Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
2	2	1 : View List ['VP8LSetEndOfStream']	2	2	VP8LReadBits	call site: 00055	/src/libwebp/src/utils/bit_reader_utils.c:212
0	23	1 : View List ['MuxImageCount']	0	23	SearchImageToGetOrDelete	call site: 00182	/src/libwebp/src/mux/muxinternal.c:284
0	0	None	0	503	ParseVP8XChunks	call site: 00000	/src/libwebp/src/demux/demux.c:518
0	0	None	0	18	MuxImageParse	call site: 00079	/src/libwebp/src/mux/muxread.c:119
0	0	None	0	18	MuxImageParse	call site: 00087	/src/libwebp/src/mux/muxread.c:155
0	0	None	0	17	MuxImageCount	call site: 00120	/src/libwebp/src/mux/muxinternal.c:262
0	0	None	0	3	ParseSingleImage	call site: 00000	/src/libwebp/src/demux/demux.c:435
0	0	None	0	3	ParseAnimationFrame	call site: 00000	/src/libwebp/src/demux/demux.c:347
0	0	None	0	0	VP8LGetInfo	call site: 00053	/src/libwebp/src/dec/vp8l_dec.c:147
0	0	None	0	0	WebPGetFeaturesInternal	call site: 00246	/src/libwebp/src/dec/webp_dec.c:746
0	0	None	0	0	ParseHeadersInternal	call site: 00259	/src/libwebp/src/dec/webp_dec.c:331
0	0	None	0	0	ParseHeadersInternal	call site: 00259	/src/libwebp/src/dec/webp_dec.c:337

