Fuzz introspector: libgd/tests/fuzzing/fuzz_bmp_decode.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
73 186 gdImageSetPixel call site: 00186 gdCompositePixel
29 267 gdAlphaBlend call site: 00267 gdLayerOverlay
24 143 gdImageSetPixel call site: 00143 gdImageSetPixel
15 168 gdImageSetPixel call site: 00168 gdImageSetPixel
3 101 gdImageCreateTrueColor call site: 00101
3 112 gdImageCreate call site: 00112
2 7 newDynamic call site: 00007
2 73 _gd_error_ex call site: 00073 gd_error_ex
2 128 gdTell call site: 00128
2 133 gdSeek call site: 00133
2 140 bmp_read_1bit call site: 00140 gdImageSetPixel
2 385 bmp_read_direct call site: 00385

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 gdImageCreateFromBmpPtr [function] [call site] 00001
2 gdImageCreateFromBmpCtx [function] [call site] 00012
3 bmp_read_header [function] [call site] 00015
4 gdGetWordLSB [function] [call site] 00016
4 gdGetIntLSB [function] [call site] 00017
4 gdGetWordLSB [function] [call site] 00018
4 gdGetWordLSB [function] [call site] 00019
4 gdGetIntLSB [function] [call site] 00020
3 bmp_read_info [function] [call site] 00025
4 gdGetIntLSB [function] [call site] 00026
4 BMP_DEBUG [function] [call site] 00027
4 bmp_read_windows_v3_info [function] [call site] 00029
5 gdGetIntLSB [function] [call site] 00030
5 gdGetIntLSB [function] [call site] 00031
5 gdGetWordLSB [function] [call site] 00032
5 gdGetWordLSB [function] [call site] 00033
5 gdGetIntLSB [function] [call site] 00034
5 gdGetIntLSB [function] [call site] 00035
5 gdGetIntLSB [function] [call site] 00036
5 gdGetIntLSB [function] [call site] 00037
5 gdGetIntLSB [function] [call site] 00038
5 gdGetIntLSB [function] [call site] 00039
5 bmp_read_bitfield_masks [function] [call site] 00040
6 gdGetIntLSB [function] [call site] 00041
6 gdGetIntLSB [function] [call site] 00042
6 gdGetIntLSB [function] [call site] 00043
6 gdGetIntLSB [function] [call site] 00044
5 bmp_skip_bytes [function] [call site] 00045
6 gdGetByte [function] [call site] 00046
4 bmp_read_os2_v1_info [function] [call site] 00047
5 gdGetWordLSB [function] [call site] 00048
5 gdGetWordLSB [function] [call site] 00049
5 gdGetWordLSB [function] [call site] 00050
5 gdGetWordLSB [function] [call site] 00051
4 bmp_read_os2_v2_info [function] [call site] 00052
5 gdGetIntLSB [function] [call site] 00053
5 gdGetIntLSB [function] [call site] 00054
5 gdGetWordLSB [function] [call site] 00055
5 gdGetWordLSB [function] [call site] 00056
5 gdGetIntLSB [function] [call site] 00057
5 gdGetIntLSB [function] [call site] 00058
5 gdGetIntLSB [function] [call site] 00059
5 gdGetIntLSB [function] [call site] 00060
5 gdGetIntLSB [function] [call site] 00061
5 gdGetIntLSB [function] [call site] 00062
4 BMP_DEBUG [function] [call site] 00064
3 bmp_validate_info [function] [call site] 00068
4 overflow2 [function] [call site] 00069
5 gd_error_ex [function] [call site] 00070
6 _gd_error_ex [function] [call site] 00072
7 gd_error_method [function] [call site] 00073
5 gd_error_ex [function] [call site] 00075
4 bmp_image_size [function] [call site] 00076
3 BMP_DEBUG [function] [call site] 00081
3 BMP_DEBUG [function] [call site] 00083
3 BMP_DEBUG [function] [call site] 00085
3 BMP_DEBUG [function] [call site] 00087
3 BMP_DEBUG [function] [call site] 00089
3 BMP_DEBUG [function] [call site] 00091
3 BMP_DEBUG [function] [call site] 00118
3 bmp_read_1bit [function] [call site] 00120
4 bmp_read_palette [function] [call site] 00121
4 bmp_row_padding [function] [call site] 00136
5 overflow2 [function] [call site] 00137
4 gdGetByte [function] [call site] 00138
4 bmp_check_palette_index [function] [call site] 00139
4 gdImageSetPixel [function] [call site] 00140
5 gdImageSetPixel [function] [call site] 00141
5 gdImageSetPixel [function] [call site] 00142
5 gdImageBrushApply [function] [call site] 00143
6 gdImageSY [function] [call site] 00144
6 gdImageSY [function] [call site] 00145
6 gdImageSX [function] [call site] 00146
