Fuzz introspector: colorfill_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
46 57 3 :

['returnErrorInt', 'boxaExtendArray', 'boxDestroy']

46 57 boxaAddBox call site: 00165 /src/leptonica/src/boxbasic.c:577
45 45 2 :

['boxClone', 'boxCopy']

105 127 boxaAddBox call site: 00157 /src/leptonica/src/boxbasic.c:565
7 7 1 :

['returnErrorInt']

7 7 pixcmapAddRGBA call site: 00089 /src/leptonica/src/colormap.c:450
7 7 1 :

['returnErrorInt']

7 7 pixSetWidth call site: 00029 /src/leptonica/src/pix1.c:1007
7 7 1 :

['returnErrorInt']

7 7 pixSetHeight call site: 00033 /src/leptonica/src/pix1.c:1033
7 7 1 :

['returnErrorInt']

7 7 pixSetDepth call site: 00036 /src/leptonica/src/pix1.c:1059
7 7 1 :

['returnErrorInt']

7 7 pixSetSpp call site: 00041 /src/leptonica/src/pix1.c:1172
0 47 2 :

['pixDestroy', 'returnErrorPtr']

0 47 pixCreateNoInit call site: 00065 /src/leptonica/src/pix1.c:355
0 25 2 :

['boxaDestroy', 'returnErrorPtr']

0 25 boxaCreate call site: 00142 /src/leptonica/src/boxbasic.c:453
0 25 2 :

['l_dnaaDestroy', 'returnErrorPtr']

0 25 l_dnaaCreate call site: 00196 /src/leptonica/src/dnabasic.c:1194
0 25 2 :

['numaaDestroy', 'returnErrorPtr']

0 25 numaaCreate call site: 00188 /src/leptonica/src/numabasic.c:1314
0 7 1 :

['returnErrorPtr']

