High level conclusions

Fuzzer encoder_fuzzer is blocked:

The runtime code coverage of encoder_fuzzer covers 10.95% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer box_fuzzer is blocked:

The runtime code coverage of box_fuzzer covers 0.694% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer file_fuzzer is blocked:

The runtime code coverage of file_fuzzer covers 17.15% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer color_conversion_fuzzer is blocked:

The runtime code coverage of color_conversion_fuzzer covers 12.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzer api_fuzzer is blocked:

The runtime code coverage of api_fuzzer covers 0.0% of its statically reachable code. This means there is some place that blocks the fuzzer to continue exploring more code at run time.

Fuzzers reach 4.742% of cyclomatic complexity.

Fuzzers reach 3.380% of all functions.

Reachability and coverage overview

Functions statically reachable by fuzzers

195 / 5768

Cyclomatic complexity statically reachable by fuzzers

526 / 11092

Runtime code coverage of functions

88 / 5768

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

Fuzzer: api_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1686	100.%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	0	0.0%
All colors	1686	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
1685	0	EP	call site: 00000	HeifContext::read_from_memory

Runtime coverage analysis

Covered functions

86

Functions that are reachable but not covered

267

Reachable functions

267

Percentage of reachable functions covered

0.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzzing/api_fuzzer.cc	76
libheif/api/libheif/heif_context.cc	13
libheif/init.cc	21
libheif/color-conversion/colorconversion.cc	85
libheif/plugin_registry.cc	32
libheif/plugins_windows.cc	8
libheif/plugins_unix.cc	12
libheif/api/libheif/heif_library.cc	2
libheif/api/libheif/heif_security.cc	1
libheif/context.cc	164
libheif/image-items/image_item.cc	59
libheif/common_utils.h	3
libheif/common_utils.cc	7
libheif/image-items/overlay.h	1
libheif/image-items/image_item.h	7
tests/catch_amalgamated.cpp	10
libheif/codecs/avif_dec.cc	2
libheif/box.h	3
libheif/nclx.h	2
libheif/image/pixelimage.cc	15
libheif/image-items/jpeg2000.cc	7
libheif/codecs/decoder.cc	32
libheif/box.cc	19
libheif/codecs/hevc_boxes.cc	18
libheif/bitstream.cc	5
libheif/image/image_description.cc	1
tests/conversion.cc	6
libheif/sequences/track.cc	10
libheif/sequences/track_visual.cc	33
libheif/error.cc	13
libheif/error.h	3
libheif/api/libheif/heif_sequences.cc	18
libheif/context.h	9
libheif/api/libheif/heif_decoding.cc	11
libheif/codecs/decoder.h	1
libheif/security_limits.cc	3
tests/uncompressed_decode_rgb.cc	12
tests/test_utils.cc	4
libheif/api/libheif/heif_color.cc	23
libheif/color-conversion/colorconversion.h	1
libheif/plugins/decoder_libde265.cc	12
libheif/api/libheif/heif_image.cc	21
libheif/codecs/jpeg2000_boxes.h	1
libheif/image/pixelimage.h	5
tests/uncompressed_encode_multicomponent.cc	12
libheif/api/libheif/heif_uncompressed.cc	7
libheif/api/libheif/heif_entity_groups.cc	19
libheif/api/libheif/heif_items.cc	18
libheif/file.cc	7
libheif/api/libheif/heif_emscripten.h	2
tests/catch_amalgamated.hpp	1
libheif/api/libheif/heif_regions.cc	19
libheif/region.h	1
libheif/api/libheif/heif_aux_images.cc	21
libheif/api/libheif/heif_tiling.cc	13
libheif/api/libheif/heif_image_handle.cc	1
libheif/api/libheif/heif_properties.cc	4
libheif/nclx.cc	11

Fuzzer: color_conversion_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	700	92.5%
gold	[1:9]	0	0.0%
yellow	[10:29]	1	0.13%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	55	7.27%
All colors	756	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
257	9	LLVMFuzzerTestOneInput	call site: 00009	Box::read
195	343	heif_color_conversion_options_ext_copy	call site: 00343	ColorConversionPipeline::construct_pipeline
193	558	LLVMFuzzerTestOneInput	call site: 00558	HeifContext::decode_image
13	283	LLVMFuzzerTestOneInput	call site: 00283	Catch::ReporterRegistry::create
12	299	LLVMFuzzerTestOneInput	call site: 00299	Box::read
10	320	LLVMFuzzerTestOneInput	call site: 00320	Box::read
8	541	LLVMFuzzerTestOneInput	call site: 00541
6	2	LLVMFuzzerTestOneInput	call site: 00002	BitstreamRange::prepare_read
4	268	LLVMFuzzerTestOneInput	call site: 00268	Box::read
1	332	LLVMFuzzerTestOneInput	call site: 00332
1	341	LLVMFuzzerTestOneInput	call site: 00341	heif_color_conversion_options_ext_copy

Runtime coverage analysis

Covered functions

248

Functions that are reachable but not covered

44

Reachable functions

50

Percentage of reachable functions covered

12.0%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzzing/color_conversion_fuzzer.cc	31
libheif/bitstream.cc	8
libheif/bitstream.h	3
libheif/box.cc	121
libheif/common_utils.h	3
tests/catch_amalgamated.cpp	10
libheif/api/libheif/heif_encoding.cc	2
libheif/api/libheif/heif_color.cc	4
libheif/color-conversion/colorconversion.cc	85
libheif/image/pixelimage.cc	4
libheif/nclx.h	2
libheif/color-conversion/colorconversion.h	1
tests/conversion.cc	6
libheif/codecs/jpeg2000_boxes.cc	1
tests/uncompressed_decode_rgb.cc	12
tests/test_utils.cc	4
libheif/api/libheif/heif_context.cc	9
libheif/context.cc	26
libheif/error.cc	7
libheif/error.h	2
libheif/api/libheif/heif_decoding.cc	10
libheif/plugins/decoder_libde265.cc	12
libheif/api/libheif/heif_image.cc	20
libheif/codecs/jpeg2000_boxes.h	1
libheif/image/pixelimage.h	1

Fuzzer: file_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	1705	94.7%
gold	[1:9]	23	1.27%
yellow	[10:29]	18	1.00%
greenyellow	[30:49]	33	1.83%
lawngreen	50+	20	1.11%
All colors	1799	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
544	225	heif_context_read_from_memory	call site: 00225	HeifContext::read_from_memory
438	1318	heif_context_get_image_handle	call site: 01318	load_image
194	1035	heif_context_get_number_of_top_level_images	call site: 01035	verify_image_data
171	2	heif_init	call site: 00002	list_all_potential_plugins_in_directory
136	806	heif_nclx_color_profile_alloc	call site: 00806	ColorConversionPipeline::construct_pipeline
55	1252	heif_image_get_chroma_format	call site: 01252	check_image_size
54	946	heif_decode_image	call site: 00946	convert_libde265_image_to_heif_image
18	1230	heif_image_handle_get_list_of_metadata_block_IDs	call site: 01230	heif::ImageHandle::get_metadata
17	1781	LLVMFuzzerTestOneInput	call site: 01781	unregister_plugin
15	190	heif_main_brand	call site: 00190
15	790	heif_decode_image	call site: 00790	HeifContext::convert_to_output_colorspace
9	177	heif_fourcc_to_brand	call site: 00177

Runtime coverage analysis

Covered functions

1056

Functions that are reachable but not covered

140

Reachable functions

169

Percentage of reachable functions covered

17.16%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzzing/file_fuzzer.cc	40
libheif/init.cc	29
libheif/color-conversion/colorconversion.cc	85
libheif/plugin_registry.cc	33
libheif/plugins_windows.cc	8
libheif/plugins_unix.cc	12
libheif/api/libheif/heif_library.cc	2
libheif/api/libheif/heif_brands.cc	8
libheif/common_utils.h	4
libheif/api/libheif/heif_context.cc	17
libheif/api/libheif/heif_security.cc	1
libheif/context.cc	162
libheif/image-items/image_item.cc	53
libheif/common_utils.cc	1
libheif/image-items/overlay.h	1
libheif/image-items/image_item.h	4
tests/catch_amalgamated.cpp	12
libheif/codecs/avif_dec.cc	2
libheif/box.h	3
libheif/nclx.h	2
libheif/image/pixelimage.cc	15
libheif/image-items/jpeg2000.cc	7
libheif/codecs/decoder.cc	1
libheif/box.cc	11
libheif/codecs/hevc_boxes.cc	18
libheif/bitstream.cc	5
libheif/image/image_description.cc	1
tests/conversion.cc	6
libheif/sequences/track.cc	10
libheif/sequences/track_visual.cc	11
libheif/error.cc	7
libheif/error.h	2
tests/test_utils.cc	4
libheif/api/libheif/heif_decoding.cc	10
libheif/api/libheif/heif_color.cc	28
libheif/color-conversion/colorconversion.h	1
libheif/plugins/decoder_libde265.cc	12
libheif/api/libheif/heif_image.cc	22
libheif/codecs/jpeg2000_boxes.h	1
libheif/image/pixelimage.h	5
libheif/api/libheif/heif_image_handle.cc	4
libheif/api/libheif/heif_metadata.cc	10
libheif/api/libheif/heif_cxx.h	5
tests/uncompressed_decode_rgb.cc	12
tests/uncompressed_encode_multicomponent.cc	12
libheif/api/libheif/heif_uncompressed.cc	10
libheif/codecs/jpeg2000_boxes.cc	1
examples/heif_enc.cc	17
heifio/decoder_png.cc	53
heifio/exif.cc	7
libheif/mini.h	1
heifio/decoder_y4m.cc	13
heifio/decoder_raw.cc	16
heifio/decoder_jpeg.cc	39
libheif/api/libheif/heif_aux_images.cc	6

