Fuzz introspector: /src/librawspeed/fuzz/librawspeed/decoders/TiffDecoders/main.cpp
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
318 318 1 :

['rawspeed::ArwDecoder::decodeSRF(rawspeed::TiffIFD const*)']

318 318 rawspeed::ArwDecoder::decodeRawInternal() call site /src/librawspeed/src/librawspeed/decoders/ArwDecoder.cpp:132
175 175 1 :

['void rawspeed::Cr2Decompressor ::decompressN_X_Y<3, 2, 1>()']

175 175 rawspeed::Cr2Decompressor ::decompress() call site /src/librawspeed/src/librawspeed/decompressors/Cr2DecompressorImpl.h:320
162 162 1 :

['void rawspeed::Cr2Decompressor ::decompressN_X_Y<3, 2, 2>()']

162 162 rawspeed::Cr2Decompressor ::decompress() call site /src/librawspeed/src/librawspeed/decompressors/Cr2DecompressorImpl.h:316
98 98 1 :

['void rawspeed::UncompressedDecompressor::decodePackedInt > >(rawspeed::iPoint2D const&, rawspeed::iPoint2D const&, unsigned int, int, int, int) const']

98 98 rawspeed::UncompressedDecompressor::readUncompressedRaw(rawspeed::iPoint2Dconst&,rawspeed::iPoint2Dconst&,int,int,rawspeed::BitOrder) call site /src/librawspeed/src/librawspeed/decompressors/UncompressedDecompressor.cpp:216
57 57 1 :

['rawspeed::CiffEntry::getByte(unsigned int) const']

57 57 rawspeed::CiffEntry::getU32(unsignedint)const call site /src/librawspeed/src/librawspeed/tiff/CiffEntry.cpp:117
56 56 1 :

['void rawspeed::UncompressedDecompressor::decode8BitRaw (unsigned int, unsigned int)']

110 252 rawspeed::DcsDecoder::decodeRawInternal() call site /src/librawspeed/src/librawspeed/decoders/DcsDecoder.cpp:72
56 56 1 :

['void rawspeed::UncompressedDecompressor::decodeRawUnpacked<14, (rawspeed::Endianness)48879>(unsigned int, unsigned int)']

110 144 rawspeed::ArwDecoder::DecodeUncompressed(rawspeed::TiffIFDconst*)const call site /src/librawspeed/src/librawspeed/decoders/ArwDecoder.cpp:258
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:526
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::OffsetPerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:526
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:565
38 38 1 :

['void rawspeed::DngOpcodes::PixelOpcode::applyOP ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1}>(rawspeed::RawImage const&, rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImage const&)::{lambda(unsigned int, unsigned int, float)#1})']

38 38 rawspeed::DngOpcodes::ScalePerRowOrCol ::apply(rawspeed::RawImageconst&) call site /src/librawspeed/src/librawspeed/common/DngOpcodes.cpp:565
20 174 3 :

['rawspeed::AbstractSamsungDecompressor::~AbstractSamsungDecompressor()', 'rawspeed::SamsungV1Decompressor::SamsungV1Decompressor(rawspeed::RawImage const&, rawspeed::ByteStream const&, int)', 'rawspeed::SamsungV1Decompressor::decompress() const']

20 646 rawspeed::SrwDecoder::decodeRawInternal() call site /src/librawspeed/src/librawspeed/decoders/SrwDecoder.cpp:107

