Fuzz introspector: fuzz_xls
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
2 2 1 :

['fclose']

2 2 ole2_close call site: 00060 /src/libxls/src/ole.c:637
2 2 1 :

['fseek']

2 2 ole2_fseek call site: 00000 /src/libxls/src/ole.c:369
2 2 1 :

['fread']

2 2 ole2_fread call site: 00006 /src/libxls/src/ole.c:387
0 5 1 :

['xls_freelocale']

0 5 xls_close_WB call site: 00309 /src/libxls/src/xls.c:1620
0 0 None 21 393 xls_parseWorkSheet call site: 00382 /src/libxls/src/xls.c:1268
0 0 None 21 393 xls_parseWorkSheet call site: 00390 /src/libxls/src/xls.c:1291
0 0 None 21 393 xls_parseWorkSheet call site: 00413 /src/libxls/src/xls.c:1329
0 0 None 21 393 xls_parseWorkSheet call site: 00416 /src/libxls/src/xls.c:1341
0 0 None 21 393 xls_parseWorkSheet call site: 00487 /src/libxls/src/xls.c:1384
0 0 None 18 86 xls_appendSST call site: 00152 /src/libxls/src/xls.c:158
0 0 None 18 86 xls_appendSST call site: 00153 /src/libxls/src/xls.c:186
0 0 None 18 86 xls_appendSST call site: 00154 /src/libxls/src/xls.c:215

