Fuzz introspector: 7z_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
25 25 1 :

['AllocUnitsRare']

25 25 AllocUnits call site: 00165 /src/lzma-fuzz/sdk/C/Ppmd7.c:251
5 5 1 :

['SplitBlock']

5 5 ShrinkUnits call site: 00137 /src/lzma-fuzz/sdk/C/Ppmd7.c:270
0 958 3 :

['SzAr_Init', 'SzAr_Free', 'SzReadAndDecodePackedStreams']

0 1408 SzReadHeader2 call site: 00211 /src/lzma-fuzz/sdk/C/7zArcIn.c:1130
0 388 2 :

['LzmaDec_DecodeReal2', 'LzmaDec_TryDummy']

0 388 LzmaDec_DecodeToDic call site: 00108 /src/lzma-fuzz/sdk/C/LzmaDec.c:983
0 232 12 :

['SzAr_GetFolderUnpackSize', 'ReadBitVector', 'RememberBitVector', 'ReadNumber', 'SzBitUi32s_Free', 'SzReadNumber32', 'SkipData', 'SzBitUi32s_Alloc', 'SzReadFileNames', 'CountDefinedBits', 'ReadUi32s', 'ReadTime']

0 232 SzReadHeader2 call site: 00221 /src/lzma-fuzz/sdk/C/7zArcIn.c:1205
0 183 5 :

['SkipData', 'ReadBitUi32s', 'WaitId', 'SzReadNumber32', 'ReadNumber']

0 183 ReadUnpackInfo call site: 00044 /src/lzma-fuzz/sdk/C/7zArcIn.c:660
0 24 1 :

['Rescale']

0 111 Ppmd7_Update1 call site: 00173 /src/lzma-fuzz/sdk/C/Ppmd7.c:681
0 16 1 :

['SzReadNumber32']

0 16 SzReadHeader2 call site: 00240 /src/lzma-fuzz/sdk/C/7zArcIn.c:1445
0 16 1 :

['SzReadNumber32']

0 16 ReadTime call site: 00231 /src/lzma-fuzz/sdk/C/7zArcIn.c:1057
0 13 1 :

['SkipData']

0 72 SzReadHeader2 call site: 00234 /src/lzma-fuzz/sdk/C/7zArcIn.c:1284
0 11 1 :

['RestartModel']

0 11 UpdateModel call site: 00146 /src/lzma-fuzz/sdk/C/Ppmd7.c:464
0 3 1 :

['CountDefinedBits']

