Fuzz introspector: /src/librawspeed/fuzz/librawspeed/decoders/TiffDecoders/main.cpp
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
318 318 1 :

['rawspeed::ArwDecoder::decodeSRF(rawspeed::TiffIFD const*)']

318 318 rawspeed::ArwDecoder::decodeRawInternal() call site /src/librawspeed/src/librawspeed/decoders/ArwDecoder.cpp:132
175 175 1 :

['void rawspeed::Cr2Decompressor ::decompressN_X_Y<3, 2, 1>()']

175 175 rawspeed::Cr2Decompressor ::decompress() call site /src/librawspeed/src/librawspeed/decompressors/Cr2DecompressorImpl.h:320
162 162 1 :

['void rawspeed::Cr2Decompressor ::decompressN_X_Y<3, 2, 2>()']

162 162 rawspeed::Cr2Decompressor ::decompress() call site /src/librawspeed/src/librawspeed/decompressors/Cr2DecompressorImpl.h:316
98 98 1 :

['void rawspeed::UncompressedDecompressor::decodePackedInt > >(rawspeed::iPoint2D const&, rawspeed::iPoint2D const&, unsigned int, int, int, int) const']

98 98 rawspeed::UncompressedDecompressor::readUncompressedRaw(rawspeed::iPoint2Dconst&,rawspeed::iPoint2Dconst&,int,int,rawspeed::BitOrder) call site /src/librawspeed/src/librawspeed/decompressors/UncompressedDecompressor.cpp:216
57 57 1 :

['rawspeed::CiffEntry::getByte(unsigned int) const']

57 57 rawspeed::CiffEntry::getU32(unsignedint)const call site /src/librawspeed/src/librawspeed/tiff/CiffEntry.cpp:117
56 56 1 :

['void rawspeed::UncompressedDecompressor::decode8BitRaw (unsigned int, unsigned int)']

110 252 rawspeed::DcsDecoder::decodeRawInternal() call site /src/librawspeed/src/librawspeed/decoders/DcsDecoder.cpp:72
56 56 1 :

['void rawspeed::UncompressedDecompressor::decodeRawUnpacked<14, (rawspeed::Endianness)48879>(unsigned int, unsigned int)']

110 144 rawspeed::ArwDecoder::DecodeUncompressed(rawspeed::TiffIFDconst*)const call site /src/librawspeed/src/librawspeed/decoders/ArwDecoder.cpp:258
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:526
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:526
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:565
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:565
20 174 3 :

['rawspeed::AbstractSamsungDecompressor::~AbstractSamsungDecompressor()', 'rawspeed::SamsungV1Decompressor::SamsungV1Decompressor(rawspeed::RawImage const&, rawspeed::ByteStream const&, int)', 'rawspeed::SamsungV1Decompressor::decompress() const']

20 646 rawspeed::SrwDecoder::decodeRawInternal() call site /src/librawspeed/src/librawspeed/decoders/SrwDecoder.cpp:107