2 24 boxCreate call site: 00150 /src/leptonica/src/boxbasic.c:186

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 leptSetStdNullHandler() [function] [call site] 00001
2 leptSetStderrHandler [function] [call site] 00002
2 send_to_devnull(char const*) [function] [call site] 00003
1 pixReadMemSpix [function] [call site] 00004
2 pixDeserializeFromMemory [function] [call site] 00005
3 returnErrorPtr [function] [call site] 00006
4 lept_stderr [function] [call site] 00007
5 vsnprintf [call site] 00008
3 lept_stderr [function] [call site] 00009
3 returnErrorPtr [function] [call site] 00010
3 returnErrorPtr [function] [call site] 00011
3 returnErrorPtr [function] [call site] 00012
3 returnErrorPtr [function] [call site] 00013
3 returnErrorPtr [function] [call site] 00014
3 pixCreateHeader [function] [call site] 00015
4 returnErrorPtr [function] [call site] 00016
4 returnErrorPtr [function] [call site] 00017
4 returnErrorPtr [function] [call site] 00018
4 lept_stderr [function] [call site] 00019
4 returnErrorPtr [function] [call site] 00020
4 lept_stderr [function] [call site] 00021
4 returnErrorPtr [function] [call site] 00022
4 lept_stderr [function] [call site] 00023
4 lept_stderr [function] [call site] 00024
4 lept_stderr [function] [call site] 00025
4 calloc [call site] 00026
4 returnErrorPtr [function] [call site] 00027
4 pixSetWidth [function] [call site] 00028
5 returnErrorInt [function] [call site] 00029
6 lept_stderr [function] [call site] 00030
5 returnErrorInt [function] [call site] 00031
4 pixSetHeight [function] [call site] 00032
5 returnErrorInt [function] [call site] 00033
5 returnErrorInt [function] [call site] 00034
4 pixSetDepth [function] [call site] 00035
5 returnErrorInt [function] [call site] 00036
5 returnErrorInt [function] [call site] 00037
4 pixSetWpl [function] [call site] 00038
5 returnErrorInt [function] [call site] 00039
4 pixSetSpp [function] [call site] 00040
5 returnErrorInt [function] [call site] 00041
5 returnErrorInt [function] [call site] 00042
4 pixSetSpp [function] [call site] 00043
3 returnErrorPtr [function] [call site] 00044
3 pixGetWpl [function] [call site] 00045
4 returnErrorInt [function] [call site] 00046
3 pixDestroy [function] [call site] 00047
4 lept_stderr [function] [call site] 00048
4 pixFree [function] [call site] 00049
5 pixGetData [function] [call site] 00050
6 returnErrorPtr [function] [call site] 00051
5 pixdata_free [function] [call site] 00052
5 pixGetText [function] [call site] 00053
6 returnErrorPtr [function] [call site] 00054
5 pixDestroyColormap [function] [call site] 00055
6 returnErrorInt [function] [call site] 00056
6 pixcmapDestroy [function] [call site] 00057
7 lept_stderr [function] [call site] 00058
3 lept_stderr [function] [call site] 00059
3 pixCreate [function] [call site] 00060
4 pixCreateNoInit [function] [call site] 00061
5 pixCreateHeader [function] [call site] 00062
5 returnErrorPtr [function] [call site] 00063
5 pixGetWpl [function] [call site] 00064
5 pixdata_malloc [function] [call site] 00065
5 pixDestroy [function] [call site] 00066
5 returnErrorPtr [function] [call site] 00067
5 pixSetData [function] [call site] 00068
6 returnErrorInt [function] [call site] 00069
5 pixSetPadBits [function] [call site] 00070
6 returnErrorInt [function] [call site] 00071
6 pixGetDimensions [function] [call site] 00072
7 returnErrorInt [function] [call site] 00073
6 lept_stderr [function] [call site] 00074
6 pixGetData [function] [call site] 00075
6 pixGetWpl [function] [call site] 00076
4 returnErrorPtr [function] [call site] 00077
3 returnErrorPtr [function] [call site] 00078
3 pixcmapDeserializeFromMemory [function] [call site] 00079
4 returnErrorPtr [function] [call site] 00080
4 returnErrorPtr [function] [call site] 00081
4 returnErrorPtr [function] [call site] 00082
4 returnErrorPtr [function] [call site] 00083
4 pixcmapCreate [function] [call site] 00084
5 returnErrorPtr [function] [call site] 00085
5 calloc [call site] 00086
5 calloc [call site] 00087
4 pixcmapAddRGBA [function] [call site] 00088
5 returnErrorInt [function] [call site] 00089
5 returnErrorInt [function] [call site] 00090
3 pixDestroy [function] [call site] 00091
3 returnErrorPtr [function] [call site] 00092
3 pixSetColormap [function] [call site] 00093
4 returnErrorInt [function] [call site] 00094
4 pixDestroyColormap [function] [call site] 00095
4 pixcmapIsValid [function] [call site] 00096
5 returnErrorInt [function] [call site] 00097
5 returnErrorInt [function] [call site] 00098
5 returnErrorInt [function] [call site] 00099
5 lept_stderr [function] [call site] 00100
5 lept_stderr [function] [call site] 00101
5 lept_stderr [function] [call site] 00102
5 pixGetDepth [function] [call site] 00103
6 returnErrorInt [function] [call site] 00104
5 lept_stderr [function] [call site] 00105
5 lept_stderr [function] [call site] 00106
