Fuzz introspector: xzenc_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
61 61 1 :

['XzEncProps_Normalize_Fixed']

61 61 XzProps_Normalize call site: 00031 /src/lzma-fuzz/sdk/C/XzEnc.c:586
21 21 1 :

['Lzma2Dec_AllocateProbs']

21 21 Lzma2State_SetProps call site: 00308 /src/lzma-fuzz/sdk/C/XzDec.c:364
13 13 1 :

['MixCoder_ResetFromMethod']

13 17 XzDecMix_Init call site: 00299 /src/lzma-fuzz/sdk/C/XzDec.c:890
9 9 1 :

['MatchFinder_Normalize']

9 33 MatchFinder_CheckLimits call site: 00000 /src/lzma-fuzz/sdk/C/LzFind.c:375
4 4 1 :

['XzEnc_FreeOutBufs']

4 819 XzEnc_Encode call site: 00051 /src/lzma-fuzz/sdk/C/XzEnc.c:1219
0 388 2 :

['LzmaDec_DecodeReal2', 'LzmaDec_TryDummy']

0 388 LzmaDec_DecodeToDic call site: 00333 /src/lzma-fuzz/sdk/C/LzmaDec.c:929
0 269 1 :

['Lzma2Dec_DecodeToDic']

0 269 Lzma2State_Code2 call site: 00326 /src/lzma-fuzz/sdk/C/XzDec.c:392
0 5 1 :

['XzEncIndex_ReAlloc']

0 5 XzEncIndex_AddIndexRecord call site: 00246 /src/lzma-fuzz/sdk/C/XzEnc.c:180
0 2 1 :

['LzmaDec_FreeProbs']

0 2 Lzma2State_Free call site: 00303 /src/lzma-fuzz/sdk/C/XzDec.c:351
0 0 None 101 640 Lzma2Enc_EncodeMt1 call site: 00106 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:512
0 0 None 101 589 Lzma2Enc_EncodeMt1 call site: 00107 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:522
0 0 None 101 589 Lzma2Enc_EncodeMt1 call site: 00117 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:538