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 xls_open_buffer [function] [call site] 00001
2 ole2_open_buffer [function] [call site] 00002
3 calloc [call site] 00003
3 ole2_read_header_and_body [function] [call site] 00004
4 ole2_read_header [function] [call site] 00005
5 ole2_fread [function] [call site] 00006
6 fread [call site] 00007
5 xlsConvertHeader [function] [call site] 00008
6 xlsIntVal [function] [call site] 00009
7 xls_is_bigendian [function] [call site] 00010
6 xlsIntVal [function] [call site] 00011
6 xlsShortVal [function] [call site] 00012
7 xls_is_bigendian [function] [call site] 00013
6 xlsShortVal [function] [call site] 00014
6 xlsShortVal [function] [call site] 00015
6 xlsShortVal [function] [call site] 00016
6 xlsShortVal [function] [call site] 00017
6 xlsShortVal [function] [call site] 00018
6 xlsIntVal [function] [call site] 00019
6 xlsIntVal [function] [call site] 00020
6 xlsIntVal [function] [call site] 00021
6 xlsIntVal [function] [call site] 00022
6 xlsIntVal [function] [call site] 00023
6 xlsIntVal [function] [call site] 00024
6 xlsIntVal [function] [call site] 00025
6 xlsIntVal [function] [call site] 00026
6 xlsIntVal [function] [call site] 00027
6 xlsIntVal [function] [call site] 00028
6 xlsIntVal [function] [call site] 00029
5 fprintf [call site] 00030
5 fprintf [call site] 00031
5 read_MSAT [function] [call site] 00032
6 fprintf [call site] 00033
6 ole_malloc [function] [call site] 00034
6 read_MSAT_header [function] [call site] 00035
7 sector_read [function] [call site] 00036
8 sector_pos [function] [call site] 00037
8 sector_pos [function] [call site] 00038
8 fprintf [call site] 00039
8 ole2_fread [function] [call site] 00040
8 sector_pos [function] [call site] 00041
8 fprintf [call site] 00042
7 fprintf [call site] 00043
6 read_MSAT_body [function] [call site] 00044
7 ole_malloc [function] [call site] 00045
7 sector_read [function] [call site] 00046
7 fprintf [call site] 00047
7 fprintf [call site] 00048
7 sector_read [function] [call site] 00049
7 fprintf [call site] 00050
7 fprintf [call site] 00051
6 read_MSAT_trailer [function] [call site] 00052
7 ole_malloc [function] [call site] 00053
7 sector_read [function] [call site] 00054
7 ole2_validate_sector [function] [call site] 00055
8 fprintf [call site] 00056
8 xlsIntVal [function] [call site] 00057
8 fprintf [call site] 00058
7 xlsIntVal [function] [call site] 00059
4 ole2_close [function] [call site] 00060
5 fclose [call site] 00061
4 ole2_read_body [function] [call site] 00062
5 ole2_sopen [function] [call site] 00063
6 calloc [call site] 00064
6 ole_malloc [function] [call site] 00065
6 ole2_validate_sector_chain [function] [call site] 00066
7 xlsIntVal [function] [call site] 00067
6 ole2_validate_sector_chain [function] [call site] 00068
6 ole2_bufread [function] [call site] 00069
7 fprintf [call site] 00070
7 fprintf [call site] 00071
7 xlsIntVal [function] [call site] 00072
7 sector_read [function] [call site] 00073
7 fprintf [call site] 00074
7 ole2_validate_sector [function] [call site] 00075
7 xlsIntVal [function] [call site] 00076
6 ole2_fclose [function] [call site] 00077
5 ole2_read [function] [call site] 00078
6 ole2_bufread [function] [call site] 00079
5 xlsConvertPss [function] [call site] 00080
6 xlsShortVal [function] [call site] 00081
6 xlsIntVal [function] [call site] 00082
6 xlsIntVal [function] [call site] 00083
6 xlsIntVal [function] [call site] 00084
6 xlsShortVal [function] [call site] 00085
6 xlsIntVal [function] [call site] 00086
6 xlsIntVal [function] [call site] 00087
6 xlsIntVal [function] [call site] 00088
6 xlsIntVal [function] [call site] 00089
5 transcode_utf16_to_utf8 [function] [call site] 00090
6 xls_createlocale [function] [call site] 00091
7 newlocale [call site] 00092
6 unicode_decode_wcstombs [function] [call site] 00093
7 xls_wcstombs_l [function] [call site] 00094
8 uselocale [call site] 00095
8 wcstombs [call site] 00096
8 uselocale [call site] 00097
7 calloc [call site] 00098
7 xls_wcstombs_l [function] [call site] 00099
7 printf [call site] 00100
6 xls_freelocale [function] [call site] 00101
7 freelocale [call site] 00102
5 realloc [call site] 00103
5 verbose [function] [call site] 00104
6 printf [call site] 00105
5 ole_realloc [function] [call site] 00106
6 realloc [call site] 00107
5 sector_read [function] [call site] 00108
5 fprintf [call site] 00109
5 ole2_validate_sector [function] [call site] 00110
5 xlsIntVal [function] [call site] 00111
5 ole2_fclose [function] [call site] 00112
4 ole2_close [function] [call site] 00113
2 xls_open_ole [function] [call site] 00114