0 52 ReadSubStreamsInfo call site: 00064 /src/lzma-fuzz/sdk/C/7zArcIn.c:899

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 CrcGenerateTable [function] [call site] 00001
2 CPU_Is_InOrder [function] [call site] 00002
3 x86cpuid_CheckAndRead [function] [call site] 00003
4 MyCPUID [function] [call site] 00004
4 MyCPUID [function] [call site] 00005
3 x86cpuid_GetFirm [function] [call site] 00006
1 SzArEx_Init [function] [call site] 00007
2 SzAr_Init [function] [call site] 00008
1 InputLookBuffer::InputLookBuffer(unsigned char const*, unsigned long) [function] [call site] 00009
1 InputLookBuffer::stream() [function] [call site] 00010
1 SzArEx_Open [function] [call site] 00011
2 SzArEx_Open2 [function] [call site] 00012
3 LookInStream_Read2 [function] [call site] 00013
3 TestSignatureCandidate [function] [call site] 00014
3 CrcCalc [function] [call site] 00015
3 LookInStream_SeekTo [function] [call site] 00016
3 Buf_Create [function] [call site] 00017
3 LookInStream_Read [function] [call site] 00018
4 LookInStream_Read2 [function] [call site] 00019
3 CrcCalc [function] [call site] 00020
3 ReadNumber [function] [call site] 00021
3 Buf_Init [function] [call site] 00022
3 SzAr_Init [function] [call site] 00023
3 SzReadAndDecodePackedStreams [function] [call site] 00024
4 SzReadStreamsInfo [function] [call site] 00025
5 ReadNumber [function] [call site] 00026
5 ReadNumber [function] [call site] 00027
5 ReadPackInfo [function] [call site] 00028
6 SzReadNumber32 [function] [call site] 00029
7 ReadNumber [function] [call site] 00030
6 WaitId [function] [call site] 00031
7 ReadNumber [function] [call site] 00032
7 SkipData [function] [call site] 00033
8 ReadNumber [function] [call site] 00034
6 ReadNumber [function] [call site] 00035
6 ReadNumber [function] [call site] 00036
6 SkipBitUi32s [function] [call site] 00037
7 CountDefinedBits [function] [call site] 00038
6 SkipData [function] [call site] 00039
5 ReadNumber [function] [call site] 00040
5 ReadUnpackInfo [function] [call site] 00041
6 WaitId [function] [call site] 00042
6 SzReadNumber32 [function] [call site] 00043
6 SzReadNumber32 [function] [call site] 00044
6 SzReadNumber32 [function] [call site] 00045
6 SzReadNumber32 [function] [call site] 00046
6 SzReadNumber32 [function] [call site] 00047
6 SzReadNumber32 [function] [call site] 00048
6 SzReadNumber32 [function] [call site] 00049
6 SzReadNumber32 [function] [call site] 00050
6 SzReadNumber32 [function] [call site] 00051
6 WaitId [function] [call site] 00052
6 ReadNumber [function] [call site] 00053
6 ReadNumber [function] [call site] 00054
6 ReadBitUi32s [function] [call site] 00055
7 SzBitUi32s_Free [function] [call site] 00056
7 ReadBitVector [function] [call site] 00057
7 ReadUi32s [function] [call site] 00058
6 SkipData [function] [call site] 00059
5 ReadNumber [function] [call site] 00060
5 ReadSubStreamsInfo [function] [call site] 00061
6 ReadNumber [function] [call site] 00062
6 SzReadNumber32 [function] [call site] 00063
6 SkipData [function] [call site] 00064
6 CountDefinedBits [function] [call site] 00065
6 SkipNumbers [function] [call site] 00066
6 ReadNumber [function] [call site] 00067
6 SkipBitUi32s [function] [call site] 00068
6 SkipData [function] [call site] 00069
6 ReadNumber [function] [call site] 00070
5 ReadNumber [function] [call site] 00071
4 Buf_Init [function] [call site] 00072
4 SzAr_GetFolderUnpackSize [function] [call site] 00073
4 Buf_Create [function] [call site] 00074
4 LookInStream_SeekTo [function] [call site] 00075
4 SzAr_DecodeFolder [function] [call site] 00076
5 SzGetNextFolderItem [function] [call site] 00077
6 SzReadNumber32 [function] [call site] 00078
6 SzReadNumber32 [function] [call site] 00079
6 SzReadNumber32 [function] [call site] 00080
6 SzReadNumber32 [function] [call site] 00081
6 SzReadNumber32 [function] [call site] 00082
6 SzReadNumber32 [function] [call site] 00083
6 SzReadNumber32 [function] [call site] 00084
5 SzAr_GetFolderUnpackSize [function] [call site] 00085
