Fuzz introspector: gif_target
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
10 10 3 :

['gdAlphaBlend', 'gdLayerOverlay', 'gdLayerMultiply']

10 10 gdImageSetPixel call site: 00085 /src/libgd/src/gd.c:1286
0 2 1 :

['gdMalloc']

0 2 allocDynamic call site: 00006 /src/libgd/src/gd_io_dp.c:327
0 0 None 0 204 gdImageCreateFromGifPtr call site: 00002 /src/libgd/src/gd_gif_in.c:183
0 0 None 0 14 gdImageCreate call site: 00056 /src/libgd/src/gd.c:198
0 0 None 0 10 gdImageCreate call site: 00058 /src/libgd/src/gd.c:204
0 0 None 0 10 gdImageCreate call site: 00060 /src/libgd/src/gd.c:217
0 0 None 0 10 gdImageDestroy call site: 00067 /src/libgd/src/gd.c:396
0 0 None 0 6 gdImageDestroy call site: 00068 /src/libgd/src/gd.c:402
0 0 None 0 4 gdFreeDynamicCtx call site: 00031 /src/libgd/src/gd_io_dp.c:158
0 0 None 0 0 gdImageCreate call site: 00055 /src/libgd/src/gd.c:193
0 0 None 0 0 gdImageColorTransparent call site: 00114 /src/libgd/src/gd.c:904
0 0 None 0 0 gdImageColorTransparent call site: 00114 /src/libgd/src/gd.c:909

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 gdImageCreateFromGifPtr [function] [call site] 00001
2 gdNewDynamicCtxEx [function] [call site] 00002
3 gdMalloc [function] [call site] 00003
3 newDynamic [function] [call site] 00004
4 gdMalloc [function] [call site] 00005
4 allocDynamic [function] [call site] 00006
5 gdMalloc [function] [call site] 00007
4 gdFree [function] [call site] 00008
3 gdFree [function] [call site] 00009
3 dynamicGetchar [function] [call site] 00010
4 dynamicGetbuf [function] [call site] 00011
3 dynamicPutchar [function] [call site] 00012
4 appendDynamic [function] [call site] 00013
5 overflow2 [function] [call site] 00014
6 gd_error_ex [function] [call site] 00015
7 _gd_error_ex [function] [call site] 00016
6 gd_error_ex [function] [call site] 00017
5 gdReallocDynamic [function] [call site] 00018
6 gdRealloc [function] [call site] 00019
7 realloc [call site] 00020
6 gdMalloc [function] [call site] 00021
6 gdFree [function] [call site] 00022
3 dynamicGetbuf [function] [call site] 00023
3 dynamicPutbuf [function] [call site] 00024
4 appendDynamic [function] [call site] 00025
3 dynamicSeek [function] [call site] 00026
4 overflow2 [function] [call site] 00027
4 gdReallocDynamic [function] [call site] 00028
3 dynamicTell [function] [call site] 00029
3 gdFreeDynamicCtx [function] [call site] 00030
4 gdFree [function] [call site] 00031
4 gdFree [function] [call site] 00032
4 gdFree [function] [call site] 00033
2 gdImageCreateFromGifCtx [function] [call site] 00034
3 gdGetBuf [function] [call site] 00035
3 strncmp [call site] 00036
3 memcmp [call site] 00037
3 memcmp [call site] 00038
3 gdGetBuf [function] [call site] 00039
3 ReadColorMap [function] [call site] 00040
4 gdGetBuf [function] [call site] 00041
3 gdGetBuf [function] [call site] 00042
3 gdGetBuf [function] [call site] 00043
3 DoExtension [function] [call site] 00044
4 GetDataBlock [function] [call site] 00045
5 GetDataBlock_ [function] [call site] 00046
6 gdGetBuf [function] [call site] 00047
6 gdGetBuf [function] [call site] 00048
4 GetDataBlock [function] [call site] 00049
4 GetDataBlock [function] [call site] 00050
3 gdGetBuf [function] [call site] 00051
3 gdImageCreate [function] [call site] 00052
4 overflow2 [function] [call site] 00053
4 overflow2 [function] [call site] 00054
4 overflow2 [function] [call site] 00055
4 gdCalloc [function] [call site] 00056
5 calloc [call site] 00057
4 gdMalloc [function] [call site] 00058
4 gdFree [function] [call site] 00059
4 gdCalloc [function] [call site] 00060
4 gdFree [function] [call site] 00061
4 gdFree [function] [call site] 00062
4 gdFree [function] [call site] 00063
3 ReadColorMap [function] [call site] 00064
3 gdImageDestroy [function] [call site] 00065
4 gdFree [function] [call site] 00066
4 gdFree [function] [call site] 00067
4 gdFree [function] [call site] 00068
4 gdFree [function] [call site] 00069
4 gdFree [function] [call site] 00070
4 gdFree [function] [call site] 00071
3 ReadImage [function] [call site] 00072
4 gdGetBuf [function] [call site] 00073
4 LWZReadByte [function] [call site] 00074
5 LWZReadByte_ [function] [call site] 00075
6 GetCode [function] [call site] 00076
7 GetCode_ [function] [call site] 00077
8 GetDataBlock [function] [call site] 00078
6 GetCode [function] [call site] 00079
6 GetCode [function] [call site] 00080
6 GetCode [function] [call site] 00081
6 GetDataBlock [function] [call site] 00082
4 LWZReadByte [function] [call site] 00083
4 gdImageSetPixel [function] [call site] 00084
5 gdImageSetPixel [function] [call site] 00085
6 gdImageSetPixel [function] [call site] 00086
7 gdImageBrushApply [function] [call site] 00087
8 gdImageGetTrueColorPixel [function] [call site] 00088
9 gdImageGetPixel [function] [call site] 00089
8 gdImageSetPixel [function] [call site] 00090
9 gdImageTileApply [function] [call site] 00091
10 gdImageGetPixel [function] [call site] 00092
10 gdImageSetPixel [function] [call site] 00093
11 gdImageSetPixel [function] [call site] 00094
12 gdAlphaBlend [function] [call site] 00095
12 gdLayerOverlay [function] [call site] 00096
13 gdAlphaOverlayColor [function] [call site] 00097
13 gdAlphaOverlayColor [function] [call site] 00098
13 gdAlphaOverlayColor [function] [call site] 00099
12 gdLayerMultiply [function] [call site] 00100
10 gdImageGetPixel [function] [call site] 00101
10 gdImageColorResolveAlpha [function] [call site] 00102
10 gdImageSetPixel [function] [call site] 00103
10 gdImageSetPixel [function] [call site] 00104
8 gdImageGetPixel [function] [call site] 00105
8 gdImageGetTrueColorPixel [function] [call site] 00106
8 gdImageSetPixel [function] [call site] 00107
8 gdImageGetPixel [function] [call site] 00108
8 gdImageColorResolveAlpha [function] [call site] 00109
8 gdImageSetPixel [function] [call site] 00110
8 gdImageSetPixel [function] [call site] 00111
4 LWZReadByte [function] [call site] 00112
3 ReadImage [function] [call site] 00113
3 gdImageColorTransparent [function] [call site] 00114
3 gdImageDestroy [function] [call site] 00115
1 gdImageDestroy [function] [call site] 00116