3 calloc [call site] 00115
3 verbose [function] [call site] 00116
3 ole2_fopen [function] [call site] 00117
4 strcmp [call site] 00118
4 ole2_sopen [function] [call site] 00119
3 calloc [call site] 00120
3 ole2_read [function] [call site] 00121
3 fprintf [call site] 00122
3 ole2_fclose [function] [call site] 00123
3 ole2_fopen [function] [call site] 00124
3 calloc [call site] 00125
3 ole2_read [function] [call site] 00126
3 fprintf [call site] 00127
3 ole2_fclose [function] [call site] 00128
3 ole2_fopen [function] [call site] 00129
3 fprintf [call site] 00130
3 strdup [call site] 00131
3 xls_parseWorkBook [function] [call site] 00132
4 verbose [function] [call site] 00133
4 printf [call site] 00134
4 printf [call site] 00135
4 ole2_read [function] [call site] 00136
4 xlsConvertBof [function] [call site] 00137
5 xlsShortVal [function] [call site] 00138
4 xls_showBOF [function] [call site] 00139
5 printf [call site] 00140
5 verbose [function] [call site] 00141
5 get_brbdnum [function] [call site] 00142
5 printf [call site] 00143
4 realloc [call site] 00144
4 fprintf [call site] 00145
4 ole2_read [function] [call site] 00146
4 fprintf [call site] 00147
4 xls_isRecordTooSmall [function] [call site] 00148
4 printf [call site] 00149
4 printf [call site] 00150
4 printf [call site] 00151
4 xls_appendSST [function] [call site] 00152
5 printf [call site] 00153
5 printf [call site] 00154
5 printf [call site] 00155
5 unicode_decode [function] [call site] 00156
6 printf [call site] 00157
6 unicode_decode_iconv [function] [call site] 00158
7 iconv [call site] 00159
7 __errno_location [call site] 00160
7 realloc [call site] 00161
5 strdup [call site] 00162
5 strlen [call site] 00163
5 printf [call site] 00164
5 codepage_decode [function] [call site] 00165
6 strcmp [call site] 00166
6 transcode_latin1_to_utf8 [function] [call site] 00167
6 encoding_for_codepage [function] [call site] 00168
7 bsearch [call site] 00169
7 codepage_compare [function] [call site] 00170
6 iconv_open [call site] 00171
6 printf [call site] 00172
6 unicode_decode_iconv [function] [call site] 00173
5 strdup [call site] 00174
5 printf [call site] 00175
5 strdup [call site] 00176
5 strlen [call site] 00177
5 printf [call site] 00178
5 printf [call site] 00179
4 xlsConvertWindow [function] [call site] 00180
5 xlsShortVal [function] [call site] 00181
5 xlsShortVal [function] [call site] 00182
5 xlsShortVal [function] [call site] 00183
5 xlsShortVal [function] [call site] 00184
5 xlsShortVal [function] [call site] 00185
5 xlsShortVal [function] [call site] 00186
5 xlsShortVal [function] [call site] 00187
5 xlsShortVal [function] [call site] 00188
5 xlsShortVal [function] [call site] 00189
4 printf [call site] 00190
4 printf [call site] 00191
4 printf [call site] 00192
4 printf [call site] 00193
4 printf [call site] 00194
4 printf [call site] 00195
4 printf [call site] 00196
4 printf [call site] 00197
4 printf [call site] 00198
4 printf [call site] 00199
4 xlsConvertSst [function] [call site] 00200
5 xlsIntVal [function] [call site] 00201
5 xlsIntVal [function] [call site] 00202
4 xls_addSST [function] [call site] 00203
5 verbose [function] [call site] 00204
5 calloc [call site] 00205
5 xls_appendSST [function] [call site] 00206
4 xlsConvertBoundsheet [function] [call site] 00207
5 xlsIntVal [function] [call site] 00208
4 xls_addSheet [function] [call site] 00209
5 get_string [function] [call site] 00210
6 unicode_decode [function] [call site] 00211
6 codepage_decode [function] [call site] 00212
5 printf [call site] 00213
5 printf [call site] 00214
5 printf [call site] 00215
5 printf [call site] 00216
5 printf [call site] 00217
5 printf [call site] 00218
5 printf [call site] 00219
5 printf [call site] 00220
5 printf [call site] 00221
5 realloc [call site] 00222
4 xlsConvertXf5 [function] [call site] 00223
5 xlsShortVal [function] [call site] 00224
5 xlsShortVal [function] [call site] 00225
5 xlsShortVal [function] [call site] 00226
5 xlsShortVal [function] [call site] 00227
5 xlsShortVal [function] [call site] 00228
5 xlsShortVal [function] [call site] 00229
5 xlsShortVal [function] [call site] 00230
5 xlsShortVal [function] [call site] 00231
4 xls_addXF5 [function] [call site] 00232
5 verbose [function] [call site] 00233
5 realloc [call site] 00234
4 printf [call site] 00235
4 printf [call site] 00236
4 printf [call site] 00237
4 printf [call site] 00238
4 printf [call site] 00239
4 printf [call site] 00240
4 printf [call site] 00241
4 printf [call site] 00242
4 xlsConvertXf8 [function] [call site] 00243
5 xlsShortVal [function] [call site] 00244
5 xlsShortVal [function] [call site] 00245
