Fuzz introspector
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues
Project coverage
Per-fuzzer coverage

Table of contents

Project overview: libxaac
High level conclusions
Reachability and coverage overview
Fuzzers overview
Project functions overview
Fuzzer details
Fuzzer: xaac_enc_fuzzer
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Fuzzer: xaac_dec_fuzzer
Call tree
Fuzz blockers
Runtime coverage analysis
Files reached
Analyses and suggestions
Optimal target analysis
Remaining optimal interesting functions
All functions overview
Fuzz engine guidance
/src/libxaac/fuzzer/xaac_enc_fuzzer.cpp
Dictionary
Fuzzer function priority
/src/libxaac/fuzzer/xaac_dec_fuzzer.cpp
Dictionary
Fuzzer function priority
Runtime coverage analysis
Complex functions with low coverage
Files and Directories in report
Files in report
Directories in report
Metadata section
Report generation date: 2025-09-17

Project overview: libxaac

High level conclusions

Reachability and coverage overview

Functions statically reachable by fuzzers
95.0%
2236 / 2351
Cyclomatic complexity statically reachable by fuzzers
96.0%
35019 / 36515
Runtime code coverage of functions
86.0%
2023 / 2351

Fuzzers overview

Fuzzer Fuzzer filename Functions Reached Functions unreached Fuzzer depth Files reached Basic blocks reached Cyclomatic complexity Details
xaac_enc_fuzzer /src/libxaac/fuzzer/xaac_enc_fuzzer.cpp 1023 50 14 124 39704 15383 xaac_enc_fuzzer.cpp
xaac_dec_fuzzer /src/libxaac/fuzzer/xaac_dec_fuzzer.cpp 1280 97 16 140 50745 19794 xaac_dec_fuzzer.cpp

Project functions overview

The following table shows data about each function in the project. The functions included in this table correspond to all functions that exist in the executables of the fuzzers. As such, there may be functions that are from third-party libraries.

For further technical details on the meaning of columns in the below table, please see the Glossary .

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzzer details

Fuzzer: xaac_enc_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 621 18.7%
gold [1:9] 1 0.03%
yellow [10:29] 4 0.12%
greenyellow [30:49] 1 0.03%
lawngreen 50+ 2681 81.0%
All colors 3308 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
154 315 impd_drc_write_uni_drc_config_extn call site: 00315 impd_drc_write_eq_instructions
59 204 impd_drc_write_uni_drc_config_extn call site: 00204 impd_drc_write_drc_coeff_parametric_drc
29 285 impd_drc_write_uni_drc_config_extn call site: 00285 impd_drc_write_loud_eq_instructions
29 2915 iusace_acelp_quant_4p_4nbits call site: 02915 iusace_acelp_quant_6p_6n_2bits
22 1405 ixheaace_mps_515_huff_enc_icc call site: 01405 ixheaace_mps_515_apply_huff_coding
16 2350 ia_enhaacplus_enc_write_bitstream call site: 02350 ia_enhaacplus_enc_write_pce
15 1581 ia_dft_hbe_apply_polar_t_3 call site: 01581 ia_dft_hbe_apply_polar_t
14 183 impd_drc_write_drc_coeff_uni_drc call site: 00183 impd_drc_write_shape_filter_block_params
12 676 ixheaace_mps_212_apply_huff_coding call site: 00676 ixheaace_mps_212_apply_huff_coding
10 169 impd_drc_write_drc_coeff_uni_drc call site: 00169 impd_drc_write_split_drc_characteristic
10 2424 ia_enhaacplus_enc_encode_spectral_data call site: 02424 ia_enhaacplus_enc_write_single_channel_ind_coupling_element
9 661 ixheaace_mps_212_calc_huff_bits call site: 00661 ixheaace_mps_212_calc_huff_bits