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 __assert_fail [call site] 00001
1 rawspeed::Buffer::Buffer(unsigned char const*, unsigned int) [function] [call site] 00002
2 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00003
2 __assert_fail [call site] 00004
1 rawspeed::TiffParser::parse(rawspeed::TiffIFD*, rawspeed::Buffer const&) [function] [call site] 00005
2 rawspeed::DataBuffer::DataBuffer(rawspeed::Buffer const&, rawspeed::Endianness) [function] [call site] 00006
3 rawspeed::Buffer::Buffer(rawspeed::Buffer const&) [function] [call site] 00007
4 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00008
4 __assert_fail [call site] 00009
2 rawspeed::ByteStream::ByteStream(rawspeed::DataBuffer const&) [function] [call site] 00010
3 rawspeed::DataBuffer::DataBuffer(rawspeed::DataBuffer const&) [function] [call site] 00011
4 rawspeed::Buffer::Buffer(rawspeed::Buffer const&) [function] [call site] 00012
2 rawspeed::getTiffByteOrder(rawspeed::ByteStream const&, unsigned int, char const*) [function] [call site] 00013
3 rawspeed::ByteStream::hasPatternAt(char const*, unsigned int, unsigned int) const [function] [call site] 00014
4 __assert_fail [call site] 00015
4 rawspeed::Buffer::isValid(unsigned int, unsigned int) const [function] [call site] 00016
4 memcmp [call site] 00017
3 rawspeed::ByteStream::hasPatternAt(char const*, unsigned int, unsigned int) const [function] [call site] 00018
3 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00019
4 vsnprintf [call site] 00020
4 rawspeed::writeLog(rawspeed::DEBUG_PRIO, char const*, ...) [function] [call site] 00021
4 __cxa_allocate_exception [call site] 00022
4 rawspeed::TiffParserException::RawspeedException(char const*) [function] [call site] 00023
5 rawspeed::RawParserException::RawspeedException(char const*) [function] [call site] 00024
6 rawspeed::RawspeedException::RawspeedException(char const*) [function] [call site] 00025
7 std::runtime_error::runtime_error(char const*) [call site] 00026
7 rawspeed::RawspeedException::log(char const*) [function] [call site] 00027
8 rawspeed::writeLog(rawspeed::DEBUG_PRIO, char const*, ...) [function] [call site] 00028
7 std::runtime_error::~runtime_error() [call site] 00029
2 rawspeed::DataBuffer::setByteOrder(rawspeed::Endianness) [function] [call site] 00030
2 rawspeed::ByteStream::skipBytes(unsigned int) [function] [call site] 00031
3 rawspeed::ByteStream::check(unsigned int) const [function] [call site] 00032
4 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00033
5 rawspeed::IOException::RawspeedException(char const*) [function] [call site] 00034
6 rawspeed::RawspeedException::RawspeedException(char const*) [function] [call site] 00035
4 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00036
4 __assert_fail [call site] 00037
2 rawspeed::ByteStream::getU16() [function] [call site] 00038
3 unsigned short rawspeed::ByteStream::get () [function] [call site] 00039
4 unsigned short rawspeed::ByteStream::peek (unsigned int) const [function] [call site] 00040
5 unsigned short rawspeed::DataBuffer::get (unsigned int, unsigned int) const [function] [call site] 00041
6 __assert_fail [call site] 00042
6 __assert_fail [call site] 00043
6 rawspeed::getHostEndianness() [function] [call site] 00044
6 unsigned short rawspeed::Buffer::get (bool, unsigned int, unsigned int) const [function] [call site] 00045
7 rawspeed::Buffer::getData(unsigned int, unsigned int) const [function] [call site] 00046
8 rawspeed::Buffer::isValid(unsigned int, unsigned int) const [function] [call site] 00047
8 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00048
8 __assert_fail [call site] 00049
8 rawspeed::ASan::RegionIsPoisoned(void const volatile*, unsigned long) [function] [call site] 00050
8 __assert_fail [call site] 00051
7 unsigned short rawspeed::getByteSwapped (void const*, bool) [function] [call site] 00052
