Fuzz introspector: vpx_dec_fuzzer_vp8
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
400 458 10 :

['vp8_multiframe_quality_enhance', 'vpx_internal_error', 'vpx_plane_add_noise_sse2', 'vp8_deblock', 'vpx_clear_system_state', 'vp8_yv12_alloc_frame_buffer', 'vp8_de_mblock', 'vpx_setup_noise', 'vp8_yv12_copy_frame_c', 'vpx_calloc']

400 458 vp8_post_proc_frame call site: 00000 /src/libvpx/vp8/common/postproc.c:159
0 0 None 28 35 check_fragments_for_errors call site: 00000 /src/libvpx/vp8/decoder/onyxd_if.c:271
0 0 None 10 126 vp8_decoder_create_threads call site: 00000 /src/libvpx/vp8/decoder/threading.c:626
0 0 None 8 1077 vp8_decode call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:365
0 0 None 8 17 vp8_decoder_create_threads call site: 00000 /src/libvpx/vp8/decoder/threading.c:639
0 0 None 4 1073 vp8_decode call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:407
0 0 None 4 1066 vp8_decode call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:413
0 0 None 4 969 vp8_decode call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:425
0 0 None 0 2747 vp8_decode_frame call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:915
0 0 None 0 2692 vp8_decode_frame call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:978
0 0 None 0 288 vp8_get_frame call site: 00000 /src/libvpx/vp8/vp8_dx_iface.c:535
0 0 None 0 55 setup_token_decoder call site: 00000 /src/libvpx/vp8/decoder/decodeframe.c:777

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 vpx_codec_vp8_dx [function] [call site] 00001
1 vpx_codec_dec_init_ver [function] [call site] 00002
2 vpx_codec_destroy [function] [call site] 00003
1 vpx_codec_control_VP9D_SET_LOOP_FILTER_OPT(vpx_codec_ctx*, int, int) [function] [call site] 00004
2 vpx_codec_control_ [function] [call site] 00005
1 mem_get_le32_as_int(void const*) [function] [call site] 00006
1 vpx_codec_vp8_dx [function] [call site] 00007
1 vpx_codec_peek_stream_info [function] [call site] 00008
1 vpx_codec_decode [function] [call site] 00009
1 vpx_codec_get_frame [function] [call site] 00010
1 vpx_codec_destroy [function] [call site] 00011