Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
5	5	1 : View List ['encode_callback_field']	5	5	encode_field	call site: 00199	/src/nanopb/pb_encode.c:456
0	466	2 : View List ['pb_message_set_to_defaults', 'pb_field_iter_begin']	0	931	decode_static_field	call site: 00138	/src/nanopb/pb_decode.c:535
0	47	2 : View List ['pb_make_string_substream', 'pb_close_string_substream']	0	588	pb_decode_ex	call site: 00011	/src/nanopb/pb_decode.c:1157
0	9	1 : View List ['pb_write']	0	9	pb_encode_submessage	call site: 00249	/src/nanopb/pb_encode.c:743
0	9	1 : View List ['pb_write']	0	9	encode_array	call site: 00216	/src/nanopb/pb_encode.c:176
0	5	1 : View List ['free_with_check']	0	5	realloc_with_check	call site: 00069	/src/nanopb/tests/build/common/malloc_wrappers.c:108
0	4	1 : View List ['pb_istream_from_buffer']	0	986	pb_message_set_to_defaults	call site: 00015	/src/nanopb/pb_decode.c:957
0	0	None	80	1012	decode_field	call site: 00027	/src/nanopb/pb_decode.c:804
0	0	None	10	86	validate_static	call site: 00154	/src/nanopb/tests/build/fuzztest/validation.c:19
0	0	None	6	82	validate_static	call site: 00153	/src/nanopb/tests/build/fuzztest/validation.c:13
0	0	None	6	82	validate_static	call site: 00155	/src/nanopb/tests/build/fuzztest/validation.c:38
0	0	None	6	82	validate_static	call site: 00156	/src/nanopb/tests/build/fuzztest/validation.c:43

