Fuzz introspector: fuzz_mdb
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
315 353 8 :

['free_names', 'g_ptr_array_new', 'mdb_debug', 'g_ptr_array_add', 'mdb_read_props', 'mdb_read_props_list', 'mdb_get_int16', 'mdb_get_int32']

315 353 mdb_kkd_to_props call site: 00223 /src/mdbtools/src/libmdb/props.c:192
6 6 2 :

['malloc', 'decompress_unicode']

6 18 mdb_unicode2ascii call site: 00174 /src/mdbtools/src/libmdb/iconv.c:150
2 49 3 :

['mdb_find_pg_row', 'mdb_get_int32', 'strcpy']

2 77 mdb_memo_to_string call site: 00291 /src/mdbtools/src/libmdb/data.c:827
2 2 1 :

['perror']

2 2 _mdb_read_pg call site: 00053 /src/mdbtools/src/libmdb/file.c:373
2 2 1 :

['strcmp']

2 2 mdb_read_columns call site: 00177 /src/mdbtools/src/libmdb/table.c:332
0 133 3 :

['mdb_find_pg_row', 'mdb_get_int32', 'mdb_debug']

0 133 mdb_ole_read call site: 00203 /src/mdbtools/src/libmdb/data.c:639
0 66 3 :

['mdb_get_option', 'mdb_buffer_dump', 'mdb_debug']

0 66 mdb_ole_read call site: 00200 /src/mdbtools/src/libmdb/data.c:627
0 30 2 :

['mdb_get_int32', 'mdb_debug']

0 30 mdb_ole_read_next call site: 00215 /src/mdbtools/src/libmdb/data.c:584
0 28 1 :

['mdb_unicode2ascii']

0 28 mdb_memo_to_string call site: 00286 /src/mdbtools/src/libmdb/data.c:796
0 23 1 :

['mdb_free_catalog']

0 40 mdb_read_catalog call site: 00186 /src/mdbtools/src/libmdb/catalog.c:122
0 17 1 :

['mdb_free_tabledef']

0 17 mdb_read_table call site: 00148 /src/mdbtools/src/libmdb/table.c:103
0 13 1 :

['mdb_buffer_dump']