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           WebPDataInit

[function] [call site] 00001


           WebPMuxCreate

[function] [call site] 00002


             WebPMuxCreateInternal

[function] [call site] 00003


               ChunkInit

[function] [call site] 00004


                 __assert_fail

[call site] 00005


               GetLE32

[function] [call site] 00006


                 GetLE16

[function] [call site] 00007


               GetLE32

[function] [call site] 00008


               WebPMuxNew

[function] [call site] 00009


                 WebPNewInternal

[function] [call site] 00010


                   WebPSafeMalloc

[function] [call site] 00011


                     CheckSizeArgumentsOverflow

[function] [call site] 00012


                       CheckSizeOverflow

[function] [call site] 00013


                     __assert_fail

[call site] 00014


                   MuxInit

[function] [call site] 00015


                     __assert_fail

[call site] 00016


               GetLE32

[function] [call site] 00017


               GetLE32

[function] [call site] 00018


               SizeWithPadding

[function] [call site] 00019


                 __assert_fail

[call site] 00020


               WebPSafeMalloc

[function] [call site] 00021


               MuxImageInit

[function] [call site] 00022


                 __assert_fail

[call site] 00023


               ChunkVerifyAndAssign

[function] [call site] 00024


                 GetLE32

[function] [call site] 00025


                 SizeWithPadding

[function] [call site] 00026


                 GetLE32

[function] [call site] 00027


                 ChunkAssignData

[function] [call site] 00028


                   ChunkRelease

[function] [call site] 00029


                     WebPDataClear

[function] [call site] 00030


                       WebPFree

[function] [call site] 00031


                         WebPSafeFree

[function] [call site] 00032


                       WebPDataInit

[function] [call site] 00033


                     ChunkInit

[function] [call site] 00034


                   WebPDataCopy

[function] [call site] 00035


                     WebPDataInit

[function] [call site] 00036


                     WebPMalloc

[function] [call site] 00037


                       WebPSafeMalloc

[function] [call site] 00038


               ChunkDiskSize

[function] [call site] 00039


                 SizeWithPadding

[function] [call site] 00040


               ChunkGetIdFromTag

[function] [call site] 00041


               ChunkSetHead

[function] [call site] 00042


                 __assert_fail

[call site] 00043


                 WebPSafeMalloc

[function] [call site] 00044


               ChunkSetHead

[function] [call site] 00045


               MuxImageFinalize

[function] [call site] 00046


                 VP8LGetInfo

[function] [call site] 00047


                   VP8LCheckSignature

[function] [call site] 00048


                   VP8LInitBitReader

[function] [call site] 00049


                     __assert_fail

[call site] 00050


                     __assert_fail

[call site] 00051


                     __assert_fail

[call site] 00052


                   ReadImageInfo

[function] [call site] 00053


                     VP8LReadBits

[function] [call site] 00054


                       __assert_fail

[call site] 00055


                       VP8LPrefetchBits

[function] [call site] 00056


                       ShiftBytes

[function] [call site] 00057


                         VP8LIsEndOfStream

[function] [call site] 00058


                           __assert_fail

[call site] 00059


                         VP8LSetEndOfStream

[function] [call site] 00060


                       VP8LSetEndOfStream

[function] [call site] 00061


                     VP8LReadBits

[function] [call site] 00062


                     VP8LReadBits

[function] [call site] 00063


                     VP8LReadBits

[function] [call site] 00064


                     VP8LReadBits

[function] [call site] 00065


                 VP8GetInfo

[function] [call site] 00066


                   VP8CheckSignature

[function] [call site] 00067


                 __assert_fail

[call site] 00068


                 ChunkDelete

[function] [call site] 00069


                   ChunkRelease

[function] [call site] 00070


                   WebPSafeFree

[function] [call site] 00071


               MuxImagePush

[function] [call site] 00072


                 WebPSafeMalloc

[function] [call site] 00073


               MuxImageInit

[function] [call site] 00074


               MuxImageParse

[function] [call site] 00075


                 ChunkInit

[function] [call site] 00076


                 __assert_fail

[call site] 00077


                 __assert_fail

[call site] 00078


                 ChunkAssignData

[function] [call site] 00079


                 ChunkDiskSize

[function] [call site] 00080


                 ChunkInit

[function] [call site] 00081


                 ChunkVerifyAndAssign

[function] [call site] 00082


                 ChunkGetIdFromTag

[function] [call site] 00083


                 ChunkSetHead

[function] [call site] 00084


                 ChunkSetHead

[function] [call site] 00085


                 MuxImageFinalize

[function] [call site] 00086


                 ChunkAppend

[function] [call site] 00087


                   __assert_fail

[call site] 00088


                   ChunkSetHead

[function] [call site] 00089


                   ChunkSetHead

[function] [call site] 00090


                 ChunkDiskSize

[function] [call site] 00091


                 ChunkRelease

[function] [call site] 00092


               ChunkRelease

[function] [call site] 00093


               MuxGetChunkListFromId

[function] [call site] 00094


                 __assert_fail

[call site] 00095


               ChunkAppend

[function] [call site] 00096


               GetLE24

[function] [call site] 00097


                 GetLE16

[function] [call site] 00098


               GetLE24

[function] [call site] 00099


               ChunkInit

[function] [call site] 00100


               MuxValidate

[function] [call site] 00101


                 WebPMuxGetFeatures

[function] [call site] 00102


                   MuxGetCanvasInfo

[function] [call site] 00103


                     __assert_fail

[call site] 00104


                     MuxGet

[function] [call site] 00105


                       __assert_fail

[call site] 00106


                       IsWPI

[function] [call site] 00107


                       __assert_fail

[call site] 00108


                       WebPDataInit

[function] [call site] 00109


                       ChunkSearchList

[function] [call site] 00110


                         ChunkSearchNextInList

