Fuzz introspector: libgd/tests/fuzzing/fuzz_jpeg_decode.c
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
250 158 gdImageCreate call site: 00158 gdImageScaleTwoPassWithMethod
47 104 gdImageCreateTrueColor call site: 00104 gdImageScale
31 63 gdCalloc call site: 00063 gdJpegCollectIccProfile
19 43 gdImageDestroy call site: 00043 gdJpegCollectMetadata
9 20 _gd_error_ex call site: 00020 gdJpegNormalizeReadOptions
7 31 gd_error call site: 00031 gdImageDestroy
6 11 gdFree call site: 00011 gdImageCreateFromJpegCtxWithOptionsAndMetadata
3 0 EP call site: 00000 gdNewDynamicCtxEx
2 8 newDynamic call site: 00008
2 40 gdImageDestroy call site: 00040
1 96 overflow2 call site: 00096 gd_error_ex
1 102 gdImageCreateTrueColor call site: 00102

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 gdImageCreateFromJpegPtr [function] [call site] 00001
2 gdImageCreateFromJpegPtrEx [function] [call site] 00002
3 gdNewDynamicCtxEx [function] [call site] 00003
4 gdMalloc [function] [call site] 00004
5 malloc [function] [call site] 00005
4 newDynamic [function] [call site] 00006
5 gdMalloc [function] [call site] 00007
5 allocDynamic [function] [call site] 00008
6 gdMalloc [function] [call site] 00009
5 gdFree [function] [call site] 00010
6 free [function] [call site] 00011
4 gdFree [function] [call site] 00012
3 gdJpegReadOptionsInit [function] [call site] 00013
4 memset [function] [call site] 00014
3 gdImageCreateFromJpegCtxWithOptions [function] [call site] 00015
4 gdImageCreateFromJpegCtxWithOptionsAndMetadata [function] [call site] 00016
5 gd_error_ex [function] [call site] 00017
6 va_start [function] [call site] 00018
6 _gd_error_ex [function] [call site] 00019
7 gd_error_method [function] [call site] 00020
6 va_end [function] [call site] 00021
5 gd_error_ex [function] [call site] 00022
5 gd_error_ex [function] [call site] 00023
5 memset [function] [call site] 00024
5 memset [function] [call site] 00025
5 gdJpegNormalizeReadOptions [function] [call site] 00026
6 gdJpegReadOptionsInit [function] [call site] 00027
6 gdJpegGcd [function] [call site] 00028
5 gd_error [function] [call site] 00029
6 va_start [function] [call site] 00030
6 _gd_error_ex [function] [call site] 00031
6 va_end [function] [call site] 00032
5 jpeg_std_error [function] [call site] 00033
5 setjmp [function] [call site] 00034
5 gdFree [function] [call site] 00035
5 gdImageDestroy [function] [call site] 00036
6 gdFree [function] [call site] 00037
6 gdFree [function] [call site] 00038
6 gdFree [function] [call site] 00039
6 gdFree [function] [call site] 00040
6 gdFree [function] [call site] 00041
6 gdFree [function] [call site] 00042
6 gdFree [function] [call site] 00043
5 jpeg_create_decompress [function] [call site] 00044
5 jpeg_gdIOCtx_src [function] [call site] 00045
5 jpeg_save_markers [function] [call site] 00046
5 jpeg_save_markers [function] [call site] 00047
5 jpeg_save_markers [function] [call site] 00048
5 jpeg_save_markers [function] [call site] 00049
5 jpeg_read_header [function] [call site] 00050
5 gd_error [function] [call site] 00051
5 gdJpegCollectMetadata [function] [call site] 00052
6 gdJpegMarkerStartsWith [function] [call site] 00053
7 memcmp [function] [call site] 00054
6 gdImageMetadataSetProfile [function] [call site] 00055
7 gdMetadataKeyIsValid [function] [call site] 00056
7 gdMetadataFindProfile [function] [call site] 00057
8 gdMetadataKeyIsValid [function] [call site] 00058
8 strcmp [function] [call site] 00059
7 gdMalloc [function] [call site] 00060
7 memcpy [function] [call site] 00061
7 gdCalloc [function] [call site] 00062
8 calloc [function] [call site] 00063
7 gdFree [function] [call site] 00064
7 gdMetadataStrdup [function] [call site] 00065
8 strlen [function] [call site] 00066
8 gdMalloc [function] [call site] 00067
8 memcpy [function] [call site] 00068