0 137 mdb_read_table call site: 00122 /src/mdbtools/src/libmdb/table.c:96

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 mdb_open_buffer [function] [call site] 00001
2 fmemopen [call site] 00002
2 fprintf [call site] 00003
2 mdb_handle_from_stream [function] [call site] 00004
3 calloc [call site] 00005
3 mdb_set_default_backend [function] [call site] 00006
4 mdb_init_backends [function] [call site] 00007
5 mdb_remove_backends [function] [call site] 00008
6 g_hash_table_foreach [function] [call site] 00009
6 mdb_drop_backend [function] [call site] 00010
6 g_hash_table_destroy [function] [call site] 00011
7 g_ptr_array_free [function] [call site] 00012
5 g_hash_table_new [function] [call site] 00013
6 calloc [call site] 00014
6 g_ptr_array_new [function] [call site] 00015
5 mdb_register_backend [function] [call site] 00016
6 mdbi_register_backend2 [function] [call site] 00017
7 calloc [call site] 00018
7 g_hash_table_insert [function] [call site] 00019
8 calloc [call site] 00020
8 g_ptr_array_add [function] [call site] 00021
9 realloc [call site] 00022
5 mdb_register_backend [function] [call site] 00023
5 mdb_register_backend [function] [call site] 00024
5 mdbi_register_backend2 [function] [call site] 00025
5 mdb_register_backend [function] [call site] 00026
5 mdb_register_backend [function] [call site] 00027
4 g_hash_table_lookup [function] [call site] 00028
4 g_strdup [function] [call site] 00029
5 strlen [call site] 00030
5 g_memdup [function] [call site] 00031
4 mdb_set_date_fmt [function] [call site] 00032
5 snprintf [call site] 00033
4 mdb_set_date_fmt [function] [call site] 00034
4 mdb_set_shortdate_fmt [function] [call site] 00035
5 snprintf [call site] 00036
4 mdb_set_shortdate_fmt [function] [call site] 00037
3 mdb_set_date_fmt [function] [call site] 00038
3 mdb_set_shortdate_fmt [function] [call site] 00039
3 mdb_set_bind_size [function] [call site] 00040
3 mdb_set_boolean_fmt_numbers [function] [call site] 00041
3 mdb_set_repid_fmt [function] [call site] 00042
3 calloc [call site] 00043
3 mdb_read_pg [function] [call site] 00044
4 _mdb_read_pg [function] [call site] 00045
5 fseeko [call site] 00046
5 fprintf [call site] 00047
5 ftello [call site] 00048
5 fprintf [call site] 00049
5 fseeko [call site] 00050
5 fprintf [call site] 00051
5 fread [call site] 00052
5 ferror [call site] 00053
5 perror [call site] 00054
5 mdbi_rc4 [function] [call site] 00055
6 RC4_set_key [function] [call site] 00056
6 RC4 [function] [call site] 00057
3 mdb_close [function] [call site] 00058
4 mdb_free_catalog [function] [call site] 00059
5 mdb_free_props [function] [call site] 00060
6 g_hash_table_foreach [function] [call site] 00061
6 free_hash_entry [function] [call site] 00062
6 g_hash_table_destroy [function] [call site] 00063
5 g_ptr_array_free [function] [call site] 00064
5 g_ptr_array_free [function] [call site] 00065
4 fclose [call site] 00066
4 mdb_iconv_close [function] [call site] 00067
5 iconv_close [call site] 00068
5 iconv_close [call site] 00069
4 mdb_remove_backends [function] [call site] 00070
3 mdb_close [function] [call site] 00071
3 mdb_get_byte [function] [call site] 00072
3 fprintf [call site] 00073
3 mdb_close [function] [call site] 00074
3 mdbi_rc4 [function] [call site] 00075
3 mdb_get_int16 [function] [call site] 00076
3 mdb_get_int16 [function] [call site] 00077
3 mdb_get_int16 [function] [call site] 00078
3 mdb_get_int32 [function] [call site] 00079
3 mdb_iconv_init [function] [call site] 00080
4 getenv [call site] 00081
4 iconv_open [call site] 00082
4 iconv_open [call site] 00083
4 getenv [call site] 00084
4 mdb_iconv_name_from_code_page [function] [call site] 00085
4 iconv_open [call site] 00086
4 iconv_open [call site] 00087
1 mdb_read_catalog [function] [call site] 00088
2 mdb_free_catalog [function] [call site] 00089
2 g_ptr_array_new [function] [call site] 00090
