Fuzz introspector: lzma2enc_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
9 9 1 :

['MatchFinder_Normalize']

9 33 MatchFinder_CheckLimits call site: 00000 /src/lzma-fuzz/sdk/C/LzFind.c:375
0 388 2 :

['LzmaDec_DecodeReal2', 'LzmaDec_TryDummy']

0 388 LzmaDec_DecodeToDic call site: 00172 /src/lzma-fuzz/sdk/C/LzmaDec.c:924
0 0 None 101 638 Lzma2Enc_EncodeMt1 call site: 00022 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:512
0 0 None 101 587 Lzma2Enc_EncodeMt1 call site: 00023 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:522
0 0 None 101 587 Lzma2Enc_EncodeMt1 call site: 00023 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:538
0 0 None 101 545 Lzma2Enc_EncodeMt1 call site: 00037 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:555
0 0 None 101 545 Lzma2Enc_EncodeMt1 call site: 00037 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:562
0 0 None 101 545 Lzma2Enc_EncodeMt1 call site: 00066 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:593
0 0 None 101 545 Lzma2Enc_EncodeMt1 call site: 00070 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:600
0 0 None 101 545 Lzma2Enc_EncodeMt1 call site: 00070 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:604
0 0 None 101 545 Lzma2Enc_EncodeMt1 call site: 00148 /src/lzma-fuzz/sdk/C/Lzma2Enc.c:608
0 0 None 0 407 LzmaEnc_CodeOneBlock call site: 00143 /src/lzma-fuzz/sdk/C/LzmaEnc.c:2537

