Fuzz introspector: vpx_dec_fuzzer_vp8
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
395 453 10 :

['vpx_plane_add_noise_sse2', 'vpx_internal_error', 'vpx_calloc', 'vpx_setup_noise', 'vp8_yv12_copy_frame_c', 'vp8_deblock', 'vp8_de_mblock', 'vp8_multiframe_quality_enhance', 'vp8_yv12_alloc_frame_buffer', 'vpx_clear_system_state']

395 453 vp8_post_proc_frame call site: 00000 /src/libvpx/vp8/common/postproc.c:159
0 0 None 28 35 check_fragments_for_errors call site: 00000 /src/libvpx/vp8/decoder/onyxd_if.c:271
0 0 None 4 1068 vp8_decode call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:387
0 0 None 4 1061 vp8_decode call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:393
0 0 None 4 964 vp8_decode call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:405
0 0 None 0 2742 vp8_decode_frame call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:915
0 0 None 0 2687 vp8_decode_frame call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:978
0 0 None 0 283 vp8_get_frame call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:515
0 0 None 0 55 setup_token_decoder call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:777
0 0 None 0 30 read_available_partition_size call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:687
0 0 None 0 20 setup_token_decoder call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:796
0 0 None 0 7 read_available_partition_size call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:716

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 vpx_codec_vp8_dx [function] [call site] 00001
1 vpx_codec_dec_init_ver [function] [call site] 00002
2 vpx_codec_destroy [function] [call site] 00003
1 vpx_codec_control_VP9D_SET_LOOP_FILTER_OPT(vpx_codec_ctx*, int, int) [function] [call site] 00004
2 vpx_codec_control_ [function] [call site] 00005
1 mem_get_le32_as_int(void const*) [function] [call site] 00006
1 vpx_codec_decode [function] [call site] 00007
2 get_alg_priv [function] [call site] 00008
1 vpx_codec_get_frame [function] [call site] 00009
2 get_alg_priv [function] [call site] 00010
1 vpx_codec_destroy [function] [call site] 00011