2 snprintf [call site] 00091
2 mdb_read_table [function] [call site] 00092
3 mdb_read_pg [function] [call site] 00093
3 mdb_get_byte [function] [call site] 00094
3 mdb_get_byte [function] [call site] 00095
3 fprintf [call site] 00096
3 mdb_alloc_tabledef [function] [call site] 00097
4 calloc [call site] 00098
4 snprintf [call site] 00099
3 mdb_get_int16 [function] [call site] 00100
3 mdb_get_int32 [function] [call site] 00101
3 mdb_get_int16 [function] [call site] 00102
3 mdb_get_int16 [function] [call site] 00103
3 mdb_get_int32 [function] [call site] 00104
3 mdb_get_int32 [function] [call site] 00105
3 mdb_get_int32 [function] [call site] 00106
3 mdb_find_pg_row [function] [call site] 00107
4 mdb_swap_pgbuf [function] [call site] 00108
4 mdb_find_row [function] [call site] 00109
5 mdb_get_int16 [function] [call site] 00110
5 mdb_get_int16 [function] [call site] 00111
4 mdb_swap_pgbuf [function] [call site] 00112
3 fprintf [call site] 00113
3 mdb_free_tabledef [function] [call site] 00114
4 g_ptr_array_free [function] [call site] 00115
4 mdb_free_columns [function] [call site] 00116
5 g_ptr_array_free [function] [call site] 00117
5 g_ptr_array_free [function] [call site] 00118
4 mdb_free_indices [function] [call site] 00119
5 g_ptr_array_free [function] [call site] 00120
3 g_memdup [function] [call site] 00121
3 mdb_get_option [function] [call site] 00122
4 load_options [function] [call site] 00123
5 getenv [call site] 00124
5 strtok_r [call site] 00125
5 strcmp [call site] 00126
5 fprintf [call site] 00127
5 strcmp [call site] 00128
5 fprintf [call site] 00129
5 strcmp [call site] 00130
5 strcmp [call site] 00131
5 strcmp [call site] 00132
5 strcmp [call site] 00133
5 strcmp [call site] 00134
5 strtok_r [call site] 00135
3 mdb_buffer_dump [function] [call site] 00136
4 fprintf [call site] 00137
4 __ctype_b_loc [call site] 00138
4 fprintf [call site] 00139
4 fprintf [call site] 00140
4 fprintf [call site] 00141
4 fprintf [call site] 00142
3 mdb_debug [function] [call site] 00143
4 load_options [function] [call site] 00144
4 vfprintf [call site] 00145
4 fprintf [call site] 00146
3 mdb_get_int32 [function] [call site] 00147
3 mdb_find_pg_row [function] [call site] 00148
3 fprintf [call site] 00149
3 mdb_free_tabledef [function] [call site] 00150
3 g_memdup [function] [call site] 00151
3 mdb_debug [function] [call site] 00152
3 mdb_get_int16 [function] [call site] 00153
2 fprintf [call site] 00154
2 mdb_free_catalog [function] [call site] 00155
2 mdb_read_columns [function] [call site] 00156
3 g_ptr_array_new [function] [call site] 00157
3 read_pg_if_n [function] [call site] 00158
4 mdb_get_int32 [function] [call site] 00159
4 mdb_get_int32 [function] [call site] 00160
3 mdb_free_columns [function] [call site] 00161
3 calloc [call site] 00162
3 mdb_get_int16 [function] [call site] 00163
3 mdb_get_int16 [function] [call site] 00164
3 mdb_get_int16 [function] [call site] 00165
3 mdb_get_int16 [function] [call site] 00166
3 g_ptr_array_add [function] [call site] 00167
3 read_pg_if_8 [function] [call site] 00168
4 read_pg_if_n [function] [call site] 00169
3 read_pg_if_16 [function] [call site] 00170
4 read_pg_if_n [function] [call site] 00171
4 mdb_get_int16 [function] [call site] 00172
3 read_pg_if_n [function] [call site] 00173
3 mdb_unicode2ascii [function] [call site] 00174
4 decompress_unicode [function] [call site] 00175
4 decompressed_to_utf8_with_iconv [function] [call site] 00176
3 mdb_col_comparer [function] [call site] 00177
2 fprintf [call site] 00178
2 mdb_free_catalog [function] [call site] 00179
2 mdb_bind_column_by_name [function] [call site] 00180
2 mdb_bind_column_by_name [function] [call site] 00181
2 mdb_bind_column_by_name [function] [call site] 00182
2 mdb_bind_column_by_name [function] [call site] 00183
2 fprintf [call site] 00184
2 mdb_free_catalog [function] [call site] 00185
