT8GetProperty [function] [call site] 00245
4 AllocChunk [function] [call site] 00248
3 AllocString [function] [call site] 00252
1 cmsIT8SetDataRowColDbl [function] [call site] 00253
2 __assert_fail [call site] 00254
2 snprintf [call site] 00255
1 cmsIT8SetDataRowColDbl [function] [call site] 00257
1 cmsIT8SetDataRowColDbl [function] [call site] 00258
1 cmsIT8SaveToFile [function] [call site] 00259
2 fopen [call site] 00260
2 cmsIT8SetTable [function] [call site] 00261
2 WriteHeader [function] [call site] 00266
3 WriteStr [function] [call site] 00268
4 strlen [call site] 00269
4 fwrite [call site] 00270
4 cmsSignalError [function] [call site] 00271
4 cmsSignalError [function] [call site] 00272
3 Writef [function] [call site] 00275
4 vsnprintf [call site] 00276
3 IsAvailableOnList [function] [call site] 00280
3 AddAvailableProperty [function] [call site] 00281
2 fclose [call site] 00316
2 fclose [call site] 00317
1 cmsIT8LoadFromFile [function] [call site] 00323
2 __assert_fail [call site] 00324
2 IsMyFile [function] [call site] 00325
3 fopen [call site] 00326
3 cmsSignalError [function] [call site] 00327
3 fread [call site] 00328
3 fclose [call site] 00329
3 IsMyBlock [function] [call site] 00330
2 cmsIT8Alloc [function] [call site] 00331
2 fopen [call site] 00332
2 cmsIT8Free [function] [call site] 00333
2 strncpy [call site] 00334
2 ParseIT8 [function] [call site] 00335
3 ReadType [function] [call site] 00336
4 isseparator [function] [call site] 00337
4 NextCh [function] [call site] 00338
5 fgetc [call site] 00339
5 feof [call site] 00340
5 fclose [call site] 00341
3 InSymbol [function] [call site] 00343
4 isseparator [function] [call site] 00344
4 isfirstidchar [function] [call site] 00346
5 __ctype_b_loc [call site] 00347
5 ismiddle [function] [call site] 00348
6 isseparator [function] [call site] 00349
4 StringClear [function] [call site] 00350
4 StringAppend [function] [call site] 00351
5 AllocChunk [function] [call site] 00352
4 isidchar [function] [call site] 00355
5 __ctype_b_loc [call site] 00356
4 StringPtr [function] [call site] 00358
4 BinSrchKey [function] [call site] 00359
5 cmsstrcasecmp [function] [call site] 00360
4 __ctype_b_loc [call site] 00361
4 toupper [call site] 00364
4 __ctype_b_loc [call site] 00366
4 toupper [call site] 00367
4 toupper [call site] 00370
4 __ctype_b_loc [call site] 00374
4 ReadReal [function] [call site] 00375
5 __ctype_b_loc [call site] 00376
5 __ctype_b_loc [call site] 00379
5 toupper [call site] 00383
5 __ctype_b_loc [call site] 00387
4 snprintf [call site] 00393
4 snprintf [call site] 00394
4 StringClear [function] [call site] 00395
4 StringCat [function] [call site] 00396
5 StringAppend [function] [call site] 00397
4 StringAppend [function] [call site] 00399
4 InStringSymbol [function] [call site] 00420
4 AllocChunk [function] [call site] 00425
4 StringPtr [function] [call site] 00427
4 BuildAbsolutePath [function] [call site] 00428
5 isabsolutepath [function] [call site] 00429
6 strncpy [call site] 00430
5 strrchr [call site] 00431
5 strncpy [call site] 00432
4 fopen [call site] 00434
3 DataSection [function] [call site] 00455
3 AllocTable [function] [call site] 00479
3 isseparator [function] [call site] 00480
3 StringPtr [function] [call site] 00482
3 cmsIT8SetSheetType [function] [call site] 00483
3 cmsIT8SetSheetType [function] [call site] 00485
3 StringPtr [function] [call site] 00486
3 cmsIT8SetSheetType [function] [call site] 00487
3 HeaderSection [function] [call site] 00490
4 AddAvailableProperty [function] [call site] 00493
4 AddAvailableSampleID [function] [call site] 00497
4 StringPtr [function] [call site] 00499
4 strncpy [call site] 00500
4 IsAvailableOnList [function] [call site] 00501
4 AddAvailableProperty [function] [call site] 00502
4 AddToList [function] [call site] 00506
4 strchr [call site] 00508
4 strrchr [call site] 00509
4 strlen [call site] 00511
4 strspn [call site] 00512
4 strspn [call site] 00513
4 AddToList [function] [call site] 00516
2 fclose [call site] 00520
2 cmsIT8Free [function] [call site] 00521
2 CookPointers [function] [call site] 00522
3 cmsstrcasecmp [function] [call site] 00524
3 cmsstrcasecmp [function] [call site] 00525
3 IsAvailableOnList [function] [call site] 00528
3 snprintf [call site] 00529
2 fclose [call site] 00531
2 cmsIT8Free [function] [call site] 00532
1 cmsIT8GetDataRowColDbl [function] [call site] 00533
2 cmsIT8GetDataRowCol [function] [call site] 00534
3 __assert_fail [call site] 00535
2 ParseFloatNumber [function] [call site] 00537
3 __ctype_b_loc [call site] 00538
3 __ctype_b_loc [call site] 00539
3 toupper [call site] 00541
3 __ctype_b_loc [call site] 00542
1 cmsIT8GetPropertyDbl [function] [call site] 00544
2 cmsIT8GetProperty [function] [call site] 00545
2 ParseFloatNumber [function] [call site] 00546
1 cmsIT8GetDataDbl [function] [call site] 00547
2 cmsIT8GetData [function] [call site] 00548
3 __assert_fail [call site] 00549
3 LocateSample [function] [call site] 00550
4 GetDataFormat [function] [call site] 00552
4 cmsstrcasecmp [function] [call site] 00554
3 LocatePatch [function] [call site] 00555
4 cmsstrcasecmp [function] [call site] 00558
2 ParseFloatNumber [function] [call site] 00560
1 cmsIT8Free [function] [call site] 00561