7 gdFree [function] [call site] 00069
7 gdFree [function] [call site] 00070
7 gdFree [function] [call site] 00071
6 gdJpegMarkerStartsWith [function] [call site] 00072
6 gdImageMetadataSetProfile [function] [call site] 00073
6 gdJpegMarkerStartsWith [function] [call site] 00074
6 gdImageMetadataSetProfile [function] [call site] 00075
6 gdJpegCollectIccProfile [function] [call site] 00076
7 memset [function] [call site] 00077
7 memset [function] [call site] 00078
7 gdJpegMarkerStartsWith [function] [call site] 00079
7 gdMalloc [function] [call site] 00080
7 memcpy [function] [call site] 00081
7 gdImageMetadataSetProfile [function] [call site] 00082
7 gdFree [function] [call site] 00083
5 gd_error [function] [call site] 00084
5 gd_error [function] [call site] 00085
5 gd_error [function] [call site] 00086
5 gdJpegScaledDimension [function] [call site] 00087
5 gdJpegScaledDimension [function] [call site] 00088
5 gd_error [function] [call site] 00089
5 gdJpegMapDctMethod [function] [call site] 00090
5 jpeg_start_decompress [function] [call site] 00091
5 gd_error [function] [call site] 00092
5 gd_error [function] [call site] 00093
5 gdImageCreateTrueColor [function] [call site] 00094
6 overflow2 [function] [call site] 00095
7 gd_error_ex [function] [call site] 00096
7 gd_error_ex [function] [call site] 00097
6 overflow2 [function] [call site] 00098
6 overflow2 [function] [call site] 00099
6 gdMalloc [function] [call site] 00100
6 memset [function] [call site] 00101
6 gdMalloc [function] [call site] 00102
6 gdFree [function] [call site] 00103
6 gdCalloc [function] [call site] 00104
6 gdFree [function] [call site] 00105
6 gdFree [function] [call site] 00106
6 gdFree [function] [call site] 00107
5 gd_error [function] [call site] 00108
5 DPCM2DPI [function] [call site] 00109
5 DPCM2DPI [function] [call site] 00110
5 gd_error_ex [function] [call site] 00111
5 gd_error_ex [function] [call site] 00112
5 gd_error_ex [function] [call site] 00113
5 gd_error_ex [function] [call site] 00114
5 gd_error_ex [function] [call site] 00115
5 gd_error_ex [function] [call site] 00116
5 gd_error_ex [function] [call site] 00117
5 gd_error_ex [function] [call site] 00118
5 gd_error_ex [function] [call site] 00119
5 gd_error_ex [function] [call site] 00120
5 gd_error_ex [function] [call site] 00121
5 gd_error_ex [function] [call site] 00122
5 gd_error_ex [function] [call site] 00123
5 gd_error_ex [function] [call site] 00124
5 fflush [function] [call site] 00125
5 gdImageInterlace [function] [call site] 00126
5 gd_error [function] [call site] 00127
5 gd_error [function] [call site] 00128
5 strncmp [function] [call site] 00129
5 gd_error [function] [call site] 00130
5 gd_error_ex [function] [call site] 00131
5 gdCalloc [function] [call site] 00132
5 gd_error [function] [call site] 00133
5 jpeg_read_scanlines [function] [call site] 00134
5 gd_error [function] [call site] 00135
5 CMYKToRGB [function] [call site] 00136
6 gdTrueColor [function] [call site] 00137
6 gdTrueColor [function] [call site] 00138
5 jpeg_read_scanlines [function] [call site] 00139
5 gd_error [function] [call site] 00140
5 gdTrueColor [function] [call site] 00141
5 jpeg_finish_decompress [function] [call site] 00142
5 gd_error [function] [call site] 00143
5 jpeg_destroy_decompress [function] [call site] 00144
5 gdFree [function] [call site] 00145
5 gdImageScale [function] [call site] 00146
6 gdImageSX [function] [call site] 00147
6 gdImageSY [function] [call site] 00148
6 gdImageClone [function] [call site] 00149
7 gdImageCreateTrueColor [function] [call site] 00150
7 gdImageCreate [function] [call site] 00151
8 overflow2 [function] [call site] 00152
8 overflow2 [function] [call site] 00153
8 overflow2 [function] [call site] 00154
8 gdCalloc [function] [call site] 00155
8 gdMalloc [function] [call site] 00156
8 gdFree [function] [call site] 00157