6 gdImageSX [function] [call site] 00147
6 gdImageGetTrueColorPixel [function] [call site] 00148
7 gdImageGetPixel [function] [call site] 00149
8 gdImageBoundsSafeMacro [function] [call site] 00150
7 gdTrueColorAlpha [function] [call site] 00151
6 gdImageGetTransparent [function] [call site] 00152
6 gdImageSetPixel [function] [call site] 00153
6 gdImageGetPixel [function] [call site] 00154
6 gdImageGetTrueColorPixel [function] [call site] 00155
6 gdImageGetTransparent [function] [call site] 00156
6 gdImageSetPixel [function] [call site] 00157
6 gdImageGetPixel [function] [call site] 00158
6 gdImageGetTransparent [function] [call site] 00159
6 gdImageSetPixel [function] [call site] 00160
6 gdImageColorResolveAlpha [function] [call site] 00161
7 gdTrueColorAlpha [function] [call site] 00162
6 gdTrueColorGetRed [function] [call site] 00163
6 gdTrueColorGetGreen [function] [call site] 00164
6 gdTrueColorGetBlue [function] [call site] 00165
6 gdTrueColorGetAlpha [function] [call site] 00166
6 gdImageSetPixel [function] [call site] 00167
5 gdImageTileApply [function] [call site] 00168
6 gdImageSX [function] [call site] 00169
6 gdImageSY [function] [call site] 00170
6 gdImageGetPixel [function] [call site] 00171
6 gdImageGetTransparent [function] [call site] 00172
6 gdTrueColorAlpha [function] [call site] 00173
6 gdImageSetPixel [function] [call site] 00174
6 gdImageGetPixel [function] [call site] 00175
6 gdImageGetTransparent [function] [call site] 00176
6 gdImageSetPixel [function] [call site] 00177
6 gdImageColorResolveAlpha [function] [call site] 00178
6 gdTrueColorGetRed [function] [call site] 00179
6 gdTrueColorGetGreen [function] [call site] 00180
6 gdTrueColorGetBlue [function] [call site] 00181
6 gdTrueColorGetAlpha [function] [call site] 00182
6 gdImageSetPixel [function] [call site] 00183
5 gdImageSetPixel [function] [call site] 00184
5 gdImageBoundsSafeMacro [function] [call site] 00185
5 gdAlphaBlend [function] [call site] 00186
6 gdCompositePixel [function] [call site] 00201
7 clamp_pixel [function] [call site] 00203
7 clamp_pixel [function] [call site] 00204
7 gdCompositeOperatorIsValid [function] [call site] 00205
7 composite_porter_duff [function] [call site] 00206
7 lerp_pixel [function] [call site] 00211
7 scale_pixel [function] [call site] 00214
7 composite_porter_duff [function] [call site] 00215
6 gdCompositePixelFromGd [function] [call site] 00253
7 gdTrueColorGetAlpha [function] [call site] 00254
7 gdTrueColorGetRed [function] [call site] 00255
7 gdTrueColorGetGreen [function] [call site] 00256
7 gdTrueColorGetBlue [function] [call site] 00257
7 clamp_pixel [function] [call site] 00258
6 gdCompositePixelFromGd [function] [call site] 00259
6 gdTrueColorGetAlpha [function] [call site] 00260
6 gdTrueColorGetAlpha [function] [call site] 00261
6 gdTrueColorGetRed [function] [call site] 00262
6 gdTrueColorGetRed [function] [call site] 00263
6 gdTrueColorGetGreen [function] [call site] 00264
6 gdTrueColorGetGreen [function] [call site] 00265
6 gdTrueColorGetBlue [function] [call site] 00266
6 gdTrueColorGetBlue [function] [call site] 00267
5 gdLayerOverlay [function] [call site] 00268
6 gdCompositePixelToGd [function] [call site] 00269
6 gdCompositePixel [function] [call site] 00270
6 gdCompositePixelFromGd [function] [call site] 00271
6 gdCompositePixelFromGd [function] [call site] 00272
6 gdTrueColorGetAlpha [function] [call site] 00273
6 gdTrueColorGetAlpha [function] [call site] 00274
6 gdAlphaOverlayColor [function] [call site] 00275
6 gdTrueColorGetRed [function] [call site] 00276
6 gdTrueColorGetRed [function] [call site] 00277
6 gdAlphaOverlayColor [function] [call site] 00278
6 gdTrueColorGetGreen [function] [call site] 00279
6 gdTrueColorGetGreen [function] [call site] 00280
6 gdAlphaOverlayColor [function] [call site] 00281
6 gdTrueColorGetBlue [function] [call site] 00282
6 gdTrueColorGetBlue [function] [call site] 00283
5 gdLayerMultiply [function] [call site] 00284
