Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
15	15	1 : View List ['pb_field_iter_begin_extension']	15	368	pb_field_set_to_default	call site: 00021	/src/nanopb/pb_decode.c:873
5	5	1 : View List ['encode_callback_field']	5	5	encode_field	call site: 00163	/src/nanopb/pb_encode.c:456
0	365	2 : View List ['pb_message_set_to_defaults', 'pb_field_iter_begin']	0	729	decode_static_field	call site: 00096	/src/nanopb/pb_decode.c:535
0	47	2 : View List ['pb_make_string_substream', 'pb_close_string_substream']	0	430	pb_decode_ex	call site: 00011	/src/nanopb/pb_decode.c:1157
0	9	1 : View List ['pb_write']	0	9	pb_encode_submessage	call site: 00213	/src/nanopb/pb_encode.c:743
0	9	1 : View List ['pb_write']	0	9	encode_array	call site: 00180	/src/nanopb/pb_encode.c:176
0	4	1 : View List ['pb_istream_from_buffer']	0	782	pb_message_set_to_defaults	call site: 00015	/src/nanopb/pb_decode.c:957
0	0	None	348	808	pb_decode_inner	call site: 00015	/src/nanopb/pb_decode.c:1010
0	0	None	348	808	pb_decode_inner	call site: 00015	/src/nanopb/pb_decode.c:1046
0	0	None	348	808	pb_decode_inner	call site: 00015	/src/nanopb/pb_decode.c:1058
0	0	None	348	808	pb_decode_inner	call site: 00015	/src/nanopb/pb_decode.c:1102
0	0	None	215	454	pb_encode	call site: 00156	/src/nanopb/pb_encode.c:518