Runtime coverage analysis

Covered functions
938
Functions that are reachable but not covered
100
Reachable functions
1023
Percentage of reachable functions covered
90.22%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/libxaac/fuzzer/xaac_enc_fuzzer.cpp 7
/src/libxaac/encoder/ixheaace_loudness_measurement.c 9
/src/libxaac/encoder/ixheaace_api.c 24
/src/libxaac/encoder/ixheaace_enc_init.c 10
/src/libxaac/encoder/ixheaace_sbr_main.c 18
/src/libxaac/encoder/iusace_enc_main.c 11
/src/libxaac/encoder/drc_src/impd_drc_api.c 5
/src/libxaac/encoder/drc_src/impd_drc_enc.c 5
/src/libxaac/encoder/ixheaace_resampler.c 12
/src/libxaac/encoder/ixheaace_mps_enc.c 25
/src/libxaac/encoder/drc_src/impd_drc_mux.c 51
/src/libxaac/encoder/iusace_bitbuffer.c 4
/src/libxaac/encoder/drc_src/impd_drc_uni_drc_filter_bank.c 2
/src/libxaac/encoder/drc_src/impd_drc_uni_drc_eq.c 33
/src/libxaac/common/ixheaac_basic_ops32.h 8
/src/libxaac/encoder/ixheaace_qc_util.c 9
/src/libxaac/encoder/ixheaace_mps_param_extract.c 7
/src/libxaac/encoder/ixheaace_mps_tree.c 3
/src/libxaac/encoder/ixheaace_mps_qmf.c 4
/src/libxaac/encoder/ixheaace_mps_filter.c 2
/src/libxaac/encoder/ixheaace_mps_onset_detect.c 3
/src/libxaac/encoder/ixheaace_mps_frame_windowing.c 5
/src/libxaac/encoder/ixheaace_mps_static_gain.c 1
/src/libxaac/encoder/ixheaace_mps_dmx_tdom_enh.c 4
/src/libxaac/encoder/ixheaace_mps_bitstream.c 16
/src/libxaac/encoder/ixheaace_bitbuffer.c 6
/src/libxaac/encoder/ixheaace_bitbuffer_hp.c 2
/src/libxaac/encoder/ixheaace_mps_delay.c 1
/src/libxaac/encoder/ixheaace_mps_nlc_enc.c 26
/src/libxaac/encoder/ixheaace_ps_enc_init.c 2
/src/libxaac/encoder/ixheaace_sbr_freq_scaling.c 14
/src/libxaac/encoder/ixheaace_sbr_misc.c 4
/src/libxaac/encoder/ixheaace_sbr_qmf_enc_init.c 2
/src/libxaac/encoder/ixheaace_sbr_ton_corr.c 4
/src/libxaac/encoder/ixheaace_sbr_noise_floor_est.c 6
/src/libxaac/encoder/ixheaace_sbr_inv_filtering_estimation.c 6
/src/libxaac/encoder/ixheaace_sbr_missing_harmonics_det.c 10
/src/libxaac/encoder/ixheaace_sbr_env_est_init.c 1
/src/libxaac/encoder/ixheaace_sbr_code_envelope.c 2
/src/libxaac/encoder/ixheaace_sbr_frame_info_gen.c 18
/src/libxaac/encoder/ixheaace_sbr_tran_det.c 5
/src/libxaac/encoder/iusace_esbr_inter_tes.c 8
/src/libxaac/encoder/ixheaace_sbr_hbe_dft_trans.c 13
/src/libxaac/encoder/ixheaace_sbr_env_est.c 18
/src/libxaac/encoder/ixheaace_sbr_hbe_trans.c 15
/src/libxaac/encoder/ixheaace_hybrid_init.c 1
/src/libxaac/encoder/iusace_esbr_pvc.c 11
/src/libxaac/encoder/ixheaace_resampler_init.c 2
/src/libxaac/encoder/ixheaace_channel_map.c 3
/src/libxaac/encoder/ixheaace_psy_mod.c 7
/src/libxaac/encoder/ixheaace_psy_configuration.c 10
/src/libxaac/encoder/ixheaace_tns_init.c 4
/src/libxaac/encoder/ixheaace_tns_params.c 2
/src/libxaac/encoder/ixheaace_block_switch.c 8
/src/libxaac/encoder/ixheaace_psy_utils.c 2
/src/libxaac/encoder/ixheaace_adjust_threshold.c 18
/src/libxaac/encoder/ixheaace_dynamic_bits.c 15
/src/libxaac/encoder/ixheaace_stereo_preproc.c 3