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 __assert_fail [call site] 00001
1 rawspeed::Buffer::Buffer(unsigned char const*, unsigned int) [function] [call site] 00002
2 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00003
2 __assert_fail [call site] 00004
1 rawspeed::TiffParser::parse(rawspeed::TiffIFD*, rawspeed::Buffer const&) [function] [call site] 00005
2 rawspeed::DataBuffer::DataBuffer(rawspeed::Buffer const&, rawspeed::Endianness) [function] [call site] 00006
3 rawspeed::Buffer::Buffer(rawspeed::Buffer const&) [function] [call site] 00007
4 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00008
4 __assert_fail [call site] 00009
2 rawspeed::ByteStream::ByteStream(rawspeed::DataBuffer const&) [function] [call site] 00010
3 rawspeed::DataBuffer::DataBuffer(rawspeed::DataBuffer const&) [function] [call site] 00011
4 rawspeed::Buffer::Buffer(rawspeed::Buffer const&) [function] [call site] 00012
2 rawspeed::getTiffByteOrder(rawspeed::ByteStream const&, unsigned int, char const*) [function] [call site] 00013
3 rawspeed::ByteStream::hasPatternAt(char const*, unsigned int, unsigned int) const [function] [call site] 00014
4 __assert_fail [call site] 00015
4 rawspeed::Buffer::isValid(unsigned int, unsigned int) const [function] [call site] 00016
4 memcmp [call site] 00017
3 rawspeed::ByteStream::hasPatternAt(char const*, unsigned int, unsigned int) const [function] [call site] 00018
3 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00019
4 vsnprintf [call site] 00020
4 rawspeed::writeLog(rawspeed::DEBUG_PRIO, char const*, ...) [function] [call site] 00021
4 __cxa_allocate_exception [call site] 00022
4 rawspeed::TiffParserException::RawspeedException(char const*) [function] [call site] 00023
5 rawspeed::RawParserException::RawspeedException(char const*) [function] [call site] 00024
6 rawspeed::RawspeedException::RawspeedException(char const*) [function] [call site] 00025
7 std::runtime_error::runtime_error(char const*) [call site] 00026
7 rawspeed::RawspeedException::log(char const*) [function] [call site] 00027
8 rawspeed::writeLog(rawspeed::DEBUG_PRIO, char const*, ...) [function] [call site] 00028
7 std::runtime_error::~runtime_error() [call site] 00029
2 rawspeed::DataBuffer::setByteOrder(rawspeed::Endianness) [function] [call site] 00030
2 rawspeed::ByteStream::skipBytes(unsigned int) [function] [call site] 00031
3 rawspeed::ByteStream::check(unsigned int) const [function] [call site] 00032
4 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00033
5 rawspeed::IOException::RawspeedException(char const*) [function] [call site] 00034
6 rawspeed::RawspeedException::RawspeedException(char const*) [function] [call site] 00035
4 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00036
4 __assert_fail [call site] 00037
2 rawspeed::ByteStream::getU16() [function] [call site] 00038
3 unsigned short rawspeed::ByteStream::get () [function] [call site] 00039
4 unsigned short rawspeed::ByteStream::peek (unsigned int) const [function] [call site] 00040
5 unsigned short rawspeed::DataBuffer::get (unsigned int, unsigned int) const [function] [call site] 00041
6 __assert_fail [call site] 00042
6 __assert_fail [call site] 00043
6 rawspeed::getHostEndianness() [function] [call site] 00044
6 unsigned short rawspeed::Buffer::get (bool, unsigned int, unsigned int) const [function] [call site] 00045
7 rawspeed::Buffer::getData(unsigned int, unsigned int) const [function] [call site] 00046
8 rawspeed::Buffer::isValid(unsigned int, unsigned int) const [function] [call site] 00047
8 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00048
8 __assert_fail [call site] 00049
8 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00050
8 __assert_fail [call site] 00051
7 unsigned short rawspeed::getByteSwapped (void const*, bool) [function] [call site] 00052
8 rawspeed::getByteSwapped(unsigned short) [function] [call site] 00053
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00054
2 rawspeed::NORangesSet ::NORangesSet() [function] [call site] 00055
2 rawspeed::ByteStream::getU32() [function] [call site] 00056
3 unsigned int rawspeed::ByteStream::get () [function] [call site] 00057
2 rawspeed::NORangesSet ::~NORangesSet() [function] [call site] 00058
2 rawspeed::Buffer::~Buffer() [function] [call site] 00059
3 rawspeed::alignedFreeConstPtr(void const*) [function] [call site] 00060
4 rawspeed::alignedFree(void*) [function] [call site] 00061
3 __clang_call_terminate [call site] 00062
4 __cxa_begin_catch [call site] 00063
2 rawspeed::TiffIFD::add(std::__1::unique_ptr >) [function] [call site] 00064
3 __assert_fail [call site] 00065
3 rawspeed::TiffIFD::recursivelyCheckSubIFDs(int) const [function] [call site] 00066
4 rawspeed::TiffIFD::checkSubIFDs(int) const [function] [call site] 00067
5 __assert_fail [call site] 00068
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00069
5 __assert_fail [call site] 00070
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00071
4 __assert_fail [call site] 00072
4 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00073
