Fuzz introspector: cms_md5_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
172 172 1 :

['cmsSaveProfileToFile']

172 265 cmsCloseProfile call site: 00081 /src/lcms/src/cmsio0.c:1591
14 14 3 :

['_cmsLeaveCriticalSectionPrimitive', '_cmsEnterCriticalSectionPrimitive', 'InitContextMutex']

14 14 _cmsGetContext call site: 00010 /src/lcms/src/cmsplugin.c:720
0 84 2 :

['_cmsFree', 'cmsSignalError']

0 84 cmsOpenIOhandlerFromMem call site: 00029 /src/lcms/src/cmsio0.c:260
0 84 2 :

['_cmsFree', 'cmsSignalError']

0 84 cmsOpenIOhandlerFromMem call site: 00034 /src/lcms/src/cmsio0.c:280
0 26 1 :

['cmsSignalError']

0 26 MemorySeek call site: 00000 /src/lcms/src/cmsio0.c:174
0 26 1 :

['cmsSignalError']

0 26 _cmsContextGetClientChunk call site: 00005 /src/lcms/src/cmsplugin.c:752
0 0 None 43 196 SaveTags call site: 00159 /src/lcms/src/cmsio0.c:1328
0 0 None 43 196 SaveTags call site: 00163 /src/lcms/src/cmsio0.c:1353
0 0 None 0 84 cmsOpenIOhandlerFromMem call site: 00027 /src/lcms/src/cmsio0.c:254
0 0 None 0 29 cmsCreateProfilePlaceholder call site: 00017 /src/lcms/src/cmsio0.c:557
0 0 None 0 29 cmsSaveProfileToIOhandler call site: 00113 /src/lcms/src/cmsio0.c:1461
0 0 None 0 29 cmsSaveProfileToIOhandler call site: 00182 /src/lcms/src/cmsio0.c:1484