8 gdCalloc [function] [call site] 00158
8 gdFree [function] [call site] 00159
8 gdFree [function] [call site] 00160
8 gdFree [function] [call site] 00161
7 gdImageClone [function] [call site] 00162
7 gdImageClone [function] [call site] 00163
7 gdImageSetStyle [function] [call site] 00164
8 overflow2 [function] [call site] 00165
8 gdFree [function] [call site] 00166
8 gdMalloc [function] [call site] 00167
8 memcpy [function] [call site] 00168
7 overflow2 [function] [call site] 00169
7 gdMalloc [function] [call site] 00170
6 gdImageScaleIsDownscaleOrMixed [function] [call site] 00171
7 gdImageSX [function] [call site] 00172
7 gdImageSY [function] [call site] 00173
6 gdInterpolationIsFixedFamily [function] [call site] 00174
6 gdImageScaleTwoPassWithMethod [function] [call site] 00175
7 _get_filterinfo_for_id [function] [call site] 00176
7 gdImageClone [function] [call site] 00177
7 gdImagePaletteToTrueColor [function] [call site] 00178
8 gdImageSY [function] [call site] 00179
8 gdImageSX [function] [call site] 00180
8 gdCalloc [function] [call site] 00181
8 gdMalloc [function] [call site] 00182
8 gdTrueColorAlpha [function] [call site] 00183
8 gdTrueColorAlpha [function] [call site] 00184
8 gdFree [function] [call site] 00185
8 gdFree [function] [call site] 00186
8 gdTrueColorAlpha [function] [call site] 00187
8 gdFree [function] [call site] 00188
8 gdFree [function] [call site] 00189
7 gdLinearBufferCreate [function] [call site] 00190
8 overflow2 [function] [call site] 00191
8 overflow2 [function] [call site] 00192
8 gdMalloc [function] [call site] 00193
7 _gdScalePassFromGd [function] [call site] 00194
8 assert [function] [call site] 00195
8 _gdContributionsCalc [function] [call site] 00196
9 ceil [function] [call site] 00197
9 _gdContributionsAlloc [function] [call site] 00198
10 overflow2 [function] [call site] 00199
10 gdMalloc [function] [call site] 00200
10 overflow2 [function] [call site] 00201
10 gdFree [function] [call site] 00202
10 gdMalloc [function] [call site] 00203
10 gdFree [function] [call site] 00204
10 gdMalloc [function] [call site] 00205
10 gdFree [function] [call site] 00206
10 gdFree [function] [call site] 00207
10 gdFree [function] [call site] 00208
9 MAX [function] [call site] 00209
9 floor [function] [call site] 00210
9 MIN [function] [call site] 00211
9 ceil [function] [call site] 00212
9 _gdContributionsFree [function] [call site] 00213
10 gdFree [function] [call site] 00214
10 gdFree [function] [call site] 00215
10 gdFree [function] [call site] 00216
8 _gdContributionsInvert [function] [call site] 00217
9 overflow2 [function] [call site] 00218
9 gdCalloc [function] [call site] 00219
9 gdCalloc [function] [call site] 00220
9 gdFree [function] [call site] 00221
9 gdFree [function] [call site] 00222
9 gdFree [function] [call site] 00223
9 gdMalloc [function] [call site] 00224
9 gdFree [function] [call site] 00225
9 gdFree [function] [call site] 00226
9 overflow2 [function] [call site] 00227
9 _gdInvertedContributionsFree [function] [call site] 00228
10 gdFree [function] [call site] 00229
10 gdFree [function] [call site] 00230
10 gdFree [function] [call site] 00231
9 gdFree [function] [call site] 00232
9 gdFree [function] [call site] 00233
9 gdMalloc [function] [call site] 00234
9 _gdInvertedContributionsFree [function] [call site] 00235
9 gdFree [function] [call site] 00236
9 gdFree [function] [call site] 00237
9 _gdInvertedContributionsFree [function] [call site] 00238
9 gdFree [function] [call site] 00239
9 gdFree [function] [call site] 00240
9 overflow2 [function] [call site] 00241
9 _gdInvertedContributionsFree [function] [call site] 00242
9 gdFree [function] [call site] 00243
9 gdFree [function] [call site] 00244
9 gdMalloc [function] [call site] 00245
9 _gdInvertedContributionsFree [function] [call site] 00246
