Fuzz introspector: 7z_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
25 25 1 :

['AllocUnitsRare']

25 25 AllocUnits call site: 00183 /src/lzma-fuzz/sdk/C/Ppmd7.c:251
5 5 1 :

['SplitBlock']

5 5 ShrinkUnits call site: 00155 /src/lzma-fuzz/sdk/C/Ppmd7.c:270
0 974 3 :

['SzAr_Free', 'SzReadAndDecodePackedStreams', 'SzAr_Init']

0 1424 SzReadHeader2 call site: 00229 /src/lzma-fuzz/sdk/C/7zArcIn.c:1130
0 388 2 :

['LzmaDec_DecodeReal2', 'LzmaDec_TryDummy']

0 388 LzmaDec_DecodeToDic call site: 00120 /src/lzma-fuzz/sdk/C/LzmaDec.c:983
0 232 12 :

['CountDefinedBits', 'ReadUi32s', 'SzBitUi32s_Free', 'RememberBitVector', 'SkipData', 'SzAr_GetFolderUnpackSize', 'ReadBitVector', 'ReadTime', 'SzReadNumber32', 'SzReadFileNames', 'SzBitUi32s_Alloc', 'ReadNumber']

0 232 SzReadHeader2 call site: 00239 /src/lzma-fuzz/sdk/C/7zArcIn.c:1205
0 183 5 :

['ReadBitUi32s', 'WaitId', 'SzReadNumber32', 'SkipData', 'ReadNumber']

0 183 ReadUnpackInfo call site: 00056 /src/lzma-fuzz/sdk/C/7zArcIn.c:660
0 24 1 :

['Rescale']

0 111 Ppmd7_Update1 call site: 00191 /src/lzma-fuzz/sdk/C/Ppmd7.c:681
0 16 1 :

['SzReadNumber32']

0 16 SzReadHeader2 call site: 00258 /src/lzma-fuzz/sdk/C/7zArcIn.c:1445
0 16 1 :

['SzReadNumber32']

0 16 ReadTime call site: 00249 /src/lzma-fuzz/sdk/C/7zArcIn.c:1057
0 13 1 :

['SkipData']

0 72 SzReadHeader2 call site: 00252 /src/lzma-fuzz/sdk/C/7zArcIn.c:1284
0 11 1 :

['RestartModel']

0 11 UpdateModel call site: 00164 /src/lzma-fuzz/sdk/C/Ppmd7.c:464
0 3 1 :

['CountDefinedBits']