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 cmsOpenProfileFromMem [function] [call site] 00001
2 cmsOpenProfileFromMemTHR [function] [call site] 00002
3 cmsCreateProfilePlaceholder [function] [call site] 00003
4 _cmsMallocZero [function] [call site] 00004
5 _cmsContextGetClientChunk [function] [call site] 00005
6 cmsSignalError [function] [call site] 00006
7 vsnprintf [call site] 00007
7 _cmsContextGetClientChunk [function] [call site] 00008
8 __assert_fail [call site] 00009
8 _cmsGetContext [function] [call site] 00010
9 InitContextMutex [function] [call site] 00011
9 _cmsEnterCriticalSectionPrimitive [function] [call site] 00012
10 pthread_mutex_lock [call site] 00013
9 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00014
10 pthread_mutex_unlock [call site] 00015
9 _cmsLeaveCriticalSectionPrimitive [function] [call site] 00016
4 _cmsGetTime [function] [call site] 00017
5 time [call site] 00018
5 gmtime_r [call site] 00019
4 _cmsCreateMutex [function] [call site] 00020
5 _cmsContextGetClientChunk [function] [call site] 00021
4 _cmsFree [function] [call site] 00022
5 _cmsContextGetClientChunk [function] [call site] 00023
3 cmsOpenIOhandlerFromMem [function] [call site] 00024
4 __assert_fail [call site] 00025
4 _cmsMallocZero [function] [call site] 00026
4 _cmsMallocZero [function] [call site] 00027
4 cmsSignalError [function] [call site] 00028
4 _cmsMalloc [function] [call site] 00029
5 _cmsContextGetClientChunk [function] [call site] 00030
4 _cmsFree [function] [call site] 00031
4 _cmsFree [function] [call site] 00032
4 cmsSignalError [function] [call site] 00033
4 _cmsMallocZero [function] [call site] 00034
4 cmsSignalError [function] [call site] 00035
4 cmsSignalError [function] [call site] 00036
4 _cmsFree [function] [call site] 00037
4 _cmsFree [function] [call site] 00038
3 _cmsReadHeader [function] [call site] 00039
4 _cmsAdjustEndianess32 [function] [call site] 00040
4 cmsSignalError [function] [call site] 00041
4 _cmsAdjustEndianess32 [function] [call site] 00042
4 _cmsAdjustEndianess32 [function] [call site] 00043
4 _cmsAdjustEndianess32 [function] [call site] 00044
4 _cmsAdjustEndianess32 [function] [call site] 00045
4 _cmsAdjustEndianess32 [function] [call site] 00046
4 _cmsAdjustEndianess32 [function] [call site] 00047
4 _cmsAdjustEndianess32 [function] [call site] 00048
4 _cmsAdjustEndianess32 [function] [call site] 00049
4 _cmsAdjustEndianess32 [function] [call site] 00050
4 _cmsAdjustEndianess32 [function] [call site] 00051
4 _cmsAdjustEndianess64 [function] [call site] 00052
5 __assert_fail [call site] 00053
4 _validatedVersion [function] [call site] 00054
4 _cmsAdjustEndianess32 [function] [call site] 00055
4 cmsSignalError [function] [call site] 00056
4 validDeviceClass [function] [call site] 00057
4 cmsSignalError [function] [call site] 00058
4 _cmsAdjustEndianess32 [function] [call site] 00059
4 _cmsDecodeDateTimeNumber [function] [call site] 00060
5 __assert_fail [call site] 00061
5 __assert_fail [call site] 00062
5 _cmsAdjustEndianess16 [function] [call site] 00063
5 _cmsAdjustEndianess16 [function] [call site] 00064
5 _cmsAdjustEndianess16 [function] [call site] 00065
5 _cmsAdjustEndianess16 [function] [call site] 00066
5 _cmsAdjustEndianess16 [function] [call site] 00067
5 _cmsAdjustEndianess16 [function] [call site] 00068
4 _cmsReadUInt32Number [function] [call site] 00069
5 __assert_fail [call site] 00070
5 _cmsAdjustEndianess32 [function] [call site] 00071
4 cmsSignalError [function] [call site] 00072
4 _cmsReadUInt32Number [function] [call site] 00073
4 _cmsReadUInt32Number [function] [call site] 00074
4 _cmsReadUInt32Number [function] [call site] 00075
4 _cmsGetTagDescriptor [function] [call site] 00076
5 _cmsContextGetClientChunk [function] [call site] 00077
4 _cmsGetTagDescriptor [function] [call site] 00078
4 CompatibleTypes [function] [call site] 00079
4 cmsSignalError [function] [call site] 00080
3 cmsCloseProfile [function] [call site] 00081
4 cmsSaveProfileToFile [function] [call site] 00082
5 cmsGetProfileContextID [function] [call site] 00083
5 cmsOpenIOhandlerFromFile [function] [call site] 00084
6 __assert_fail [call site] 00085
6 __assert_fail [call site] 00086
6 _cmsMallocZero [function] [call site] 00087
6 _cmsFree [function] [call site] 00088
6 cmsSignalError [function] [call site] 00089
6 _cmsFree [function] [call site] 00090
6 cmsSignalError [function] [call site] 00091
6 fopen [call site] 00092
6 _cmsFree [function] [call site] 00093
6 cmsSignalError [function] [call site] 00094
6 cmsfilelength [function] [call site] 00095
7 ftell [call site] 00096
7 fseek [call site] 00097
7 ftell [call site] 00098
7 fseek [call site] 00099
6 fclose [call site] 00100
6 _cmsFree [function] [call site] 00101
6 cmsSignalError [function] [call site] 00102
6 fopen [call site] 00103
6 _cmsFree [function] [call site] 00104
6 cmsSignalError [function] [call site] 00105
6 _cmsFree [function] [call site] 00106
6 strncpy [call site] 00107
5 cmsSaveProfileToIOhandler [function] [call site] 00108
6 __assert_fail [call site] 00109
6 _cmsLockMutex [function] [call site] 00110