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 Lzma2EncProps_Init [function] [call site] 00001
2 LzmaEncProps_Init [function] [call site] 00002
1 Lzma2EncProps_Normalize [function] [call site] 00003
2 LzmaEncProps_Normalize [function] [call site] 00004
2 LzmaEncProps_Normalize [function] [call site] 00005
1 Lzma2Enc_Create [function] [call site] 00006
2 Lzma2EncProps_Init [function] [call site] 00007
2 Lzma2EncProps_Normalize [function] [call site] 00008
1 OutputBuffer::OutputBuffer() [function] [call site] 00009
1 InputBuffer::InputBuffer(unsigned char const*, unsigned long) [function] [call site] 00010
1 Lzma2Enc_SetProps [function] [call site] 00011
2 LzmaEncProps_Normalize [function] [call site] 00012
2 Lzma2EncProps_Normalize [function] [call site] 00013
1 OutputBuffer::~OutputBuffer() [function] [call site] 00014
1 Lzma2Enc_SetDataSize [function] [call site] 00015
1 Lzma2Enc_WriteProperties [function] [call site] 00016
2 LzmaEncProps_GetDictSize [function] [call site] 00017
3 LzmaEncProps_Normalize [function] [call site] 00018
1 OutputBuffer::stream() [function] [call site] 00019
1 InputBuffer::stream() [function] [call site] 00020
1 Lzma2Enc_Encode2 [function] [call site] 00021
2 Lzma2Enc_EncodeMt1 [function] [call site] 00022
3 LzmaEnc_Create [function] [call site] 00023
4 LzmaEnc_Construct [function] [call site] 00024
5 RangeEnc_Construct [function] [call site] 00025
5 MatchFinder_Construct [function] [call site] 00026
6 MatchFinder_SetDefaultSettings [function] [call site] 00027
5 LzmaEncProps_Init [function] [call site] 00028
5 LzmaEnc_SetProps [function] [call site] 00029
6 LzmaEncProps_Normalize [function] [call site] 00030
5 LzmaEnc_FastPosInit [function] [call site] 00031
5 LzmaEnc_InitPriceTables [function] [call site] 00032
3 Lzma2EncInt_InitStream [function] [call site] 00033
4 LzmaEnc_SetProps [function] [call site] 00034
4 LzmaEnc_WriteProperties [function] [call site] 00035
3 Lzma2EncInt_InitBlock [function] [call site] 00036
3 LimitedSeqInStream_Init [function] [call site] 00037
3 LzmaEnc_SetDataSize [function] [call site] 00038
3 LzmaEnc_PrepareForLzma2 [function] [call site] 00039
4 LzmaEnc_AllocAndInit [function] [call site] 00040
5 LzmaEnc_Alloc [function] [call site] 00041
6 RangeEnc_Alloc [function] [call site] 00042
6 LzmaEnc_FreeLits [function] [call site] 00043
6 LzmaEnc_FreeLits [function] [call site] 00044
6 MatchFinder_Create [function] [call site] 00045
7 MatchFinder_Free [function] [call site] 00046
8 MatchFinder_FreeThisClassMemory [function] [call site] 00047
8 LzInWindow_Free [function] [call site] 00048
7 LzInWindow_Create [function] [call site] 00049
8 LzInWindow_Free [function] [call site] 00050
7 MatchFinder_FreeThisClassMemory [function] [call site] 00051
7 AllocRefs [function] [call site] 00052
7 MatchFinder_Free [function] [call site] 00053
6 MatchFinder_CreateVTable [function] [call site] 00054
5 LzmaEnc_Init [function] [call site] 00055
6 RangeEnc_Init [function] [call site] 00056
6 LenEnc_Init [function] [call site] 00057
6 LenEnc_Init [function] [call site] 00058
5 LzmaEnc_InitPrices [function] [call site] 00059
6 FillDistancesPrices [function] [call site] 00060
6 FillAlignPrices [function] [call site] 00061
6 LenPriceEnc_UpdateTables [function] [call site] 00062
7 SetPrices_3 [function] [call site] 00063
7 SetPrices_3 [function] [call site] 00064
6 LenPriceEnc_UpdateTables [function] [call site] 00065
3 LzmaEnc_MemPrepare [function] [call site] 00066
4 LzmaEnc_SetInputBuf [function] [call site] 00067
4 LzmaEnc_SetDataSize [function] [call site] 00068
4 LzmaEnc_AllocAndInit [function] [call site] 00069
3 Lzma2EncInt_EncodeSubblock [function] [call site] 00070
4 LzmaEnc_SaveState [function] [call site] 00071
4 LzmaEnc_CodeOneMemBlock [function] [call site] 00072
5 LzmaEnc_Init [function] [call site] 00073
5 LzmaEnc_InitPrices [function] [call site] 00074
5 RangeEnc_Init [function] [call site] 00075
5 LzmaEnc_CodeOneBlock [function] [call site] 00076
6 CheckErrors [function] [call site] 00077
6 Flush [function] [call site] 00078
7 WriteEndMarker [function] [call site] 00079
8 RangeEnc_ShiftLow [function] [call site] 00080
9 RangeEnc_FlushStream [function] [call site] 00081
9 RangeEnc_FlushStream [function] [call site] 00082
8 RangeEnc_ShiftLow [function] [call site] 00083
8 LenEnc_Encode [function] [call site] 00084
9 RangeEnc_ShiftLow [function] [call site] 00085
9 RangeEnc_ShiftLow [function] [call site] 00086
9 LitEnc_Encode [function] [call site] 00087
10 RangeEnc_ShiftLow [function] [call site] 00088
9 RangeEnc_ShiftLow [function] [call site] 00089
9 RangeEnc_ShiftLow [function] [call site] 00090
9 RangeEnc_ShiftLow [function] [call site] 00091
9 RangeEnc_ShiftLow [function] [call site] 00092