/src/libxaac/encoder/ixheaace_asc_write.c 13
/src/libxaac/encoder/drc_src/impd_drc_gain_calculator.c 8
/src/libxaac/encoder/ixheaace_basic_ops.c 2
/src/libxaac/encoder/drc_src/impd_drc_tables.c 5
/src/libxaac/encoder/ixheaace_fd_qc_util.c 6
/src/libxaac/encoder/iusace_psy_mod.c 3
/src/libxaac/encoder/iusace_psy_utils.c 13
/src/libxaac/encoder/ixheaace_fd_qc_adjthr.c 29
/src/libxaac/encoder/ixheaace_signal_classifier.c 9
/src/libxaac/encoder/iusace_block_switch.c 8
/src/libxaac/encoder/iusace_tns_usac.c 12
/src/libxaac/encoder/iusace_lpd_enc.c 8
/src/libxaac/encoder/ixheaace_mps_dct.c 2
/src/libxaac/encoder/ixheaace_fft.c 36
/src/libxaac/encoder/iusace_basic_ops_flt.h 2
/src/libxaac/encoder/ixheaace_mps_vector_functions.c 3
/src/libxaac/encoder/ixheaace_mps_polyphase.c 16
/src/libxaac/encoder/ixheaace_mps_hybrid_filter.c 5
/src/libxaac/encoder/ixheaace_sbr_crc.c 3
/src/libxaac/encoder/iusace_fft.c 13
/src/libxaac/encoder/ixheaace_sbr_qmf_enc.c 22
/src/libxaac/encoder/ixheaace_sbr_hbe_polyphase.c 3
/src/libxaac/encoder/ixheaace_ps_enc.c 3
/src/libxaac/encoder/ixheaace_hybrid.c 4
/src/libxaac/encoder/ixheaace_radix2_fft.c 2
/src/libxaac/encoder/ixheaace_sbr_ton_corr_hp.c 2
/src/libxaac/encoder/ixheaace_sbr_tran_det_hp.c 7
/src/libxaac/encoder/ixheaace_sbr_code_envelope_lp.c 2
/src/libxaac/encoder/ixheaace_sbr_write_bitstream.c 23
/src/libxaac/encoder/ixheaace_ps_bitenc.c 3
/src/libxaac/encoder/ixheaace_enc_main.c 1
/src/libxaac/encoder/ixheaace_mdct_480.c 4
/src/libxaac/encoder/ixheaace_calc_ms_band_energy.c 2
/src/libxaac/encoder/ixheaace_tns.c 10
/src/libxaac/encoder/ixheaace_tns_hp.c 3
/src/libxaac/encoder/ixheaace_psy_utils_spreading.c 1
/src/libxaac/encoder/ixheaace_group_data.c 1
/src/libxaac/encoder/ixheaace_ms_stereo.c 1
/src/libxaac/encoder/ixheaace_interface.c 1
/src/libxaac/encoder/ixheaace_qc_main_hp.c 2
/src/libxaac/encoder/ixheaace_static_bits.c 4
/src/libxaac/encoder/ixheaace_sf_estimation.c 12
/src/libxaac/encoder/ixheaace_quant.c 1
/src/libxaac/encoder/ixheaace_bits_count.c 3
/src/libxaac/encoder/ixheaace_write_bitstream.c 18
/src/libxaac/encoder/ixheaace_write_adts_adif.c 4
/src/libxaac/encoder/ixheaace_fd_mdct.c 3
/src/libxaac/encoder/iusace_windowing.c 5
/src/libxaac/encoder/iusace_ms.c 2
/src/libxaac/encoder/ixheaace_fd_quant.c 7
/src/libxaac/encoder/ixheaace_cplx_pred.c 8
/src/libxaac/encoder/drc_src/impd_drc_gain_enc.c 9
/src/libxaac/encoder/iusace_lpd_utils.c 20
/src/libxaac/encoder/iusace_lpc.c 8
/src/libxaac/encoder/iusace_lpc_avq.c 5
/src/libxaac/encoder/iusace_avq_enc.c 9
/src/libxaac/encoder/iusace_fd_fac.c 3
/src/libxaac/encoder/iusace_tcx_mdct.c 6
/src/libxaac/encoder/iusace_enc_fac.c 7
/src/libxaac/encoder/iusace_acelp_enc.c 1
/src/libxaac/encoder/iusace_acelp_tools.c 17
/src/libxaac/encoder/iusace_tcx_enc.c 6
/src/libxaac/encoder/iusace_arith_enc.c 9
/src/libxaac/encoder/ixheaace_fd_enc.c 1
/src/libxaac/encoder/iusace_write_bitstream.c 10
/src/libxaac/encoder/ixheaace_nf.c 2

