Fuzz introspector: tga_target
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 5 1 :

['gd_error']

0 7 read_image_tga call site: 00059 /src/libgd/src/gd_tga.c:280
0 2 1 :

['gdMalloc']

0 2 allocDynamic call site: 00006 /src/libgd/src/gd_io_dp.c:327
0 0 None 0 147 gdImageCreateFromTgaCtx call site: 00035 /src/libgd/src/gd_tga.c:73
0 0 None 0 14 gdImageCreateTrueColor call site: 00078 /src/libgd/src/gd.c:305
0 0 None 0 14 gdImageDestroy call site: 00094 /src/libgd/src/gd.c:390
0 0 None 0 10 gdImageCreateTrueColor call site: 00079 /src/libgd/src/gd.c:311
0 0 None 0 10 gdImageCreateTrueColor call site: 00081 /src/libgd/src/gd.c:322
0 0 None 0 7 gdImageCreateFromTgaCtx call site: 00074 /src/libgd/src/gd_tga.c:97
0 0 None 0 6 gdImageDestroy call site: 00097 /src/libgd/src/gd.c:402
0 0 None 0 4 gdFreeDynamicCtx call site: 00031 /src/libgd/src/gd_io_dp.c:158
0 0 None 0 0 gdImageCreateTrueColor call site: 00075 /src/libgd/src/gd.c:294
0 0 None 0 0 gdImageCreateTrueColor call site: 00076 /src/libgd/src/gd.c:297

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 gdImageCreateFromTgaPtr [function] [call site] 00001
2 gdNewDynamicCtxEx [function] [call site] 00002
3 gdMalloc [function] [call site] 00003
3 newDynamic [function] [call site] 00004
4 gdMalloc [function] [call site] 00005
4 allocDynamic [function] [call site] 00006
5 gdMalloc [function] [call site] 00007
4 gdFree [function] [call site] 00008
3 gdFree [function] [call site] 00009
3 dynamicGetchar [function] [call site] 00010
4 dynamicGetbuf [function] [call site] 00011
3 dynamicPutchar [function] [call site] 00012
4 appendDynamic [function] [call site] 00013
5 overflow2 [function] [call site] 00014
6 gd_error_ex [function] [call site] 00015
7 _gd_error_ex [function] [call site] 00016
6 gd_error_ex [function] [call site] 00017
5 gdReallocDynamic [function] [call site] 00018
6 gdRealloc [function] [call site] 00019
7 realloc [call site] 00020
6 gdMalloc [function] [call site] 00021
6 gdFree [function] [call site] 00022
3 dynamicGetbuf [function] [call site] 00023
3 dynamicPutbuf [function] [call site] 00024
4 appendDynamic [function] [call site] 00025
3 dynamicSeek [function] [call site] 00026
4 overflow2 [function] [call site] 00027
4 gdReallocDynamic [function] [call site] 00028
3 dynamicTell [function] [call site] 00029
3 gdFreeDynamicCtx [function] [call site] 00030
4 gdFree [function] [call site] 00031
4 gdFree [function] [call site] 00032
4 gdFree [function] [call site] 00033
2 gdImageCreateFromTgaCtx [function] [call site] 00034
3 gdMalloc [function] [call site] 00035
3 read_header_tga [function] [call site] 00036
4 gdGetBuf [function] [call site] 00037
4 gd_error [function] [call site] 00038
5 _gd_error_ex [function] [call site] 00039
4 gd_error_ex [function] [call site] 00040
4 gdMalloc [function] [call site] 00041
4 gdGetBuf [function] [call site] 00042
4 gd_error [function] [call site] 00043
3 free_tga [function] [call site] 00044
4 gdFree [function] [call site] 00045
4 gdFree [function] [call site] 00046
4 gdFree [function] [call site] 00047
3 read_image_tga [function] [call site] 00048
4 overflow2 [function] [call site] 00049
4 overflow2 [function] [call site] 00050
4 overflow2 [function] [call site] 00051
4 gdMalloc [function] [call site] 00052
4 gdMalloc [function] [call site] 00053
4 gdGetBuf [function] [call site] 00054
4 gd_error [function] [call site] 00055
4 gdFree [function] [call site] 00056
4 gdFree [function] [call site] 00057
4 gdMalloc [function] [call site] 00058
4 gdMalloc [function] [call site] 00059
4 gd_error [function] [call site] 00060
4 gdFree [function] [call site] 00061
4 gdGetBuf [function] [call site] 00062
4 gdFree [function] [call site] 00063
4 gdFree [function] [call site] 00064
4 gdFree [function] [call site] 00065
4 gdFree [function] [call site] 00066
4 gdFree [function] [call site] 00067
4 gdFree [function] [call site] 00068
4 gdFree [function] [call site] 00069
4 gdFree [function] [call site] 00070
4 gdFree [function] [call site] 00071
4 gdFree [function] [call site] 00072
3 free_tga [function] [call site] 00073
3 gdImageCreateTrueColor [function] [call site] 00074
4 overflow2 [function] [call site] 00075
4 overflow2 [function] [call site] 00076
4 overflow2 [function] [call site] 00077
4 gdMalloc [function] [call site] 00078
4 gdMalloc [function] [call site] 00079
4 gdFree [function] [call site] 00080
4 gdCalloc [function] [call site] 00081
5 calloc [call site] 00082
4 gdFree [function] [call site] 00083
4 gdFree [function] [call site] 00084
3 free_tga [function] [call site] 00085
3 gdImageAlphaBlending [function] [call site] 00086
3 gdImageSaveAlpha [function] [call site] 00087
3 gdImageFlipBoth [function] [call site] 00088
4 gdImageFlipVertical [function] [call site] 00089
4 gdImageFlipHorizontal [function] [call site] 00090
3 gdImageFlipVertical [function] [call site] 00091
3 gdImageFlipHorizontal [function] [call site] 00092
3 free_tga [function] [call site] 00093
1 gdImageDestroy [function] [call site] 00094
2 gdFree [function] [call site] 00095
2 gdFree [function] [call site] 00096
2 gdFree [function] [call site] 00097
2 gdFree [function] [call site] 00098
2 gdFree [function] [call site] 00099
2 gdFree [function] [call site] 00100