8 rawspeed::getByteSwapped(unsigned short) [function] [call site] 00053
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00054
2 rawspeed::NORangesSet ::NORangesSet() [function] [call site] 00055
2 rawspeed::ByteStream::getU32() [function] [call site] 00056
3 unsigned int rawspeed::ByteStream::get () [function] [call site] 00057
2 rawspeed::NORangesSet ::~NORangesSet() [function] [call site] 00058
2 rawspeed::Buffer::~Buffer() [function] [call site] 00059
3 rawspeed::alignedFreeConstPtr(void const*) [function] [call site] 00060
4 rawspeed::alignedFree(void*) [function] [call site] 00061
3 __clang_call_terminate [call site] 00062
4 __cxa_begin_catch [call site] 00063
2 rawspeed::TiffIFD::add(std::__1::unique_ptr >) [function] [call site] 00064
3 __assert_fail [call site] 00065
3 rawspeed::TiffIFD::recursivelyCheckSubIFDs(int) const [function] [call site] 00066
4 rawspeed::TiffIFD::checkSubIFDs(int) const [function] [call site] 00067
5 __assert_fail [call site] 00068
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00069
5 __assert_fail [call site] 00070
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00071
4 __assert_fail [call site] 00072
4 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00073
2 rawspeed::TiffIFD::getSubIFDs() const [function] [call site] 00074
1 rawspeed::KdcDecoder::isAppropriateDecoder(rawspeed::TiffRootIFD const*, rawspeed::Buffer const&) [function] [call site] 00075
2 rawspeed::TiffRootIFD::getID() const [function] [call site] 00076
3 rawspeed::TiffID::TiffID() [function] [call site] 00077
3 rawspeed::TiffIFD::getEntryRecursive(rawspeed::TiffTag) const [function] [call site] 00078
4 rawspeed::TiffIFD::getEntryRecursive(rawspeed::TiffTag) const [function] [call site] 00079
3 rawspeed::TiffIFD::getEntryRecursive(rawspeed::TiffTag) const [function] [call site] 00080
3 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00081
3 rawspeed::TiffEntry::getString() const [function] [call site] 00082
4 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00083
4 rawspeed::ByteStream::getRemainSize() const [function] [call site] 00084
5 __assert_fail [call site] 00085
5 rawspeed::ByteStream::check(unsigned int) const [function] [call site] 00086
4 rawspeed::ByteStream::peekData(unsigned int) const [function] [call site] 00087
5 rawspeed::Buffer::getData(unsigned int, unsigned int) const [function] [call site] 00088
4 strnlen [call site] 00089
3 rawspeed::trimSpaces(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00090
3 rawspeed::TiffEntry::getString() const [function] [call site] 00091
3 rawspeed::trimSpaces(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00092
3 rawspeed::TiffID::~TiffID() [function] [call site] 00093
2 rawspeed::TiffID::~TiffID() [function] [call site] 00094
1 rawspeed::RawDecoder::decodeRaw() [function] [call site] 00095
2 rawspeed::RawImage::operator->() const [function] [call site] 00096
2 rawspeed::RawImageData::checkMemIsInitialized() const [function] [call site] 00097
2 rawspeed::RawImage::operator->() const [function] [call site] 00098
2 double rawspeed::Hints::get (std::__1::basic_string , std::__1::allocator > const&, double) const [function] [call site] 00099
2 rawspeed::RawImage::operator->() const [function] [call site] 00100
2 rawspeed::RawImage::operator->() const [function] [call site] 00101
2 rawspeed::RawImageData::fixBadPixels() [function] [call site] 00102
3 rawspeed::RawImageData::transferBadPixelsToMap() [function] [call site] 00103
4 rawspeed::MutexLocker::MutexLocker(rawspeed::Mutex*) [function] [call site] 00104
5 rawspeed::Mutex::Lock() const [function] [call site] 00105
4 rawspeed::RawImageData::createBadPixelMap() [function] [call site] 00106
5 rawspeed::RawImageData::isAllocated() const [function] [call site] 00107
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00108
6 rawspeed::RawDecoderException::RawspeedException(char const*) [function] [call site] 00109