8 RangeEnc_ShiftLow [function] [call site] 00093
8 RangeEnc_ShiftLow [function] [call site] 00094
8 RangeEnc_ShiftLow [function] [call site] 00095
7 RangeEnc_FlushData [function] [call site] 00096
8 RangeEnc_ShiftLow [function] [call site] 00097
7 RangeEnc_FlushStream [function] [call site] 00098
7 CheckErrors [function] [call site] 00099
6 ReadMatchDistances [function] [call site] 00100
6 RangeEnc_EncodeBit_0 [function] [call site] 00101
7 RangeEnc_ShiftLow [function] [call site] 00102
6 LitEnc_Encode [function] [call site] 00103
6 GetOptimumFast [function] [call site] 00104
7 ReadMatchDistances [function] [call site] 00105
7 ReadMatchDistances [function] [call site] 00106
6 GetOptimum [function] [call site] 00107
7 ReadMatchDistances [function] [call site] 00108
7 LitEnc_Matched_GetPrice [function] [call site] 00109
7 LitEnc_GetPrice [function] [call site] 00110
7 GetPrice_PureRep [function] [call site] 00111
7 ReadMatchDistances [function] [call site] 00112
7 LitEnc_Matched_GetPrice [function] [call site] 00113
7 LitEnc_GetPrice [function] [call site] 00114
7 GetPrice_PureRep [function] [call site] 00115
7 LitEnc_Matched_GetPrice [function] [call site] 00116
7 LitEnc_Matched_GetPrice [function] [call site] 00117
7 Backward [function] [call site] 00118
6 RangeEnc_ShiftLow [function] [call site] 00119
6 LitEnc_Encode [function] [call site] 00120
6 LitEnc_EncodeMatched [function] [call site] 00121
7 RangeEnc_ShiftLow [function] [call site] 00122
6 RangeEnc_ShiftLow [function] [call site] 00123
6 RangeEnc_ShiftLow [function] [call site] 00124
6 RangeEnc_ShiftLow [function] [call site] 00125
6 RangeEnc_ShiftLow [function] [call site] 00126
6 RangeEnc_ShiftLow [function] [call site] 00127
6 RangeEnc_ShiftLow [function] [call site] 00128
6 LenEnc_Encode [function] [call site] 00129
6 RangeEnc_ShiftLow [function] [call site] 00130
6 LenEnc_Encode [function] [call site] 00131
6 RangeEnc_ShiftLow [function] [call site] 00132
6 RcTree_ReverseEncode [function] [call site] 00133
7 RangeEnc_ShiftLow [function] [call site] 00134
6 RangeEnc_ShiftLow [function] [call site] 00135
6 RangeEnc_ShiftLow [function] [call site] 00136
6 RangeEnc_ShiftLow [function] [call site] 00137
6 RangeEnc_ShiftLow [function] [call site] 00138
6 RangeEnc_ShiftLow [function] [call site] 00139
6 FillAlignPrices [function] [call site] 00140
6 FillDistancesPrices [function] [call site] 00141
6 LenPriceEnc_UpdateTables [function] [call site] 00142
6 LenPriceEnc_UpdateTables [function] [call site] 00143
6 CheckErrors [function] [call site] 00144
6 Flush [function] [call site] 00145
4 LzmaEnc_GetCurBuf [function] [call site] 00146
4 LzmaEnc_RestoreState [function] [call site] 00147
3 Progress [function] [call site] 00148
3 LzmaEnc_Finish [function] [call site] 00149
1 __assert_fail [call site] 00150
1 OutputBuffer::size() const [function] [call site] 00151
1 __assert_fail [call site] 00152
1 __assert_fail [call site] 00153
1 OutputBuffer::size() const [function] [call site] 00154
1 OutputBuffer::data() const [function] [call site] 00155
1 Lzma2Decode [function] [call site] 00156
2 Lzma2Dec_AllocateProbs [function] [call site] 00157
3 Lzma2Dec_GetOldProps [function] [call site] 00158
3 LzmaDec_AllocateProbs [function] [call site] 00159
4 LzmaProps_Decode [function] [call site] 00160
4 LzmaDec_AllocateProbs2 [function] [call site] 00161
5 LzmaDec_FreeProbs [function] [call site] 00162
2 Lzma2Dec_Init [function] [call site] 00163
3 LzmaDec_Init [function] [call site] 00164
4 LzmaDec_InitDicAndState [function] [call site] 00165
2 Lzma2Dec_DecodeToDic [function] [call site] 00166
3 Lzma2Dec_UpdateState [function] [call site] 00167
3 LzmaDec_InitDicAndState [function] [call site] 00168
3 LzmaDec_UpdateWithUncompressed [function] [call site] 00169
3 LzmaDec_InitDicAndState [function] [call site] 00170
3 LzmaDec_DecodeToDic [function] [call site] 00171
4 LzmaDec_WriteRem [function] [call site] 00172
4 LzmaDec_TryDummy [function] [call site] 00173
4 LzmaDec_DecodeReal2 [function] [call site] 00174
5 LzmaDec_DecodeReal_3 [function] [call site] 00175
5 LzmaDec_WriteRem [function] [call site] 00176
4 LzmaDec_TryDummy [function] [call site] 00177
4 LzmaDec_DecodeReal2 [function] [call site] 00178
2 LzmaDec_FreeProbs [function] [call site] 00179
1 __assert_fail [call site] 00180
1 __assert_fail [call site] 00181
1 OutputBuffer::size() const [function] [call site] 00182
1 __assert_fail [call site] 00183
1 memcmp [call site] 00184
1 Lzma2Enc_Destroy [function] [call site] 00185
2 LzmaEnc_Destroy [function] [call site] 00186
3 LzmaEnc_Destruct [function] [call site] 00187
4 MatchFinder_Free [function] [call site] 00188
4 LzmaEnc_FreeLits [function] [call site] 00189
4 RangeEnc_Free [function] [call site] 00190