5 xlsShortVal [function] [call site] 00246
5 xlsIntVal [function] [call site] 00247
5 xlsIntVal [function] [call site] 00248
5 xlsShortVal [function] [call site] 00249
4 xls_addXF8 [function] [call site] 00250
5 verbose [function] [call site] 00251
5 realloc [call site] 00252
4 xls_showXF [function] [call site] 00253
5 printf [call site] 00254
5 printf [call site] 00255
5 printf [call site] 00256
5 printf [call site] 00257
5 printf [call site] 00258
5 printf [call site] 00259
5 printf [call site] 00260
5 printf [call site] 00261
5 printf [call site] 00262
5 printf [call site] 00263
5 printf [call site] 00264
4 xlsConvertFont [function] [call site] 00265
5 xlsShortVal [function] [call site] 00266
5 xlsShortVal [function] [call site] 00267
5 xlsShortVal [function] [call site] 00268
5 xlsShortVal [function] [call site] 00269
4 xls_addFont [function] [call site] 00270
5 verbose [function] [call site] 00271
5 realloc [call site] 00272
5 get_string [function] [call site] 00273
4 printf [call site] 00274
4 printf [call site] 00275
4 printf [call site] 00276
4 printf [call site] 00277
4 printf [call site] 00278
4 printf [call site] 00279
4 printf [call site] 00280
4 printf [call site] 00281
4 printf [call site] 00282
4 xlsConvertFormat [function] [call site] 00283
5 xlsShortVal [function] [call site] 00284
4 xls_addFormat [function] [call site] 00285
5 verbose [function] [call site] 00286
5 realloc [call site] 00287
5 get_string [function] [call site] 00288
5 xls_showFormat [function] [call site] 00289
6 printf [call site] 00290
6 printf [call site] 00291
4 printf [call site] 00292
4 printf [call site] 00293
4 printf [call site] 00294
4 get_string [function] [call site] 00295
4 printf [call site] 00296
4 printf [call site] 00297
4 printf [call site] 00298
4 printf [call site] 00299
4 printf [call site] 00300
4 printf [call site] 00301
4 printf [call site] 00302
3 ole2_close [function] [call site] 00303
3 xls_close_WB [function] [call site] 00304
4 verbose [function] [call site] 00305
4 ole2_fclose [function] [call site] 00306
4 ole2_close [function] [call site] 00307
4 iconv_close [call site] 00308
4 iconv_close [call site] 00309
4 xls_freelocale [function] [call site] 00310
1 xls_getWorkSheet [function] [call site] 00311
2 verbose [function] [call site] 00312
2 calloc [call site] 00313
1 xls_parseWorkSheet [function] [call site] 00314
2 verbose [function] [call site] 00315
2 xls_preparseWorkSheet [function] [call site] 00316
3 verbose [function] [call site] 00317
3 ole2_seek [function] [call site] 00318
4 ldiv [call site] 00319
4 xlsIntVal [function] [call site] 00320
4 ole2_bufread [function] [call site] 00321
4 ldiv [call site] 00322
4 ole2_validate_sector [function] [call site] 00323
4 xlsIntVal [function] [call site] 00324
4 ole2_bufread [function] [call site] 00325
3 ole2_read [function] [call site] 00326
3 fprintf [call site] 00327
3 xlsConvertBof [function] [call site] 00328
3 realloc [call site] 00329
3 fprintf [call site] 00330
3 ole2_read [function] [call site] 00331
3 fprintf [call site] 00332
3 xlsConvertColinfo [function] [call site] 00333
4 xlsShortVal [function] [call site] 00334
4 xlsShortVal [function] [call site] 00335
4 xlsShortVal [function] [call site] 00336
4 xlsShortVal [function] [call site] 00337
4 xlsShortVal [function] [call site] 00338
3 xls_addColinfo [function] [call site] 00339
4 verbose [function] [call site] 00340
4 realloc [call site] 00341
4 xls_showColinfo [function] [call site] 00342
5 verbose [function] [call site] 00343
5 printf [call site] 00344
5 printf [call site] 00345
5 printf [call site] 00346
5 printf [call site] 00347
5 printf [call site] 00348
5 printf [call site] 00349
5 printf [call site] 00350
5 printf [call site] 00351
5 printf [call site] 00352
5 printf [call site] 00353
3 xlsConvertRow [function] [call site] 00354
4 xlsShortVal [function] [call site] 00355
4 xlsShortVal [function] [call site] 00356
4 xlsShortVal [function] [call site] 00357
4 xlsShortVal [function] [call site] 00358
4 xlsShortVal [function] [call site] 00359
4 xlsShortVal [function] [call site] 00360
4 xlsShortVal [function] [call site] 00361
4 xlsShortVal [function] [call site] 00362
3 xls_isCellTooSmall [function] [call site] 00363
3 xlsShortVal [function] [call site] 00364
3 xlsShortVal [function] [call site] 00365
3 xlsShortVal [function] [call site] 00366
3 xlsShortVal [function] [call site] 00367
3 xls_isCellTooSmall [function] [call site] 00368
3 xlsShortVal [function] [call site] 00369
3 xlsShortVal [function] [call site] 00370
3 xlsShortVal [function] [call site] 00371