2 mdb_bind_column_by_name [function] [call site] 00186
2 fprintf [call site] 00187
2 mdb_free_catalog [function] [call site] 00188
2 atoi [call site] 00189
2 calloc [call site] 00190
2 snprintf [call site] 00191
2 atol [call site] 00192
2 g_ptr_array_add [function] [call site] 00193
2 mdb_ole_read_full [function] [call site] 00194
3 mdb_ole_read [function] [call site] 00195
4 mdb_get_int32 [function] [call site] 00196
4 mdb_debug [function] [call site] 00197
4 mdb_get_int32 [function] [call site] 00198
4 mdb_debug [function] [call site] 00199
4 mdb_find_pg_row [function] [call site] 00200
4 mdb_debug [function] [call site] 00201
4 mdb_get_option [function] [call site] 00202
4 mdb_buffer_dump [function] [call site] 00203
4 mdb_get_int32 [function] [call site] 00204
4 mdb_debug [function] [call site] 00205
4 mdb_find_pg_row [function] [call site] 00206
4 mdb_debug [function] [call site] 00207
4 mdb_get_int32 [function] [call site] 00208
4 mdb_debug [function] [call site] 00209
4 fprintf [call site] 00210
3 mdb_ole_read_next [function] [call site] 00211
4 mdb_get_int32 [function] [call site] 00212
4 mdb_debug [function] [call site] 00213
4 mdb_debug [function] [call site] 00214
4 mdb_find_pg_row [function] [call site] 00215
4 mdb_debug [function] [call site] 00216
4 mdb_get_int32 [function] [call site] 00217
3 reallocf [function] [call site] 00218
4 realloc [call site] 00219
3 fprintf [call site] 00220
2 mdb_kkd_to_props [function] [call site] 00221
3 mdb_debug [function] [call site] 00222
3 strcmp [call site] 00223
3 fprintf [call site] 00224
3 mdb_buffer_dump [function] [call site] 00225
3 g_ptr_array_new [function] [call site] 00226
3 mdb_get_int32 [function] [call site] 00227
3 mdb_get_int16 [function] [call site] 00228
3 mdb_debug [function] [call site] 00229
3 free_names [function] [call site] 00230
4 g_ptr_array_foreach [function] [call site] 00231
4 do_g_free [function] [call site] 00232
4 g_ptr_array_free [function] [call site] 00233
3 mdb_read_props_list [function] [call site] 00234
4 g_ptr_array_new [function] [call site] 00235
4 mdb_get_int16 [function] [call site] 00236
4 mdb_buffer_dump [function] [call site] 00237
4 mdb_unicode2ascii [function] [call site] 00238
4 g_ptr_array_add [function] [call site] 00239
3 fprintf [call site] 00240
3 mdb_read_props [function] [call site] 00241
4 mdb_get_int16 [function] [call site] 00242
4 mdb_get_int16 [function] [call site] 00243
4 mdb_alloc_props [function] [call site] 00244
5 calloc [call site] 00245
4 mdb_unicode2ascii [function] [call site] 00246
4 mdb_debug [function] [call site] 00247
4 g_hash_table_new [function] [call site] 00248
4 mdb_get_int16 [function] [call site] 00249
4 mdb_get_int16 [function] [call site] 00250
4 mdb_get_int16 [function] [call site] 00251
4 g_strdup_printf [function] [call site] 00252
5 vasprintf [call site] 00253
4 mdb_get_option [function] [call site] 00254
4 fprintf [call site] 00255
4 mdb_debug [function] [call site] 00256
4 mdb_buffer_dump [function] [call site] 00257
4 strcmp [call site] 00258
4 g_strdup [function] [call site] 00259
4 g_strdup [function] [call site] 00260
4 g_strdup_printf [function] [call site] 00261
4 g_strdup [function] [call site] 00262
4 mdb_col_to_string [function] [call site] 00263
5 mdb_get_byte [function] [call site] 00264
5 g_strdup_printf [function] [call site] 00265
5 mdb_get_int16 [function] [call site] 00266
5 g_strdup_printf [function] [call site] 00267
5 mdb_get_int32 [function] [call site] 00268
5 g_strdup_printf [function] [call site] 00269
5 mdb_get_single [function] [call site] 00270
5 g_strdup_printf [function] [call site] 00271
5 mdb_get_double [function] [call site] 00272
5 g_strdup_printf [function] [call site] 00273
5 g_strdup [function] [call site] 00274
5 g_strdup [function] [call site] 00275
5 mdb_unicode2ascii [function] [call site] 00276
5 mdb_date_to_string [function] [call site] 00277