5 rawspeed::roundUpDivision(unsigned long, unsigned long) [function] [call site] 00110
5 unsigned char* rawspeed::alignedMallocArray (unsigned long, unsigned long) [function] [call site] 00111
6 unsigned char* rawspeed::alignedMalloc (unsigned long) [function] [call site] 00112
7 rawspeed::alignedMalloc(unsigned long, unsigned long) [function] [call site] 00113
8 bool rawspeed::isPowerOfTwo (unsigned long) [function] [call site] 00114
8 __assert_fail [call site] 00115
8 _ZN8rawspeed9isAlignedImEEbT_mPNSt3__19enable_ifIXntsr3stdE12is_pointer_vIS1_EEvE4typeE [function] [call site] 00116
8 __assert_fail [call site] 00117
8 _ZN8rawspeed9isAlignedImEEbT_mPNSt3__19enable_ifIXntsr3stdE12is_pointer_vIS1_EEvE4typeE [function] [call site] 00118
8 __assert_fail [call site] 00119
8 aligned_alloc [call site] 00120
8 _ZN8rawspeed9isAlignedIPvEEbT_mPNSt3__19enable_ifIXsr3stdE12is_pointer_vIS2_EEvE4typeE [function] [call site] 00121
5 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00122
4 rawspeed::MutexLocker::~MutexLocker() [function] [call site] 00123
5 rawspeed::Mutex::Unlock() const [function] [call site] 00124
4 __assert_fail [call site] 00125
4 __assert_fail [call site] 00126
3 rawspeed::RawImageData::startWorker(rawspeed::RawImageWorker::RawImageWorkerTask, bool) [function] [call site] 00127
4 rawspeed::RawImageData::startWorker(rawspeed::RawImageWorker::RawImageWorkerTask, bool)::$_0::operator()() const [function] [call site] 00128
4 rawspeed_get_number_of_processor_cores [function] [call site] 00129
4 rawspeed::RawImageWorker::RawImageWorker(rawspeed::RawImageData*, rawspeed::RawImageWorker::RawImageWorkerTask, int, int) [function] [call site] 00130
5 rawspeed::RawImageWorker::performTask() [function] [call site] 00131
6 __cxa_begin_catch [call site] 00132
6 rawspeed::ErrorLog::setError(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00133
7 rawspeed::MutexLocker::MutexLocker(rawspeed::Mutex*) [function] [call site] 00134
7 rawspeed::MutexLocker::~MutexLocker() [function] [call site] 00135
6 __cxa_end_catch [call site] 00136
6 __cxa_begin_catch [call site] 00137
6 rawspeed::ErrorLog::setError(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00138
6 __cxa_begin_catch [call site] 00139
6 rawspeed::ErrorLog::setError(std::__1::basic_string , std::__1::allocator > const&) [function] [call site] 00140
6 rawspeed::RawImageData::fixBadPixelsThread(int, int) [function] [call site] 00141
6 __assert_fail [call site] 00142
6 __clang_call_terminate [call site] 00143
2 rawspeed::RawImage::operator->() const [function] [call site] 00144
2 rawspeed::RawImageData::checkMemIsInitialized() const [function] [call site] 00145
2 rawspeed::RawImage::~RawImage() [function] [call site] 00146
3 rawspeed::Mutex::Lock() const [function] [call site] 00147
3 rawspeed::Mutex::Unlock() const [function] [call site] 00148
3 rawspeed::Mutex::Unlock() const [function] [call site] 00149
2 __cxa_begin_catch [call site] 00150
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00151
2 __cxa_begin_catch [call site] 00152
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00153
2 __cxa_begin_catch [call site] 00154
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00155
2 __cxa_end_catch [call site] 00156
1 rawspeed::RawImage::~RawImage() [function] [call site] 00157
1 rawspeed::RawDecoder::decodeMetaData(rawspeed::CameraMetaData const*) [function] [call site] 00158
2 __cxa_begin_catch [call site] 00159
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00160
2 __cxa_begin_catch [call site] 00161
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00162
2 __cxa_begin_catch [call site] 00163
2 void rawspeed::ThrowException (char const*, ...) [function] [call site] 00164
2 __cxa_end_catch [call site] 00165
1 rawspeed::Buffer::~Buffer() [function] [call site] 00166
1 __cxa_begin_catch [call site] 00167
1 __cxa_end_catch [call site] 00168