2 rawspeed::TiffIFD::getSubIFDs() const [function] [call site] 00074
1 rawspeed::RawDecoder::decodeRaw() [function] [call site] 00075
2 rawspeed::RawImage::operator->() const [function] [call site] 00076
2 rawspeed::RawImageData::checkMemIsInitialized() const [function] [call site] 00077
2 rawspeed::RawImage::operator->() const [function] [call site] 00078
2 double rawspeed::Hints::get (std::__1::basic_string , std::__1::allocator > const&, double) const [function] [call site] 00079
2 rawspeed::RawImage::operator->() const [function] [call site] 00080
2 rawspeed::RawImage::operator->() const [function] [call site] 00081
2 rawspeed::RawImageData::fixBadPixels() [function] [call site] 00082
3 rawspeed::RawImageData::transferBadPixelsToMap() [function] [call site] 00083
4 rawspeed::MutexLocker::MutexLocker(rawspeed::Mutex*) [function] [call site] 00084
5 rawspeed::Mutex::Lock() const [function] [call site] 00085
4 rawspeed::RawImageData::createBadPixelMap() [function] [call site] 00086
5 rawspeed::RawImageData::isAllocated() const [function] [call site] 00087
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00088
6 rawspeed::RawDecoderException::RawspeedException(char const*) [function] [call site] 00089
5 rawspeed::roundUpDivision(unsigned long, unsigned long) [function] [call site] 00090
5 unsigned char* rawspeed::alignedMallocArray (unsigned long, unsigned long) [function] [call site] 00091
6 unsigned char* rawspeed::alignedMalloc (unsigned long) [function] [call site] 00092
7 rawspeed::alignedMalloc(unsigned long, unsigned long) [function] [call site] 00093
8 bool rawspeed::isPowerOfTwo (unsigned long) [function] [call site] 00094
8 __assert_fail [call site] 00095
8 _ZN8rawspeed9isAlignedImEEbT_mPNSt3__19enable_ifIXntsr3stdE12is_pointer_vIS1_EEvE4typeE [function] [call site] 00096
8 __assert_fail [call site] 00097
8 _ZN8rawspeed9isAlignedImEEbT_mPNSt3__19enable_ifIXntsr3stdE12is_pointer_vIS1_EEvE4typeE [function] [call site] 00098
8 __assert_fail [call site] 00099
8 aligned_alloc [call site] 00100
8 _ZN8rawspeed9isAlignedIPvEEbT_mPNSt3__19enable_ifIXsr3stdE12is_pointer_vIS2_EEvE4typeE [function] [call site] 00101
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00102
4 rawspeed::MutexLocker::~MutexLocker() [function] [call site] 00103
5 rawspeed::Mutex::Unlock() const [function] [call site] 00104
4 __assert_fail [call site] 00105
4 __assert_fail [call site] 00106
3 rawspeed::RawImageData::startWorker(rawspeed::RawImageWorker::RawImageWorkerTask, bool) [function] [call site] 00107
4 rawspeed::RawImageData::startWorker(rawspeed::RawImageWorker::RawImageWorkerTask, bool)::$_0::operator()() const [function] [call site] 00108
4 rawspeed_get_number_of_processor_cores [function] [call site] 00109
4 rawspeed::RawImageWorker::RawImageWorker(rawspeed::RawImageData*, rawspeed::RawImageWorker::RawImageWorkerTask, int, int) [function] [call site] 00110
5 rawspeed::RawImageWorker::performTask() [function] [call site] 00111
6 __cxa_begin_catch [call site] 00112
6 rawspeed::ErrorLog::setError(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00113
7 rawspeed::MutexLocker::MutexLocker(rawspeed::Mutex*) [function] [call site] 00114
7 rawspeed::MutexLocker::~MutexLocker() [function] [call site] 00115
6 __cxa_end_catch [call site] 00116
6 __cxa_begin_catch [call site] 00117
6 rawspeed::ErrorLog::setError(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00118
6 __cxa_begin_catch [call site] 00119
6 rawspeed::ErrorLog::setError(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00120
6 rawspeed::RawImageData::fixBadPixelsThread(int, int) [function] [call site] 00121
6 __assert_fail [call site] 00122
6 __clang_call_terminate [call site] 00123
2 rawspeed::RawImage::operator->() const [function] [call site] 00124
2 rawspeed::RawImageData::checkMemIsInitialized() const [function] [call site] 00125
2 rawspeed::RawImage::~RawImage() [function] [call site] 00126
3 rawspeed::Mutex::Lock() const [function] [call site] 00127
3 rawspeed::Mutex::Unlock() const [function] [call site] 00128
3 rawspeed::Mutex::Unlock() const [function] [call site] 00129
2 __cxa_begin_catch [call site] 00130
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00131
2 __cxa_begin_catch [call site] 00132
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00133
2 __cxa_begin_catch [call site] 00134
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00135
2 __cxa_end_catch [call site] 00136
1 rawspeed::RawImage::~RawImage() [function] [call site] 00137
1 rawspeed::RawDecoder::decodeMetaData(rawspeed::CameraMetaData const*) [function] [call site] 00138
2 __cxa_begin_catch [call site] 00139
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00140
2 __cxa_begin_catch [call site] 00141
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00142
2 __cxa_begin_catch [call site] 00143
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00144
2 __cxa_end_catch [call site] 00145
1 rawspeed::Buffer::~Buffer() [function] [call site] 00146
1 __cxa_begin_catch [call site] 00147
1 __cxa_end_catch [call site] 00148