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 CrcGenerateTable [function] [call site] 00001
2 CrcUpdateT4 [function] [call site] 00002
2 CrcUpdateT4 [function] [call site] 00003
2 CrcUpdateT8 [function] [call site] 00004
2 CPU_Is_InOrder [function] [call site] 00005
3 x86cpuid_CheckAndRead [function] [call site] 00006
4 MyCPUID [function] [call site] 00007
4 MyCPUID [function] [call site] 00008
3 x86cpuid_GetFirm [function] [call site] 00009
2 CrcUpdateT8 [function] [call site] 00010
1 Crc64GenerateTable [function] [call site] 00011
2 XzCrc64UpdateT4 [function] [call site] 00012
1 XzProps_Init [function] [call site] 00013
2 XzFilterProps_Init [function] [call site] 00014
2 Lzma2EncProps_Init [function] [call site] 00015
3 LzmaEncProps_Init [function] [call site] 00016
1 OutputBuffer::OutputBuffer() [function] [call site] 00017
2 OutputBuffer::_Write(ISeqOutStream const*, void const*, unsigned long) [function] [call site] 00018
3 OutputBuffer::Write(void const*, unsigned long) [function] [call site] 00019
4 __assert_fail [call site] 00020
1 InputBuffer::InputBuffer(unsigned char const*, unsigned long) [function] [call site] 00021
2 InputBuffer::_Read(ISeqInStream const*, void*, unsigned long*) [function] [call site] 00022
3 InputBuffer::Read(void*, unsigned long*) [function] [call site] 00023
1 XzEnc_Create [function] [call site] 00024
2 XzEnc_Construct [function] [call site] 00025
3 XzEncIndex_Construct [function] [call site] 00026
3 Lzma2WithFilters_Construct [function] [call site] 00027
4 SeqInFilter_Construct [function] [call site] 00028
5 SeqInFilter_Read [function] [call site] 00029
2 XzProps_Init [function] [call site] 00030
2 XzProps_Normalize [function] [call site] 00031
3 Lzma2EncProps_Normalize [function] [call site] 00032
4 LzmaEncProps_Normalize [function] [call site] 00033
4 LzmaEncProps_Normalize [function] [call site] 00034
3 XzEncProps_Normalize_Fixed [function] [call site] 00035
4 Lzma2EncProps_Normalize [function] [call site] 00036
4 Lzma2EncProps_Normalize [function] [call site] 00037
1 XzEnc_SetProps [function] [call site] 00038
2 XzProps_Normalize [function] [call site] 00039
1 XzEnc_SetDataSize [function] [call site] 00040
1 OutputBuffer::stream() [function] [call site] 00041
1 XzEnc_Encode [function] [call site] 00042
2 XzEncIndex_Init [function] [call site] 00043
2 XzEncIndex_PreAlloc [function] [call site] 00044
3 Xz_WriteVarInt [function] [call site] 00045
3 Xz_WriteVarInt [function] [call site] 00046
3 XzEncIndex_ReAlloc [function] [call site] 00047
2 Xz_WriteHeader [function] [call site] 00048
3 CrcCalc [function] [call site] 00049
3 WriteBytes [function] [call site] 00050
2 CompressProgress_XzEncOffset_Progress [function] [call site] 00051
2 XzEnc_FreeOutBufs [function] [call site] 00052
2 Xz_CompressBlock [function] [call site] 00053
3 Lzma2WithFilters_Create [function] [call site] 00054
4 Lzma2Enc_Create [function] [call site] 00055
5 Lzma2EncProps_Init [function] [call site] 00056
5 Lzma2EncProps_Normalize [function] [call site] 00057
3 Lzma2Enc_SetProps [function] [call site] 00058
4 LzmaEncProps_Normalize [function] [call site] 00059
4 Lzma2EncProps_Normalize [function] [call site] 00060
3 Lzma2Enc_WriteProperties [function] [call site] 00061
4 LzmaEncProps_GetDictSize [function] [call site] 00062
5 LzmaEncProps_Normalize [function] [call site] 00063
3 SeqSizeOutStream_Write [function] [call site] 00064
3 XzBlock_WriteHeader [function] [call site] 00065
4 Xz_WriteVarInt [function] [call site] 00066
4 Xz_WriteVarInt [function] [call site] 00067
4 Xz_WriteVarInt [function] [call site] 00068
4 Xz_WriteVarInt [function] [call site] 00069
4 CrcCalc [function] [call site] 00070
4 WriteBytes [function] [call site] 00071