Fuzzer: xaac_dec_fuzzer

Call tree

The calltree shows the control flow of the fuzzer. This is overlaid with coverage information to display how much of the potential code a fuzzer can reach is in fact covered at runtime. In the following there is a link to a detailed calltree visualisation as well as a bitmap showing a high-level view of the calltree. For further information about these topics please see the glossary for full calltree and calltree overview

Full calltree

Call tree overview bitmap:

The distribution of callsites in terms of coloring is
Color Runtime hitcount Callsite count Percentage
red 0 1201 16.7%
gold [1:9] 40 0.55%
yellow [10:29] 63 0.88%
greenyellow [30:49] 41 0.57%
lawngreen 50+ 5807 81.1%
All colors 7152 100

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
222 2584 ixheaacd_cplx_synt_qmffilt call site: 02584 ixheaacd_init_rot_env
104 6842 impd_init_selected_drc_set call site: 06842 impd_derive_eq_set
49 5721 ixheaacd_mps_sqrt call site: 05721 ixheaacd_mps_div_32
42 3965 ixheaacd_drc_map_channels call site: 03965 ixheaacd_aac_apply_ec
40 2895 ixheaacd_sbr_qmfsyn64_winadd call site: 02895 ixheaacd_cplx_synt_qmffilt
36 1180 ixheaacd_qmf_hbe_data_reinit call site: 01180 ixheaacd_dft_hbe_apply
36 5849 ixheaacd_calc_m1m2_5151 call site: 05849 ixheaacd_calc_m1m2_51s2
36 6128 ixheaacd_apply_frame call site: 06128 ixheaacd_measure_tonality
34 1975 ixheaacd_sbr_dec call site: 01975 ixheaacd_sbr_qmfanal32_winadd
28 446 ixheaacd_core_coder_data call site: 00446 ixheaacd_fd_frm_dec
27 2554 ixheaacd_harm_idx_onethree call site: 02554 ixheaacd_harm_idx_onethreelp
26 2227 ixheaacd_fwd_modulation call site: 02227 ixheaacd_dct3_32

Runtime coverage analysis

Covered functions
1104
Functions that are reachable but not covered
214
Reachable functions
1280
Percentage of reachable functions covered
83.28%
NB: The sum of covered functions and functions that are reachable but not covered need not be equal to Reachable functions . This is because the reachability analysis is an approximation and thus at runtime some functions may be covered that are not included in the reachability analysis. This is a limitation of our static analysis capabilities.
Function name source code lines source lines hit percentage hit