Fuzzer: box_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	263	95.6%
gold	[1:9]	0	0.0%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	12	4.36%
All colors	275	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
251	17	LLVMFuzzerTestOneInput	call site: 00017	BoxHeader::parse_header
12	2	LLVMFuzzerTestOneInput	call site: 00002	HeifContext::reset_to_empty_heif

Runtime coverage analysis

Covered functions

589

Functions that are reachable but not covered

143

Reachable functions

144

Percentage of reachable functions covered

0.69%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzzing/box_fuzzer.cc	11
libheif/context.cc	9
libheif/box.cc	121
libheif/common_utils.h	3

Fuzzer: encoder_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Call tree overview bitmap:

The distribution of callsites in terms of coloring is

Color	Runtime hitcount	Callsite count	Percentage
red	0	302	83.1%
gold	[1:9]	3	0.82%
yellow	[10:29]	0	0.0%
greenyellow	[30:49]	0	0.0%
lawngreen	50+	58	15.9%
All colors	363	100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked	Calltree index	Parent function	Callsite	Largest blocked function
171	4	heif_init	call site: 00004	list_all_potential_plugins_in_directory
35	208	heif_image_create	call site: 00208	heif_image_create
25	304	heif_context_encode_image	call site: 00304	get_encoder_or_skip_test
19	284	heif_context_encode_image	call site: 00284	ImageDescription::has_nclx_color_profile
14	245	heif_image_create	call site: 00245	Catch::ReporterRegistry::create
8	260	heif_image_add_plane	call site: 00260	Error::error_struct
7	272	heif_image_get_plane	call site: 00272	heif_image_get_plane
6	181	heif_get_encoder_descriptors	call site: 00181	load_plugins_if_not_initialized_yet
4	333	heif_context_encode_image	call site: 00333
4	345	LLVMFuzzerTestOneInput	call site: 00345	Error::error_struct
4	350	heif_context_write	call site: 00350	Error::error_struct
1	2	heif_context_alloc	call site: 00002	heif_init

Runtime coverage analysis

Covered functions

6553

Functions that are reachable but not covered

130

Reachable functions

146

Percentage of reachable functions covered

10.96%

NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.

Warning: The number of covered functions are larger than the number of reachable functions. This means that there are more functions covered at runtime than are extracted using static analysis. This is likely a result of the static analysis component failing to extract the right call graph or the coverage runtime being compiled with sanitizers in code that the static analysis has not analysed. This can happen if lto/gold is not used in all places that coverage instrumentation is used.

Function name	source code lines	source lines hit	percentage hit

Files reached

filename	functions hit
fuzzing/encoder_fuzzer.cc	22
libheif/api/libheif/heif_context.cc	10
libheif/init.cc	21
libheif/color-conversion/colorconversion.cc	36
libheif/plugin_registry.cc	33
libheif/plugins_windows.cc	8
libheif/plugins_unix.cc	12
libheif/api/libheif/heif_library.cc	2
libheif/api/libheif/heif_encoding.cc	24
libheif/api/libheif/heif_image.cc	14
tests/catch_amalgamated.cpp	8
libheif/plugins/decoder_libde265.cc	12
libheif/codecs/jpeg2000_boxes.h	1
libheif/error.cc	7
libheif/error.h	1
libheif/image/pixelimage.h	1
libheif/image/image_description.cc	1
tests/conversion.cc	6
libheif/nclx.h	2
tests/encode.cc	6
tests/test_utils.cc	2
libheif/context.cc	3

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name	Functions filename	Arg count	Args	Function depth	hitcount	instr count	bb count	cyclomatic complexity	Reachable functions	Incoming references	total cyclomatic complexity	Unreached complexity
do_encode_sequence	/src/libheif/examples/heif_enc.cc	4	['heif_context*', 'heif_encoder*', 'heif_encoding_options*', 'std::vector ']	9	0	92	22	26	590	0	781	737
HeifContext::read	/src/libheif/libheif/context.cc	1	['std::shared_ptr ']	6	0	7	2	1	185	1	234	230
Box_mini::write	/src/libheif/libheif/mini.cc	1	['StreamWriter']	4	0	288	71	109	38	1	230	230

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers

371 / 5768

Cyclomatic complexity statically reachable by fuzzers

1613 / 11092

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name	Functions filename	Args	Function call depth	Reached by Fuzzers	Runtime reached by Fuzzers	Combined reached by Fuzzers	Fuzzers runtime hit	Func lines hit %	I Count	BB Count	Cyclomatic complexity	Functions reached	Reached by functions	Accumulated cyclomatic complexity	Undiscovered complexity

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

fuzzing/api_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

fuzzing/color_conversion_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['LLVMFuzzerTestOneInput', 'heif_color_conversion_options_ext_copy']

fuzzing/file_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['heif_context_read_from_memory', 'heif_context_get_image_handle', 'heif_context_get_number_of_top_level_images', 'heif_init', 'heif_nclx_color_profile_alloc', 'heif_image_get_chroma_format', 'heif_decode_image', 'heif_image_handle_get_list_of_metadata_block_IDs', 'LLVMFuzzerTestOneInput', 'heif_main_brand']

fuzzing/box_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['LLVMFuzzerTestOneInput']

fuzzing/encoder_fuzzer.cc

Dictionary

Use this with the libFuzzer -dict=DICT.file flag

Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name

-focus_function=['heif_init', 'heif_image_create', 'heif_context_encode_image', 'heif_image_add_plane', 'heif_image_get_plane', 'heif_get_encoder_descriptors', 'LLVMFuzzerTestOneInput']