0 52 ReadSubStreamsInfo call site: 00076 /src/lzma-fuzz/sdk/C/7zArcIn.c:899

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 CrcGenerateTable [function] [call site] 00001
2 CrcUpdateT4 [function] [call site] 00002
2 CrcUpdateT4 [function] [call site] 00003
2 CrcUpdateT8 [function] [call site] 00004
2 CPU_Is_InOrder [function] [call site] 00005
3 x86cpuid_CheckAndRead [function] [call site] 00006
4 MyCPUID [function] [call site] 00007
4 MyCPUID [function] [call site] 00008
3 x86cpuid_GetFirm [function] [call site] 00009
2 CrcUpdateT8 [function] [call site] 00010
1 SzArEx_Init [function] [call site] 00011
2 SzAr_Init [function] [call site] 00012
1 InputLookBuffer::InputLookBuffer(unsigned char const*, unsigned long) [function] [call site] 00013
2 InputLookBuffer::_Look(ILookInStream const*, void const**, unsigned long*) [function] [call site] 00014
3 InputLookBuffer::Look(void const**, unsigned long*) [function] [call site] 00015
2 InputLookBuffer::_Skip(ILookInStream const*, unsigned long) [function] [call site] 00016
3 InputLookBuffer::Skip(unsigned long) [function] [call site] 00017
2 InputLookBuffer::_Read(ILookInStream const*, void*, unsigned long*) [function] [call site] 00018
3 InputLookBuffer::Read(void*, unsigned long*) [function] [call site] 00019
2 InputLookBuffer::_Seek(ILookInStream const*, long long*, ESzSeek) [function] [call site] 00020
3 InputLookBuffer::Seek(long long*, ESzSeek) [function] [call site] 00021
1 InputLookBuffer::stream() [function] [call site] 00022
1 SzArEx_Open [function] [call site] 00023
2 SzArEx_Open2 [function] [call site] 00024
3 LookInStream_Read2 [function] [call site] 00025
3 TestSignatureCandidate [function] [call site] 00026
3 CrcCalc [function] [call site] 00027
3 LookInStream_SeekTo [function] [call site] 00028
3 Buf_Create [function] [call site] 00029
3 LookInStream_Read [function] [call site] 00030
4 LookInStream_Read2 [function] [call site] 00031
3 CrcCalc [function] [call site] 00032
3 ReadNumber [function] [call site] 00033
3 Buf_Init [function] [call site] 00034
3 SzAr_Init [function] [call site] 00035
3 SzReadAndDecodePackedStreams [function] [call site] 00036
4 SzReadStreamsInfo [function] [call site] 00037
5 ReadNumber [function] [call site] 00038
5 ReadNumber [function] [call site] 00039
5 ReadPackInfo [function] [call site] 00040
6 SzReadNumber32 [function] [call site] 00041
7 ReadNumber [function] [call site] 00042
6 WaitId [function] [call site] 00043
7 ReadNumber [function] [call site] 00044
7 SkipData [function] [call site] 00045
8 ReadNumber [function] [call site] 00046
6 ReadNumber [function] [call site] 00047
6 ReadNumber [function] [call site] 00048
6 SkipBitUi32s [function] [call site] 00049
7 CountDefinedBits [function] [call site] 00050
6 SkipData [function] [call site] 00051
5 ReadNumber [function] [call site] 00052
5 ReadUnpackInfo [function] [call site] 00053
6 WaitId [function] [call site] 00054
6 SzReadNumber32 [function] [call site] 00055
6 SzReadNumber32 [function] [call site] 00056
6 SzReadNumber32 [function] [call site] 00057
6 SzReadNumber32 [function] [call site] 00058
6 SzReadNumber32 [function] [call site] 00059
6 SzReadNumber32 [function] [call site] 00060
6 SzReadNumber32 [function] [call site] 00061
6 SzReadNumber32 [function] [call site] 00062
6 SzReadNumber32 [function] [call site] 00063
6 WaitId [function] [call site] 00064
6 ReadNumber [function] [call site] 00065
6 ReadNumber [function] [call site] 00066
6 ReadBitUi32s [function] [call site] 00067
7 SzBitUi32s_Free [function] [call site] 00068
7 ReadBitVector [function] [call site] 00069
7 ReadUi32s [function] [call site] 00070
6 SkipData [function] [call site] 00071
5 ReadNumber [function] [call site] 00072
5 ReadSubStreamsInfo [function] [call site] 00073
6 ReadNumber [function] [call site] 00074
6 SzReadNumber32 [function] [call site] 00075
6 SkipData [function] [call site] 00076
6 CountDefinedBits [function] [call site] 00077
6 SkipNumbers [function] [call site] 00078
6 ReadNumber [function] [call site] 00079
6 SkipBitUi32s [function] [call site] 00080
6 SkipData [function] [call site] 00081
6 ReadNumber [function] [call site] 00082
5 ReadNumber [function] [call site] 00083
4 Buf_Init [function] [call site] 00084
4 SzAr_GetFolderUnpackSize [function] [call site] 00085
4 Buf_Create [function] [call site] 00086