[function] [call site] 00111


                       ChunkSearchList

[function] [call site] 00112


                       ChunkSearchList

[function] [call site] 00113


                       ChunkSearchList

[function] [call site] 00114


                       ChunkSearchList

[function] [call site] 00115


                     GetLE32

[function] [call site] 00116


                     GetLE24

[function] [call site] 00117


                     GetLE24

[function] [call site] 00118


                     ValidateForSingleImage

[function] [call site] 00119


                       MuxImageCount

[function] [call site] 00120


                         GetChunkListFromId

[function] [call site] 00121


                           __assert_fail

[call site] 00122


                         ChunkGetIdFromTag

[function] [call site] 00123


                       MuxImageCount

[function] [call site] 00124


                     __assert_fail

[call site] 00125


                 ValidateChunk

[function] [call site] 00126


                   WebPMuxNumChunks

[function] [call site] 00127


                     IsWPI

[function] [call site] 00128


                     MuxImageCount

[function] [call site] 00129


                     MuxGetChunkListFromId

[function] [call site] 00130


                     ChunkGetIndexFromId

[function] [call site] 00131


                     CountChunks

[function] [call site] 00132


                   IsNotCompatible

[function] [call site] 00133


                 ValidateChunk

[function] [call site] 00134


                 ValidateChunk

[function] [call site] 00135


                 ValidateChunk

[function] [call site] 00136


                 ValidateChunk

[function] [call site] 00137


                 ValidateChunk

[function] [call site] 00138


                 ValidateChunk

[function] [call site] 00139


                 MuxHasAlpha

[function] [call site] 00140


                 WebPMuxNumChunks

[function] [call site] 00141


               MuxImageDelete

[function] [call site] 00142


                 MuxImageRelease

[function] [call site] 00143


                   ChunkListDelete

[function] [call site] 00144


                     ChunkDelete

[function] [call site] 00145


                   ChunkListDelete

[function] [call site] 00146


                   ChunkListDelete

[function] [call site] 00147


                   MuxImageInit

[function] [call site] 00148


                 WebPSafeFree

[function] [call site] 00149


               ChunkRelease

[function] [call site] 00150


               MuxImageDelete

[function] [call site] 00151


               WebPMuxDelete

[function] [call site] 00152


                 MuxRelease

[function] [call site] 00153


                   __assert_fail

[call site] 00154


                   DeleteAllImages

[function] [call site] 00155


                   ChunkListDelete

[function] [call site] 00156


                   ChunkListDelete

[function] [call site] 00157


                   ChunkListDelete

[function] [call site] 00158


                   ChunkListDelete

[function] [call site] 00159


                   ChunkListDelete

[function] [call site] 00160


                   ChunkListDelete

[function] [call site] 00161


                 WebPSafeFree

[function] [call site] 00162


           WebPMuxGetChunk

[function] [call site] 00163


             ChunkGetIndexFromFourCC

[function] [call site] 00164


               ChunkGetTagFromFourCC

[function] [call site] 00165


               ChunkGetIndexFromTag

[function] [call site] 00166


             IsWPI

[function] [call site] 00167


             MuxGet

[function] [call site] 00168


             ChunkGetTagFromFourCC

[function] [call site] 00169


           WebPMuxGetChunk

[function] [call site] 00170


           WebPMuxGetChunk

[function] [call site] 00171


           WebPMuxGetFeatures

[function] [call site] 00172


           WebPMuxGetAnimationParams

[function] [call site] 00173


             MuxGet

[function] [call site] 00174


             GetLE32

[function] [call site] 00175


             GetLE16

[function] [call site] 00176


           WebPMuxGetFrame

[function] [call site] 00177


             MuxImageGetNth

[function] [call site] 00178


               __assert_fail

[call site] 00179


               __assert_fail

[call site] 00180


               SearchImageToGetOrDelete

[function] [call site] 00181


                 __assert_fail

[call site] 00182


             MuxGetImageInternal

[function] [call site] 00183


               ChunkGetIdFromTag

[function] [call site] 00184


               SynthesizeBitstream

[function] [call site] 00185


                 ChunkDiskSize

[function] [call site] 00186


                 ChunkDiskSize

[function] [call site] 00187


                 WebPSafeMalloc

[function] [call site] 00188


                 __assert_fail

[call site] 00189


                 __assert_fail

[call site] 00190


                 MuxEmitRiffHeader

[function] [call site] 00191


                   PutLE32

[function] [call site] 00192


                     PutLE16

[function] [call site] 00193


                       __assert_fail

[call site] 00194


                     PutLE16

[function] [call site] 00195


                   PutLE32

[function] [call site] 00196


                   __assert_fail

[call site] 00197


                   PutLE32

[function] [call site] 00198


                 EmitVP8XChunk

[function] [call site] 00199


                   __assert_fail

[call site] 00200


                   __assert_fail

[call site] 00201


                   __assert_fail

[call site] 00202


                   PutLE32

[function] [call site] 00203


                   PutLE32

[function] [call site] 00204


                   PutLE32

[function] [call site] 00205


                   PutLE24

[function] [call site] 00206


                     __assert_fail

[call site] 00207


                     PutLE16

[function] [call site] 00208


                   PutLE24

[function] [call site] 00209


                 ChunkListEmit

[function] [call site] 00210


                   ChunkEmit

[function] [call site] 00211


                     __assert_fail

[call site] 00212


                     __assert_fail

[call site] 00213


                     PutLE32

[function] [call site] 00214


                     PutLE32

[function] [call site] 00215


                     __assert_fail

[call site] 00216


                     ChunkDiskSize

[function] [call site] 00217


                 ChunkListEmit

[function] [call site] 00218


                 __assert_fail

[call site] 00219


             MuxGetFrameInternal

[function] [call site] 00220


               __assert_fail

[call site] 00221


               GetLE24

[function] [call site] 00222


               GetLE24