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name	Function total lines	Lines covered at runtime	percentage covered	Reached by fuzzers
Op_YCbCr444_to_YCbCr420_average ::state_after_conversion(ColorStateconst&,ColorStateconst&,heif_color_conversion_optionsconst&,heif_color_conversion_options_extconst&)const	31	17	54.83%
Op_YCbCr444_to_YCbCr422_average ::state_after_conversion(ColorStateconst&,ColorStateconst&,heif_color_conversion_optionsconst&,heif_color_conversion_options_extconst&)const	31	17	54.83%
get_Kr_Kb(unsignedshort,unsignedshort)	47	13	27.65%
heif_get_file_mime_type	48	26	54.16%	['file_fuzzer']
heif_decoding_options_copy	38	4	10.52%	['api_fuzzer', 'file_fuzzer']
Box_iloc::read_data(unsignedint,std::__1::shared_ptr const&,std::__1::shared_ptr const&,std::__1::vector >*,unsignedlong,unsignedlong,heif_security_limitsconst*)const	110	60	54.54%
Decoder::decode_sequence_frame_from_compressed_data(bool,heif_decoding_optionsconst&,unsignedlong,heif_security_limitsconst*)	66	35	53.03%
Decoder::get_decoded_frame(heif_decoding_optionsconst&,unsignedlong*,heif_security_limitsconst*)	34	16	47.05%
HeifContext::interpret_heif_file_images()	483	222	45.96%
HeifContext::find_first_coded_image_id(unsignedint)const	40	18	45.0%
Error::get_error_string(heif_suberror_code)	165	25	15.15%
HeifFile::parse_heif_images()	61	33	54.09%
HeifFile::get_uncompressed_item_data(unsignedint)const	61	21	34.42%
ImageItem::decode_image(heif_decoding_optionsconst&,bool,unsignedint,unsignedint,std::__1::set ,std::__1::allocator >)const	185	63	34.05%
ImageItem_Overlay::decode_overlay_image(heif_decoding_optionsconst&,std::__1::set ,std::__1::allocator >)const	78	26	33.33%
HeifPixelImage::get_visual_image_bits_per_pixel()const	33	10	30.30%
HeifPixelImage::apply_descriptions_from(ImageDescriptionconst&)	63	5	7.936%
dav1d_decode_next_image2(void*,heif_image**,unsignedlong*,heif_security_limitsconst*)	107	22	20.56%
dav1d_cdef_brow_8bpc	182	62	34.06%
dav1d_submit_frame	376	153	40.69%
decode_b	1155	414	35.84%
backup_lpf	40	13	32.5%
dav1d_parse_obus	409	126	30.80%
parse_seq_hdr	167	59	35.32%
parse_frame_hdr	599	180	30.05%
read_frame_size	52	25	48.07%
dav1d_recon_b_inter_8bpc	399	116	29.07%
dav1d_read_pal_plane_8bpc	90	49	54.44%
mc	99	41	41.41%
dav1d_refmvs_find	250	126	50.4%
dav1d_refmvs_init_frame	81	38	46.91%
insert_tasks	42	20	47.61%
check_tile	40	17	42.5%
Box_iloc::append_data(unsignedint,std::__1::vector >const&,unsignedchar)	50	21	42.0%
Box_iloc::write_mdat_after_iloc(StreamWriter&)	53	29	54.71%
Box_avcC::write(StreamWriter&)const	76	36	47.36%
fill_av1C_configuration_from_stream(Box_av1C::configuration*,unsignedcharconst*,int)	188	72	38.29%
unc_encoder::unc_encoder(std::__1::shared_ptr const&)	54	23	42.59%
unc_encoder::encode(std::__1::shared_ptr const&,heif_encoding_optionsconst&)const	57	31	54.38%
unc_encoder_component_interleave::encode_tile(std::__1::shared_ptr const&)const	53	24	45.28%
HeifContext::write(StreamWriter&)	82	33	40.24%
HeifContext::encode_image(std::__1::shared_ptr const&,heif_encoder*,heif_encoding_optionsconst&,heif_image_input_class)	64	35	54.68%
HeifFile::add_orientation_properties(unsignedint,heif_orientation)	48	11	22.91%
ImageItem_mask::encode(std::__1::shared_ptr const&,heif_encoder*,heif_encoding_optionsconst&,heif_image_input_class)	41	8	19.51%
ImageItem_uncompressed::populate_component_descriptions()	55	4	7.272%
ImageDescription::generate_property_boxes(bool)const	49	16	32.65%
HeifPixelImage::extend_padding_to_size(unsignedint,unsignedint,bool,heif_security_limitsconst*)	64	33	51.56%
aom_set_parameter_integer(void*,charconst*,int)	32	14	43.75%
aom_set_parameter_string(void*,charconst*,charconst*)	46	14	30.43%
svt_encode_sequence_frame(void*,heif_imageconst*,unsignedlong)	108	57	52.77%
vvenc_start_sequence_encoding_intern(void*,heif_imageconst*,heif_image_input_class,unsignedint,unsignedint,heif_sequence_encoding_optionsconst*,bool)	71	34	47.88%
x264_set_parameter_string(void*,charconst*,charconst*)	39	20	51.28%
x264_start_sequence_encoding_intern(void*,heif_imageconst*,heif_image_input_class,unsignedint,unsignedint,heif_sequence_encoding_optionsconst*,bool)	161	75	46.58%
x265_set_parameter_string(void*,charconst*,charconst*)	39	20	51.28%
x265_start_sequence_encoding_intern(void*,heif_imageconst*,heif_image_input_class,unsignedint,unsignedint,heif_sequence_encoding_optionsconst*,bool)	218	103	47.24%
aom_codec_get_cx_data	35	17	48.57%
reset	34	18	52.94%
av1_alloc_cdef_buffers	66	28	42.42%
update_ext_partition_context	35	17	48.57%
av1_get_filter_level	37	8	21.62%
get_flip_cfg	38	11	28.94%
get_entropy_context	83	34	40.96%
av1_setup_skip_mode_allowed	61	8	13.11%
scale_chroma_bsize	49	9	18.36%
build_intra_predictors	167	77	46.10%
av1_loop_restoration_corners_in_sb	37	6	16.21%
av1_loop_restoration_dealloc	40	19	47.5%
av1_calculate_tile_cols	46	25	54.34%
av1_quantize_b_facade	63	24	38.09%
av1_write_sequence_header_obu	62	21	33.87%
write_sequence_header	68	28	41.17%
write_color_config	52	28	53.84%
write_uncompressed_header_obu	229	68	29.69%
encode_restoration_mode	65	3	4.615%
write_modes_sb	91	44	48.35%
write_modes_b	443	124	27.99%
write_delta_q_params	38	4	10.52%
write_tokens_b	37	11	29.72%
av1_write_metadata_array	38	6	15.78%
av1_find_cnn_layer_output_size	37	17	45.94%
av1_cnn_predict_c	134	71	52.98%
av1_cnn_convolve	56	22	39.28%
av1_configure_buffer_updates	53	13	24.52%
av1_update_ref_frame_map	77	18	23.37%
av1_get_refresh_frame_flags	116	7	6.034%
av1_get_ref_frames	59	32	54.23%
choose_frame_source	44	17	38.63%
adjust_frame_rate	37	17	45.94%
denoise_and_encode	116	37	31.89%
init_ref_frame_space	52	10	19.23%
encode_frame_internal	289	128	44.29%
setup_prune_ref_frame_mask	46	6	13.04%
av1_get_q_for_deltaq_objective	85	22	25.88%
av1_set_cost_upd_freq	60	30	50.0%
av1_dropout_qcoeff_num	56	9	16.07%
av1_receive_raw_frame	52	18	34.61%
av1_apply_encoding_flags	64	29	45.31%
set_tile_info	46	19	41.30%
set_bitstream_level_tier	119	18	15.12%
encode_frame_to_data_rate	204	85	41.66%
encode_with_recode_loop_and_filter	69	31	44.92%
encode_without_recode	128	68	53.12%
cdef_restoration_frame	51	20	39.21%
av1_set_size_dependent_vars	56	17	30.35%
av1_update_film_grain_parameters	36	12	33.33%
av1_finalize_encoded_frame	32	14	43.75%
highbd_set_var_fns	295	4	1.355%
construct_multi_layer_gf_structure	99	49	49.49%
set_multi_layer_params	49	7	14.28%
av1_highbd_fwd_txfm	66	36	54.54%
intra_rd_variance_factor	64	30	46.87%
rd_pick_filter_intra_sby	68	20	29.41%
intra_mode_info_cost_uv	40	19	47.5%
intra_mode_info_cost_y	56	26	46.42%
setup_block_rdmult	31	12	38.70%
encode_sb	112	57	50.89%
update_stats	230	27	11.73%
prune_partitions_after_none	42	11	26.19%
prune_partitions_after_split	31	11	35.48%
av1_prune_partitions_before_search	128	62	48.43%
av1_get_second_pass_params	177	91	51.41%
find_next_key_frame	152	32	21.05%
identify_regions	75	3	4.0%
calculate_gf_length	181	20	11.04%
define_gf_group	97	21	21.64%
av1_pick_filter_level	106	38	35.84%
rc_pick_q_and_bounds	59	18	30.50%
get_intra_q_and_bounds	68	15	22.05%
av1_fill_mode_rates	203	108	53.20%
rd_pick_intrabc_mode_sb	155	61	39.35%
set_mode_eval_params	66	21	31.81%
store_winner_mode_stats	35	5	14.28%
av1_set_speed_features_qindex_dependent	108	38	35.18%
calculate_next_superres_scale	70	19	27.14%
validate_size_scales	49	4	8.163%
av1_write_second_pass_per_frame_info	38	5	13.15%
av1_pick_uniform_tx_size_type_yrd	51	24	47.05%
get_tx_mask	142	74	52.11%