6 mdb_get_double [function] [call site] 00278
6 mdb_date_to_tm [function] [call site] 00279
6 strftime [call site] 00280
5 mdb_memo_to_string [function] [call site] 00281
6 strcpy [call site] 00282
6 mdb_get_int32 [function] [call site] 00283
6 mdb_unicode2ascii [function] [call site] 00284
6 mdb_get_int32 [function] [call site] 00285
6 mdb_find_pg_row [function] [call site] 00286
6 strcpy [call site] 00287
6 mdb_unicode2ascii [function] [call site] 00288
6 mdb_get_int32 [function] [call site] 00289
6 mdb_find_pg_row [function] [call site] 00290
6 strcpy [call site] 00291
6 mdb_get_int32 [function] [call site] 00292
6 fprintf [call site] 00293
6 mdb_unicode2ascii [function] [call site] 00294
6 fprintf [call site] 00295
6 strcpy [call site] 00296
5 mdb_money_to_string [function] [call site] 00297
6 multiply_byte [function] [call site] 00298
7 do_carry [function] [call site] 00299
6 multiply_byte [function] [call site] 00300
6 array_to_string [function] [call site] 00301
5 mdb_uuid_to_string_fmt [function] [call site] 00302
6 g_strdup_printf [function] [call site] 00303
5 fprintf [call site] 00304
5 g_strdup [function] [call site] 00305
3 g_ptr_array_add [function] [call site] 00306
3 fprintf [call site] 00307
3 free_names [function] [call site] 00308
2 mdb_free_tabledef [function] [call site] 00309
1 mdb_read_table [function] [call site] 00310
1 mdb_read_columns [function] [call site] 00311
1 mdb_rewind_table [function] [call site] 00312
1 mdb_fetch_row [function] [call site] 00313
2 mdb_read_next_dpg [function] [call site] 00314
3 mdb_map_find_next [function] [call site] 00315
4 mdb_map_find_next0 [function] [call site] 00316
5 mdb_get_int32 [function] [call site] 00317
4 mdb_map_find_next1 [function] [call site] 00318
5 mdb_get_int32 [function] [call site] 00319
5 mdb_read_alt_pg [function] [call site] 00320
6 _mdb_read_pg [function] [call site] 00321
4 fprintf [call site] 00322
3 mdb_read_pg [function] [call site] 00323
3 fprintf [call site] 00324
3 mdb_get_int32 [function] [call site] 00325
3 mdb_get_int32 [function] [call site] 00326
3 fprintf [call site] 00327
3 mdb_read_pg [function] [call site] 00328
3 mdb_get_int32 [function] [call site] 00329
2 mdb_get_int16 [function] [call site] 00330
2 mdb_index_find_next [function] [call site] 00331
3 mdb_index_read_bottom_pg [function] [call site] 00332
4 mdb_index_page_init [function] [call site] 00333
5 mdb_index_page_reset [function] [call site] 00334
4 mdb_find_next_leaf [function] [call site] 00335
5 mdb_index_read_bottom_pg [function] [call site] 00336
6 mdb_read_pg [function] [call site] 00337
5 mdb_index_find_next_on_page [function] [call site] 00338
6 mdb_index_unpack_bitmap [function] [call site] 00339
5 mdb_get_int32_msb [function] [call site] 00340
5 mdb_chain_add_page [function] [call site] 00341
6 fprintf [call site] 00342
6 mdb_index_page_init [function] [call site] 00343
5 mdb_find_next_leaf [function] [call site] 00344
3 mdb_index_find_next_on_page [function] [call site] 00345
3 mdb_index_unwind [function] [call site] 00346
4 mdb_find_next_leaf [function] [call site] 00347
4 mdb_index_find_next_on_page [function] [call site] 00348
3 mdb_read_pg [function] [call site] 00349
3 mdb_get_int32 [function] [call site] 00350
3 mdb_read_pg [function] [call site] 00351
3 mdb_index_page_init [function] [call site] 00352
3 mdb_index_find_next_on_page [function] [call site] 00353
3 mdb_get_int32_msb [function] [call site] 00354
3 mdb_col_fixed_size [function] [call site] 00355
3 mdb_get_int16 [function] [call site] 00356
3 mdb_index_test_sargs [function] [call site] 00357
4 strlen [call site] 00358
4 g_ptr_array_new [function] [call site] 00359
4 g_memdup [function] [call site] 00360
4 mdb_index_cache_sarg [function] [call site] 00361
5 mdb_index_hash_text [function] [call site] 00362
6 strlen [call site] 00363
6 fprintf [call site] 00364