5 SzFolder_Decode2 [function] [call site] 00086
6 CheckSupportedFolder [function] [call site] 00087
7 IS_SUPPORTED_CODER [function] [call site] 00088
8 IS_MAIN_METHOD [function] [call site] 00089
7 IS_SUPPORTED_CODER [function] [call site] 00090
7 IS_SUPPORTED_CODER [function] [call site] 00091
6 IS_MAIN_METHOD [function] [call site] 00092
6 LookInStream_SeekTo [function] [call site] 00093
6 SzDecodeCopy [function] [call site] 00094
6 SzDecodeLzma [function] [call site] 00095
7 LzmaDec_AllocateProbs [function] [call site] 00096
8 LzmaProps_Decode [function] [call site] 00097
8 LzmaDec_AllocateProbs2 [function] [call site] 00098
9 LzmaDec_FreeProbs [function] [call site] 00099
7 LzmaDec_Init [function] [call site] 00100
8 LzmaDec_InitDicAndState [function] [call site] 00101
7 LzmaDec_DecodeToDic [function] [call site] 00102
8 LzmaDec_WriteRem [function] [call site] 00103
8 LzmaDec_TryDummy [function] [call site] 00104
8 LzmaDec_DecodeReal2 [function] [call site] 00105
9 LzmaDec_DecodeReal_3 [function] [call site] 00106
9 LzmaDec_WriteRem [function] [call site] 00107
8 LzmaDec_TryDummy [function] [call site] 00108
8 LzmaDec_DecodeReal2 [function] [call site] 00109
7 LzmaDec_FreeProbs [function] [call site] 00110
6 SzDecodeLzma2 [function] [call site] 00111
7 Lzma2Dec_AllocateProbs [function] [call site] 00112
8 Lzma2Dec_GetOldProps [function] [call site] 00113
8 LzmaDec_AllocateProbs [function] [call site] 00114
7 Lzma2Dec_Init [function] [call site] 00115
8 LzmaDec_Init [function] [call site] 00116
7 Lzma2Dec_DecodeToDic [function] [call site] 00117
8 Lzma2Dec_UpdateState [function] [call site] 00118
8 LzmaDec_InitDicAndState [function] [call site] 00119
8 LzmaDec_UpdateWithUncompressed [function] [call site] 00120
8 LzmaDec_InitDicAndState [function] [call site] 00121
8 LzmaDec_DecodeToDic [function] [call site] 00122
7 LzmaDec_FreeProbs [function] [call site] 00123
6 SzDecodePpmd [function] [call site] 00124
7 Ppmd7_Construct [function] [call site] 00125
7 Ppmd7_Alloc [function] [call site] 00126
8 Ppmd7_Free [function] [call site] 00127
7 Ppmd7_Init [function] [call site] 00128
8 RestartModel [function] [call site] 00129
9 SetSuccessor [function] [call site] 00130
7 Ppmd7z_RangeDec_CreateVTable [function] [call site] 00131
7 Ppmd7z_RangeDec_Init [function] [call site] 00132
7 Ppmd7_DecodeSymbol [function] [call site] 00133
8 Ppmd7_Update1_0 [function] [call site] 00134
9 Rescale [function] [call site] 00135
10 InsertNode [function] [call site] 00136
10 ShrinkUnits [function] [call site] 00137
11 RemoveNode [function] [call site] 00138
11 InsertNode [function] [call site] 00139
11 SplitBlock [function] [call site] 00140
12 InsertNode [function] [call site] 00141
12 InsertNode [function] [call site] 00142
9 NextContext [function] [call site] 00143
10 UpdateModel [function] [call site] 00144
11 SwapStates [function] [call site] 00145
11 CreateSuccessors [function] [call site] 00146
12 SetSuccessor [function] [call site] 00147
12 RemoveNode [function] [call site] 00148
12 AllocUnitsRare [function] [call site] 00149
13 GlueFreeBlocks [function] [call site] 00150
14 InsertNode [function] [call site] 00151
14 InsertNode [function] [call site] 00152
14 InsertNode [function] [call site] 00153
13 RemoveNode [function] [call site] 00154
13 RemoveNode [function] [call site] 00155
13 SplitBlock [function] [call site] 00156
12 SetSuccessor [function] [call site] 00157
11 RestartModel [function] [call site] 00158
11 SetSuccessor [function] [call site] 00159
11 RestartModel [function] [call site] 00160
11 CreateSuccessors [function] [call site] 00161
11 RestartModel [function] [call site] 00162
11 SetSuccessor [function] [call site] 00163
11 AllocUnits [function] [call site] 00164
12 RemoveNode [function] [call site] 00165
12 AllocUnitsRare [function] [call site] 00166
11 RestartModel [function] [call site] 00167
11 InsertNode [function] [call site] 00168
11 AllocUnits [function] [call site] 00169