recon_intra	36	15	41.66%
choose_largest_tx_size	88	20	22.72%
jpeg_finish_compress	41	12	29.26%
jinit_color_converter	219	32	14.61%
null_convert	50	22	44.0%
jinit_forward_dct	71	39	54.92%
start_pass_fdctmgr	94	29	30.85%
jinit_compress_master	79	31	39.24%
prepare_for_pass	59	26	44.06%
jpeg_default_colorspace	39	7	17.94%
jpeg_set_colorspace	65	25	38.46%
alloc_sarray	82	44	53.65%
realize_virt_arrays	91	17	18.68%
opj_dwt_encode_procedure	147	72	48.97%
opj_dwt_encode_and_deinterleave_v	155	84	54.19%
opj_copy_image_header	50	27	54.0%
opj_j2k_create_compress	35	19	54.28%
opj_j2k_setup_encoder	552	163	29.52%
opj_j2k_destroy	55	29	52.72%
opj_j2k_encode	87	39	44.82%
opj_j2k_tcp_destroy	56	15	26.78%
opj_j2k_write_sod	79	34	43.03%
opj_j2k_write_all_tile_parts	86	21	24.41%
opj_j2k_get_num_tp	40	20	50.0%
opj_j2k_setup_header_writing	76	33	43.42%
opj_j2k_write_qcd	44	24	54.54%
opj_create_compress	87	43	49.42%
opj_pi_create_encode	251	25	9.960%
opj_tcd_encode_tile	52	17	32.69%
opj_tcd_mct_encode	45	11	24.44%
opj_thread_pool_submit_job	48	7	14.58%
ojph::local::codeblock::encode(ojph::mem_elastic_allocator*)	31	16	51.61%
ojph::local::codestream::write_headers(ojph::outfile_base*,ojph::comment_exchangeconst*,unsignedint)	122	56	45.90%
ojph::local::param_qcd::check_validity(ojph::local::param_sizconst&,ojph::local::param_codconst&)	134	63	47.01%
ojph::local::param_nlt::check_validity(ojph::local::param_siz&)	73	3	4.109%
ojph::local::param_cod::check_validity(ojph::local::param_sizconst&)	51	18	35.29%
ojph::local::resolution::pre_alloc(ojph::local::codestream*,ojph::rectconst&,ojph::rectconst&,unsignedint,unsignedint)	163	87	53.37%
ojph::local::tile::push(ojph::line_buf*,unsignedint)	84	32	38.09%
ojph::local::tile::flush(ojph::outfile_base*)	164	40	24.39%
ojph::local::avx2_rev_convert(ojph::line_bufconst*,unsignedint,ojph::line_buf*,unsignedint,long,unsignedint)	58	17	29.31%
voidojph::local::local_avx2_irv_convert_to_float (ojph::line_bufconst*,unsignedint,ojph::line_buf*,unsignedint,bool,unsignedint)	41	22	53.65%
ojph::local::avx2_rev_vert_step32(ojph::local::lifting_stepconst*,ojph::line_bufconst*,ojph::line_bufconst*,ojph::line_bufconst*,unsignedint,bool)	120	42	35.0%
ojph::local::avx2_rev_horz_ana32(ojph::local::param_atkconst*,ojph::line_bufconst*,ojph::line_bufconst*,ojph::line_bufconst*,unsignedint,bool)	153	70	45.75%
svt_av1_default_coef_probs	56	30	53.57%
svt_aom_encode_sb	86	28	32.55%
update_b	140	54	38.57%
partition_mi_offset	75	10	13.33%
svt_av1_pick_filter_level	150	20	13.33%
me_based_dlf_skip	46	6	13.04%
finish_cdef_search	201	39	19.40%
lpd1_detector_post_pd0	75	6	8.0%
set_start_end_depth	92	24	26.08%
svt_aom_sig_deriv_multi_processes_allintra	119	59	49.57%
svt_aom_set_gm_controls	93	13	13.97%
svt_aom_md_pme_search_controls	75	8	10.66%
svt_aom_set_txt_controls	150	18	12.0%
svt_aom_set_chroma_controls	65	22	33.84%
svt_aom_set_wm_controls	50	8	16.0%
svt_aom_set_nic_controls	276	37	13.40%
svt_aom_set_nsq_geom_ctrls	51	24	47.05%
svt_aom_set_bipred3x3_controls	34	8	23.52%
svt_aom_set_dist_based_ref_pruning_controls	226	8	3.539%
set_block_based_depth_refinement_controls	173	11	6.358%
svt_aom_sig_deriv_enc_dec_common	93	43	46.23%
svt_aom_sig_deriv_enc_dec_light_pd0	136	60	44.11%
svt_aom_get_nsq_search_level_allintra	42	13	30.95%
svt_aom_get_obmc_level	35	18	51.42%
set_me_search_params	61	24	39.34%
svt_aom_set_prehme_ctrls	46	14	30.43%
svt_aom_set_me_hme_ref_prune_ctrls	70	14	20.0%
svt_aom_set_me_sr_adjustment_ctrls	67	15	22.38%
set_intrabc_level	110	8	7.272%
set_palette_level	83	8	9.638%
set_cdef_search_controls	291	17	5.841%
set_cdef_recon_controls	32	10	31.25%
svt_aom_set_wn_filter_ctrls	58	8	13.79%
svt_aom_set_sg_filter_ctrls	58	8	13.79%
set_lpd0_ctrls	102	26	25.49%
set_depth_removal_level_controls	278	6	2.158%
set_lpd1_ctrls	279	8	2.867%
set_intra_ctrls	168	46	27.38%
set_rate_est_ctrls	42	12	28.57%
set_cand_reduction_ctrls	130	23	17.69%
set_rdoq_controls	54	17	31.48%
md_subpel_me_controls	174	8	4.597%
set_cfl_ctrls	35	8	22.85%
set_nsq_search_ctrls	342	53	15.49%
set_tx_shortcut_ctrls	37	13	35.13%
set_inter_comp_controls	77	15	19.48%
set_obmc_controls	65	8	12.30%
set_txs_controls	70	22	31.42%
md_sq_motion_search_controls	106	8	7.547%
md_subpel_pme_controls	66	8	12.12%
mfmv_controls	44	12	27.27%
svt_aom_set_dlf_controls	87	15	17.24%
svt_aom_write_modes_sb	118	54	45.76%
write_sequence_header_obu	40	18	45.0%
av1_write_coeffs_txb_1d	166	75	45.18%
svt_aom_quantize_inv_quantize_light	86	33	38.37%
svt_aom_set_tpl_group	90	33	36.66%
svt_aom_initial_rate_control_kernel_iter	106	44	41.50%
process_lad_queue	88	20	22.72%
svt_aom_scale_chroma_bsize	53	8	15.09%
svt_aom_inv_txfm_type_to_func	34	14	41.17%
highbd_inv_txfm_add	64	20	31.25%
svt_aom_mode_decision_configuration_kernel_iter	156	81	51.92%
svt_av1_qm_init	60	28	46.66%
me_based_cdef_skip	44	4	9.090%
svt_aom_estimate_syntax_rate	228	101	44.29%
svt_aom_motion_estimation_kernel_iter	156	55	35.25%
generate_md_stage_0_cand	78	39	50.0%
svt_aom_product_full_mode_decision	180	85	47.22%
svt_aom_packetization_kernel_iter	341	129	37.82%
encode_tu	40	21	52.5%
me_ctor	57	28	49.12%
svt_av1_setup_skip_mode_allowed	50	12	24.0%
store_gf_group	37	19	51.35%
check_window_availability	38	17	44.73%
update_pred_struct_and_pic_type	38	19	50.0%
perform_sc_detection	40	13	32.5%
av1_generate_rps_info	1129	20	1.771%
set_ref_list_counts	60	6	10.0%
set_all_ref_frame_type	40	9	22.5%
assign_and_release_pa_refs	66	29	43.93%
mctf_frame	48	9	18.75%
svt_aom_pad_picture_to_multiple_of_min_blk_size_dimensions	57	30	52.63%
svt_aom_pad_input_pictures	55	29	52.72%
svt_aom_picture_manager_kernel_iter	384	157	40.88%
svt_aom_copy_neighbour_arrays	217	69	31.79%
fast_loop_core	63	32	50.79%
update_tx_cand_bf	65	28	43.07%
md_encode_block_light_pd0	86	47	54.65%
md_encode_block	279	144	51.61%
get_enable_use_best_me	31	5	16.12%
init_tx_cand_bf	93	9	9.677%
tx_reset_neighbor_arrays	84	36	42.85%
tx_type_search	420	214	50.95%
copy_recon_md	165	45	27.27%
mode_decision_update_neighbor_arrays	236	77	32.62%
svt_av1_generate_b64_me_qindex_map	34	13	38.23%
svt_av1_rc_calc_qindex_crf_cqp	95	39	41.05%
cqp_qindex_calc	35	6	17.14%
rc_handle_superres	45	7	15.55%
rc_process_packetization_feedback	41	20	48.78%
svt_av1_cost_coeffs_txb	96	44	45.83%
svt_aom_intra_fast_cost	102	47	46.07%
svt_aom_full_cost	94	35	37.23%
av1_cost_coeffs_txb_loop_cost_eob	74	7	9.459%
svt_aom_rest_context_ctor	57	25	43.85%
svt_aom_rest_kernel_iter	185	63	34.05%
svt_av1_loop_restoration_corners_in_sb	41	9	21.95%
copy_sequence_control_set	58	16	27.58%
svt_aom_tpl_disp_kernel_iter	85	6	7.058%
logger_create	37	20	54.05%
svt_create_thread	56	28	50.0%
check_set_prio	32	15	46.87%
svt_get_empty_object	37	17	45.94%
svt_aom_fwd_txfm_type_to_func	34	14	41.17%
svt_aom_estimate_transform	60	29	48.33%
av1_estimate_transform_default	111	34	30.63%
svt_aom_build_blk_geom	77	17	22.07%
tf_controls	622	12	1.929%
set_multi_pass_params	67	28	41.79%
set_qp_based_th_scaling_ctrls_all_intra	47	21	44.68%
set_param_based_on_input	368	163	44.29%
set_mrp_ctrl	194	23	11.85%
validate_on_the_fly_settings	120	5	4.166%
copy_frame_buffer	55	26	47.27%
svt_av1_verify_settings	743	166	22.34%
vvenc::AdaptiveLoopFilter::isCrossedByVirtualBoundaries(vvenc::CodingStructureconst&,int,int,int,int,bool&,bool&,bool&,bool&,int&,int&,int*,int*,int&)	79	37	46.83%
vvenc::AreaBuf ::reconstruct(vvenc::AreaBuf const&,vvenc::AreaBuf const&,vvenc::ClpRngconst&)	42	20	47.61%