4 LookInStream_SeekTo [function] [call site] 00087
4 SzAr_DecodeFolder [function] [call site] 00088
5 SzGetNextFolderItem [function] [call site] 00089
6 SzReadNumber32 [function] [call site] 00090
6 SzReadNumber32 [function] [call site] 00091
6 SzReadNumber32 [function] [call site] 00092
6 SzReadNumber32 [function] [call site] 00093
6 SzReadNumber32 [function] [call site] 00094
6 SzReadNumber32 [function] [call site] 00095
6 SzReadNumber32 [function] [call site] 00096
5 SzAr_GetFolderUnpackSize [function] [call site] 00097
5 SzFolder_Decode2 [function] [call site] 00098
6 CheckSupportedFolder [function] [call site] 00099
7 IS_SUPPORTED_CODER [function] [call site] 00100
8 IS_MAIN_METHOD [function] [call site] 00101
7 IS_SUPPORTED_CODER [function] [call site] 00102
7 IS_SUPPORTED_CODER [function] [call site] 00103
6 IS_MAIN_METHOD [function] [call site] 00104
6 LookInStream_SeekTo [function] [call site] 00105
6 SzDecodeCopy [function] [call site] 00106
6 SzDecodeLzma [function] [call site] 00107
7 LzmaDec_AllocateProbs [function] [call site] 00108
8 LzmaProps_Decode [function] [call site] 00109
8 LzmaDec_AllocateProbs2 [function] [call site] 00110
9 LzmaDec_FreeProbs [function] [call site] 00111
7 LzmaDec_Init [function] [call site] 00112
8 LzmaDec_InitDicAndState [function] [call site] 00113
7 LzmaDec_DecodeToDic [function] [call site] 00114
8 LzmaDec_WriteRem [function] [call site] 00115
8 LzmaDec_TryDummy [function] [call site] 00116
8 LzmaDec_DecodeReal2 [function] [call site] 00117
9 LzmaDec_DecodeReal_3 [function] [call site] 00118
9 LzmaDec_WriteRem [function] [call site] 00119
8 LzmaDec_TryDummy [function] [call site] 00120
8 LzmaDec_DecodeReal2 [function] [call site] 00121
7 LzmaDec_FreeProbs [function] [call site] 00122
6 SzDecodeLzma2 [function] [call site] 00123
7 Lzma2Dec_AllocateProbs [function] [call site] 00124
8 Lzma2Dec_GetOldProps [function] [call site] 00125
8 LzmaDec_AllocateProbs [function] [call site] 00126
7 Lzma2Dec_Init [function] [call site] 00127
8 LzmaDec_Init [function] [call site] 00128
7 Lzma2Dec_DecodeToDic [function] [call site] 00129
8 Lzma2Dec_UpdateState [function] [call site] 00130
8 LzmaDec_InitDicAndState [function] [call site] 00131
8 LzmaDec_UpdateWithUncompressed [function] [call site] 00132
8 LzmaDec_InitDicAndState [function] [call site] 00133
8 LzmaDec_DecodeToDic [function] [call site] 00134
7 LzmaDec_FreeProbs [function] [call site] 00135
6 SzDecodePpmd [function] [call site] 00136
7 ReadByte [function] [call site] 00137
7 Ppmd7_Construct [function] [call site] 00138
7 Ppmd7_Alloc [function] [call site] 00139
8 Ppmd7_Free [function] [call site] 00140
7 Ppmd7_Init [function] [call site] 00141
8 RestartModel [function] [call site] 00142
9 SetSuccessor [function] [call site] 00143
7 Ppmd7z_RangeDec_CreateVTable [function] [call site] 00144
8 Range_GetThreshold [function] [call site] 00145
8 Range_Decode [function] [call site] 00146
9 Range_Normalize [function] [call site] 00147
8 Range_DecodeBit [function] [call site] 00148
9 Range_Normalize [function] [call site] 00149
7 Ppmd7z_RangeDec_Init [function] [call site] 00150
7 Ppmd7_DecodeSymbol [function] [call site] 00151
8 Ppmd7_Update1_0 [function] [call site] 00152
9 Rescale [function] [call site] 00153
10 InsertNode [function] [call site] 00154
10 ShrinkUnits [function] [call site] 00155
11 RemoveNode [function] [call site] 00156
11 InsertNode [function] [call site] 00157
11 SplitBlock [function] [call site] 00158
12 InsertNode [function] [call site] 00159
12 InsertNode [function] [call site] 00160
9 NextContext [function] [call site] 00161
10 UpdateModel [function] [call site] 00162
11 SwapStates [function] [call site] 00163
11 CreateSuccessors [function] [call site] 00164
12 SetSuccessor [function] [call site] 00165
12 RemoveNode [function] [call site] 00166
12 AllocUnitsRare [function] [call site] 00167
13 GlueFreeBlocks [function] [call site] 00168
14 InsertNode [function] [call site] 00169
14 InsertNode [function] [call site] 00170
14 InsertNode [function] [call site] 00171
13 RemoveNode [function] [call site] 00172
13 RemoveNode [function] [call site] 00173
13 SplitBlock [function] [call site] 00174
12 SetSuccessor [function] [call site] 00175
11 RestartModel [function] [call site] 00176
11 SetSuccessor [function] [call site] 00177
11 RestartModel [function] [call site] 00178