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           do_roundtrips

[function] [call site] 00001


             get_alloc_count

[function] [call site] 00002


             do_decode

[function] [call site] 00003


               get_alloc_count

[function] [call site] 00004


               malloc_with_check

[function] [call site] 00005


                 round_blocksize

[function] [call site] 00006


               malloc_with_check

[function] [call site] 00007


               __assert_fail

[call site] 00008


               pb_istream_from_buffer

[function] [call site] 00009


                 buf_read

[function] [call site] 00010


               pb_decode_ex

[function] [call site] 00011


                 pb_decode_inner

[function] [call site] 00012


                   pb_field_iter_begin

[function] [call site] 00013


                     load_descriptor_values

[function] [call site] 00014


                   pb_message_set_to_defaults

[function] [call site] 00015


                     pb_istream_from_buffer

[function] [call site] 00016


                     pb_decode_tag

[function] [call site] 00017


                       pb_decode_varint32_eof

[function] [call site] 00018


                         pb_readbyte

[function] [call site] 00019


                         pb_readbyte

[function] [call site] 00020


                     pb_field_set_to_default

[function] [call site] 00021


                       pb_field_iter_begin_extension

[function] [call site] 00022


                         pb_field_iter_begin

[function] [call site] 00023


                         pb_field_iter_begin

[function] [call site] 00024


                       pb_message_set_to_defaults

[function] [call site] 00025


                         decode_field

[function] [call site] 00026


                           decode_static_field

[function] [call site] 00027


                             decode_basic_field

[function] [call site] 00028


                               pb_dec_bool

[function] [call site] 00029


                                 pb_decode_bool

[function] [call site] 00030


                                   pb_decode_varint32

[function] [call site] 00031


                                     pb_decode_varint32_eof

[function] [call site] 00032


                               pb_dec_varint

[function] [call site] 00033


                                 pb_decode_varint

[function] [call site] 00034


                                   pb_readbyte

[function] [call site] 00035


                                 pb_decode_svarint

[function] [call site] 00036


                                   pb_decode_varint

[function] [call site] 00037


                                 pb_decode_varint

[function] [call site] 00038


                               pb_decode_fixed32

[function] [call site] 00039


                                 pb_read

[function] [call site] 00040


                                   pb_read

[function] [call site] 00041


                                     pb_read

[function] [call site] 00042


                               pb_decode_fixed64

[function] [call site] 00043


                                 pb_read

[function] [call site] 00044


                               pb_dec_bytes

[function] [call site] 00045


                                 pb_decode_varint32

[function] [call site] 00046


                                 pb_read

[function] [call site] 00047


                               pb_dec_string

[function] [call site] 00048


                                 pb_decode_varint32

[function] [call site] 00049


                                 pb_read

[function] [call site] 00050


                               pb_dec_submessage

[function] [call site] 00051


                                 pb_make_string_substream

[function] [call site] 00052


                                   pb_decode_varint32

[function] [call site] 00053


                                 pb_decode_inner

[function] [call site] 00054


                                   pb_decode_tag

[function] [call site] 00055


                                   pb_field_iter_find

[function] [call site] 00056


                                     advance_iterator

[function] [call site] 00057


                                     load_descriptor_values

[function] [call site] 00058


                                     load_descriptor_values

[function] [call site] 00059


                                   pb_field_iter_find_extension

[function] [call site] 00060


                                     advance_iterator

[function] [call site] 00061


                                     load_descriptor_values

[function] [call site] 00062


                                     load_descriptor_values

[function] [call site] 00063


                                   decode_extension

[function] [call site] 00064


                                     default_extension_decoder

[function] [call site] 00065


                                       pb_field_iter_begin_extension

[function] [call site] 00066


                                       decode_field

[function] [call site] 00067


                                         decode_pointer_field

[function] [call site] 00068


                                         decode_callback_field

[function] [call site] 00069


                                           pb_skip_field

[function] [call site] 00070


                                             pb_skip_varint

[function] [call site] 00071


                                               pb_read

[function] [call site] 00072


                                             pb_read

[function] [call site] 00073


                                             pb_skip_string

[function] [call site] 00074


                                               pb_decode_varint32

[function] [call site] 00075


                                               pb_read

[function] [call site] 00076


                                             pb_read

[function] [call site] 00077


                                           pb_make_string_substream

[function] [call site] 00078


                                           pb_close_string_substream

[function] [call site] 00079


                                             pb_read

[function] [call site] 00080


                                           read_raw_value

[function] [call site] 00081


                                             pb_read

[function] [call site] 00082


                                             pb_read

[function] [call site] 00083


                                             pb_read

[function] [call site] 00084


                                           pb_istream_from_buffer

[function] [call site] 00085


                                   pb_skip_field

[function] [call site] 00086


                                   decode_field

[function] [call site] 00087


                                 pb_close_string_substream

[function] [call site] 00088


                               pb_dec_fixed_length_bytes

[function] [call site] 00089


                                 pb_decode_varint32

[function] [call site] 00090


                                 pb_read

[function] [call site] 00091


                             decode_basic_field

[function] [call site] 00092


                             pb_make_string_substream

[function] [call site] 00093


                             decode_basic_field

[function] [call site] 00094


                             pb_close_string_substream

[function] [call site] 00095


                             decode_basic_field

[function] [call site] 00096


                             pb_field_iter_begin

[function] [call site] 00097


                             pb_message_set_to_defaults

[function] [call site] 00098


                               pb_decode_tag

[function] [call site] 00099


                               pb_field_iter_next

[function] [call site] 00100


                                 advance_iterator

[function] [call site] 00101


                                 load_descriptor_values

[function] [call site] 00102


                             decode_basic_field

[function] [call site] 00103


                       pb_field_iter_begin

[function] [call site] 00104


                       pb_message_set_to_defaults

[function] [call site] 00105


                 pb_make_string_substream

[function] [call site] 00106


                 pb_decode_inner

[function] [call site] 00107


                 pb_close_string_substream

[function] [call site] 00108


               validate_message

[function] [call site] 00109


                 pb_field_iter_begin_const

[function] [call site] 00110


                   pb_const_cast

[function] [call site] 00111


                 validate_static

[function] [call site] 00112


                   __assert_fail

[call site] 00113


                   memcmp