3 SeqCheckInStream_Read [function] [call site] 00072
4 XzCheck_Update [function] [call site] 00073
5 CrcUpdate [function] [call site] 00074
5 Crc64Update [function] [call site] 00075
5 Sha256_Update [function] [call site] 00076
6 Sha256_WriteByteBlock [function] [call site] 00077
3 SeqCheckInStream_Init [function] [call site] 00078
4 XzCheck_Init [function] [call site] 00079
5 Sha256_Init [function] [call site] 00080
3 SeqInFilter_Init [function] [call site] 00081
4 BraState_SetFromMethod [function] [call site] 00082
5 BraState_Free [function] [call site] 00083
5 BraState_SetProps [function] [call site] 00084
5 BraState_Init [function] [call site] 00085
6 Delta_Init [function] [call site] 00086
5 BraState_Code2 [function] [call site] 00087
6 BraState_Filter [function] [call site] 00088
7 Delta_Encode [function] [call site] 00089
8 MyMemCpy [function] [call site] 00090
8 MyMemCpy [function] [call site] 00091
8 MyMemCpy [function] [call site] 00092
7 Delta_Decode [function] [call site] 00093
8 MyMemCpy [function] [call site] 00094
8 MyMemCpy [function] [call site] 00095
8 MyMemCpy [function] [call site] 00096
7 x86_Convert [function] [call site] 00097
7 PPC_Convert [function] [call site] 00098
7 IA64_Convert [function] [call site] 00099
7 ARM_Convert [function] [call site] 00100
7 ARMT_Convert [function] [call site] 00101
7 SPARC_Convert [function] [call site] 00102
5 BraState_Filter [function] [call site] 00103
3 XzCheck_Update [function] [call site] 00104
3 Lzma2Enc_Encode2 [function] [call site] 00105
4 Lzma2Enc_EncodeMt1 [function] [call site] 00106
5 LzmaEnc_Create [function] [call site] 00107
6 LzmaEnc_Construct [function] [call site] 00108
7 RangeEnc_Construct [function] [call site] 00109
7 MatchFinder_Construct [function] [call site] 00110
8 MatchFinder_SetDefaultSettings [function] [call site] 00111
7 LzmaEncProps_Init [function] [call site] 00112
7 LzmaEnc_SetProps [function] [call site] 00113
8 LzmaEncProps_Normalize [function] [call site] 00114
7 LzmaEnc_FastPosInit [function] [call site] 00115
7 LzmaEnc_InitPriceTables [function] [call site] 00116
5 LimitedSeqInStream_Read [function] [call site] 00117
5 Lzma2EncInt_InitBlock [function] [call site] 00118
5 LimitedSeqInStream_Init [function] [call site] 00119
5 LzmaEnc_SetDataSize [function] [call site] 00120
5 LzmaEnc_PrepareForLzma2 [function] [call site] 00121
6 LzmaEnc_AllocAndInit [function] [call site] 00122
7 LzmaEnc_Alloc [function] [call site] 00123
8 RangeEnc_Alloc [function] [call site] 00124
8 LzmaEnc_FreeLits [function] [call site] 00125
8 LzmaEnc_FreeLits [function] [call site] 00126
8 MatchFinder_Create [function] [call site] 00127
9 MatchFinder_Free [function] [call site] 00128
10 MatchFinder_FreeThisClassMemory [function] [call site] 00129
10 LzInWindow_Free [function] [call site] 00130
9 LzInWindow_Create [function] [call site] 00131
10 LzInWindow_Free [function] [call site] 00132
9 MatchFinder_FreeThisClassMemory [function] [call site] 00133
9 AllocRefs [function] [call site] 00134
9 MatchFinder_Free [function] [call site] 00135
8 MatchFinder_CreateVTable [function] [call site] 00136
7 LzmaEnc_Init [function] [call site] 00137
8 RangeEnc_Init [function] [call site] 00138
8 LenEnc_Init [function] [call site] 00139
8 LenEnc_Init [function] [call site] 00140
7 LzmaEnc_InitPrices [function] [call site] 00141
8 FillDistancesPrices [function] [call site] 00142
8 FillAlignPrices [function] [call site] 00143
8 LenPriceEnc_UpdateTables [function] [call site] 00144
9 SetPrices_3 [function] [call site] 00145
9 SetPrices_3 [function] [call site] 00146
8 LenPriceEnc_UpdateTables [function] [call site] 00147
5 LzmaEnc_MemPrepare [function] [call site] 00148
6 LzmaEnc_SetInputBuf [function] [call site] 00149
