Fuzz introspector: xzdec_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
21 21 1 :

['Lzma2Dec_AllocateProbs']

21 21 Lzma2State_SetProps call site: 00076 /src/lzma-fuzz/sdk/C/XzDec.c:364
8 8 1 :

['Delta_Encode']

8 8 BraState_Filter call site: 00116 /src/lzma-fuzz/sdk/C/XzDec.c:155
0 269 1 :

['Lzma2Dec_DecodeToDic']

0 269 Lzma2State_Code2 call site: 00094 /src/lzma-fuzz/sdk/C/XzDec.c:392
0 2 1 :

['LzmaDec_FreeProbs']

0 2 Lzma2State_Free call site: 00071 /src/lzma-fuzz/sdk/C/XzDec.c:351
0 0 None 0 718 XzDecMt_Decode call site: 00032 /src/lzma-fuzz/sdk/C/XzDec.c:2545
0 0 None 0 673 XzDecMt_Decode_ST call site: 00034 /src/lzma-fuzz/sdk/C/XzDec.c:2326
0 0 None 0 673 XzDecMt_Decode_ST call site: 00034 /src/lzma-fuzz/sdk/C/XzDec.c:2336
0 0 None 0 671 XzDecMt_Decode_ST call site: 00035 /src/lzma-fuzz/sdk/C/XzDec.c:2397
0 0 None 0 671 XzDecMt_Decode_ST call site: 00036 /src/lzma-fuzz/sdk/C/XzDec.c:2439
0 0 None 0 19 XzDecMt_Create call site: 00021 /src/lzma-fuzz/sdk/C/XzDec.c:1514
0 0 None 0 5 CPU_Is_InOrder call site: 00006 /src/lzma-fuzz/sdk/C/CpuArch.c:152
0 0 None 0 4 LzmaDec_Allocate call site: 00087 /src/lzma-fuzz/sdk/C/LzmaDec.c:1143