[function] [call site] 00223


               GetLE24

[function] [call site] 00224


               ChunkGetIdFromTag

[function] [call site] 00225


               SynthesizeBitstream

[function] [call site] 00226


           WebPDataClear

[function] [call site] 00227


             WebPDataInit

[function] [call site] 00228


           WebPMuxDelete

[function] [call site] 00229


           WebPDemuxPartial

[function] [call site] 00230


             WebPDemuxInternal

[function] [call site] 00231


               InitMemBuffer

[function] [call site] 00232


                 RemapMemBuffer

[function] [call site] 00233


               ReadHeader

[function] [call site] 00234


                 MemDataSize

[function] [call site] 00235


                 GetBuffer

[function] [call site] 00236


                 memcmp

[call site] 00237


                 GetBuffer

[function] [call site] 00238


                 memcmp

[call site] 00239


                 GetBuffer

[function] [call site] 00240


                 GetLE32

[function] [call site] 00241


                   GetLE16

[function] [call site] 00242


                 Skip

[function] [call site] 00243


               CreateRawImageDemuxer

[function] [call site] 00244


                 WebPGetFeatures

[function] [call site] 00245


                   WebPGetFeaturesInternal

[function] [call site] 00246


                     GetFeatures

[function] [call site] 00247


                       DefaultFeatures

[function] [call site] 00248


                         __assert_fail

[call site] 00249


                       ParseHeadersInternal

[function] [call site] 00250


                         ParseRIFF

[function] [call site] 00251


                           __assert_fail

[call site] 00252


                           __assert_fail

[call site] 00253


                           __assert_fail

[call site] 00254


                           memcmp

[call site] 00255


                           memcmp

[call site] 00256


                           GetLE32

[function] [call site] 00257


                             GetLE16

[function] [call site] 00258


                         ParseVP8X

[function] [call site] 00259


                           __assert_fail

[call site] 00260


                           __assert_fail

[call site] 00261


                           __assert_fail

[call site] 00262


                           GetLE32

[function] [call site] 00263


                           GetLE32

[function] [call site] 00264


                           GetLE24

[function] [call site] 00265


                             GetLE16

[function] [call site] 00266


                           GetLE24

[function] [call site] 00267


                         memcmp

[call site] 00268


                         ParseOptionalChunks

[function] [call site] 00269


                           __assert_fail

[call site] 00270


                           __assert_fail

[call site] 00271


                           __assert_fail

[call site] 00272


                           __assert_fail

[call site] 00273


                           GetLE32

[function] [call site] 00274


                           memcmp

[call site] 00275


                           memcmp

[call site] 00276


                           memcmp

[call site] 00277


                         ParseVP8Header

[function] [call site] 00278


                           memcmp

[call site] 00279


                           memcmp

[call site] 00280


                           __assert_fail

[call site] 00281


                           __assert_fail

[call site] 00282


                           __assert_fail

[call site] 00283


                           __assert_fail

[call site] 00284


                           GetLE32

[function] [call site] 00285


                           VP8LCheckSignature

[function] [call site] 00286


                         VP8GetInfo

[function] [call site] 00287


                         VP8LGetInfo

[function] [call site] 00288


                         __assert_fail

[call site] 00289


                         __assert_fail

[call site] 00290


                 WebPSafeCalloc

[function] [call site] 00291


                   CheckSizeArgumentsOverflow

[function] [call site] 00292


                   __assert_fail

[call site] 00293


                   calloc

[call site] 00294


                 WebPSafeCalloc

[function] [call site] 00295


                 InitDemux

[function] [call site] 00296


                 SetFrameInfo

[function] [call site] 00297


                 AddFrame

[function] [call site] 00298


                 IsValidSimpleFormat

[function] [call site] 00299


                 __assert_fail

[call site] 00300


                 WebPSafeFree

[function] [call site] 00301


                 WebPSafeFree

[function] [call site] 00302


               WebPSafeCalloc

[function] [call site] 00303


               InitDemux

[function] [call site] 00304


               GetBuffer

[function] [call site] 00305


               memcmp

[call site] 00306


               WebPDemuxDelete

[function] [call site] 00307


                 WebPSafeFree

[function] [call site] 00308


                 WebPSafeFree

[function] [call site] 00309


                 WebPSafeFree

[function] [call site] 00310


           WebPDemuxDelete

[function] [call site] 00311


           WebPDemux

[function] [call site] 00312


             WebPDemuxInternal

[function] [call site] 00313


           WebPDemuxGetChunk

[function] [call site] 00314


             SetChunk

[function] [call site] 00315


               ChunkCount

[function] [call site] 00316


                 memcmp

[call site] 00317


               GetChunk

[function] [call site] 00318


                 memcmp

[call site] 00319


           WebPDemuxNextChunk

[function] [call site] 00320


             SetChunk

[function] [call site] 00321


           WebPDemuxReleaseChunkIterator

[function] [call site] 00322


           WebPDemuxGetChunk

[function] [call site] 00323


           WebPDemuxPrevChunk

[function] [call site] 00324


             SetChunk

[function] [call site] 00325


           WebPDemuxReleaseChunkIterator

[function] [call site] 00326


           WebPDemuxGetFrame

[function] [call site] 00327


             SetFrame

[function] [call site] 00328


               GetFrame

[function] [call site] 00329


               SynthesizeFrame

[function] [call site] 00330


                 GetFramePayload

[function] [call site] 00331


                 __assert_fail

[call site] 00332


           WebPDemuxNextFrame

[function] [call site] 00333


             SetFrame

[function] [call site] 00334


           WebPDemuxReleaseIterator

[function] [call site] 00335


           WebPDemuxDelete

[function] [call site] 00336