Files reached

filename functions hit
/src/libxaac/fuzzer/xaac_dec_fuzzer.cpp 13
/src/libxaac/decoder/ixheaacd_api.c 18
/src/libxaac/decoder/ixheaacd_initfuncs.c 3
/src/libxaac/decoder/ixheaacd_sbrdec_initfuncs.c 15
/src/libxaac/decoder/ixheaacd_mps_initfuncs.c 17
/src/libxaac/decoder/ixheaacd_headerdecode.c 16
/src/libxaac/decoder/ixheaacd_common_initfuncs.c 4
/src/libxaac/decoder/ixheaacd_adts_crc_check.c 7
/src/libxaac/decoder/ixheaacd_bitbuffer.c 11
/src/libxaac/decoder/ixheaacd_init_config.c 13
/src/libxaac/decoder/ixheaacd_ld_mps_config.c 2
/src/libxaac/decoder/ixheaacd_mps_dec.c 34
/src/libxaac/decoder/ixheaacd_mps_parse.c 20
/src/libxaac/decoder/ixheaacd_mps_temp_reshape.c 3
/src/libxaac/decoder/ixheaacd_mps_poly_filt.c 7
/src/libxaac/decoder/ixheaacd_mps_hybrid_filt.c 14
/src/libxaac/decoder/ixheaacd_mps_decorr.c 11
/src/libxaac/decoder/ixheaacd_mps_pre_mix.c 17
/src/libxaac/decoder/ixheaacd_latmdemux.c 5
/src/libxaac/common/ixheaac_basic_ops32.h 30
/src/libxaac/decoder/ixheaacd_decode_main.c 4
/src/libxaac/decoder/ixheaacd_create.c 6
/src/libxaac/decoder/ixheaacd_usac_ec.c 14
/src/libxaac/decoder/ixheaacd_huff_tools.c 2
/src/libxaac/decoder/ixheaacd_lpc.c 10
/src/libxaac/decoder/ixheaacd_peak_limiter.c 4
/src/libxaac/common/ixheaac_basic_ops.h 9
/src/libxaac/decoder/ixheaacd_sbrdec_lpfuncs.c 16
/src/libxaac/decoder/ixheaacd_freq_sca.c 11
/src/libxaac/decoder/ixheaacd_ps_dec_flt.c 9
/src/libxaac/decoder/ixheaacd_process.c 7
/src/libxaac/decoder/ixheaacd_ext_ch_ele.c 10
/src/libxaac/decoder/ixheaacd_spectrum_dec.c 7
/src/libxaac/decoder/ixheaacd_imdct.c 9
/src/libxaac/common/ixheaac_basic_ops40.h 22
/src/libxaac/common/ixheaac_basic_ops16.h 18
/src/libxaac/decoder/ixheaacd_tcx_fwd_alcnx.c 7
/src/libxaac/decoder/ixheaacd_fwd_alias_cnx.c 5
/src/libxaac/decoder/ixheaacd_acelp_mdct.c 6
/src/libxaac/decoder/ixheaacd_fft.c 8
/src/libxaac/decoder/ixheaacd_Windowing.c 1
/src/libxaac/decoder/ixheaacd_basic_ops.c 14
/src/libxaac/decoder/ixheaacd_acelp_bitparse.c 10
/src/libxaac/decoder/ixheaacd_avq_dec.c 7
/src/libxaac/decoder/ixheaacd_arith_dec.c 12
/src/libxaac/decoder/ixheaacd_lpc_dec.c 5
/src/libxaac/decoder/ixheaacd_tcx_fwd_mdct.c 6
/src/libxaac/decoder/ixheaacd_acelp_tools.c 7
/src/libxaac/decoder/ixheaacd_acelp_decode.c 13
/src/libxaac/decoder/ixheaacd_channel.c 20
/src/libxaac/decoder/ixheaacd_env_extr.c 21
/src/libxaac/decoder/ixheaacd_tns.c 4
/src/libxaac/decoder/ixheaacd_sbrdecoder.c 7
/src/libxaac/decoder/ixheaacd_sbr_crc.c 3
/src/libxaac/decoder/ixheaacd_hbe_dft_trans.c 12
/src/libxaac/decoder/ixheaacd_hbe_trans.c 14
/src/libxaac/decoder/ixheaacd_esbr_polyphase.c 3
/src/libxaac/decoder/ixheaacd_sbr_dec.c 9
/src/libxaac/decoder/ixheaacd_env_dec.c 17
/src/libxaac/decoder/ixheaacd_basic_funcs.c 4
/src/libxaac/decoder/ixheaacd_ps_bitdec.c 4
/src/libxaac/decoder/ixheaacd_qmf_dec.c 16
/src/libxaac/decoder/generic/ixheaacd_qmf_dec_generic.c 24
/src/libxaac/decoder/ixheaacd_pred_vec_block.c 5
/src/libxaac/decoder/ixheaacd_esbr_envcal.c 4
/src/libxaac/decoder/ixheaacd_lpp_tran.c 7
/src/libxaac/decoder/ixheaacd_env_calc.c 14
/src/libxaac/decoder/ixheaacd_ps_dec.c 12
/src/libxaac/decoder/ixheaacd_thumb_ps_dec.c 2
/src/libxaac/decoder/ixheaacd_hybrid.c 3
/src/libxaac/common/ixheaac_basic_ops_arr.h 3
/src/libxaac/decoder/ixheaacd_mps_smoothing.c 4
/src/libxaac/decoder/ixheaacd_mps_temp_process.c 5
/src/libxaac/decoder/ixheaacd_drc_freq_dec.c 18