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 CrcGenerateTable [function] [call site] 00001
2 CrcUpdateT4 [function] [call site] 00002
2 CrcUpdateT4 [function] [call site] 00003
2 CrcUpdateT8 [function] [call site] 00004
2 CPU_Is_InOrder [function] [call site] 00005
3 x86cpuid_CheckAndRead [function] [call site] 00006
3 x86cpuid_GetFirm [function] [call site] 00009
2 CrcUpdateT8 [function] [call site] 00010
1 Crc64GenerateTable [function] [call site] 00011
2 XzCrc64UpdateT4 [function] [call site] 00012
1 XzDecMtProps_Init [function] [call site] 00013
1 OutputBuffer::OutputBuffer() [function] [call site] 00014
2 OutputBuffer::_Write(ISeqOutStream const*, void const*, unsigned long) [function] [call site] 00015
3 OutputBuffer::Write(void const*, unsigned long) [function] [call site] 00016
4 __assert_fail [call site] 00017
1 InputBuffer::InputBuffer(unsigned char const*, unsigned long) [function] [call site] 00018
2 InputBuffer::_Read(ISeqInStream const*, void*, unsigned long*) [function] [call site] 00019
3 InputBuffer::Read(void*, unsigned long*) [function] [call site] 00020
1 XzDecMt_Create [function] [call site] 00021
2 AlignOffsetAlloc_CreateVTable [function] [call site] 00022
3 AlignOffsetAlloc_Alloc [function] [call site] 00023
3 AlignOffsetAlloc_Free [function] [call site] 00024
2 XzUnpacker_Construct [function] [call site] 00025
3 MixCoder_Construct [function] [call site] 00026
3 XzUnpacker_Init [function] [call site] 00027
2 XzDecMtProps_Init [function] [call site] 00028
1 OutputBuffer::stream() [function] [call site] 00029
1 InputBuffer::stream() [function] [call site] 00030
1 XzDecMt_Decode [function] [call site] 00031
2 XzStatInfo_Clear [function] [call site] 00032
2 XzUnpacker_Init [function] [call site] 00033
2 XzDecMt_Decode_ST [function] [call site] 00034
3 XzUnpacker_SetOutBuf [function] [call site] 00035
3 XzUnpacker_Code [function] [call site] 00036
4 MixCoder_Code [function] [call site] 00037
4 XzCheck_Update [function] [call site] 00038
5 CrcUpdate [function] [call site] 00039
5 Crc64Update [function] [call site] 00040
5 Sha256_Update [function] [call site] 00041
6 Sha256_WriteByteBlock [function] [call site] 00042
4 XzFlags_GetCheckSize [function] [call site] 00043
4 XzUnpacker_UpdateIndex [function] [call site] 00044
5 Xz_WriteVarInt [function] [call site] 00045
5 Xz_WriteVarInt [function] [call site] 00046
5 Sha256_Update [function] [call site] 00047
4 Xz_ParseHeader [function] [call site] 00048
4 Sha256_Init [function] [call site] 00050
4 Xz_WriteVarInt [function] [call site] 00051
4 Sha256_Final [function] [call site] 00052
5 Sha256_WriteByteBlock [function] [call site] 00053
5 Sha256_WriteByteBlock [function] [call site] 00054
5 Sha256_Init [function] [call site] 00055
4 Sha256_Init [function] [call site] 00056
4 CrcUpdate [function] [call site] 00057
4 XzBlock_Parse [function] [call site] 00058
5 Xz_ReadVarInt [function] [call site] 00060
5 Xz_ReadVarInt [function] [call site] 00061
5 Xz_ReadVarInt [function] [call site] 00062
5 Xz_ReadVarInt [function] [call site] 00063
4 XzBlock_AreSupportedFilters [function] [call site] 00064
4 XzCheck_Init [function] [call site] 00065
5 Sha256_Init [function] [call site] 00066
4 XzDecMix_Init [function] [call site] 00067
5 MixCoder_Free [function] [call site] 00068
5 MixCoder_SetFromMethod [function] [call site] 00069
6 Lzma2State_SetFromMethod [function] [call site] 00070
7 Lzma2State_Free [function] [call site] 00071
8 LzmaDec_FreeProbs [function] [call site] 00072
8 LzmaDec_Free [function] [call site] 00073
9 LzmaDec_FreeProbs [function] [call site] 00074
9 LzmaDec_FreeDict [function] [call site] 00075
7 Lzma2State_SetProps [function] [call site] 00076
8 Lzma2Dec_AllocateProbs [function] [call site] 00077
9 Lzma2Dec_GetOldProps [function] [call site] 00078
9 LzmaDec_AllocateProbs [function] [call site] 00079
10 LzmaProps_Decode [function] [call site] 00080
10 LzmaDec_AllocateProbs2 [function] [call site] 00081
11 LzmaDec_FreeProbs [function] [call site] 00082
8 Lzma2Dec_Allocate [function] [call site] 00083
9 Lzma2Dec_GetOldProps [function] [call site] 00084
9 LzmaDec_Allocate [function] [call site] 00085
10 LzmaProps_Decode [function] [call site] 00086
10 LzmaDec_AllocateProbs2 [function] [call site] 00087
10 LzmaDec_FreeDict [function] [call site] 00088
10 LzmaDec_FreeProbs [function] [call site] 00089
7 Lzma2State_Init [function] [call site] 00090
8 Lzma2Dec_Init [function] [call site] 00091
9 LzmaDec_Init [function] [call site] 00092
10 LzmaDec_InitDicAndState [function] [call site] 00093
7 Lzma2State_Code2 [function] [call site] 00094
8 Lzma2Dec_DecodeToDic [function] [call site] 00095
9 Lzma2Dec_UpdateState [function] [call site] 00096
9 LzmaDec_InitDicAndState [function] [call site] 00097
9 LzmaDec_UpdateWithUncompressed [function] [call site] 00098
9 LzmaDec_InitDicAndState [function] [call site] 00099
9 LzmaDec_DecodeToDic [function] [call site] 00100
10 LzmaDec_WriteRem [function] [call site] 00101
10 LzmaDec_TryDummy [function] [call site] 00102
10 LzmaDec_DecodeReal2 [function] [call site] 00103
11 LzmaDec_DecodeReal_3 [function] [call site] 00104
11 LzmaDec_WriteRem [function] [call site] 00105
10 LzmaDec_TryDummy [function] [call site] 00106
10 LzmaDec_DecodeReal2 [function] [call site] 00107
8 Lzma2Dec_DecodeToBuf [function] [call site] 00108
9 Lzma2Dec_DecodeToDic [function] [call site] 00109
6 BraState_SetFromMethod [function] [call site] 00110
7 BraState_Free [function] [call site] 00111
7 BraState_SetProps [function] [call site] 00112
7 BraState_Init [function] [call site] 00113
8 Delta_Init [function] [call site] 00114
7 BraState_Code2 [function] [call site] 00115
8 BraState_Filter [function] [call site] 00116
9 Delta_Encode [function] [call site] 00117
9 Delta_Decode [function] [call site] 00121
9 x86_Convert [function] [call site] 00125
9 PPC_Convert [function] [call site] 00126
9 IA64_Convert [function] [call site] 00127
9 ARM_Convert [function] [call site] 00128
9 ARMT_Convert [function] [call site] 00129
9 SPARC_Convert [function] [call site] 00130
7 BraState_Filter [function] [call site] 00131
5 MixCoder_ResetFromMethod [function] [call site] 00132
6 Lzma2State_ResetOutBuf [function] [call site] 00133
5 MixCoder_Init [function] [call site] 00134
4 XzFlags_GetCheckSize [function] [call site] 00135
4 XzCheck_Final [function] [call site] 00136
5 Sha256_Final [function] [call site] 00137
4 memcmp [call site] 00138
4 CrcUpdate [function] [call site] 00139
4 Sha256_Update [function] [call site] 00140
4 Sha256_Final [function] [call site] 00141
4 memcmp [call site] 00142
4 Xz_CheckFooter [function] [call site] 00143
2 XzStatInfo_SetStat [function] [call site] 00145
3 XzUnpacker_GetExtraSize [function] [call site] 00146
3 XzUnpacker_IsStreamWasFinished [function] [call site] 00147
1 XzDecMt_Destroy [function] [call site] 00148
2 XzDecMt_FreeSt [function] [call site] 00149
3 XzUnpacker_Free [function] [call site] 00150
4 MixCoder_Free [function] [call site] 00151
1 OutputBuffer::~OutputBuffer() [function] [call site] 00152