11 RestartModel [function] [call site] 00170
11 SetSuccessor [function] [call site] 00171
8 Ppmd7_Update1 [function] [call site] 00172
9 SwapStates [function] [call site] 00173
9 Rescale [function] [call site] 00174
9 NextContext [function] [call site] 00175
8 Ppmd7_UpdateBin [function] [call site] 00176
9 NextContext [function] [call site] 00177
8 Ppmd7_MakeEscFreq [function] [call site] 00178
8 Ppmd7_Update2 [function] [call site] 00179
9 Rescale [function] [call site] 00180
9 UpdateModel [function] [call site] 00181
7 Ppmd7_Free [function] [call site] 00182
6 LookInStream_SeekTo [function] [call site] 00183
6 SzDecodeCopy [function] [call site] 00184
6 Bcj2Dec_Init [function] [call site] 00185
6 Bcj2Dec_Decode [function] [call site] 00186
6 Delta_Init [function] [call site] 00187
6 Delta_Decode [function] [call site] 00188
7 MyMemCpy [function] [call site] 00189
7 MyMemCpy [function] [call site] 00190
7 MyMemCpy [function] [call site] 00191
6 x86_Convert [function] [call site] 00192
6 PPC_Convert [function] [call site] 00193
6 IA64_Convert [function] [call site] 00194
6 SPARC_Convert [function] [call site] 00195
6 ARM_Convert [function] [call site] 00196
6 ARMT_Convert [function] [call site] 00197
5 CrcCalc [function] [call site] 00198
3 SzAr_Free [function] [call site] 00199
4 SzBitUi32s_Free [function] [call site] 00200
4 SzAr_Init [function] [call site] 00201
3 Buf_Free [function] [call site] 00202
3 Buf_Free [function] [call site] 00203
3 ReadNumber [function] [call site] 00204
3 SzReadHeader [function] [call site] 00205
4 Buf_Init [function] [call site] 00206
4 SzReadHeader2 [function] [call site] 00207
5 ReadNumber [function] [call site] 00208
5 ReadNumber [function] [call site] 00209
5 SkipData [function] [call site] 00210
5 ReadNumber [function] [call site] 00211
5 SzAr_Init [function] [call site] 00212
5 SzReadAndDecodePackedStreams [function] [call site] 00213
5 SzAr_Free [function] [call site] 00214
5 ReadNumber [function] [call site] 00215
5 SzReadStreamsInfo [function] [call site] 00216
5 ReadNumber [function] [call site] 00217
5 SzReadNumber32 [function] [call site] 00218
5 ReadNumber [function] [call site] 00219
5 ReadNumber [function] [call site] 00220
5 SzReadNumber32 [function] [call site] 00221
5 SzReadFileNames [function] [call site] 00222
5 RememberBitVector [function] [call site] 00223
5 CountDefinedBits [function] [call site] 00224
5 RememberBitVector [function] [call site] 00225
5 SzBitUi32s_Free [function] [call site] 00226
5 ReadBitVector [function] [call site] 00227
5 SzReadNumber32 [function] [call site] 00228
5 ReadUi32s [function] [call site] 00229
5 ReadTime [function] [call site] 00230
6 ReadBitVector [function] [call site] 00231
6 SzReadNumber32 [function] [call site] 00232
5 ReadTime [function] [call site] 00233
5 ReadNumber [function] [call site] 00234
5 SkipData [function] [call site] 00235
5 SzBitUi32s_Alloc [function] [call site] 00236
5 SzReadNumber32 [function] [call site] 00237
5 SzAr_GetFolderUnpackSize [function] [call site] 00238
5 SzAr_GetFolderUnpackSize [function] [call site] 00239
5 ReadNumber [function] [call site] 00240
5 SzReadNumber32 [function] [call site] 00241
4 Buf_Free [function] [call site] 00242
3 Buf_Free [function] [call site] 00243
2 SzArEx_Free [function] [call site] 00244
3 SzBitUi32s_Free [function] [call site] 00245
3 SzBitUi32s_Free [function] [call site] 00246
3 SzBitUi64s_Free [function] [call site] 00247
3 SzBitUi64s_Free [function] [call site] 00248
3 SzAr_Free [function] [call site] 00249
3 SzArEx_Init [function] [call site] 00250
1 SzArEx_GetFileNameUtf16 [function] [call site] 00251
1 SzArEx_GetFileNameUtf16 [function] [call site] 00252
1 InputLookBuffer::stream() [function] [call site] 00253
1 SzArEx_Extract [function] [call site] 00254
2 SzAr_GetFolderUnpackSize [function] [call site] 00255
2 SzAr_DecodeFolder [function] [call site] 00256
2 CrcCalc [function] [call site] 00257
1 SzArEx_Free [function] [call site] 00258