/src/libxaac/decoder/ixheaacd_aacdecoder.c 2
/src/libxaac/decoder/ixheaacd_huff_code_reorder.c 26
/src/libxaac/decoder/ixheaacd_longblock.c 2
/src/libxaac/decoder/ixheaacd_rev_vlc.c 20
/src/libxaac/decoder/ixheaacd_block.c 16
/src/libxaac/decoder/ixheaacd_stereo.c 3
/src/libxaac/decoder/ixheaacd_pns_js_thumb.c 5
/src/libxaac/decoder/ixheaacd_lt_predict.c 3
/src/libxaac/decoder/ixheaacd_aac_imdct.c 22
/src/libxaac/decoder/ixheaacd_aac_tns.c 4
/src/libxaac/decoder/ixheaacd_multichannel.c 4
/src/libxaac/decoder/ixheaacd_common_lpfuncs.c 5
/src/libxaac/decoder/ixheaacd_aacpluscheck.c 1
/src/libxaac/decoder/ixheaacd_aac_ec.c 9
/src/libxaac/decoder/ixheaacd_lpfuncs.c 8
/src/libxaac/decoder/ixheaacd_mps_bitdec.c 32
/src/libxaac/decoder/ixheaacd_mps_mdct_2_qmf.c 15
/src/libxaac/decoder/ixheaacd_mps_basic_op.h 19
/src/libxaac/decoder/ixheaacd_mps_tonality.c 3
/src/libxaac/decoder/ixheaacd_mps_reshape_bb_env.c 4
/src/libxaac/decoder/ixheaacd_mps_polyphase.c 6
/src/libxaac/decoder/ixheaacd_mps_blind.c 5
/src/libxaac/decoder/ixheaacd_ld_mps_dec.c 2
/src/libxaac/decoder/ixheaacd_mps_res_channel.c 7
/src/libxaac/decoder/ixheaacd_mps_res_channel_info.c 3
/src/libxaac/decoder/ixheaacd_mps_res_longblock.c 2
/src/libxaac/decoder/ixheaacd_mps_res_huffman.h 2
/src/libxaac/decoder/ixheaacd_mps_res_pulsedata.c 1
/src/libxaac/decoder/ixheaacd_mps_res_block.c 13
/src/libxaac/decoder/ixheaacd_mps_res_pns_js_thumb.c 3
/src/libxaac/decoder/ixheaacd_mps_res_tns.c 3
/src/libxaac/decoder/ixheaacd_mps_process.c 5
/src/libxaac/decoder/ixheaacd_mps_m1m2_common.c 4
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_51sx.c 2
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_common.c 12
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_515x.c 2
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_emm.c 1
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_52xx.c 2
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_727x.c 2
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_757x.c 2
/src/libxaac/decoder/ixheaacd_mps_apply_m1.c 1
/src/libxaac/decoder/ixheaacd_mps_apply_common.c 2
/src/libxaac/decoder/ixheaacd_mps_get_index.c 2
/src/libxaac/decoder/ixheaacd_mps_apply_m2.c 1
/src/libxaac/decoder/drc_src/impd_drc_api.c 3
/src/libxaac/decoder/drc_src/impd_drc_init.c 6
/src/libxaac/decoder/drc_src/impd_drc_bitbuffer.c 8
/src/libxaac/decoder/drc_src/impd_drc_extr_delta_coded_info.c 4
/src/libxaac/decoder/drc_src/impd_drc_gain_decoder.c 5
/src/libxaac/decoder/drc_src/impd_drc_dec.c 3
/src/libxaac/decoder/drc_src/impd_drc_parametric_dec.c 12
/src/libxaac/decoder/drc_src/impd_drc_interface_decoder.c 1
/src/libxaac/decoder/drc_src/impd_drc_selection_process.c 17
/src/libxaac/decoder/drc_src/impd_drc_selection_process_init.c 3
/src/libxaac/decoder/drc_src/impd_drc_static_payload.c 29
/src/libxaac/decoder/drc_src/impd_drc_dynamic_payload.c 20
/src/libxaac/decoder/drc_src/impd_drc_selection_process_drcset_selection.c 17
/src/libxaac/decoder/drc_src/impd_drc_loudness_control.c 11
/src/libxaac/decoder/drc_src/impd_drc_filter_bank.c 9
/src/libxaac/decoder/drc_src/impd_drc_multiband.c 4
/src/libxaac/decoder/drc_src/impd_drc_shape_filter.c 4
/src/libxaac/decoder/drc_src/impd_drc_eq.c 33
/src/libxaac/decoder/drc_src/impd_drc_peak_limiter.c 2
/src/libxaac/decoder/drc_src/impd_drc_main_td_process.c 2
/src/libxaac/decoder/drc_src/impd_drc_process.c 5
/src/libxaac/decoder/drc_src/impd_drc_gain_dec.c 11

