Fuzz introspector: lzma2dec_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 388 2 :

['LzmaDec_DecodeReal2', 'LzmaDec_TryDummy']

0 388 LzmaDec_DecodeToDic call site: 00025 /src/lzma-fuzz/sdk/C/LzmaDec.c:983
0 0 None 0 388 LzmaDec_DecodeToDic call site: 00022 /src/lzma-fuzz/sdk/C/LzmaDec.c:980
0 0 None 0 4 LzmaDec_Allocate call site: 00006 /src/lzma-fuzz/sdk/C/LzmaDec.c:1143
0 0 None 0 0 LzmaAlloc(ISzAllocconst*,unsignedlong) call site: 00000 /src/lzma-fuzz/./common-alloc.h:36
0 0 None 0 0 SzAlloc call site: 00000 /src/lzma-fuzz/sdk/C/7zAlloc.c:28
0 0 None 0 0 Lzma2Dec_DecodeToDic call site: 00015 /src/lzma-fuzz/sdk/C/Lzma2Dec.c:209
0 0 None 0 0 Lzma2Dec_DecodeToDic call site: 00016 /src/lzma-fuzz/sdk/C/Lzma2Dec.c:241
0 0 None 0 0 Lzma2Dec_GetOldProps call site: 00003 /src/lzma-fuzz/sdk/C/Lzma2Dec.c:60
0 0 None 0 0 LzmaProps_Decode call site: 00005 /src/lzma-fuzz/sdk/C/LzmaDec.c:1085
0 0 None 0 0 LzmaProps_Decode call site: 00005 /src/lzma-fuzz/sdk/C/LzmaDec.c:1090
0 0 None 0 0 LzmaProps_Decode call site: 00005 /src/lzma-fuzz/sdk/C/LzmaDec.c:1095
0 0 None 0 0 LzmaDec_Allocate call site: 00008 /src/lzma-fuzz/sdk/C/LzmaDec.c:1151

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 GetDictionarySize(unsigned char, unsigned long*) [function] [call site] 00001
1 Lzma2Dec_Allocate [function] [call site] 00002
2 Lzma2Dec_GetOldProps [function] [call site] 00003
2 LzmaDec_Allocate [function] [call site] 00004
3 LzmaProps_Decode [function] [call site] 00005
3 LzmaDec_AllocateProbs2 [function] [call site] 00006
4 LzmaDec_FreeProbs [function] [call site] 00007
3 LzmaDec_FreeDict [function] [call site] 00008
3 LzmaDec_FreeProbs [function] [call site] 00009
1 Lzma2Dec_Init [function] [call site] 00010
2 LzmaDec_Init [function] [call site] 00011
3 LzmaDec_InitDicAndState [function] [call site] 00012
1 Lzma2Dec_DecodeToBuf [function] [call site] 00013
2 Lzma2Dec_DecodeToDic [function] [call site] 00014
3 Lzma2Dec_UpdateState [function] [call site] 00015
3 LzmaDec_InitDicAndState [function] [call site] 00016
3 LzmaDec_UpdateWithUncompressed [function] [call site] 00017
3 LzmaDec_InitDicAndState [function] [call site] 00018
3 LzmaDec_DecodeToDic [function] [call site] 00019
4 LzmaDec_WriteRem [function] [call site] 00020
4 LzmaDec_TryDummy [function] [call site] 00021
4 LzmaDec_DecodeReal2 [function] [call site] 00022
5 LzmaDec_DecodeReal_3 [function] [call site] 00023
5 LzmaDec_WriteRem [function] [call site] 00024
4 LzmaDec_TryDummy [function] [call site] 00025
4 LzmaDec_DecodeReal2 [function] [call site] 00026
1 LzmaDec_Free [function] [call site] 00027
2 LzmaDec_FreeProbs [function] [call site] 00028
2 LzmaDec_FreeDict [function] [call site] 00029