4 g_ptr_array_add [function] [call site] 00365
4 mdb_test_string [function] [call site] 00366
5 mdb_like_cmp [function] [call site] 00367
6 mdb_debug [function] [call site] 00368
6 mdb_like_cmp [function] [call site] 00369
7 strlen [call site] 00370
7 mdb_like_cmp [function] [call site] 00371
8 strlen [call site] 00372
8 strncmp [call site] 00373
8 mdb_debug [function] [call site] 00374
8 mdb_like_cmp [function] [call site] 00375
9 mdb_debug [function] [call site] 00376
5 strcoll [call site] 00377
4 mdb_test_sarg [function] [call site] 00378
5 mdb_test_int [function] [call site] 00379
6 fprintf [call site] 00380
5 mdb_test_int [function] [call site] 00381
5 mdb_get_int16 [function] [call site] 00382
5 mdb_test_int [function] [call site] 00383
5 mdb_get_int32 [function] [call site] 00384
5 mdb_test_int [function] [call site] 00385
5 mdb_get_single [function] [call site] 00386
5 mdb_test_double [function] [call site] 00387
6 fprintf [call site] 00388
5 mdb_get_double [function] [call site] 00389
5 mdb_test_double [function] [call site] 00390
5 mdb_unicode2ascii [function] [call site] 00391
5 mdb_test_string [function] [call site] 00392
5 mdb_get_int32 [function] [call site] 00393
5 mdb_col_to_string [function] [call site] 00394
5 mdb_test_string [function] [call site] 00395
5 poor_mans_trunc [function] [call site] 00396
6 snprintf [call site] 00397
6 __isoc99_sscanf [call site] 00398
5 mdb_get_double [function] [call site] 00399
5 fprintf [call site] 00400
2 mdb_index_scan_free [function] [call site] 00401
3 mdb_close [function] [call site] 00402
2 mdb_read_pg [function] [call site] 00403
2 mdb_get_int16 [function] [call site] 00404
2 mdb_read_next_dpg [function] [call site] 00405
2 mdb_read_row [function] [call site] 00406
3 mdb_find_row [function] [call site] 00407
3 mdb_crack_row [function] [call site] 00408
4 mdb_get_option [function] [call site] 00409
4 mdb_buffer_dump [function] [call site] 00410
4 mdb_get_byte [function] [call site] 00411
4 mdb_get_int16 [function] [call site] 00412
4 fprintf [call site] 00413
4 mdb_get_byte [function] [call site] 00414
4 mdb_get_int16 [function] [call site] 00415
4 mdb_crack_row3 [function] [call site] 00416
4 mdb_crack_row4 [function] [call site] 00417
5 mdb_get_int16 [function] [call site] 00418
4 fprintf [call site] 00419
4 mdb_get_option [function] [call site] 00420
4 fprintf [call site] 00421
4 fprintf [call site] 00422
4 fprintf [call site] 00423
4 fprintf [call site] 00424
3 mdb_test_sargs [function] [call site] 00425
4 mdb_test_sarg_node [function] [call site] 00426
5 mdb_find_field [function] [call site] 00427
5 mdb_test_sarg [function] [call site] 00428
5 mdb_test_sarg_node [function] [call site] 00429
6 mdb_test_sarg_node [function] [call site] 00430
7 mdb_test_sarg_node [function] [call site] 00431
8 mdb_test_sarg_node [function] [call site] 00432
9 mdb_test_sarg_node [function] [call site] 00433
3 _mdb_attempt_bind [function] [call site] 00434
4 mdb_xfer_bound_bool [function] [call site] 00435
5 strcpy [call site] 00436
5 strlen [call site] 00437
4 mdb_xfer_bound_data [function] [call site] 00438
5 strcpy [call site] 00439
5 mdb_numeric_to_string [function] [call site] 00440
6 multiply_byte [function] [call site] 00441
6 multiply_byte [function] [call site] 00442
6 array_to_string [function] [call site] 00443
5 mdb_col_is_shortdate [function] [call site] 00444
6 mdb_col_get_prop [function] [call site] 00445
7 g_hash_table_lookup [function] [call site] 00446
6 strcmp [call site] 00447
5 mdb_date_to_string [function] [call site] 00448
5 mdb_date_to_string [function] [call site] 00449
5 mdb_col_to_string [function] [call site] 00450
5 snprintf [call site] 00451
5 strlen [call site] 00452
4 mdb_xfer_bound_ole [function] [call site] 00453
4 mdb_xfer_bound_data [function] [call site] 00454
1 mdb_free_tabledef [function] [call site] 00455
1 mdb_close [function] [call site] 00456