Analyses and suggestions

Optimal target analysis

Remaining optimal interesting functions

The following table shows a list of functions that are optimal targets. Optimal targets are identified by finding the functions that in combination, yield a high code coverage.

Func name Functions filename Arg count Args Function depth hitcount instr count bb count cyclomatic complexity Reachable functions Incoming references total cyclomatic complexity Unreached complexity
ixheaace_hbe_apply_ifft_336 /src/libxaac/encoder/ixheaace_sbr_hbe_fft_ifft_32x32.c 4 ['N/A', 'N/A', 'int', 'int'] 3 0 696 97 36 8 0 187 177
ixheaacd_hbe_apply_ifft_336 /src/libxaac/decoder/ixheaacd_fft_ifft_32x32.c 4 ['N/A', 'N/A', 'int', 'int'] 3 0 696 97 36 8 0 186 176
ixheaacd_mps_apply_mix_matrix /src/libxaac/decoder/ixheaacd_mps_pre_mix.c 1 ['N/A'] 2 0 1088 153 55 5 0 98 75
ixheaacd_complex_fft_p2_dec /src/libxaac/decoder/ixheaacd_fft.c 5 ['N/A', 'N/A', 'int', 'int', 'N/A'] 3 0 2050 202 72 7 0 94 74
ixheaacd_apply_rot_dec /src/libxaac/decoder/ixheaacd_ps_dec.c 7 ['N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A', 'N/A'] 1 0 1316 201 72 6 0 85 72
ixheaace_hbe_apply_fft_288 /src/libxaac/encoder/ixheaace_sbr_hbe_fft_ifft_32x32.c 4 ['N/A', 'N/A', 'int', 'int'] 3 0 556 71 26 7 0 175 49
ixheaacd_hbe_apply_fft_288 /src/libxaac/decoder/ixheaacd_fft_ifft_32x32.c 4 ['N/A', 'N/A', 'int', 'int'] 3 0 556 71 26 7 0 174 49

Implementing fuzzers that target the above functions will improve reachability such that it becomes:

Functions statically reachable by fuzzers
96.0%
2257 / 2351
Cyclomatic complexity statically reachable by fuzzers
98.0%
35691 / 36515

All functions overview

If you implement fuzzers for these functions, the status of all functions in the project will be:

Func name Functions filename Args Function call depth Reached by Fuzzers Runtime reached by Fuzzers Combined reached by Fuzzers Fuzzers runtime hit Func lines hit % I Count BB Count Cyclomatic complexity Functions reached Reached by functions Accumulated cyclomatic complexity Undiscovered complexity

Fuzz engine guidance

This sections provides heuristics that can be used as input to a fuzz engine when running a given fuzz target. The current focus is on providing input that is usable by libFuzzer.

/src/libxaac/fuzzer/xaac_enc_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name 

-focus_function=['impd_drc_write_uni_drc_config_extn', 'iusace_acelp_quant_4p_4nbits', 'ixheaace_mps_515_huff_enc_icc', 'ia_enhaacplus_enc_write_bitstream', 'ia_dft_hbe_apply_polar_t_3', 'impd_drc_write_drc_coeff_uni_drc', 'ixheaace_mps_212_apply_huff_coding']

/src/libxaac/fuzzer/xaac_dec_fuzzer.cpp

Dictionary

Use this with the libFuzzer -dict=DICT.file flag


Fuzzer function priority

Use one of these functions as input to libfuzzer with flag: -focus_function name 

-focus_function=['ixheaacd_cplx_synt_qmffilt', 'impd_init_selected_drc_set', 'ixheaacd_mps_sqrt', 'ixheaacd_drc_map_channels', 'ixheaacd_sbr_qmfsyn64_winadd', 'ixheaacd_qmf_hbe_data_reinit', 'ixheaacd_calc_m1m2_5151', 'ixheaacd_apply_frame', 'ixheaacd_sbr_dec', 'ixheaacd_core_coder_data']

Runtime coverage analysis

This section shows analysis of runtime coverage data.

For futher technical details on how this section is generated, please see the Glossary .

Complex functions with low coverage

Func name Function total lines Lines covered at runtime percentage covered Reached by fuzzers
impd_drc_get_drc_complexity_level 260 134 51.53% ['xaac_enc_fuzzer']
iusace_sbr_config 31 15 48.38% ['xaac_enc_fuzzer']
ixheaace_mps_515_write_spatial_frame 213 88 41.31% ['xaac_enc_fuzzer']
ixheaace_mps_212_ec_data 150 68 45.33% ['xaac_enc_fuzzer']
ixheaace_mps_212_frame_window_get_window 161 78 48.44% ['xaac_enc_fuzzer']
ixheaace_mps_cfftn_process 608 187 30.75% ['xaac_enc_fuzzer']
ixheaace_mps_515_ec_data_pair_enc 254 112 44.09% ['xaac_enc_fuzzer']
ixheaace_mps_212_apply_huff_coding 144 68 47.22% ['xaac_enc_fuzzer']
ixheaace_mps_515_calc_pcm_bits 43 19 44.18% ['xaac_enc_fuzzer']
ixheaace_assemble_sbr_bitstream 42 23 54.76% ['xaac_enc_fuzzer']
ixheaace_calc_anal_synth_window 135 70 51.85% ['xaac_enc_fuzzer']
ixheaace_hbe_repl_spec 48 11 22.91% ['xaac_enc_fuzzer']
impd_init_selected_drc_set 214 85 39.71% ['xaac_dec_fuzzer']
impd_dec_initial_gain 32 14 43.75% ['xaac_dec_fuzzer']
impd_dec_slopes 51 27 52.94% ['xaac_dec_fuzzer']
impd_conv_to_linear_domain 108 30 27.77% ['xaac_dec_fuzzer']
impd_interpolate_drc_gain 105 34 32.38% ['xaac_dec_fuzzer']
impd_init_drc_decode_post_config 237 113 47.67% ['xaac_dec_fuzzer']
impd_signal_peak_level_info 269 106 39.40% ['xaac_dec_fuzzer']
impd_process_time_domain 263 135 51.33% ['xaac_dec_fuzzer']
impd_filter_banks_process 71 32 45.07% ['xaac_dec_fuzzer']
impd_map_target_config_req_downmix_id 98 21 21.42% ['xaac_dec_fuzzer']
impd_sel_downmix_matrix 45 12 26.66% ['xaac_dec_fuzzer']
impd_get_dependent_eq_set 33 5 15.15% ['xaac_dec_fuzzer']
impd_manage_eq_complexity 99 14 14.14% ['xaac_dec_fuzzer']
impd_manage_complexity 176 65 36.93% ['xaac_dec_fuzzer']
impd_get_ducking_drc_set 57 30 52.63% ['xaac_dec_fuzzer']
impd_match_effect_type_attempt 87 47 54.02% ['xaac_dec_fuzzer']
impd_match_drc_characteristic_attempt 108 55 50.92% ['xaac_dec_fuzzer']
impd_drc_set_final_selection 280 147 52.5% ['xaac_dec_fuzzer']
impd_shape_filt_block_time_process 60 11 18.33% ['xaac_dec_fuzzer']
ixheaacd_calc_window 82 44 53.65% ['xaac_dec_fuzzer']
ixheaacd_apply_m2 366 197 53.82% ['xaac_dec_fuzzer']