6 LzmaEnc_SetDataSize [function] [call site] 00150
6 LzmaEnc_AllocAndInit [function] [call site] 00151
5 Lzma2EncInt_EncodeSubblock [function] [call site] 00152
6 LzmaEnc_SaveState [function] [call site] 00153
6 LzmaEnc_CodeOneMemBlock [function] [call site] 00154
7 SeqOutStreamBuf_Write [function] [call site] 00155
7 LzmaEnc_Init [function] [call site] 00156
7 LzmaEnc_InitPrices [function] [call site] 00157
7 RangeEnc_Init [function] [call site] 00158
7 LzmaEnc_CodeOneBlock [function] [call site] 00159
8 CheckErrors [function] [call site] 00160
8 Flush [function] [call site] 00161
9 WriteEndMarker [function] [call site] 00162
10 RangeEnc_ShiftLow [function] [call site] 00163
11 RangeEnc_FlushStream [function] [call site] 00164
11 RangeEnc_FlushStream [function] [call site] 00165
10 RangeEnc_ShiftLow [function] [call site] 00166
10 LenEnc_Encode [function] [call site] 00167
11 RangeEnc_ShiftLow [function] [call site] 00168
11 RangeEnc_ShiftLow [function] [call site] 00169
11 LitEnc_Encode [function] [call site] 00170
12 RangeEnc_ShiftLow [function] [call site] 00171
11 RangeEnc_ShiftLow [function] [call site] 00172
11 RangeEnc_ShiftLow [function] [call site] 00173
11 RangeEnc_ShiftLow [function] [call site] 00174
11 RangeEnc_ShiftLow [function] [call site] 00175
10 RangeEnc_ShiftLow [function] [call site] 00176
10 RangeEnc_ShiftLow [function] [call site] 00177
10 RangeEnc_ShiftLow [function] [call site] 00178
9 RangeEnc_FlushData [function] [call site] 00179
10 RangeEnc_ShiftLow [function] [call site] 00180
9 RangeEnc_FlushStream [function] [call site] 00181
9 CheckErrors [function] [call site] 00182
8 ReadMatchDistances [function] [call site] 00183
8 RangeEnc_EncodeBit_0 [function] [call site] 00184
9 RangeEnc_ShiftLow [function] [call site] 00185
8 LitEnc_Encode [function] [call site] 00186
8 GetOptimumFast [function] [call site] 00187
9 ReadMatchDistances [function] [call site] 00188
9 ReadMatchDistances [function] [call site] 00189
8 GetOptimum [function] [call site] 00190
9 ReadMatchDistances [function] [call site] 00191
9 LitEnc_Matched_GetPrice [function] [call site] 00192
9 LitEnc_GetPrice [function] [call site] 00193
9 GetPrice_PureRep [function] [call site] 00194
9 ReadMatchDistances [function] [call site] 00195
9 LitEnc_Matched_GetPrice [function] [call site] 00196
9 LitEnc_GetPrice [function] [call site] 00197
9 GetPrice_PureRep [function] [call site] 00198
9 LitEnc_Matched_GetPrice [function] [call site] 00199
9 LitEnc_Matched_GetPrice [function] [call site] 00200
9 Backward [function] [call site] 00201
8 RangeEnc_ShiftLow [function] [call site] 00202
8 LitEnc_Encode [function] [call site] 00203
8 LitEnc_EncodeMatched [function] [call site] 00204
9 RangeEnc_ShiftLow [function] [call site] 00205
8 RangeEnc_ShiftLow [function] [call site] 00206
8 RangeEnc_ShiftLow [function] [call site] 00207
8 RangeEnc_ShiftLow [function] [call site] 00208
8 RangeEnc_ShiftLow [function] [call site] 00209
8 RangeEnc_ShiftLow [function] [call site] 00210
8 RangeEnc_ShiftLow [function] [call site] 00211
8 LenEnc_Encode [function] [call site] 00212
8 RangeEnc_ShiftLow [function] [call site] 00213
8 LenEnc_Encode [function] [call site] 00214
8 RangeEnc_ShiftLow [function] [call site] 00215
8 RcTree_ReverseEncode [function] [call site] 00216
9 RangeEnc_ShiftLow [function] [call site] 00217
8 RangeEnc_ShiftLow [function] [call site] 00218
8 RangeEnc_ShiftLow [function] [call site] 00219
8 RangeEnc_ShiftLow [function] [call site] 00220
8 RangeEnc_ShiftLow [function] [call site] 00221
8 RangeEnc_ShiftLow [function] [call site] 00222
8 FillAlignPrices [function] [call site] 00223
8 FillDistancesPrices [function] [call site] 00224