vvenc::AreaBuf ::linearTransform(int,unsignedint,int,bool,vvenc::ClpRngconst&)	46	15	32.60%
vvenc::CodingStructure::traverseCUs(vvenc::UnitAreaconst&,vvenc::ChannelType)	40	10	25.0%
vvenc::InterPredInterpolation::xPredInterBlk(vvenc::ComponentID,vvenc::CodingUnitconst&,vvenc::Pictureconst*,vvenc::Mvconst&,vvenc::UnitBuf &,bool,vvenc::ClpRngconst&,bool,bool,vvenc::RefPicList,unsignedint,unsignedint,bool,shortconst*,int)	116	41	35.34%
vvenc::InterpolationFilter::filterHor(vvenc::ComponentID,shortconst*,int,short*,int,int,int,int,bool,vvencChromaFormat,vvenc::ClpRngconst&,bool,int,int)	43	7	16.27%
vvenc::LoopFilter::calcFilterStrengths(vvenc::CodingUnitconst&,bool)	136	70	51.47%
voidvvenc::xGetBoundaryStrengthSingle<(vvenc::DeblockEdgeDir)0>(vvenc::LoopFilterParam&,vvenc::CodingUnitconst&,vvenc::Positionconst&,vvenc::CodingUnitconst&)	173	75	43.35%
voidvvenc::xGetBoundaryStrengthSingle<(vvenc::DeblockEdgeDir)1>(vvenc::LoopFilterParam&,vvenc::CodingUnitconst&,vvenc::Positionconst&,vvenc::CodingUnitconst&)	174	76	43.67%
vvenc::QuantRDOQ2::quant(vvenc::TransformUnit&,vvenc::ComponentID,vvenc::AreaBuf const&,int&,vvenc::QpParamconst&,vvenc::Ctxconst&)	48	6	12.5%
vvenc::RdCost::setDistParam(vvenc::DistParam&,vvenc::AreaBuf const&,shortconst*,int,int,vvenc::ComponentID,int,int)	34	18	52.94%
vvenc::offsetBlock_core(int,vvenc::ClpRngconst&,int,int*,int,shortconst*,short*,long,long,int,int,unsignedchar,std::__1::vector >&,std::__1::vector >&)	175	24	13.71%
vvenc::SampleAdaptiveOffset::deriveLoopFilterBoundaryAvailibility(vvenc::CodingStructure&,vvenc::Positionconst&,unsignedchar&)const	72	31	43.05%
vvenc::Slice::setSMVDParam()	68	26	38.23%
vvenc::Slice::constructRefPicList(std::__1::list >const&,bool,bool)	52	8	15.38%
vvenc::Slice::setDecodingRefreshMarking(int&,bool&,std::__1::list >const&)	65	19	29.23%
vvenc::Slice::checkLeadingPictureRestrictions(std::__1::list >const&)const	83	14	16.86%
vvenc::Slice::applyReferencePictureListBasedMarking(std::__1::list >const&,vvenc::ReferencePictureListconst*,vvenc::ReferencePictureListconst*,int,vvenc::PPSconst&,bool)const	83	15	18.07%
vvenc::Slice::isRplPicMissing(std::__1::list >const&,vvenc::RefPicList,int&,int)const	83	2	2.409%
vvenc::TrQuant::xSetTrTypes(vvenc::TransformUnitconst&,vvenc::ComponentID,int,int,int&,int&)	60	21	35.0%
std::__1::pair vvenc::fwdTransformCbCr<0>(vvenc::AreaBuf const&,vvenc::AreaBuf const&,vvenc::AreaBuf &,vvenc::AreaBuf &)	51	27	52.94%
std::__1::pair vvenc::fwdTransformCbCr<1>(vvenc::AreaBuf const&,vvenc::AreaBuf const&,vvenc::AreaBuf &,vvenc::AreaBuf &)	51	21	41.17%
std::__1::pair vvenc::fwdTransformCbCr<2>(vvenc::AreaBuf const&,vvenc::AreaBuf const&,vvenc::AreaBuf &,vvenc::AreaBuf &)	51	23	45.09%
std::__1::pair vvenc::fwdTransformCbCr<3>(vvenc::AreaBuf const&,vvenc::AreaBuf const&,vvenc::AreaBuf &,vvenc::AreaBuf &)	51	25	49.01%
vvenc::Partitioner::setMaxMinDepth(unsignedint&,unsignedint&,vvenc::CodingStructureconst&,int,bool)const	116	57	49.13%
vvenc::Partitioner::canSplit(vvenc::PartSplit,vvenc::CodingStructureconst&)	48	23	47.91%
vvenc::CU::addMergeHMVPCand(vvenc::CodingStructureconst&,vvenc::MergeCtx&,intconst&,unsignedint,int&,bool,vvenc::MotionInfoconst&,bool,vvenc::MotionInfoconst&,bool,bool)	36	12	33.33%
vvenc::CU::spanMotionInfo(vvenc::CodingUnit&,vvenc::AffineMergeCtxconst*)	45	22	48.88%
vvenc::CU::isBcwIdxCoded(vvenc::CodingUnitconst&)	34	6	17.64%
unsignedintvvenc::updateCandList (unsignedchar,double,vvenc::static_vector &,vvenc::static_vector &,unsignedlong,int*)	41	19	46.34%
vvenc::calcTemporalVisAct(shortconst*,int,int,int,shortconst*,int,shortconst*,int,unsignedint,unsignedint,bool,vvenc::VisAct&)	48	13	27.08%
vvenc::applyDeltaQpPeakSmoothing(vvenc::Picture*,vvenc::VVEncCfgconst*,unsignedint,unsignedint)	46	7	15.21%
vvenc::CABACWriter::coding_tree_unit(vvenc::CodingStructure&,vvenc::UnitAreaconst&,int(&)[2],unsignedint,bool,bool)	63	32	50.79%
vvenc::CABACWriter::cu_skip_flag(vvenc::CodingUnitconst&)	35	11	31.42%
vvenc::CABACWriter::pred_mode(vvenc::CodingUnitconst&)	63	23	36.50%
vvenc::CABACWriter::sbt_mode(vvenc::CodingUnitconst&)	44	6	13.63%
vvenc::CABACWriter::prediction_unit(vvenc::CodingUnitconst&)	92	19	20.65%
vvenc::CABACWriter::ref_idx(vvenc::CodingUnitconst&,vvenc::RefPicList)	43	8	18.60%
vvenc::AlfCovariance::optimizeFilter(vvenc::AlfFilterShapeconst&,int*,float*,bool)const	113	15	13.27%
vvenc::EncAdaptiveLoopFilter::xSetupCcAlfAPS(vvenc::CodingStructure&)	76	12	15.78%
vvenc::EncAdaptiveLoopFilter::xGetStatisticsCTU(vvenc::Picture&,vvenc::CodingStructure&,vvenc::UnitBuf &,int,int,int,vvenc::PelStorage&)	100	38	38.0%
vvenc::EncAdaptiveLoopFilter::reconstructCTU(vvenc::Picture&,vvenc::CodingStructure&,vvenc::UnitBuf const&,int,vvenc::PelStorage&)	128	7	5.468%
vvenc::EncAdaptiveLoopFilter::getCostFilterCoeffForce0(vvenc::AlfFilterShape&,int**,int,bool*)	37	16	43.24%
vvenc::EncAdaptiveLoopFilter::alfEncoderCtb(vvenc::CodingStructure&,vvenc::AlfParam&,double,int,int)	506	145	28.65%
vvenc::EncAdaptiveLoopFilter::initCtuAlternativeChroma(unsignedchar**)	34	13	38.23%
vvenc::EncAdaptiveLoopFilter::deriveCcAlfFilter(vvenc::Picture&,vvenc::CodingStructure&,int)	31	16	51.61%
vvenc::EncAdaptiveLoopFilter::deriveCcAlfFilter(vvenc::CodingStructure&,vvenc::ComponentID,vvenc::UnitBuf const&,vvenc::UnitBuf const&,int)	245	6	2.448%
vvenc::EncAdaptiveLoopFilter::deriveStatsForCcAlfFilteringCTU(vvenc::CodingStructure&,int,int,vvenc::PelStorage&)	65	25	38.46%
vvenc::EncAdaptiveLoopFilter::applyCcAlfFilterCTU(vvenc::CodingStructure&,vvenc::ComponentID,int,vvenc::PelStorage&)	77	3	3.896%
vvenc::VVEncCfg::xInitCfgMembers()	54	28	51.85%
vvenc::EncCu::xCheckModeSplitInternal(vvenc::CodingStructure*&,vvenc::CodingStructure*&,vvenc::Partitioner&,vvenc::EncTestModeconst&,vvenc::ModeType,bool&)	276	118	42.75%
vvenc::EncCu::xCheckRDCostIBCModeMerge2Nx2N(vvenc::CodingStructure*&,vvenc::CodingStructure*&,vvenc::Partitioner&,vvenc::EncTestModeconst&)	172	90	52.32%
vvenc::EncCu::xGetDistortionDb(vvenc::CodingStructure&,vvenc::AreaBuf &,vvenc::AreaBuf &,vvenc::CompAreaconst&,bool)	49	9	18.36%
vvenc::initPicAuxQPOffsets(vvenc::Sliceconst*,bool)	32	9	28.12%
vvenc::EncGOP::xSyncAlfAps(vvenc::Picture&)	59	7	11.86%
vvenc::EncGOP::xEncodePicture(vvenc::Picture*,vvenc::EncPicture*)	71	37	52.11%
vvenc::EncGOP::xOutputRecYuv(std::__1::list >const&)	36	11	30.55%
vvenc::EncGOP::xGetNalUnitType(vvenc::GOPEntryconst*)const	38	13	34.21%
vvenc::EncGOP::xSetupPicAps(vvenc::Picture*)	42	10	23.80%
vvenc::EncGOP::xGetProcessingLists(std::__1::list >&,std::__1::list >&,bool)	70	18	25.71%
vvenc::EncGOP::xInitGopQpCascade(vvenc::Picture&,std::__1::__list_const_iterator ,std::__1::list >const&)	151	57	37.74%
vvenc::EncGOP::xInitLMCS(vvenc::Picture&)	114	11	9.649%
vvenc::EncGOP::xWriteParameterSets(vvenc::Picture&,vvenc::AccessUnitList&,vvenc::HLSWriter&)	56	19	33.92%
vvenc::EncGOP::xWriteLeadingSEIs(vvenc::Pictureconst&,vvenc::AccessUnitList&)	59	15	25.42%
vvenc::EncGOP::xCabacZeroWordPadding(vvenc::Pictureconst&,vvenc::Sliceconst*,unsignedint,unsignedint,std::__1::basic_ostringstream ,std::__1::allocator >&)	35	12	34.28%
vvenc::EncGOP::xAddPSNRStats(vvenc::Pictureconst*,vvenc::UnitBuf ,vvenc::AccessUnitList&,bool,double*,bool)	156	82	52.56%
vvenc::EncGOP::xPrintPictureInfo(vvenc::Pictureconst&,vvenc::AccessUnitList&,std::__1::basic_string ,std::__1::allocator >const&,bool,bool)	38	15	39.47%
vvenc::BestEncInfoCache::create(bool,vvencChromaFormat,int)	97	3	3.092%