Files and Directories in report

This section shows which files and directories are considered in this report. The main reason for showing this is fuzz introspector may include more code in the reasoning than is desired. This section helps identify if too many files/directories are included, e.g. third party code, which may be irrelevant for the threat model. In the event too much is included, fuzz introspector supports a configuration file that can exclude data from the report. See the following link for more information on how to create a config file: link

Files in report

Source file Reached by Covered by
[] []
/src/libxaac/decoder/drc_src/impd_drc_loudness_control.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_fd_fac.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_decode_main.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_hbe_trans.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_api.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_ld_mps_config.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_cplx_pred.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_tcx_fwd_mdct.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_imdct.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_noise_floor_est.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_lpc_avq.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_dynamic_payload.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_basic_op.h ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_fft.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_calc_ms_band_energy.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_lpd_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_init.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_res_pulsedata.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_esbr_inter_tes.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_quant.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_write_bitstream.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_qmf_enc_init.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_gain_calculator.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_dct.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_ps_bitdec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_Windowing.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_multiband.c ['xaac_dec_fuzzer'] []
/src/libxaac/encoder/iusace_lpc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_tcx_mdct.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_res_longblock.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_ext_ch_ele.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_stereo_preproc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_pred_vec_block.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_tns_usac.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_get_index.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_lpc_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_gain_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_esbr_polyphase.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_common_initfuncs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_mps_delay.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_crc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mdct_480.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_pns_js_thumb.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_fd_qc_util.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_poly_filt.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_main.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_static_payload.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_tns_init.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_extr_delta_coded_info.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_enc_main.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_bitbuffer_hp.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_gain_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_bitstream.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_mdct_2_qmf.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_lt_predict.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_hbe_trans.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_decorr.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_fft_ifft_32x32.c [] []
/src/libxaac/encoder/ixheaace_sf_estimation.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_res_channel_info.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_parametric_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/common/ixheaac_basic_ops16.h ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_esbr_envcal.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_lpp_tran.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_psy_utils.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_basic_ops.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_sbrdec_initfuncs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_uni_drc_filter_bank.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_ton_corr.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_ps_bitenc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_727x.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_hbe_fft_ifft_32x32.c [] []
/src/libxaac/encoder/ixheaace_fd_qc_adjthr.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_apply_m2.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_mps_nlc_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_channel_map.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_huff_code_reorder.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_ton_corr_hp.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_bitbuffer.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_blind.c ['xaac_dec_fuzzer'] []
/src/libxaac/decoder/ixheaacd_aacdecoder.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_ps_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/common/ixheaac_basic_ops40.h ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_enc_init.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_loudness_measurement.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_hybrid_filter.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_ps_enc_init.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_bitbuffer.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_longblock.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_block.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_qc_main_hp.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_initfuncs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_acelp_decode.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_filter_bank.c ['xaac_dec_fuzzer'] []
/src/libxaac/encoder/iusace_basic_ops_flt.h ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_basic_ops.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_process.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_tran_det.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_acelp_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_tonality.c ['xaac_dec_fuzzer'] []
/src/libxaac/decoder/ixheaacd_fwd_alias_cnx.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_signal_classifier.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_env_calc.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_m1m2_common.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_resampler_init.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_thumb_ps_dec.c ['xaac_dec_fuzzer'] []
/src/libxaac/decoder/ixheaacd_multichannel.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_env_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_latmdemux.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_nf.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_psy_mod.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_bitdec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_avq_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_stereo.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/usr/local/bin/../include/c++/v1/stdexcept [] []
/src/libxaac/decoder/ixheaacd_peak_limiter.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_mps_static_gain.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_hbe_polyphase.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_common.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_frame_info_gen.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_fft.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_inv_filtering_estimation.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_arith_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_aac_tns.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_lpc.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_sbr_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_acelp_bitparse.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_eq.c ['xaac_dec_fuzzer'] []
/src/libxaac/fuzzer/xaac_enc_fuzzer.cpp ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_aacpluscheck.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_fft.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_aac_ec.c ['xaac_dec_fuzzer'] []
/src/libxaac/decoder/drc_src/impd_drc_gain_decoder.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_selection_process_init.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_qc_util.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_res_huffman.h ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_515x.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_adjust_threshold.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_qmf_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_emm.c ['xaac_dec_fuzzer'] []
/src/libxaac/decoder/ixheaacd_mps_res_channel.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_tns.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_param_extract.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_tables.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_vector_functions.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_dynamic_bits.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_frame_windowing.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_tree.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_mps_dmx_tdom_enh.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/common/ixheaac_esbr_fft.c [] []
/src/libxaac/encoder/ixheaace_sbr_freq_scaling.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_sbrdec_lpfuncs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_usac_ec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_tcx_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_bitbuffer.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_api.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_ld_mps_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_ms_stereo.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_rev_vlc.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_hybrid.c ['xaac_dec_fuzzer'] []
/src/libxaac/encoder/ixheaace_sbr_env_est_init.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_windowing.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_radix2_fft.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_lpd_utils.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_enc_main.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_acelp_tools.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_sbrdecoder.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_tcx_fwd_alcnx.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_tns_params.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_group_data.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_res_pns_js_thumb.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_mps_qmf.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_psy_mod.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_temp_process.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_init_config.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_env_extr.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_headerdecode.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_env_est.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_dsp_fft32x32s.c [] []
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_52xx.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/common/ixheaac_basic_ops_arr.h ['xaac_dec_fuzzer'] []
/src/libxaac/decoder/ixheaacd_mps_res_tns.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_shape_filter.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_mux.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/common/ixheaac_basic_ops.h ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_static_bits.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_hybrid.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_tran_det_hp.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_parse.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_spectrum_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_create.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_avq_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_51sx.c ['xaac_dec_fuzzer'] []
/src/libxaac/encoder/ixheaace_fd_mdct.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_resampler.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_aac_imdct.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_main_td_process.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_peak_limiter.c ['xaac_dec_fuzzer'] []
/src/libxaac/encoder/iusace_psy_utils.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_qmf_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_acelp_tools.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_freq_sca.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_selection_process.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_api.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_apply_m1.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_sbr_crc.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_write_bitstream.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_common_lpfuncs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_block_switch.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_selection_process_drcset_selection.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_drc_freq_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_write_adts_adif.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_tns_hp.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_uni_drc_eq.c ['xaac_enc_fuzzer'] []
/src/libxaac/encoder/ixheaace_mps_filter.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_reshape_bb_env.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_temp_reshape.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_interface_decoder.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_huff_tools.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_initfuncs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_mps_onset_detect.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_acelp_mdct.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_ms.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_hybrid_filt.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_interface.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/generic/ixheaacd_qmf_dec_generic.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_misc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_api.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_pre_mix.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_hbe_dft_trans.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_lpfuncs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_apply_common.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/drc_src/impd_drc_process.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_psy_configuration.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_code_envelope_lp.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_channel.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_enc_fac.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_res_block.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/common/ixheaac_basic_ops32.h ['xaac_enc_fuzzer', 'xaac_dec_fuzzer'] ['xaac_enc_fuzzer', 'xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_code_envelope.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_psy_utils_spreading.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_bitbuffer.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_tns.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_ps_dec.c ['xaac_dec_fuzzer'] []
/src/libxaac/fuzzer/xaac_dec_fuzzer.cpp ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_calc_m1m2_tree_757x.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_block_switch.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_mps_polyphase.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_asc_write.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_adts_crc_check.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_mps_polyphase.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_fd_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_basic_funcs.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_ps_dec_flt.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/ixheaace_fd_quant.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/decoder/ixheaacd_arith_dec.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_hbe_dft_trans.c ['xaac_dec_fuzzer'] []
/src/libxaac/decoder/ixheaacd_mps_smoothing.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/decoder/ixheaacd_process.c ['xaac_dec_fuzzer'] ['xaac_dec_fuzzer']
/src/libxaac/encoder/iusace_write_bitstream.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/drc_src/impd_drc_enc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_hybrid_init.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_sbr_missing_harmonics_det.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/ixheaace_bits_count.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']
/src/libxaac/encoder/iusace_esbr_pvc.c ['xaac_enc_fuzzer'] ['xaac_enc_fuzzer']

Directories in report

Directory
/src/libxaac/decoder/
/src/libxaac/decoder/drc_src/
/src/libxaac/decoder/generic/
/src/libxaac/encoder/
/src/libxaac/common/
/usr/local/bin/../include/c++/v1/
/src/libxaac/fuzzer/
/src/libxaac/encoder/drc_src/

Metadata section

This sections shows the raw data that is used to produce this report. This is mainly used for further processing and developer debugging.

Fuzzer Calltree file Program data file Coverage file
xaac_enc_fuzzer fuzzerLogFile-0-FQd5AdKAqu.data fuzzerLogFile-0-FQd5AdKAqu.data.yaml xaac_enc_fuzzer.covreport
xaac_dec_fuzzer fuzzerLogFile-0-77Xg9OMaDk.data fuzzerLogFile-0-77Xg9OMaDk.data.yaml xaac_dec_fuzzer.covreport