7 _cmsContextGetClientChunk [function] [call site] 00111
6 cmsGetProfileContextID [function] [call site] 00112
6 cmsOpenIOhandlerFromNULL [function] [call site] 00113
7 _cmsMallocZero [function] [call site] 00114
7 _cmsMallocZero [function] [call site] 00115
7 _cmsFree [function] [call site] 00116
6 _cmsUnlockMutex [function] [call site] 00117
7 _cmsContextGetClientChunk [function] [call site] 00118
6 _cmsWriteHeader [function] [call site] 00119
7 _cmsAdjustEndianess32 [function] [call site] 00120
7 _cmsAdjustEndianess32 [function] [call site] 00121
7 _cmsAdjustEndianess32 [function] [call site] 00122
7 _cmsAdjustEndianess32 [function] [call site] 00123
7 _cmsAdjustEndianess32 [function] [call site] 00124
7 _cmsAdjustEndianess32 [function] [call site] 00125
7 _cmsEncodeDateTimeNumber [function] [call site] 00126
8 __assert_fail [call site] 00127
8 __assert_fail [call site] 00128
8 _cmsAdjustEndianess16 [function] [call site] 00129
8 _cmsAdjustEndianess16 [function] [call site] 00130
8 _cmsAdjustEndianess16 [function] [call site] 00131
8 _cmsAdjustEndianess16 [function] [call site] 00132
8 _cmsAdjustEndianess16 [function] [call site] 00133
8 _cmsAdjustEndianess16 [function] [call site] 00134
7 _cmsAdjustEndianess32 [function] [call site] 00135
7 _cmsAdjustEndianess32 [function] [call site] 00136
7 _cmsAdjustEndianess32 [function] [call site] 00137
7 _cmsAdjustEndianess32 [function] [call site] 00138
7 _cmsAdjustEndianess32 [function] [call site] 00139
7 _cmsAdjustEndianess64 [function] [call site] 00140
7 _cmsAdjustEndianess32 [function] [call site] 00141
7 cmsD50_XYZ [function] [call site] 00142
7 _cmsDoubleTo15Fixed16 [function] [call site] 00143
7 _cmsAdjustEndianess32 [function] [call site] 00144
7 cmsD50_XYZ [function] [call site] 00145
7 _cmsDoubleTo15Fixed16 [function] [call site] 00146
7 _cmsAdjustEndianess32 [function] [call site] 00147
7 cmsD50_XYZ [function] [call site] 00148
7 _cmsDoubleTo15Fixed16 [function] [call site] 00149
7 _cmsAdjustEndianess32 [function] [call site] 00150
7 _cmsAdjustEndianess32 [function] [call site] 00151
7 _cmsWriteUInt32Number [function] [call site] 00152
8 __assert_fail [call site] 00153
8 _cmsAdjustEndianess32 [function] [call site] 00154
7 _cmsAdjustEndianess32 [function] [call site] 00155
7 _cmsAdjustEndianess32 [function] [call site] 00156
7 _cmsAdjustEndianess32 [function] [call site] 00157
6 SaveTags [function] [call site] 00158
7 cmsGetProfileVersion [function] [call site] 00159
8 BaseToBase [function] [call site] 00160
7 _cmsMalloc [function] [call site] 00161
7 _cmsFree [function] [call site] 00162
7 _cmsWriteAlignment [function] [call site] 00163
8 __assert_fail [call site] 00164
7 _cmsGetTagDescriptor [function] [call site] 00165
7 _cmsGetTagTypeHandler [function] [call site] 00166
8 _cmsContextGetClientChunk [function] [call site] 00167
8 GetHandler [function] [call site] 00168
7 cmsSignalError [function] [call site] 00169
7 _cmsWriteTypeBase [function] [call site] 00170
8 __assert_fail [call site] 00171
8 _cmsAdjustEndianess32 [function] [call site] 00172
7 _cmsTagSignature2String [function] [call site] 00173
8 _cmsAdjustEndianess32 [function] [call site] 00174
7 cmsSignalError [function] [call site] 00175
7 _cmsWriteAlignment [function] [call site] 00176
6 SetLinks [function] [call site] 00177
7 _cmsSearchTag [function] [call site] 00178
8 SearchOneTag [function] [call site] 00179
6 _cmsWriteHeader [function] [call site] 00180
6 SaveTags [function] [call site] 00181
6 cmsCloseIOhandler [function] [call site] 00182
6 _cmsUnlockMutex [function] [call site] 00183
6 cmsCloseIOhandler [function] [call site] 00184
6 _cmsUnlockMutex [function] [call site] 00185
5 cmsCloseIOhandler [function] [call site] 00186
5 remove [call site] 00187
4 freeOneTag [function] [call site] 00188
5 _cmsFree [function] [call site] 00189
4 cmsCloseIOhandler [function] [call site] 00190
4 _cmsDestroyMutex [function] [call site] 00191
5 _cmsContextGetClientChunk [function] [call site] 00192
4 _cmsFree [function] [call site] 00193
1 cmsMD5computeID [function] [call site] 00194
2 __assert_fail [call site] 00195
2 cmsGetProfileContextID [function] [call site] 00196
2 cmsSaveProfileToMem [function] [call site] 00197
3 cmsGetProfileContextID [function] [call site] 00198
3 __assert_fail [call site] 00199
3 cmsSaveProfileToIOhandler [function] [call site] 00200
3 cmsOpenIOhandlerFromMem [function] [call site] 00201
3 cmsSaveProfileToIOhandler [function] [call site] 00202
3 cmsCloseIOhandler [function] [call site] 00203
2 _cmsMalloc [function] [call site] 00204
2 cmsSaveProfileToMem [function] [call site] 00205
2 cmsMD5alloc [function] [call site] 00206
3 _cmsMallocZero [function] [call site] 00207
2 cmsMD5add [function] [call site] 00208
3 cmsMD5_Transform [function] [call site] 00209
3 cmsMD5_Transform [function] [call site] 00210
2 _cmsFree [function] [call site] 00211
2 cmsMD5finish [function] [call site] 00212
3 cmsMD5_Transform [function] [call site] 00213
3 cmsMD5_Transform [function] [call site] 00214
3 _cmsFree [function] [call site] 00215
2 _cmsFree [function] [call site] 00216
1 cmsCloseProfile [function] [call site] 00217