9 gdFree [function] [call site] 00247
9 gdFree [function] [call site] 00248
9 gdFree [function] [call site] 00249
9 gdFree [function] [call site] 00250
8 _gdContributionsFree [function] [call site] 00251
8 _gdScaleVerticalFromGdScatter [function] [call site] 00252
9 gdLinearBufferCreate [function] [call site] 00253
9 gdLinearBufferClear [function] [call site] 00254
9 gdPixelToLinear [function] [call site] 00255
10 gdAlphaToOpacity [function] [call site] 00256
10 gdTrueColorGetAlpha [function] [call site] 00257
10 srgb_u8_to_linear [function] [call site] 00258
11 CLAMP [function] [call site] 00259
11 pow [function] [call site] 00260
10 gdTrueColorGetRed [function] [call site] 00261
10 srgb_u8_to_linear [function] [call site] 00262
10 gdTrueColorGetGreen [function] [call site] 00263
10 srgb_u8_to_linear [function] [call site] 00264
10 gdTrueColorGetBlue [function] [call site] 00265
9 gdLinearPixelAdd [function] [call site] 00266
9 gdFree [function] [call site] 00267
8 _gdInvertedContributionsFree [function] [call site] 00268
8 _gdContributionsFree [function] [call site] 00269
8 _gdInvertedContributionsFree [function] [call site] 00270
8 _gdContributionsFree [function] [call site] 00271
8 _gdScaleOneAxisFromGd [function] [call site] 00272
9 gdLinearPixelAdd [function] [call site] 00273
9 gdPixelToLinear [function] [call site] 00274
8 _gdContributionsFree [function] [call site] 00275
7 gdFree [function] [call site] 00276
7 gdLinearBufferCreate [function] [call site] 00277
7 _gdScalePassFromGd [function] [call site] 00278
7 gdFree [function] [call site] 00279
7 gdLinearBufferCreate [function] [call site] 00280
7 gdFree [function] [call site] 00281
7 _gdScalePassLinear [function] [call site] 00282
8 assert [function] [call site] 00283
8 _gdContributionsCalc [function] [call site] 00284
8 _gdContributionsInvert [function] [call site] 00285
8 _gdContributionsFree [function] [call site] 00286
8 _gdScaleVerticalLinearScatter [function] [call site] 00287
9 gdLinearBufferClear [function] [call site] 00288
9 gdLinearPixelAdd [function] [call site] 00289
8 _gdInvertedContributionsFree [function] [call site] 00290
8 _gdContributionsFree [function] [call site] 00291
8 _gdScaleOneAxisLinear [function] [call site] 00292
9 gdLinearPixelAdd [function] [call site] 00293
8 _gdContributionsFree [function] [call site] 00294
7 gdFree [function] [call site] 00295
7 gdFree [function] [call site] 00296
7 gdLinearBufferToImage [function] [call site] 00297
8 gdImageCreateTrueColor [function] [call site] 00298
8 gdImageSetInterpolationMethod [function] [call site] 00299
8 gdLinearPixelToTrueColor [function] [call site] 00300
9 gdTrueColorAlpha [function] [call site] 00301
9 linear_to_srgb_u8 [function] [call site] 00302
10 CLAMP [function] [call site] 00303
10 pow [function] [call site] 00304
10 uchar_clamp [function] [call site] 00305
9 linear_to_srgb_u8 [function] [call site] 00306
9 linear_to_srgb_u8 [function] [call site] 00307
9 CLAMP [function] [call site] 00308
9 uchar_clamp [function] [call site] 00309
9 gdTrueColorAlpha [function] [call site] 00310
7 gdFree [function] [call site] 00311
7 gdFree [function] [call site] 00312
6 gdImageScaleNearestNeighbour [function] [call site] 00313
7 MAX [function] [call site] 00314
7 MAX [function] [call site] 00315
7 gdImageCreateTrueColor [function] [call site] 00316
7 gdClampInt [function] [call site] 00317
7 gdImageSY [function] [call site] 00318
7 gdClampInt [function] [call site] 00319
7 gdImageSX [function] [call site] 00320
7 gdClampInt [function] [call site] 00321
7 gdImageSY [function] [call site] 00322
7 gdClampInt [function] [call site] 00323
7 gdImageSX [function] [call site] 00324
7 colorIndex2RGBA [function] [call site] 00325
6 gdImageScaleBilinear [function] [call site] 00326
7 gdImageScaleBilinearTC [function] [call site] 00327