vvenc::EncModeCtrl::tryMode(vvenc::EncTestModeconst&,vvenc::CodingStructureconst&,vvenc::Partitioner&)	130	53	40.76%
vvenc::EncReshape::init(vvenc::VVEncCfgconst&)	53	4	7.547%
vvenc::EncSampleAdaptiveOffset::decidePicParams(vvenc::CodingStructureconst&,double(*)[7],bool*,double,double,vvencChromaFormatconst&)	42	15	35.71%
vvenc::EncSlice::xGetQPForPicture(vvenc::Sliceconst*)	38	17	44.73%
boolvvenc::EncSlice::xProcessCtuTask (int,void*)	368	149	40.48%
vvenc::GOPCfg::getNextGopEntry(vvenc::GOPEntry&)	95	21	22.10%
vvenc::InterSearch::xEstimateInterResidualQT(vvenc::CodingStructure&,vvenc::Partitioner&,unsignedlong*)	514	226	43.96%
vvenc::InterSearch::encodeResAndCalcRdInterCU(vvenc::CodingStructure&,vvenc::Partitioner&,bool)	188	86	45.74%
vvenc::InterSearch::xIBCSearchMVChromaRefine(vvenc::CodingUnit&,int,int,int,int,unsignedlong*,vvenc::Mv*)	69	6	8.695%
vvenc::IntraSearch::xSpeedUpIntra(double,int&,int&,vvenc::CodingUnit&)	44	11	25.0%
vvenc::HLSWriter::codePPS(vvenc::PPSconst*,vvenc::SPSconst*)	158	52	32.91%
vvenc::HLSWriter::codeOlsHrdParameters(vvenc::GeneralHrdParamsconst*,vvenc::OlsHrdParamsconst*,unsignedint,unsignedint)	36	16	44.44%
vvenc::HLSWriter::codePictureHeader(vvenc::PicHeaderconst*,bool)	329	62	18.84%
vvenc::HLSWriter::codeSliceHeader(vvenc::Sliceconst*)	329	78	23.70%
vvenc::HLSWriter::codeConstraintInfo(vvenc::ConstraintInfoconst*)	77	8	10.38%
vvenc_init_config_parameter	948	446	47.04%
vvenc_init_preset	508	138	27.16%
initMultithreading(vvenc_config*)	37	15	40.54%
vvenc::VVEncImpl::encode(vvencYUVBuffer*,vvencAccessUnit*,bool*)	142	67	47.18%
x264_param_apply_profile	63	20	31.74%
x264_param_parse	36	16	44.44%
p->cpu=X264_ISDIGIT(value[0])?(uint32_t)atoi(value)	493	146	29.61%
param_apply_preset	118	20	16.94%
param_apply_tune	93	18	19.35%
bs_write	31	14	45.16%
x264_8_frame_deblock_row	205	105	51.21%
macroblock_cache_load_neighbours_deblock	34	15	44.11%
x264_8_frame_copy_picture	105	44	41.90%
x264_8_macroblock_slice_init	66	27	40.90%
x264_8_macroblock_deblock_strength	156	10	6.410%
x264_8_macroblock_cache_save	183	67	36.61%
macroblock_cache_load	424	119	28.06%
macroblock_load_pic_pointers	88	34	38.63%
macroblock_backup_intra	36	12	33.33%
x264_8_frame_filter	69	22	31.88%
x264_8_macroblock_analyse	709	38	5.359%
mb_analyse_init	150	21	14.00%
analyse_update_cache	141	17	12.05%
x264_encoder_open_165	46	21	45.65%
macroblock_write_cabac_internal	142	64	45.07%
x264_8_encoder_encode	465	193	41.50%
x264_8_encoder_close	347	181	52.16%
validate_parameters	818	333	40.70%
chroma_dsp_init	36	17	47.22%
reference_build_list	100	6	6.0%
slice_init	58	24	41.37%
weighted_pred_init	69	6	8.695%
slices_write	51	21	41.17%
slice_write	317	116	36.59%
slice_header_write	135	43	31.85%
fdec_filter_row	98	39	39.79%
encoder_frame_end	204	89	43.62%
mb_encode_chroma_internal	197	75	38.07%
macroblock_encode_internal	311	72	23.15%
x264_8_adaptive_quant_frame	99	52	52.52%
x264_8_ratecontrol_init_reconfigurable	89	12	13.48%
x264_8_ratecontrol_new	410	91	22.19%
x264_8_ratecontrol_delete	49	14	28.57%
x264_8_ratecontrol_start	87	34	39.08%
x264_8_ratecontrol_mb	122	11	9.016%
x264_8_ratecontrol_end	141	31	21.98%
ac_energy_mb	36	14	38.88%
parse_zones	63	6	9.523%
update_vbv	48	11	22.91%
rate_estimate_qscale	211	66	31.27%
vbv_pass1	105	5	4.761%
x264_8_sps_init_scaling_list	35	9	25.71%
x264_8_sps_write	150	79	52.66%
x264_8_pps_write	61	22	36.06%
x264_8_slicetype_analyse	225	21	9.333%
x264_8_slicetype_decide	192	90	46.87%
x264_8_rc_analyse_slice	51	22	43.13%
slicetype_frame_cost	131	71	54.19%
slicetype_mb_cost	239	82	34.30%
macroblock_tree	82	25	30.48%
x265::general_log(x265_paramconst*,charconst*,int,charconst*,...)	35	3	8.571%
x265::cpu_detect(bool)	159	9	5.660%
x265::Deblock::setEdgefilterPU(x265::CUDataconst*,unsignedint,int,unsignedchar*,unsignedint)	37	10	27.02%
x265::Deblock::getBoundaryStrength(x265::CUDataconst*,int,unsignedint,unsignedcharconst*)	46	5	10.86%
x265::Frame::create(x265_param*,float*)	93	27	29.03%
x265::Frame::destroy()	123	48	39.02%
x265::Lowres::create(x265_param*,x265::PicYuv*,unsignedint)	153	71	46.40%
x265::Lowres::destroy(x265_param*)	77	36	46.75%
x265_param_default_preset	249	44	17.67%
x265_param_parse	544	148	27.20%
x265::x265_print_params(x265_param*)	121	3	2.479%
x265::parseLambdaFile(x265_param*)	56	3	5.357%
x265::PicYuv::copyFromPicture(x265_pictureconst&,x265_paramconst&,int,int,bool)	185	99	53.51%
x265::x265_report_simd(x265_param*)	33	3	9.090%
unsignedintx265::Quant::rdoQuant<5u>(x265::CUDataconst&,short*,x265::TextType,unsignedint,bool)	583	309	53.00%
x265::Slice::setRefPicList(x265::PicList&,int)	84	9	10.71%
x265::ThreadPool::allocThreadPools(x265_param*,int&,bool)	171	78	45.61%
x265::Analysis::compressCTU(x265::CUData&,x265::Frame&,x265::CUGeomconst&,x265::Entropyconst&)	139	28	20.14%
x265::Analysis::calculateQpforCuSize(x265::CUDataconst&,x265::CUGeomconst&,int,double)	75	37	49.33%
x265_encoder_open_216	87	41	47.12%
x265_api_get_216	43	4	9.302%
x265::DPB::recycleUnreferenced()	64	11	17.18%
x265::DPB::prepareEncode(x265::Frame*)	171	47	27.48%
x265::DPB::decodingRefreshMarking(int,NalUnitType,int)	34	12	35.29%
x265::DPB::applyReferencePictureSet(x265::RPS*,int,int,bool,int)	33	9	27.27%
x265::Encoder::create()	362	103	28.45%
x265::Encoder::destroy()	107	47	43.92%
x265::Encoder::copyUserSEIMessages(x265::Frame*,x265_pictureconst*)	56	13	23.21%
x265::Encoder::encode(x265_pictureconst*,x265_picture*)	904	264	29.20%
x265::Encoder::printSummary()	60	3	5.0%
x265::Encoder::finishFrameStats(x265::Frame*,x265::FrameEncoder*,x265_frame_stats*,int,int)	178	63	35.39%
x265::Encoder::getStreamHeaders(x265::NALList&,x265::Entropy&,x265::Bitstream&)	78	27	34.61%
x265::Encoder::configure(x265_param*)	706	196	27.76%
x265::Entropy::codeProfileTier(x265::ProfileTierLevelconst&,int,int)	62	25	40.32%
x265::Entropy::codeSliceHeader(x265::Sliceconst&,x265::FrameData&,unsignedint,unsignedint,int,int)	101	42	41.58%
x265::Entropy::codeSaoOffset(x265::SaoCtuParamconst&,int)	31	9	29.03%
x265::Entropy::codePartSize(x265::CUDataconst&,unsignedint,unsignedint)	44	12	27.27%
x265::FrameEncoder::compressFrame(int)	698	208	29.79%
x265::FrameEncoder::initDecodedPictureHashSEI(int,int,int,int)	59	11	18.64%
x265::FrameEncoder::processRowEncoder(int,x265::ThreadLocalData&,int)	462	166	35.93%
x265::FrameEncoder::collectCTUStatistics(x265::CUDataconst&,x265::FrameStats*)	78	11	14.10%
x265::FrameFilter::processPostRow(int,int)	54	19	35.18%
x265::determineLevel(x265_paramconst&,x265::VPS&)	185	82	44.32%
x265::enforceLevel(x265_param&,x265::VPS&)	130	10	7.692%
x265_param_apply_profile	54	20	37.03%
x265::RateControl::init(x265::SPSconst&)	359	41	11.42%
x265::RateControl::rateControlStart(x265::Frame*,x265::RateControlEntry*,x265::Encoder*)	279	83	29.74%
x265::RateControl::rateEstimateQscale(x265::Frame*,x265::RateControlEntry*)	432	75	17.36%
x265::RateControl::clipQscale(x265::Frame*,x265::RateControlEntry*,double)	139	8	5.755%
x265::RateControl::rateControlEnd(x265::Frame*,long,x265::RateControlEntry*,int*)	160	82	51.24%
x265::RateControl::destroy()	53	14	26.41%
x265::SAO::generateChromaOffsets(x265::SaoCtuParam**,int,int)	85	43	50.58%
x265::LookaheadTLD::calcAdaptiveQuantFrame(x265::Frame*,x265_param*)	232	64	27.58%
x265::Lookahead::getEstimatedPictureCost(x265::Frame*)	100	26	26.0%
x265::Lookahead::slicetypeDecide()	617	139	22.52%
x265::CostEstimateGroup::estimateFrameCost(x265::LookaheadTLD&,int,int,int,bool)	71	9	12.67%