3 xlsShortVal [function] [call site] 00372
3 xls_isCellTooSmall [function] [call site] 00373
3 xlsShortVal [function] [call site] 00374
3 xlsShortVal [function] [call site] 00375
3 xlsShortVal [function] [call site] 00376
3 xlsShortVal [function] [call site] 00377
2 xls_makeTable [function] [call site] 00378
3 calloc [call site] 00379
3 calloc [call site] 00380
2 xls_formatColumn [function] [call site] 00381
2 ole2_seek [function] [call site] 00382
2 printf [call site] 00383
2 ole2_read [function] [call site] 00384
2 fprintf [call site] 00385
2 xlsConvertBof [function] [call site] 00386
2 realloc [call site] 00387
2 fprintf [call site] 00388
2 ole2_read [function] [call site] 00389
2 fprintf [call site] 00390
2 xls_showBOF [function] [call site] 00391
2 xls_mergedCells [function] [call site] 00392
3 verbose [function] [call site] 00393
3 verbose [function] [call site] 00394
3 xlsConvertMergedcells [function] [call site] 00395
4 xlsShortVal [function] [call site] 00396
4 xlsShortVal [function] [call site] 00397
4 xlsShortVal [function] [call site] 00398
4 xlsShortVal [function] [call site] 00399
2 printf [call site] 00400
2 xlsConvertRow [function] [call site] 00401
2 xls_addRow [function] [call site] 00402
3 xls_showROW [function] [call site] 00403
4 verbose [function] [call site] 00404
4 printf [call site] 00405
4 printf [call site] 00406
4 printf [call site] 00407
4 printf [call site] 00408
4 printf [call site] 00409
4 printf [call site] 00410
4 printf [call site] 00411
2 printf [call site] 00412
2 printf [call site] 00413
2 printf [call site] 00414
2 printf [call site] 00415
2 printf [call site] 00416
2 printf [call site] 00417
2 printf [call site] 00418
2 xls_addCell [function] [call site] 00419
3 verbose [function] [call site] 00420
3 xls_isCellTooSmall [function] [call site] 00421
3 xlsShortVal [function] [call site] 00422
3 xlsShortVal [function] [call site] 00423
3 fprintf [call site] 00424
3 xlsShortVal [function] [call site] 00425
3 xlsConvertFormula [function] [call site] 00426
4 xlsShortVal [function] [call site] 00427
4 xlsShortVal [function] [call site] 00428
4 xlsShortVal [function] [call site] 00429
4 xlsConvertDouble [function] [call site] 00430
5 xls_is_bigendian [function] [call site] 00431
4 xlsConvertDouble [function] [call site] 00432
4 xlsShortVal [function] [call site] 00433
4 xlsShortVal [function] [call site] 00434
3 xls_getfcell [function] [call site] 00435
4 strdup [call site] 00436
4 strdup [call site] 00437
4 unicode_decode [function] [call site] 00438
4 snprintf [call site] 00439
4 snprintf [call site] 00440
4 snprintf [call site] 00441
4 snprintf [call site] 00442
4 snprintf [call site] 00443
4 snprintf [call site] 00444
4 snprintf [call site] 00445
3 xls_cell_set_str [function] [call site] 00446
3 xls_cell_set_str [function] [call site] 00447
3 xls_cell_set_str [function] [call site] 00448
3 xls_cell_set_str [function] [call site] 00449
3 fprintf [call site] 00450
3 xlsShortVal [function] [call site] 00451
3 xlsIntVal [function] [call site] 00452
3 NumFromRk [function] [call site] 00453
3 xls_getfcell [function] [call site] 00454
3 xls_cell_set_str [function] [call site] 00455
3 fprintf [call site] 00456
3 xlsShortVal [function] [call site] 00457
3 xls_getfcell [function] [call site] 00458
3 xls_cell_set_str [function] [call site] 00459
3 xls_getfcell [function] [call site] 00460
3 xls_cell_set_str [function] [call site] 00461
3 __isoc99_sscanf [call site] 00462
3 __isoc99_sscanf [call site] 00463
3 xlsIntVal [function] [call site] 00464
3 NumFromRk [function] [call site] 00465
3 xls_getfcell [function] [call site] 00466
3 xls_cell_set_str [function] [call site] 00467
3 xlsConvertDouble [function] [call site] 00468
3 xls_getfcell [function] [call site] 00469
3 xls_cell_set_str [function] [call site] 00470
3 strdup [call site] 00471
3 xls_cell_set_str [function] [call site] 00472
3 xls_cell_set_str [function] [call site] 00473
3 xls_getfcell [function] [call site] 00474
3 xls_cell_set_str [function] [call site] 00475
3 xls_showCell [function] [call site] 00476
4 printf [call site] 00477
4 get_brbdnum [function] [call site] 00478
4 printf [call site] 00479
4 printf [call site] 00480
4 printf [call site] 00481
4 printf [call site] 00482
4 printf [call site] 00483
4 printf [call site] 00484
2 get_string [function] [call site] 00485
2 xls_cell_set_str [function] [call site] 00486
2 xls_showCell [function] [call site] 00487
2 xlsShortVal [function] [call site] 00488
2 printf [call site] 00489
2 printf [call site] 00490
1 xls_close_WS [function] [call site] 00491
1 xls_close_WB [function] [call site] 00492