11 CreateSuccessors [function] [call site] 00179
11 RestartModel [function] [call site] 00180
11 SetSuccessor [function] [call site] 00181
11 AllocUnits [function] [call site] 00182
12 RemoveNode [function] [call site] 00183
12 AllocUnitsRare [function] [call site] 00184
11 RestartModel [function] [call site] 00185
11 InsertNode [function] [call site] 00186
11 AllocUnits [function] [call site] 00187
11 RestartModel [function] [call site] 00188
11 SetSuccessor [function] [call site] 00189
8 Ppmd7_Update1 [function] [call site] 00190
9 SwapStates [function] [call site] 00191
9 Rescale [function] [call site] 00192
9 NextContext [function] [call site] 00193
8 Ppmd7_UpdateBin [function] [call site] 00194
9 NextContext [function] [call site] 00195
8 Ppmd7_MakeEscFreq [function] [call site] 00196
8 Ppmd7_Update2 [function] [call site] 00197
9 Rescale [function] [call site] 00198
9 UpdateModel [function] [call site] 00199
7 Ppmd7_Free [function] [call site] 00200
6 LookInStream_SeekTo [function] [call site] 00201
6 SzDecodeCopy [function] [call site] 00202
6 Bcj2Dec_Init [function] [call site] 00203
6 Bcj2Dec_Decode [function] [call site] 00204
6 Delta_Init [function] [call site] 00205
6 Delta_Decode [function] [call site] 00206
7 MyMemCpy [function] [call site] 00207
7 MyMemCpy [function] [call site] 00208
7 MyMemCpy [function] [call site] 00209
6 x86_Convert [function] [call site] 00210
6 PPC_Convert [function] [call site] 00211
6 IA64_Convert [function] [call site] 00212
6 SPARC_Convert [function] [call site] 00213
6 ARM_Convert [function] [call site] 00214
6 ARMT_Convert [function] [call site] 00215
5 CrcCalc [function] [call site] 00216
3 SzAr_Free [function] [call site] 00217
4 SzBitUi32s_Free [function] [call site] 00218
4 SzAr_Init [function] [call site] 00219
3 Buf_Free [function] [call site] 00220
3 Buf_Free [function] [call site] 00221
3 ReadNumber [function] [call site] 00222
3 SzReadHeader [function] [call site] 00223
4 Buf_Init [function] [call site] 00224
4 SzReadHeader2 [function] [call site] 00225
5 ReadNumber [function] [call site] 00226
5 ReadNumber [function] [call site] 00227
5 SkipData [function] [call site] 00228
5 ReadNumber [function] [call site] 00229
5 SzAr_Init [function] [call site] 00230
5 SzReadAndDecodePackedStreams [function] [call site] 00231
5 SzAr_Free [function] [call site] 00232
5 ReadNumber [function] [call site] 00233
5 SzReadStreamsInfo [function] [call site] 00234
5 ReadNumber [function] [call site] 00235
5 SzReadNumber32 [function] [call site] 00236
5 ReadNumber [function] [call site] 00237
5 ReadNumber [function] [call site] 00238
5 SzReadNumber32 [function] [call site] 00239
5 SzReadFileNames [function] [call site] 00240
5 RememberBitVector [function] [call site] 00241
5 CountDefinedBits [function] [call site] 00242
5 RememberBitVector [function] [call site] 00243
5 SzBitUi32s_Free [function] [call site] 00244
5 ReadBitVector [function] [call site] 00245
5 SzReadNumber32 [function] [call site] 00246
5 ReadUi32s [function] [call site] 00247
5 ReadTime [function] [call site] 00248
6 ReadBitVector [function] [call site] 00249
6 SzReadNumber32 [function] [call site] 00250
5 ReadTime [function] [call site] 00251
5 ReadNumber [function] [call site] 00252
5 SkipData [function] [call site] 00253
5 SzBitUi32s_Alloc [function] [call site] 00254
5 SzReadNumber32 [function] [call site] 00255
5 SzAr_GetFolderUnpackSize [function] [call site] 00256
5 SzAr_GetFolderUnpackSize [function] [call site] 00257
5 ReadNumber [function] [call site] 00258
5 SzReadNumber32 [function] [call site] 00259
4 Buf_Free [function] [call site] 00260
3 Buf_Free [function] [call site] 00261
2 SzArEx_Free [function] [call site] 00262
3 SzBitUi32s_Free [function] [call site] 00263
3 SzBitUi32s_Free [function] [call site] 00264
3 SzBitUi64s_Free [function] [call site] 00265
3 SzBitUi64s_Free [function] [call site] 00266
3 SzAr_Free [function] [call site] 00267
3 SzArEx_Init [function] [call site] 00268
1 SzArEx_GetFileNameUtf16 [function] [call site] 00269
1 SzArEx_GetFileNameUtf16 [function] [call site] 00270
1 InputLookBuffer::stream() [function] [call site] 00271
1 SzArEx_Extract [function] [call site] 00272
2 SzAr_GetFolderUnpackSize [function] [call site] 00273
2 SzAr_DecodeFolder [function] [call site] 00274
2 CrcCalc [function] [call site] 00275
1 SzArEx_Free [function] [call site] 00276