New fuzzers

The below fuzzers are templates and suggestions for how to target the set of optimal functions above

heif_enc.cc

Target file: /src/libheif/examples/heif_enc.cc
Target functions: do_encode_sequence

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target do_encode_sequence */
  UNKNOWN_TYPE unknown_0;
  UNKNOWN_TYPE unknown_1;
  UNKNOWN_TYPE unknown_2;
  UNKNOWN_TYPE unknown_3;
  do_encode_sequence(unknown_0, unknown_1, unknown_2, unknown_3);

  af_safe_gb_cleanup();
}

context.cc

Target file: /src/libheif/libheif/context.cc
Target functions: HeifContext::read

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target HeifContext::read */
  UNKNOWN_TYPE unknown_4;
  HeifContext::read(unknown_4);

  af_safe_gb_cleanup();
}

mini.cc

Target file: /src/libheif/libheif/mini.cc
Target functions: Box_mini::write

#include "ada_fuzz_header.h"

int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
  af_safe_gb_init(data, size);

  /* target Box_mini::write */
  UNKNOWN_TYPE unknown_5;
  Box_mini::write(unknown_5);

  af_safe_gb_cleanup();
}

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file	Reached by	Covered by
/src/libheif/libheif/plugins/encoder_jpeg.cc	[]	[]
/src/libheif/libheif/image-items/jpeg.h	[]	[]
/src/libheif/examples/vmt.cc	[]	[]
/src/libheif/libheif/plugin_registry.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_encoder_rgb_bytealign_pixel_interleave.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_mixed_interleave.h	[]	[]
/src/libheif/examples/sdl.hh	[]	[]
/src/libheif/libheif/codecs/avif_boxes.cc	[]	[]
/src/libheif/libheif/codecs/encoder.h	[]	[]
/src/libheif/libheif/codecs/hevc_dec.cc	[]	[]
/src/libheif/heifio/encoder_y4m.h	[]	[]
/src/libheif/libheif/color-conversion/chroma_sampling.cc	[]	[]
/src/libheif/libheif/codecs/avif_dec.h	[]	[]
/src/libheif/examples/benchmark.cc	[]	[]
/src/libheif/libheif/codecs/avc_enc.cc	[]	[]
/src/libheif/tests/conversion.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/codecs/jpeg_enc.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_plugin.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_codec.cc	[]	[]
/src/libheif/libheif/compression_brotli.cc	[]	[]
/src/libheif/libheif/sequences/seq_boxes.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_block_component_interleave.cc	[]	[]
/src/libheif/libheif/common_utils.h	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'box_fuzzer']	[]
/src/libheif/libheif/plugins/encoder_vvenc.cc	[]	[]
/src/libheif/libheif/image-items/unc_image.h	[]	[]
/src/libheif/libheif/plugins/encoder_uvg266.cc	[]	[]
/src/libheif/libheif/error.h	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/codecs/jpeg2000_enc.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_enc.cc	[]	[]
/src/libheif/tests/catch_amalgamated.hpp	['api_fuzzer']	[]
/src/libheif/tests/uncompressed_decode_ycbcr.cc	[]	[]
/src/libheif/heifio/encoder_y4m.cc	[]	[]
/src/libheif/libheif/image-items/iden.cc	[]	[]
/src/libheif/libheif/compression.cc	[]	[]
/src/libheif/fuzzing/color_conversion_fuzzer.cc	['color_conversion_fuzzer']	['color_conversion_fuzzer']
/src/libheif/libheif/init.cc	['api_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	['file_fuzzer', 'encoder_fuzzer']
/src/libheif/libheif/logging.cc	[]	[]
/src/libheif/libheif/bitstream.h	['color_conversion_fuzzer']	['color_conversion_fuzzer']
/src/libheif/libheif/api/libheif/heif_cxx.h	['file_fuzzer']	[]
/src/libheif/libheif/image-items/grid.h	[]	[]
/src/libheif/examples/heif_thumbnailer.cc	[]	[]
/src/libheif/libheif/plugins_windows.h	[]	[]
/src/libheif/fuzzing/box_fuzzer.cc	['box_fuzzer']	['box_fuzzer']
/src/libheif/libheif/codecs/jpeg2000_boxes.h	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/codecs/jpeg2000_dec.cc	[]	[]
/src/libheif/libheif/sequences/track_visual.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/file_layout.cc	[]	[]
/src/libheif/libheif/plugins/decoder_openjpeg.cc	[]	[]
/src/libheif/fuzzing/api_fuzzer.cc	['api_fuzzer']	[]
/src/libheif/libheif/file.cc	['api_fuzzer']	[]
/src/libheif/libheif/codecs/avc_enc.h	[]	[]
/src/libheif/libheif/plugins/encoder_uncompressed.cc	[]	[]
/src/libheif/libheif/codecs/hevc_enc.cc	[]	[]
/src/libheif/gdk-pixbuf/pixbufloader-heif.c	[]	[]
/src/libheif/examples/heif_enc.cc	['file_fuzzer']	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_block_pixel_interleave.cc	[]	[]
/src/libheif/libheif/plugins/encoder_x264.cc	[]	[]
/src/libheif/libheif/api_structs.h	[]	[]
/src/libheif/libheif/text.cc	[]	[]
/src/libheif/libheif/image-items/grid.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_library.cc	['api_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_pixel_interleave.cc	[]	[]
/src/libheif/libheif/codecs/jpeg_boxes.cc	[]	[]
/src/libheif/tests/omaf.cc	[]	[]
/src/libheif/libheif/image-items/iden.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder.h	[]	[]
/src/libheif/libheif/plugins/nalu_utils.h	[]	[]
/src/libheif/libheif/api/libheif/heif_library.h	[]	[]
/src/libheif/libheif/color-conversion/bayer_bilinear.cc	[]	[]
/src/libheif/heifio/encoder_jpeg.h	[]	[]
/src/libheif/libheif/codecs/avc_boxes.cc	[]	[]
/src/libheif/libheif/plugins/encoder_mask.cc	[]	[]
/src/libheif/heifio/decoder_y4m.cc	['file_fuzzer']	[]
/src/libheif/libheif/image-items/overlay.h	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/tests/uncompressed_encode_multicomponent.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/tests/image_description_metadata.cc	[]	[]
/src/libheif/heifio/encoder_png.cc	[]	[]
/src/libheif/libheif/plugins/encoder_openjph.cc	[]	[]
/src/libheif/libheif/plugins_windows.cc	['api_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/heifio/stubs.cc	[]	[]
/src/libheif/examples/heif_info.cc	[]	[]
/src/libheif/libheif/box.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'box_fuzzer']	['file_fuzzer', 'box_fuzzer']
/src/libheif/libheif/image-items/image_item.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/color-conversion/hdr_sdr.cc	[]	[]
/src/libheif/libheif/codecs/vvc_enc.cc	[]	[]
/src/libheif/libheif/codecs/vvc_enc.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_boxes.h	[]	[]
/src/libheif/libheif/brands.cc	[]	[]
/src/libheif/libheif/region.cc	[]	[]
/src/libheif/libheif/codecs/avif_boxes.h	[]	[]
/src/libheif/libheif/sequences/track.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/sequences/track_metadata.cc	[]	[]
/src/libheif/libheif/image-items/tiled.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_emscripten.h	['api_fuzzer']	[]
/src/libheif/libheif/api/libheif/heif_items.cc	['api_fuzzer']	[]
/src/libheif/libheif/text.h	[]	[]
/src/libheif/tests/uncompressed_decode_rgb565.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_entity_groups.cc	['api_fuzzer']	[]
/src/libheif/libheif/api/libheif/heif_context.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	['file_fuzzer', 'encoder_fuzzer']
/src/libheif/heifio/decoder_raw.cc	['file_fuzzer']	[]
/src/libheif/examples/heif_view.cc	[]	[]
/src/libheif/libheif/codecs/jpeg_dec.h	[]	[]
/src/libheif/libheif/api/libheif/heif_image.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	['file_fuzzer', 'encoder_fuzzer']
/src/libheif/libheif/api/libheif/heif_tai_timestamps.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_legacybase.cc	[]	[]
/src/libheif/libheif/plugins/encoder_rav1e.cc	[]	[]
/src/libheif/libheif/codecs/jpeg_boxes.h	[]	[]
/src/libheif/tests/uncompressed_encode.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_row_interleave.h	[]	[]
/src/libheif/libheif/codecs/avc_boxes.h	[]	[]
/src/libheif/libheif/file_layout.h	[]	[]
/src/libheif/libheif/image-items/avif.cc	[]	[]
/src/libheif/tests/uncompressed_decode_generic_compression.cc	[]	[]
/src/libheif/libheif/omaf_boxes.cc	[]	[]
/src/libheif/libheif/image/pixelimage.h	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/image-items/jpeg2000.h	[]	[]
/src/libheif/libheif/plugins_unix.cc	['api_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/api/libheif/heif_security.cc	['api_fuzzer', 'file_fuzzer']	['file_fuzzer']
/src/libheif/libheif/codecs/vvc_boxes.cc	[]	[]
/src/libheif/libheif/image-items/avc.h	[]	[]
/src/libheif/tests/test_utils.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/heifio/encoder_png.h	[]	[]
/src/libheif/examples/heif_test.cc	[]	[]
/src/libheif/libheif/image-items/tiled.h	[]	[]
/src/libheif/libheif/codecs/avc_dec.h	[]	[]
/src/libheif/libheif/codecs/avif_dec.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/image-items/vvc.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_brands.cc	['file_fuzzer']	['file_fuzzer']
/src/libheif/libheif/sequences/track.h	[]	[]
/src/libheif/libheif/image/image_description.h	[]	[]
/src/libheif/libheif/image-items/avc.cc	[]	[]
/src/libheif/libheif/plugins/decoder_vvdec.cc	[]	[]
/src/libheif/heifio/encoder_jpeg.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_encoder_rgb_pixel_interleave.cc	[]	[]
/src/libheif/libheif/plugin_registry.cc	['api_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/tests/encode_htj2k.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_color.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer']	['color_conversion_fuzzer', 'file_fuzzer']
/src/libheif/libheif/plugins/encoder_kvazaar.cc	[]	[]
/src/libheif/tests/uncompressed_decode_ycbcr420.cc	[]	[]
/src/libheif/libheif/image-items/image_item.h	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/heifio/encoder.h	[]	[]