[call site] 00114


                   strlen

[call site] 00115


                   __assert_fail

[call site] 00116


                   memcmp

[call site] 00117


                   validate_message

[function] [call site] 00118


                     validate_pointer

[function] [call site] 00119


                       __assert_fail

[call site] 00120


                       get_allocation_size

[function] [call site] 00121


                       __assert_fail

[call site] 00122


                       get_allocation_size

[function] [call site] 00123


                       __assert_fail

[call site] 00124


                       strlen

[call site] 00125


                       get_allocation_size

[function] [call site] 00126


                       get_allocation_size

[function] [call site] 00127


                       __assert_fail

[call site] 00128


                       memcmp

[call site] 00129


                       validate_message

[function] [call site] 00130


                         pb_field_iter_next

[function] [call site] 00131


               fprintf

[call site] 00132


               __assert_fail

[call site] 00133


               pb_release

[function] [call site] 00134


               free_with_check

[function] [call site] 00135


                 __assert_fail

[call site] 00136


                 __assert_fail

[call site] 00137


                 __assert_fail

[call site] 00138


                 __assert_fail

[call site] 00139


               free_with_check

[function] [call site] 00140


               get_alloc_count

[function] [call site] 00141


               __assert_fail

[call site] 00142


             do_roundtrip

[function] [call site] 00143


               malloc_with_check

[function] [call site] 00144


               malloc_with_check

[function] [call site] 00145


               __assert_fail

[call site] 00146


               pb_istream_from_buffer

[function] [call site] 00147


               pb_decode

[function] [call site] 00148


                 pb_decode_inner

[function] [call site] 00149


               fprintf

[call site] 00150


               __assert_fail

[call site] 00151


               validate_message

[function] [call site] 00152


               pb_ostream_from_buffer

[function] [call site] 00153


                 buf_write

[function] [call site] 00154


               pb_encode

[function] [call site] 00155


                 pb_field_iter_begin_const

[function] [call site] 00156


                 encode_extension_field

[function] [call site] 00157


                   default_extension_encoder

[function] [call site] 00158


                     pb_field_iter_begin_extension_const

[function] [call site] 00159


                       pb_const_cast

[function] [call site] 00160


                     encode_field

[function] [call site] 00161


                       safe_read_bool

[function] [call site] 00162


                       pb_check_proto3_default_value

[function] [call site] 00163


                         safe_read_bool

[function] [call site] 00164


                         pb_field_iter_begin

[function] [call site] 00165


                         pb_check_proto3_default_value

[function] [call site] 00166


                           pb_field_iter_next

[function] [call site] 00167


                       encode_callback_field

[function] [call site] 00168


                       encode_array

[function] [call site] 00169


                         pb_encode_tag

[function] [call site] 00170


                           pb_encode_varint

[function] [call site] 00171


                             pb_write

[function] [call site] 00172


                             pb_encode_varint_32

[function] [call site] 00173


                               pb_write

[function] [call site] 00174


                         pb_enc_varint

[function] [call site] 00175


                           pb_encode_varint

[function] [call site] 00176


                           pb_encode_svarint

[function] [call site] 00177


                             pb_encode_varint

[function] [call site] 00178


                           pb_encode_varint

[function] [call site] 00179


                         pb_encode_varint

[function] [call site] 00180


                         pb_write

[function] [call site] 00181


                         pb_enc_fixed

[function] [call site] 00182


                           pb_encode_fixed32

[function] [call site] 00183


                             pb_write

[function] [call site] 00184


                           pb_encode_fixed64

[function] [call site] 00185


                             pb_write

[function] [call site] 00186


                         pb_enc_varint

[function] [call site] 00187


                         pb_encode_tag_for_field

[function] [call site] 00188


                           pb_encode_tag

[function] [call site] 00189


                         pb_encode_varint

[function] [call site] 00190


                         encode_basic_field

[function] [call site] 00191


                           pb_encode_tag_for_field

[function] [call site] 00192


                           pb_enc_bool

[function] [call site] 00193


                             safe_read_bool

[function] [call site] 00194


                             pb_encode_varint

[function] [call site] 00195


                           pb_enc_varint

[function] [call site] 00196


                           pb_enc_fixed

[function] [call site] 00197


                           pb_enc_bytes

[function] [call site] 00198


                             pb_encode_string

[function] [call site] 00199


                               pb_encode_varint

[function] [call site] 00200


                               pb_write

[function] [call site] 00201


                             pb_encode_string

[function] [call site] 00202


                           pb_enc_string

[function] [call site] 00203


                             pb_encode_string

[function] [call site] 00204


                           pb_enc_submessage

[function] [call site] 00205


                             pb_encode_submessage

[function] [call site] 00206


                               pb_encode

[function] [call site] 00207


                                 encode_field

[function] [call site] 00208


                                   encode_basic_field

[function] [call site] 00209


                                     pb_enc_fixed_length_bytes

[function] [call site] 00210


                                       pb_encode_string

[function] [call site] 00211


                                 pb_field_iter_next

[function] [call site] 00212


                               pb_encode_varint

[function] [call site] 00213


                               pb_write

[function] [call site] 00214


                               pb_encode

[function] [call site] 00215


                         encode_basic_field

[function] [call site] 00216


               strcmp

[call site] 00217


               fprintf

[call site] 00218


               __assert_fail

[call site] 00219


               xor32_checksum

[function] [call site] 00220


               pb_release

[function] [call site] 00221


               pb_istream_from_buffer

[function] [call site] 00222


               pb_decode

[function] [call site] 00223


               fprintf

[call site] 00224


               __assert_fail

[call site] 00225


               validate_message

[function] [call site] 00226


               pb_ostream_from_buffer

[function] [call site] 00227


               pb_encode

[function] [call site] 00228


               fprintf

[call site] 00229


               __assert_fail

[call site] 00230


               xor32_checksum

[function] [call site] 00231


               __assert_fail

[call site] 00232


               __assert_fail

[call site] 00233


               pb_release

[function] [call site] 00234


               free_with_check

[function] [call site] 00235


               free_with_check

[function] [call site] 00236


             do_stream_decode

[function] [call site] 00237


               malloc_with_check

[function] [call site] 00238


               __assert_fail

[call site] 00239


               flakystream_init

[function] [call site] 00240


                 flakystream_callback

[function] [call site] 00241


               pb_decode

[function] [call site] 00242


               validate_message

[function] [call site] 00243


               fprintf

[call site] 00244


               __assert_fail

[call site] 00245


               pb_release

[function] [call site] 00246


               free_with_check

[function] [call site] 00247


               get_alloc_count

[function] [call site] 00248


               __assert_fail

[call site] 00249


             get_alloc_count

[function] [call site] 00250


             __assert_fail

[call site] 00251