Fuzz introspector: wbmp_target
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
10 10 3 :

['gdLayerOverlay', 'gdAlphaBlend', 'gdLayerMultiply']

10 10 gdImageSetPixel call site: 00070 /src/libgd/src/gd.c:1286
0 2 1 :

['gdMalloc']

0 2 allocDynamic call site: 00006 /src/libgd/src/gd_io_dp.c:327
0 2 1 :

['gdFree']

0 2 readwbmp call site: 00047 /src/libgd/src/wbmp.c:182
0 0 None 0 135 gdImageCreateFromWBMPPtr call site: 00002 /src/libgd/src/gd_wbmp.c:259
0 0 None 0 14 gdImageCreate call site: 00055 /src/libgd/src/gd.c:198
0 0 None 0 10 gdImageCreate call site: 00057 /src/libgd/src/gd.c:204
0 0 None 0 10 gdImageCreate call site: 00059 /src/libgd/src/gd.c:217
0 0 None 0 10 gdImageDestroy call site: 00101 /src/libgd/src/gd.c:396
0 0 None 0 6 gdImageDestroy call site: 00102 /src/libgd/src/gd.c:402
0 0 None 0 4 gdFreeDynamicCtx call site: 00031 /src/libgd/src/gd_io_dp.c:158
0 0 None 0 0 gdImageCreate call site: 00052 /src/libgd/src/gd.c:186
0 0 None 0 0 gdImageCreate call site: 00054 /src/libgd/src/gd.c:193

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 gdImageCreateFromWBMPPtr [function] [call site] 00001
2 gdNewDynamicCtxEx [function] [call site] 00002
3 gdMalloc [function] [call site] 00003
3 newDynamic [function] [call site] 00004
4 gdMalloc [function] [call site] 00005
4 allocDynamic [function] [call site] 00006
5 gdMalloc [function] [call site] 00007
4 gdFree [function] [call site] 00008
3 gdFree [function] [call site] 00009
3 dynamicGetchar [function] [call site] 00010
4 dynamicGetbuf [function] [call site] 00011
3 dynamicPutchar [function] [call site] 00012
4 appendDynamic [function] [call site] 00013
5 overflow2 [function] [call site] 00014
6 gd_error_ex [function] [call site] 00015
7 _gd_error_ex [function] [call site] 00016
6 gd_error_ex [function] [call site] 00017
5 gdReallocDynamic [function] [call site] 00018
6 gdRealloc [function] [call site] 00019
7 realloc [call site] 00020
6 gdMalloc [function] [call site] 00021
6 gdFree [function] [call site] 00022
3 dynamicGetbuf [function] [call site] 00023
3 dynamicPutbuf [function] [call site] 00024
4 appendDynamic [function] [call site] 00025
3 dynamicSeek [function] [call site] 00026
4 overflow2 [function] [call site] 00027
4 gdReallocDynamic [function] [call site] 00028
3 dynamicTell [function] [call site] 00029
3 gdFreeDynamicCtx [function] [call site] 00030
4 gdFree [function] [call site] 00031
4 gdFree [function] [call site] 00032
4 gdFree [function] [call site] 00033
2 gdImageCreateFromWBMPCtx [function] [call site] 00034
3 readwbmp [function] [call site] 00035
4 gdMalloc [function] [call site] 00036
4 gdFree [function] [call site] 00037
4 skipheader [function] [call site] 00038
4 gdFree [function] [call site] 00039
4 getmbi [function] [call site] 00040
4 gdFree [function] [call site] 00041
4 getmbi [function] [call site] 00042
4 gdFree [function] [call site] 00043
4 overflow2 [function] [call site] 00044
4 overflow2 [function] [call site] 00045
4 gdFree [function] [call site] 00046
4 gdMalloc [function] [call site] 00047
4 gdFree [function] [call site] 00048
3 gd_getin [function] [call site] 00049
4 gdGetC [function] [call site] 00050
3 gdImageCreate [function] [call site] 00051
4 overflow2 [function] [call site] 00052
4 overflow2 [function] [call site] 00053
4 overflow2 [function] [call site] 00054
4 gdCalloc [function] [call site] 00055
5 calloc [call site] 00056
4 gdMalloc [function] [call site] 00057
4 gdFree [function] [call site] 00058
4 gdCalloc [function] [call site] 00059
4 gdFree [function] [call site] 00060
4 gdFree [function] [call site] 00061
4 gdFree [function] [call site] 00062
3 freewbmp [function] [call site] 00063
4 gdFree [function] [call site] 00064
4 gdFree [function] [call site] 00065
3 gdImageColorAllocate [function] [call site] 00066
4 gdImageColorAllocateAlpha [function] [call site] 00067
3 gdImageColorAllocate [function] [call site] 00068
3 gdImageSetPixel [function] [call site] 00069
4 gdImageSetPixel [function] [call site] 00070
5 gdImageSetPixel [function] [call site] 00071
6 gdImageBrushApply [function] [call site] 00072
7 gdImageGetTrueColorPixel [function] [call site] 00073
8 gdImageGetPixel [function] [call site] 00074
7 gdImageSetPixel [function] [call site] 00075
8 gdImageTileApply [function] [call site] 00076
9 gdImageGetPixel [function] [call site] 00077
9 gdImageSetPixel [function] [call site] 00078
10 gdImageSetPixel [function] [call site] 00079
11 gdAlphaBlend [function] [call site] 00080
11 gdLayerOverlay [function] [call site] 00081
12 gdAlphaOverlayColor [function] [call site] 00082
12 gdAlphaOverlayColor [function] [call site] 00083
12 gdAlphaOverlayColor [function] [call site] 00084
11 gdLayerMultiply [function] [call site] 00085
9 gdImageGetPixel [function] [call site] 00086
9 gdImageColorResolveAlpha [function] [call site] 00087
9 gdImageSetPixel [function] [call site] 00088
9 gdImageSetPixel [function] [call site] 00089
7 gdImageGetPixel [function] [call site] 00090
7 gdImageGetTrueColorPixel [function] [call site] 00091
7 gdImageSetPixel [function] [call site] 00092
7 gdImageGetPixel [function] [call site] 00093
7 gdImageColorResolveAlpha [function] [call site] 00094
7 gdImageSetPixel [function] [call site] 00095
7 gdImageSetPixel [function] [call site] 00096
3 gdImageSetPixel [function] [call site] 00097
3 freewbmp [function] [call site] 00098
1 gdImageDestroy [function] [call site] 00099
2 gdFree [function] [call site] 00100
2 gdFree [function] [call site] 00101
2 gdFree [function] [call site] 00102
2 gdFree [function] [call site] 00103
2 gdFree [function] [call site] 00104
2 gdFree [function] [call site] 00105