/src/libheif/libheif/api/libheif/heif_properties.cc	['api_fuzzer']	[]
/src/libheif/libheif/color-conversion/rgb2rgb.cc	[]	[]
/src/libheif/heifio/exif.cc	['file_fuzzer']	[]
/src/libheif/libheif/codecs/uncompressed/unc_enc.h	[]	[]
/src/libheif/libheif/api/libheif/heif_metadata.cc	['file_fuzzer']	['file_fuzzer']
/src/libheif/libheif/plugins/nalu_utils.cc	[]	[]
/src/libheif/libheif/codecs/vvc_boxes.h	[]	[]
/src/libheif/libheif/image-items/unc_image.cc	[]	[]
/src/libheif/libheif/error.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/codecs/jpeg_dec.cc	[]	[]
/src/libheif/libheif/image-items/vvc.h	[]	[]
/src/libheif/libheif/context.h	['api_fuzzer']	[]
/src/libheif/libheif/box.h	['api_fuzzer', 'file_fuzzer']	['file_fuzzer']
/src/libheif/libheif/codecs/uncompressed/unc_decoder_bytealign_component_interleave.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_encoder_rgb_block_pixel_interleave.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_image_handle.cc	['api_fuzzer', 'file_fuzzer']	['file_fuzzer']
/src/libheif/libheif/api/libheif/heif_experimental.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_tiling.cc	['api_fuzzer']	[]
/src/libheif/heifio/decoder_png.cc	['file_fuzzer']	[]
/src/libheif/heifio/decoder_tiff.h	[]	[]
/src/libheif/heifio/encoder_tiff.cc	[]	[]
/src/libheif/libheif/plugins/encoder_aom.cc	[]	[]
/src/libheif/libheif/codecs/jpeg_enc.h	[]	[]
/src/libheif/libheif/omaf_boxes.h	[]	[]
/src/libheif/libheif/api/libheif/heif_sequences.cc	['api_fuzzer']	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder.cc	[]	[]
/src/libheif/libheif/sequences/chunk.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_component_interleave.cc	[]	[]
/src/libheif/heifio/encoder.cc	[]	[]
/src/libheif/libheif/color-conversion/colorconversion.h	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/region.h	['api_fuzzer']	[]
/src/libheif/libheif/codecs/avif_enc.cc	[]	[]
/src/libheif/libheif/codecs/decoder.h	['api_fuzzer']	[]
/src/libheif/libheif/codecs/uncompressed/unc_dec.h	[]	[]
/src/libheif/libheif/api/libheif/heif_encoding.cc	['color_conversion_fuzzer', 'encoder_fuzzer']	['color_conversion_fuzzer', 'encoder_fuzzer']
/src/libheif/libheif/plugins/decoder_dav1d.cc	[]	[]
/src/libheif/libheif/codecs/vvc_dec.h	[]	[]
/src/libheif/libheif/color-conversion/colorconversion.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/codecs/avif_enc.h	[]	[]
/src/libheif/libheif/mini.h	['file_fuzzer']	[]
/src/libheif/libheif/codecs/encoder.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_legacybase.h	[]	[]
/src/libheif/libheif/codecs/jpeg2000_dec.h	[]	[]
/src/libheif/tests/mini_decode.cc	[]	[]
/src/libheif/libheif/plugins/decoder_uncompressed.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_encoder.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_mixed_interleave.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_encoder_component_interleave.cc	[]	[]
/src/libheif/libheif/color-conversion/monochrome.cc	[]	[]
/src/libheif/libheif/plugins/decoder_webcodecs.cc	[]	[]
/src/libheif/libheif/image-items/avif.h	[]	[]
/src/libheif/examples/heif_dec.cc	[]	[]
/src/libheif/libheif/compression_zlib.cc	[]	[]
/src/libheif/libheif/image-items/hevc.cc	[]	[]
/src/libheif/libheif/sequences/track_visual.h	[]	[]
/src/libheif/libheif/plugins/decoder_ffmpeg.cc	[]	[]
/src/libheif/libheif/image/image_description.cc	['api_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	['file_fuzzer', 'encoder_fuzzer']
/src/libheif/libheif/color-conversion/yuv2rgb.cc	[]	[]
/src/libheif/libheif/plugins/encoder_x265.cc	[]	[]
/src/libheif/libheif/nclx.cc	['api_fuzzer']	[]
/src/libheif/extra/getopt_long.c	[]	[]
/src/libheif/libheif/codecs/decoder.cc	['api_fuzzer', 'file_fuzzer']	['file_fuzzer']
/src/libheif/libheif/image-items/hevc.h	[]	[]
/src/libheif/tests/uncompressed_decode_mono.cc	[]	[]
/src/libheif/examples/SAI_datafile.cc	[]	[]
/src/libheif/libheif/image-items/mask_image.h	[]	[]
/src/libheif/libheif/plugins/encoder_openjpeg.cc	[]	[]
/src/libheif/libheif/plugins/decoder_libde265.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	[]
/src/libheif/libheif/codecs/hevc_enc.h	[]	[]
/src/libheif/tests/component_descriptions.cc	[]	[]
/src/libheif/tests/uncompressed_decode_rgb7.cc	[]	[]
/src/libheif/tests/tiffdecode.cc	[]	[]
/src/libheif/libheif/image-items/mask_image.cc	[]	[]
/src/libheif/fuzzing/file_fuzzer.cc	['file_fuzzer']	['file_fuzzer']
/src/libheif/libheif/image-items/jpeg2000.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/api/libheif/heif_regions.cc	['api_fuzzer']	[]
/src/libheif/libheif/codecs/jpeg2000_boxes.cc	['color_conversion_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/plugins/decoder_aom.cc	[]	[]
/src/libheif/examples/common.cc	[]	[]
/src/libheif/libheif/common_utils.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/codecs/hevc_boxes.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/sequences/chunk.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_row_interleave.cc	[]	[]
/src/libheif/libheif/sequences/seq_boxes.h	[]	[]
/src/libheif/libheif/codecs/avc_dec.cc	[]	[]
/src/libheif/libheif/id_creator.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_dec.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_decoding.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer']	['file_fuzzer']
/src/libheif/examples/heif_gen_bayer.cc	[]	[]
/src/libheif/libheif/file.h	[]	[]
/src/libheif/tests/catch_amalgamated.cpp	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	['encoder_fuzzer']
/src/libheif/libheif/id_creator.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_boxes.cc	[]	[]
/src/libheif/libheif/bitstream.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer']	['color_conversion_fuzzer', 'file_fuzzer']
/src/libheif/tests/uncompressed_decode_ycbcr422.cc	[]	[]
/src/libheif/libheif/codecs/vvc_dec.cc	[]	[]
/src/libheif/libheif/image/pixelimage.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer']	['color_conversion_fuzzer', 'file_fuzzer']
/src/libheif/tests/uncompressed_decode_rgb16.cc	[]	[]
/src/libheif/libheif/plugins/decoder_openh264.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_text.cc	[]	[]
/src/libheif/libheif/color-conversion/rgb2yuv.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_aux_images.cc	['api_fuzzer', 'file_fuzzer']	['file_fuzzer']
/src/libheif/tests/encode.cc	['encoder_fuzzer']	[]
/src/libheif/libheif/mini.cc	[]	[]
/src/libheif/heifio/decoder_jpeg.cc	['file_fuzzer']	[]
/src/libheif/libheif/color-conversion/rgb2yuv_sharp.cc	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_component_interleave.h	[]	[]
/src/libheif/libheif/plugins/decoder_jpeg.cc	[]	[]
/src/libheif/libheif/mdat_data.h	[]	[]
/src/libheif/libheif/plugins/encoder_svt.cc	[]	[]
/src/libheif/libheif/nclx.h	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'encoder_fuzzer']	['file_fuzzer', 'encoder_fuzzer']
/src/libheif/libheif/context.cc	['api_fuzzer', 'color_conversion_fuzzer', 'file_fuzzer', 'box_fuzzer', 'encoder_fuzzer']	['file_fuzzer', 'box_fuzzer', 'encoder_fuzzer']
/src/libheif/heifio/decoder_tiff.cc	[]	[]
/src/libheif/fuzzing/encoder_fuzzer.cc	['encoder_fuzzer']	['encoder_fuzzer']
/src/libheif/libheif/image-items/overlay.cc	[]	[]
/src/libheif/libheif/codecs/jpeg2000_enc.cc	[]	[]
/src/libheif/libheif/api/libheif/heif_uncompressed.cc	['api_fuzzer', 'file_fuzzer']	[]
/src/libheif/libheif/security_limits.h	[]	[]
/src/libheif/libheif/codecs/hevc_dec.h	[]	[]
/src/libheif/libheif/logging.h	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_encoder.cc	[]	[]
/src/libheif/libheif/sequences/track_metadata.h	[]	[]
/src/libheif/heifio/encoder_tiff.h	[]	[]
/src/libheif/tests/uncompressed_decode.cc	[]	[]
/src/libheif/extra/getopt.c	[]	[]
/src/libheif/libheif/codecs/uncompressed/unc_decoder_pixel_interleave.h	[]	[]
/src/libheif/libheif/image-items/jpeg.cc	[]	[]
/src/libheif/libheif/plugins_unix.h	[]	[]
/src/libheif/libheif/codecs/hevc_boxes.h	[]	[]
/src/libheif/examples/sdl.cc	[]	[]
/src/libheif/libheif/color-conversion/alpha.cc	[]	[]
/src/libheif/libheif/security_limits.cc	['api_fuzzer']	[]

Directories in report

Directory
/src/libheif/extra/
/src/libheif/examples/
/src/libheif/fuzzing/
/src/libheif/libheif/image/
/src/libheif/libheif/sequences/
/src/libheif/libheif/
/src/libheif/libheif/image-items/
/src/libheif/libheif/plugins/
/src/libheif/libheif/codecs/
/src/libheif/tests/
/src/libheif/libheif/color-conversion/
/src/libheif/libheif/codecs/uncompressed/
/src/libheif/heifio/
/src/libheif/gdk-pixbuf/
/src/libheif/libheif/api/libheif/

This section shows a list of 3rd party function calls and their relative coverage information. By static analysis of the target project code, all of the 3rd party function call and their caller information, including the source file and line number that initiate the call are captured. The caller source code file and line number are shown in column 2 while column 1 is the function name of the 3rd party function call. Each occurrent of the 3rd party function call will occuply a separate row. Column 3 of each row indicate if the 3rd party call in the source file line is unreachable. Column 4 lists all fuzzers that have covered that particular system call in that specific location (source file and line)during their dynamic fuzzing.

Function in each files in report

Target sink	Callsite location	Reached by fuzzer	Covered by Fuzzers