8 LenPriceEnc_UpdateTables [function] [call site] 00225
8 LenPriceEnc_UpdateTables [function] [call site] 00226
8 CheckErrors [function] [call site] 00227
8 Flush [function] [call site] 00228
6 LzmaEnc_GetCurBuf [function] [call site] 00229
6 LzmaEnc_RestoreState [function] [call site] 00230
5 Progress [function] [call site] 00231
5 LzmaEnc_Finish [function] [call site] 00232
3 SeqCheckInStream_GetDigest [function] [call site] 00233
4 XzCheck_Final [function] [call site] 00234
5 Sha256_Final [function] [call site] 00235
6 Sha256_WriteByteBlock [function] [call site] 00236
6 Sha256_WriteByteBlock [function] [call site] 00237
6 Sha256_Init [function] [call site] 00238
3 XzFlags_GetCheckSize [function] [call site] 00239
3 WriteBytes [function] [call site] 00240
3 XzBlock_WriteHeader [function] [call site] 00241
2 WriteBytes [function] [call site] 00242
2 WriteBytes [function] [call site] 00243
2 XzEncIndex_AddIndexRecord [function] [call site] 00244
3 Xz_WriteVarInt [function] [call site] 00245
3 Xz_WriteVarInt [function] [call site] 00246
3 XzEncIndex_ReAlloc [function] [call site] 00247
2 XzEncIndex_WriteFooter [function] [call site] 00248
3 Xz_WriteVarInt [function] [call site] 00249
3 WriteBytesUpdateCrc [function] [call site] 00250
4 CrcUpdate [function] [call site] 00251
4 WriteBytes [function] [call site] 00252
3 WriteBytesUpdateCrc [function] [call site] 00253
3 CrcUpdate [function] [call site] 00254
3 CrcCalc [function] [call site] 00255
3 WriteBytes [function] [call site] 00256
1 __assert_fail [call site] 00257
1 XzDecMtProps_Init [function] [call site] 00258
1 OutputBuffer::OutputBuffer() [function] [call site] 00259
1 OutputBuffer::data() const [function] [call site] 00260
1 XzDecMt_Create [function] [call site] 00261
2 AlignOffsetAlloc_CreateVTable [function] [call site] 00262
3 AlignOffsetAlloc_Alloc [function] [call site] 00263
3 AlignOffsetAlloc_Free [function] [call site] 00264
2 XzUnpacker_Construct [function] [call site] 00265
3 MixCoder_Construct [function] [call site] 00266
3 XzUnpacker_Init [function] [call site] 00267
2 XzDecMtProps_Init [function] [call site] 00268
1 OutputBuffer::stream() [function] [call site] 00269
1 InputBuffer::stream() [function] [call site] 00270
1 XzDecMt_Decode [function] [call site] 00271
2 XzStatInfo_Clear [function] [call site] 00272
2 XzUnpacker_Init [function] [call site] 00273
2 XzDecMt_Decode_ST [function] [call site] 00274
3 XzUnpacker_SetOutBuf [function] [call site] 00275
3 XzUnpacker_Code [function] [call site] 00276
4 MixCoder_Code [function] [call site] 00277
4 XzCheck_Update [function] [call site] 00278
4 XzFlags_GetCheckSize [function] [call site] 00279
4 XzUnpacker_UpdateIndex [function] [call site] 00280
5 Xz_WriteVarInt [function] [call site] 00281
5 Xz_WriteVarInt [function] [call site] 00282
5 Sha256_Update [function] [call site] 00283
4 Xz_ParseHeader [function] [call site] 00284
5 CrcCalc [function] [call site] 00285
4 Sha256_Init [function] [call site] 00286
4 Xz_WriteVarInt [function] [call site] 00287
4 Sha256_Final [function] [call site] 00288
4 Sha256_Init [function] [call site] 00289
4 CrcUpdate [function] [call site] 00290
4 XzBlock_Parse [function] [call site] 00291
5 CrcCalc [function] [call site] 00292
5 Xz_ReadVarInt [function] [call site] 00293
5 Xz_ReadVarInt [function] [call site] 00294
5 Xz_ReadVarInt [function] [call site] 00295
5 Xz_ReadVarInt [function] [call site] 00296
4 XzBlock_AreSupportedFilters [function] [call site] 00297
4 XzCheck_Init [function] [call site] 00298
4 XzDecMix_Init [function] [call site] 00299
5 MixCoder_Free [function] [call site] 00300
5 MixCoder_SetFromMethod [function] [call site] 00301
6 Lzma2State_SetFromMethod [function] [call site] 00302
7 Lzma2State_Free [function] [call site] 00303