6 gdCompositePixelToGd [function] [call site] 00285
6 gdCompositePixel [function] [call site] 00286
6 gdCompositePixelFromGd [function] [call site] 00287
6 gdCompositePixelFromGd [function] [call site] 00288
6 gdTrueColorGetAlpha [function] [call site] 00289
6 gdTrueColorGetAlpha [function] [call site] 00290
6 gdTrueColorGetRed [function] [call site] 00291
6 gdTrueColorGetRed [function] [call site] 00292
6 gdTrueColorGetGreen [function] [call site] 00293
6 gdTrueColorGetGreen [function] [call site] 00294
6 gdTrueColorGetBlue [function] [call site] 00295
6 gdTrueColorGetBlue [function] [call site] 00296
4 gdGetByte [function] [call site] 00297
3 BMP_DEBUG [function] [call site] 00298
3 bmp_read_2bit [function] [call site] 00300
4 bmp_read_palette [function] [call site] 00301
4 bmp_row_padding [function] [call site] 00304
4 gdGetByte [function] [call site] 00305
4 bmp_check_palette_index [function] [call site] 00306
4 gdImageSetPixel [function] [call site] 00307
4 gdGetByte [function] [call site] 00308
3 BMP_DEBUG [function] [call site] 00309
3 bmp_read_4bit [function] [call site] 00311
4 bmp_read_palette [function] [call site] 00312
4 bmp_row_padding [function] [call site] 00315
4 gdGetByte [function] [call site] 00316
4 bmp_check_palette_index [function] [call site] 00317
4 gdImageSetPixel [function] [call site] 00318
4 bmp_check_palette_index [function] [call site] 00319
4 gdImageSetPixel [function] [call site] 00320
4 gdGetByte [function] [call site] 00321
4 bmp_read_rle [function] [call site] 00322
5 gdGetByte [function] [call site] 00323
5 gdGetByte [function] [call site] 00324
5 bmp_check_palette_index [function] [call site] 00325
5 gdImageSetPixel [function] [call site] 00326
5 gdGetByte [function] [call site] 00327
5 bmp_check_palette_index [function] [call site] 00328
5 gdImageSetPixel [function] [call site] 00329
5 gdGetByte [function] [call site] 00330
5 gdGetByte [function] [call site] 00331
5 gdGetByte [function] [call site] 00332
3 BMP_DEBUG [function] [call site] 00333
3 bmp_read_8bit [function] [call site] 00335
4 bmp_read_palette [function] [call site] 00336
4 bmp_row_padding [function] [call site] 00339
4 gdGetByte [function] [call site] 00340
4 bmp_check_palette_index [function] [call site] 00341
4 gdImageSetPixel [function] [call site] 00342
4 gdGetByte [function] [call site] 00343
4 bmp_read_rle [function] [call site] 00344
3 BMP_DEBUG [function] [call site] 00345
3 bmp_read_direct [function] [call site] 00347
4 BMP_DEBUG [function] [call site] 00348
4 bmp_read_bitfield_masks [function] [call site] 00350
4 bmp_read_bitfield_masks [function] [call site] 00351
4 BMP_DEBUG [function] [call site] 00352
4 BMP_DEBUG [function] [call site] 00354
4 BMP_DEBUG [function] [call site] 00356
4 bmp_row_padding [function] [call site] 00360
4 gdGetWordLSB [function] [call site] 00361
4 BMP_DEBUG [function] [call site] 00362
4 bmp_extract_mask [function] [call site] 00364
5 bmp_get_mask_shift [function] [call site] 00365
5 bmp_get_mask_bits [function] [call site] 00366
6 bmp_get_mask_shift [function] [call site] 00367
4 bmp_extract_mask [function] [call site] 00368
4 bmp_extract_mask [function] [call site] 00369
4 bmp_alpha_to_gd [function] [call site] 00370
4 bmp_extract_mask [function] [call site] 00371
4 BMP_DEBUG [function] [call site] 00372
4 gdGetByte [function] [call site] 00374
4 gdGetByte [function] [call site] 00375
4 gdGetByte [function] [call site] 00376
4 gdGetIntLSB [function] [call site] 00377
4 bmp_extract_mask [function] [call site] 00378
4 bmp_extract_mask [function] [call site] 00379
4 bmp_extract_mask [function] [call site] 00380
4 bmp_alpha_to_gd [function] [call site] 00381
4 bmp_extract_mask [function] [call site] 00382
4 gdImageSetPixel [function] [call site] 00383
4 gdTrueColorAlpha [function] [call site] 00384
4 gdGetByte [function] [call site] 00385
3 BMP_DEBUG [function] [call site] 00386
2 gdIOCtx*::gd_free [function] [call site] 00398
1 gdImageDestroy [function] [call site] 00399