8 MAX [function] [call site] 00328
8 MAX [function] [call site] 00329
8 gdImageSX [function] [call site] 00330
8 gdImageSY [function] [call site] 00331
8 gdImageCreateTrueColor [function] [call site] 00332
8 gdClampInt [function] [call site] 00333
8 gdImageSY [function] [call site] 00334
8 gdClampInt [function] [call site] 00335
8 gdImageSX [function] [call site] 00336
8 getPixelOverflowTC [function] [call site] 00337
9 gdImageBoundsSafeMacro [function] [call site] 00338
9 gdTrueColorAlpha [function] [call site] 00339
8 getPixelOverflowTC [function] [call site] 00340
8 getPixelOverflowTC [function] [call site] 00341
8 getPixelOverflowTC [function] [call site] 00342
8 gdAlphaWeightedColorAdd [function] [call site] 00343
9 gdAlphaToOpacity [function] [call site] 00344
9 gdTrueColorGetAlpha [function] [call site] 00345
9 gdTrueColorGetRed [function] [call site] 00346
9 gdTrueColorGetGreen [function] [call site] 00347
9 gdTrueColorGetBlue [function] [call site] 00348
8 gdAlphaWeightedColorAdd [function] [call site] 00349
8 gdAlphaWeightedColorAdd [function] [call site] 00350
8 gdAlphaWeightedColorAdd [function] [call site] 00351
8 gdAlphaWeightedColorResolve [function] [call site] 00352
9 gdTrueColorAlpha [function] [call site] 00353
9 uchar_clamp [function] [call site] 00354
9 uchar_clamp [function] [call site] 00355
9 uchar_clamp [function] [call site] 00356
9 CLAMP [function] [call site] 00357
9 uchar_clamp [function] [call site] 00358
9 gdTrueColorAlpha [function] [call site] 00359
7 gdImageScaleBilinearPalette [function] [call site] 00360
8 MAX [function] [call site] 00361
8 MAX [function] [call site] 00362
8 gdImageSX [function] [call site] 00363
8 gdImageSY [function] [call site] 00364
8 gdImageCreateTrueColor [function] [call site] 00365
8 gdTrueColorAlpha [function] [call site] 00366
8 gdClampInt [function] [call site] 00367
8 gdImageSY [function] [call site] 00368
8 gdClampInt [function] [call site] 00369
8 gdImageSX [function] [call site] 00370
8 getPixelOverflowPalette [function] [call site] 00371
9 gdImageBoundsSafeMacro [function] [call site] 00372
9 gdTrueColorAlpha [function] [call site] 00373
9 colorIndex2RGBA [function] [call site] 00374
8 getPixelOverflowPalette [function] [call site] 00375
8 getPixelOverflowPalette [function] [call site] 00376
8 getPixelOverflowPalette [function] [call site] 00377
8 gdAlphaWeightedColorAdd [function] [call site] 00378
8 gdAlphaWeightedColorAdd [function] [call site] 00379
8 gdAlphaWeightedColorAdd [function] [call site] 00380
8 gdAlphaWeightedColorAdd [function] [call site] 00381
8 gdAlphaWeightedColorResolve [function] [call site] 00382
6 gdImageScaleBicubicFixed [function] [call site] 00383
7 MAX [function] [call site] 00384
7 MAX [function] [call site] 00385
7 gdImageSX [function] [call site] 00386
7 gdImageSY [function] [call site] 00387
7 gdImagePaletteToTrueColor [function] [call site] 00388
7 gdImageCreateTrueColor [function] [call site] 00389
7 gdClampInt [function] [call site] 00390
7 gdClampInt [function] [call site] 00391
7 gdClampInt [function] [call site] 00392
7 filter_cubic_spline [function] [call site] 00393
8 ARG_NOT_USED [function] [call site] 00394
8 pow [function] [call site] 00395
7 gdClampInt [function] [call site] 00396
7 filter_cubic_spline [function] [call site] 00397
7 gdAlphaWeightedColorAdd [function] [call site] 00398
7 gdAlphaWeightedColorResolve [function] [call site] 00399
6 gdImageScaleTwoPass [function] [call site] 00400
7 gdImageScaleTwoPassWithMethod [function] [call site] 00401
5 gdImageDestroy [function] [call site] 00402
5 gd_error [function] [call site] 00403
5 jpeg_destroy_decompress [function] [call site] 00404
5 gdFree [function] [call site] 00405
5 gdImageDestroy [function] [call site] 00406
3 gdIOCtx*::gd_free [function] [call site] 00407
1 gdImageDestroy [function] [call site] 00408