Fuzz introspector: vpx_enc_fuzzer_vp8_nalloc
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
6 21 calloc call site: 00021 fprintf
3 4 nalloc_init call site: 00004 getenv
1 2 nalloc_init call site: 00002 atoi
1 14 LLVMFuzzerTestOneInput call site: 00014 vpx_codec_destroy
1 16 LLVMFuzzerTestOneInput call site: 00016 img_alloc_helper
1 19 img_alloc_helper call site: 00019 calloc
1 36 img_alloc_helper call site: 00036 vpx_img_free
1 41 LLVMFuzzerTestOneInput call site: 00041

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 nalloc_init [function] [call site] 00001
2 getenv [call site] 00002
2 atoi [call site] 00003
2 strstr [call site] 00004
2 getenv [call site] 00005
2 strtol [call site] 00006
2 getenv [call site] 00007
1 vpx_codec_vp8_cx [function] [call site] 00008
1 vpx_codec_enc_config_default [function] [call site] 00009
2 __assert_fail [call site] 00010
1 abort [call site] 00011
1 fopen [call site] 00012
1 vpx_codec_vp8_cx [function] [call site] 00013
1 vpx_codec_enc_init_ver [function] [call site] 00014
2 vpx_codec_destroy [function] [call site] 00015
1 vpx_img_alloc [function] [call site] 00016
2 img_alloc_helper [function] [call site] 00017
3 __assert_fail [call site] 00018
3 __assert_fail [call site] 00019
3 calloc [function] [call site] 00020
4 nalloc_fail(unsigned long, char const*) [function] [call site] 00021
5 nalloc_random_update(unsigned char) [function] [call site] 00022
5 nalloc_random_update(unsigned char) [function] [call site] 00023
5 nalloc_random_update(unsigned char) [function] [call site] 00024
5 nalloc_backtrace_exclude(unsigned long, char const*) [function] [call site] 00025
6 fprintf [call site] 00026
4 __errno_location [call site] 00027
4 __cxa_call_unexpected [call site] 00028
4 __libc_calloc [call site] 00029
3 vpx_memalign [function] [call site] 00030
4 get_aligned_malloc_size [function] [call site] 00031
4 check_size_argument_overflow [function] [call site] 00032
4 set_actual_malloc_address [function] [call site] 00033
5 get_malloc_address_location [function] [call site] 00034
3 vpx_img_set_rect [function] [call site] 00035
3 __assert_fail [call site] 00036
3 vpx_img_free [function] [call site] 00037
4 vpx_free [function] [call site] 00038
5 get_actual_malloc_address [function] [call site] 00039
6 get_malloc_address_location [function] [call site] 00040
1 nalloc_start(unsigned char const*, unsigned long) [function] [call site] 00041
2 nalloc_random_update(unsigned char) [function] [call site] 00042
1 fuzz_vpx_img_read(vpx_image*, unsigned char const*, unsigned long) [function] [call site] 00043
2 vpx_img_plane_width(vpx_image const*, int) [function] [call site] 00044
2 vpx_img_plane_height(vpx_image const*, int) [function] [call site] 00045
1 encode_frame(vpx_codec_ctx*, vpx_image*, int, int, _IO_FILE*, unsigned long) [function] [call site] 00046
2 vpx_codec_encode [function] [call site] 00047
3 x87_set_double_precision [function] [call site] 00048
4 x87_get_control_word [function] [call site] 00049
4 x87_set_control_word [function] [call site] 00050
3 x87_set_control_word [function] [call site] 00051
2 vpx_codec_get_cx_data [function] [call site] 00052
2 fwrite [call site] 00053
1 encode_frame(vpx_codec_ctx*, vpx_image*, int, int, _IO_FILE*, unsigned long) [function] [call site] 00054
1 nalloc_end() [function] [call site] 00055
1 vpx_img_free [function] [call site] 00056
1 vpx_codec_destroy [function] [call site] 00057
1 fclose [call site] 00058