5 lept_stderr [function] [call site] 00107
5 lept_stderr [function] [call site] 00108
5 pixGetMaxColorIndex [function] [call site] 00109
6 returnErrorInt [function] [call site] 00110
6 returnErrorInt [function] [call site] 00111
6 pixGetDimensions [function] [call site] 00112
6 returnErrorInt [function] [call site] 00113
6 pixGetWpl [function] [call site] 00114
6 pixGetData [function] [call site] 00115
6 pixZero [function] [call site] 00116
7 returnErrorInt [function] [call site] 00117
7 returnErrorInt [function] [call site] 00118
7 pixGetWidth [function] [call site] 00119
8 returnErrorInt [function] [call site] 00120
7 pixGetDepth [function] [call site] 00121
7 pixGetHeight [function] [call site] 00122
8 returnErrorInt [function] [call site] 00123
7 pixGetWpl [function] [call site] 00124
7 pixGetData [function] [call site] 00125
5 lept_stderr [function] [call site] 00126
4 returnErrorInt [function] [call site] 00127
3 pixDestroy [function] [call site] 00128
3 returnErrorPtr [function] [call site] 00129
3 pixGetData [function] [call site] 00130
3 pixcmapIsValid [function] [call site] 00131
3 pixDestroy [function] [call site] 00132
3 returnErrorPtr [function] [call site] 00133
1 l_colorfillCreate [function] [call site] 00134
2 returnErrorPtr [function] [call site] 00135
2 pixGetDepth [function] [call site] 00136
2 returnErrorPtr [function] [call site] 00137
2 pixGetDimensions [function] [call site] 00138
2 returnErrorPtr [function] [call site] 00139
2 boxaCreate [function] [call site] 00140
3 calloc [call site] 00141
3 calloc [call site] 00142
3 boxaDestroy [function] [call site] 00143
4 lept_stderr [function] [call site] 00144
4 boxDestroy [function] [call site] 00145
5 lept_stderr [function] [call site] 00146
3 returnErrorPtr [function] [call site] 00147
2 boxCreate [function] [call site] 00148
3 returnErrorPtr [function] [call site] 00149
3 returnErrorPtr [function] [call site] 00150
3 returnErrorPtr [function] [call site] 00151
3 calloc [call site] 00152
3 boxSetGeometry [function] [call site] 00153
4 returnErrorInt [function] [call site] 00154
2 boxaAddBox [function] [call site] 00155
3 returnErrorInt [function] [call site] 00156
3 returnErrorInt [function] [call site] 00157
3 boxCopy [function] [call site] 00158
4 returnErrorPtr [function] [call site] 00159
4 boxCreate [function] [call site] 00160
3 boxClone [function] [call site] 00161
4 returnErrorPtr [function] [call site] 00162
3 returnErrorInt [function] [call site] 00163
3 returnErrorInt [function] [call site] 00164
3 boxaGetCount [function] [call site] 00165
4 returnErrorInt [function] [call site] 00166
3 boxaExtendArray [function] [call site] 00167
4 returnErrorInt [function] [call site] 00168
4 boxaExtendArrayToSize [function] [call site] 00169
5 returnErrorInt [function] [call site] 00170
5 returnErrorInt [function] [call site] 00171
5 returnErrorInt [function] [call site] 00172
5 lept_stderr [function] [call site] 00173
5 reallocNew [function] [call site] 00174
6 returnErrorPtr [function] [call site] 00175
6 calloc [call site] 00176
6 returnErrorPtr [function] [call site] 00177
6 calloc [call site] 00178
6 returnErrorPtr [function] [call site] 00179
5 returnErrorInt [function] [call site] 00180
3 boxDestroy [function] [call site] 00181
3 returnErrorInt [function] [call site] 00182
2 calloc [call site] 00183
2 pixClone [function] [call site] 00184
3 returnErrorPtr [function] [call site] 00185
2 numaaCreate [function] [call site] 00186
3 calloc [call site] 00187
3 calloc [call site] 00188
3 numaaDestroy [function] [call site] 00189
4 lept_stderr [function] [call site] 00190
4 numaDestroy [function] [call site] 00191
5 lept_stderr [function] [call site] 00192
3 returnErrorPtr [function] [call site] 00193
2 l_dnaaCreate [function] [call site] 00194
3 calloc [call site] 00195
3 calloc [call site] 00196
3 l_dnaaDestroy [function] [call site] 00197
4 lept_stderr [function] [call site] 00198
4 l_dnaDestroy [function] [call site] 00199
3 returnErrorPtr [function] [call site] 00200
2 pixaCreate [function] [call site] 00201
3 calloc [call site] 00202
3 calloc [call site] 00203
3 boxaCreate [function] [call site] 00204
3 pixaDestroy [function] [call site] 00205
4 lept_stderr [function] [call site] 00206
4 pixDestroy [function] [call site] 00207
4 boxaDestroy [function] [call site] 00208
3 returnErrorPtr [function] [call site] 00209
1 l_colorfillDestroy [function] [call site] 00210
2 lept_stderr [function] [call site] 00211
2 pixDestroy [function] [call site] 00212
2 pixDestroy [function] [call site] 00213
2 boxaDestroy [function] [call site] 00214
2 pixaDestroy [function] [call site] 00215
2 pixaDestroy [function] [call site] 00216
2 numaaDestroy [function] [call site] 00217
2 l_dnaaDestroy [function] [call site] 00218
2 pixaDestroy [function] [call site] 00219
1 pixDestroy [function] [call site] 00220