8 LzmaDec_FreeProbs [function] [call site] 00304
8 LzmaDec_Free [function] [call site] 00305
9 LzmaDec_FreeProbs [function] [call site] 00306
9 LzmaDec_FreeDict [function] [call site] 00307
7 Lzma2State_SetProps [function] [call site] 00308
8 Lzma2Dec_AllocateProbs [function] [call site] 00309
9 Lzma2Dec_GetOldProps [function] [call site] 00310
9 LzmaDec_AllocateProbs [function] [call site] 00311
10 LzmaProps_Decode [function] [call site] 00312
10 LzmaDec_AllocateProbs2 [function] [call site] 00313
11 LzmaDec_FreeProbs [function] [call site] 00314
8 Lzma2Dec_Allocate [function] [call site] 00315
9 Lzma2Dec_GetOldProps [function] [call site] 00316
9 LzmaDec_Allocate [function] [call site] 00317
10 LzmaProps_Decode [function] [call site] 00318
10 LzmaDec_AllocateProbs2 [function] [call site] 00319
10 LzmaDec_FreeDict [function] [call site] 00320
10 LzmaDec_FreeProbs [function] [call site] 00321
7 Lzma2State_Init [function] [call site] 00322
8 Lzma2Dec_Init [function] [call site] 00323
9 LzmaDec_Init [function] [call site] 00324
10 LzmaDec_InitDicAndState [function] [call site] 00325
7 Lzma2State_Code2 [function] [call site] 00326
8 Lzma2Dec_DecodeToDic [function] [call site] 00327
9 Lzma2Dec_UpdateState [function] [call site] 00328
9 LzmaDec_InitDicAndState [function] [call site] 00329
9 LzmaDec_UpdateWithUncompressed [function] [call site] 00330
9 LzmaDec_InitDicAndState [function] [call site] 00331
9 LzmaDec_DecodeToDic [function] [call site] 00332
10 LzmaDec_WriteRem [function] [call site] 00333
10 LzmaDec_TryDummy [function] [call site] 00334
10 LzmaDec_DecodeReal2 [function] [call site] 00335
11 LzmaDec_DecodeReal_3 [function] [call site] 00336
11 LzmaDec_WriteRem [function] [call site] 00337
10 LzmaDec_TryDummy [function] [call site] 00338
10 LzmaDec_DecodeReal2 [function] [call site] 00339
8 Lzma2Dec_DecodeToBuf [function] [call site] 00340
9 Lzma2Dec_DecodeToDic [function] [call site] 00341
6 BraState_SetFromMethod [function] [call site] 00342
5 MixCoder_ResetFromMethod [function] [call site] 00343
6 Lzma2State_ResetOutBuf [function] [call site] 00344
5 MixCoder_Init [function] [call site] 00345
4 XzFlags_GetCheckSize [function] [call site] 00346
4 XzCheck_Final [function] [call site] 00347
4 memcmp [call site] 00348
4 CrcUpdate [function] [call site] 00349
4 Sha256_Update [function] [call site] 00350
4 Sha256_Final [function] [call site] 00351
4 memcmp [call site] 00352
4 Xz_CheckFooter [function] [call site] 00353
5 CrcCalc [function] [call site] 00354
2 XzStatInfo_SetStat [function] [call site] 00355
3 XzUnpacker_GetExtraSize [function] [call site] 00356
3 XzUnpacker_IsStreamWasFinished [function] [call site] 00357
1 __assert_fail [call site] 00358
1 OutputBuffer::~OutputBuffer() [function] [call site] 00359
1 OutputBuffer::size() const [function] [call site] 00360
1 __assert_fail [call site] 00361
1 OutputBuffer::data() const [function] [call site] 00362
1 memcmp [call site] 00363
1 XzDecMt_Destroy [function] [call site] 00364
2 XzDecMt_FreeSt [function] [call site] 00365
3 XzUnpacker_Free [function] [call site] 00366
4 MixCoder_Free [function] [call site] 00367
1 XzEnc_Destroy [function] [call site] 00368
2 XzEnc_Free [function] [call site] 00369
3 XzEncIndex_Free [function] [call site] 00370
3 Lzma2WithFilters_Free [function] [call site] 00371
4 SeqInFilter_Free [function] [call site] 00372
4 Lzma2Enc_Destroy [function] [call site] 00373
5 LzmaEnc_Destroy [function] [call site] 00374
6 LzmaEnc_Destruct [function] [call site] 00375
7 MatchFinder_Free [function] [call site] 00376
7 LzmaEnc_FreeLits [function] [call site] 00377
7 RangeEnc_Free [function] [call site] 00378
1 OutputBuffer::~OutputBuffer() [function] [call site] 00379