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           do_roundtrips

[function] [call site] 00001


             get_alloc_count

[function] [call site] 00002


             do_decode

[function] [call site] 00003


               get_alloc_count

[function] [call site] 00004


               malloc_with_check

[function] [call site] 00005


                 round_blocksize

[function] [call site] 00006


               malloc_with_check

[function] [call site] 00007


               __assert_fail

[call site] 00008


               pb_istream_from_buffer

[function] [call site] 00009


                 buf_read

[function] [call site] 00010


               pb_decode_ex

[function] [call site] 00011


                 pb_decode_inner

[function] [call site] 00012


                   pb_field_iter_begin

[function] [call site] 00013


                     load_descriptor_values

[function] [call site] 00014


                   pb_message_set_to_defaults

[function] [call site] 00015


                     pb_istream_from_buffer

[function] [call site] 00016


                     pb_decode_tag

[function] [call site] 00017


                       pb_decode_varint32_eof

[function] [call site] 00018


                         pb_readbyte

[function] [call site] 00019


                         pb_readbyte

[function] [call site] 00020


                     pb_field_set_to_default

[function] [call site] 00021


                       pb_field_iter_begin_extension

[function] [call site] 00022


                         pb_field_iter_begin

[function] [call site] 00023


                         pb_field_iter_begin

[function] [call site] 00024


                       pb_message_set_to_defaults

[function] [call site] 00025


                         decode_field

[function] [call site] 00026


                           pb_release_union_field

[function] [call site] 00027


                             pb_field_iter_find

[function] [call site] 00028


                               advance_iterator

[function] [call site] 00029


                               load_descriptor_values

[function] [call site] 00030


                               load_descriptor_values

[function] [call site] 00031


                             pb_release_single_field

[function] [call site] 00032


                               pb_field_iter_begin_extension

[function] [call site] 00033


                               pb_release_single_field

[function] [call site] 00034


                                 pb_release

[function] [call site] 00035


                                   pb_field_iter_begin

[function] [call site] 00036


                                   pb_release_single_field

[function] [call site] 00037


                                     free_with_check

[function] [call site] 00038


                                       __assert_fail

[call site] 00039


                                       __assert_fail

[call site] 00040


                                       __assert_fail

[call site] 00041


                                       __assert_fail

[call site] 00042


                                     free_with_check

[function] [call site] 00043


                                   pb_field_iter_next

[function] [call site] 00044


                                     advance_iterator

[function] [call site] 00045


                                     load_descriptor_values

[function] [call site] 00046


                           decode_static_field

[function] [call site] 00047


                             decode_basic_field

[function] [call site] 00048


                               pb_dec_bool

[function] [call site] 00049


                                 pb_decode_bool

[function] [call site] 00050


                                   pb_decode_varint32

[function] [call site] 00051


                                     pb_decode_varint32_eof

[function] [call site] 00052


                               pb_dec_varint

[function] [call site] 00053


                                 pb_decode_varint

[function] [call site] 00054


                                   pb_readbyte

[function] [call site] 00055


                                 pb_decode_svarint

[function] [call site] 00056


                                   pb_decode_varint

[function] [call site] 00057


                                 pb_decode_varint

[function] [call site] 00058


                               pb_decode_fixed32

[function] [call site] 00059


                                 pb_read

[function] [call site] 00060


                                   pb_read

[function] [call site] 00061


                                     pb_read

[function] [call site] 00062


                               pb_decode_fixed64

[function] [call site] 00063


                                 pb_read

[function] [call site] 00064


                               pb_dec_bytes

[function] [call site] 00065


                                 pb_decode_varint32

[function] [call site] 00066


                                 allocate_field

[function] [call site] 00067


                                   realloc_with_check

[function] [call site] 00068


                                     malloc_with_check

[function] [call site] 00069


                                     __assert_fail

[call site] 00070


                                     __assert_fail

[call site] 00071


                                     __assert_fail

[call site] 00072


                                     __assert_fail

[call site] 00073


                                     round_blocksize

[function] [call site] 00074


                                     round_blocksize

[function] [call site] 00075


                                     realloc

[call site] 00076


                                     free_with_check

[function] [call site] 00077


                                 pb_read

[function] [call site] 00078


                               pb_dec_string

[function] [call site] 00079


                                 pb_decode_varint32

[function] [call site] 00080


                                 allocate_field

[function] [call site] 00081


                                 pb_read

[function] [call site] 00082


                               pb_dec_submessage

[function] [call site] 00083


                                 pb_make_string_substream

[function] [call site] 00084


                                   pb_decode_varint32

[function] [call site] 00085


                                 pb_decode_inner

[function] [call site] 00086


                                   pb_decode_tag

[function] [call site] 00087


                                   pb_field_iter_find

[function] [call site] 00088


                                   pb_field_iter_find_extension

[function] [call site] 00089


                                     advance_iterator

[function] [call site] 00090


                                     load_descriptor_values

[function] [call site] 00091


                                     load_descriptor_values

[function] [call site] 00092


                                   decode_extension

[function] [call site] 00093


                                     default_extension_decoder

[function] [call site] 00094


                                       pb_field_iter_begin_extension

[function] [call site] 00095


                                       decode_field

[function] [call site] 00096


                                         decode_pointer_field

[function] [call site] 00097


                                           pb_release_single_field

[function] [call site] 00098


                                           decode_basic_field

[function] [call site] 00099


                                             pb_dec_fixed_length_bytes

[function] [call site] 00100


                                               pb_decode_varint32

[function] [call site] 00101


                                               pb_read

[function] [call site] 00102


                                           allocate_field

[function] [call site] 00103


                                           initialize_pointer_field

[function] [call site] 00104


                                           decode_basic_field

[function] [call site] 00105


                                           pb_make_string_substream

[function] [call site] 00106


                                           allocate_field

[function] [call site] 00107


                                           initialize_pointer_field

[function] [call site] 00108


                                           decode_basic_field

[function] [call site] 00109


                                           pb_close_string_substream

[function] [call site] 00110


                                             pb_read

[function] [call site] 00111


                                           allocate_field

[function] [call site] 00112


                                           initialize_pointer_field

[function] [call site] 00113


                                           decode_basic_field

[function] [call site] 00114


                                         decode_callback_field

[function] [call site] 00115


                                           pb_skip_field

[function] [call site] 00116


                                             pb_skip_varint

[function] [call site] 00117


                                               pb_read

[function] [call site] 00118


                                             pb_read

[function] [call site] 00119


                                             pb_skip_string

[function] [call site] 00120


                                               pb_decode_varint32

[function] [call site] 00121


                                               pb_read

[function] [call site] 00122


                                             pb_read

[function] [call site] 00123


                                           pb_make_string_substream

[function] [call site] 00124


                                           pb_close_string_substream

[function] [call site] 00125


                                           read_raw_value

[function] [call site] 00126


                                             pb_read

[function] [call site] 00127


                                             pb_read

[function] [call site] 00128


                                             pb_read

[function] [call site] 00129


                                           pb_istream_from_buffer

[function] [call site] 00130


                                   pb_skip_field

[function] [call site] 00131


                                   decode_field

[function] [call site] 00132


                                 pb_close_string_substream

[function] [call site] 00133


                             decode_basic_field

[function] [call site] 00134


                             pb_make_string_substream

[function] [call site] 00135


                             decode_basic_field

[function] [call site] 00136


                             pb_close_string_substream

[function] [call site] 00137


                             decode_basic_field

[function] [call site] 00138


                             pb_field_iter_begin

[function] [call site] 00139


                             pb_message_set_to_defaults

[function] [call site] 00140


                               pb_decode_tag

[function] [call site] 00141


                               pb_field_iter_next

[function] [call site] 00142


                             decode_basic_field

[function] [call site] 00143


                       pb_field_iter_begin

[function] [call site] 00144


                       pb_message_set_to_defaults

[function] [call site] 00145


                 pb_make_string_substream

[function] [call site] 00146


                 pb_decode_inner

[function] [call site] 00147


                 pb_close_string_substream

[function] [call site] 00148


                 pb_release

[function] [call site] 00149


               validate_message

[function] [call site] 00150


                 pb_field_iter_begin_const

[function] [call site] 00151


                   pb_const_cast

[function] [call site] 00152


                 validate_static

[function] [call site] 00153


                   __assert_fail

[call site] 00154


                   memcmp

[call site] 00155


                   strlen

[call site] 00156


                   __assert_fail

[call site] 00157


                   memcmp

[call site] 00158


                   validate_message

[function] [call site] 00159


                     validate_pointer

[function] [call site] 00160


                       __assert_fail

[call site] 00161


                       get_allocation_size

[function] [call site] 00162


                       __assert_fail

[call site] 00163


                       get_allocation_size

[function] [call site] 00164


                       __assert_fail

[call site] 00165


                       get_allocation_size

[function] [call site] 00166


                       get_allocation_size

[function] [call site] 00167


                       __assert_fail

[call site] 00168


                       memcmp

[call site] 00169


                       validate_message

[function] [call site] 00170


                         pb_field_iter_next

[function] [call site] 00171


               fprintf

[call site] 00172


               __assert_fail

[call site] 00173


               pb_release

[function] [call site] 00174


               free_with_check

[function] [call site] 00175


               get_alloc_count

[function] [call site] 00176


               __assert_fail

[call site] 00177


             do_roundtrip

[function] [call site] 00178


               malloc_with_check

[function] [call site] 00179


               malloc_with_check

[function] [call site] 00180


               __assert_fail

[call site] 00181


               pb_istream_from_buffer

[function] [call site] 00182


               pb_decode

[function] [call site] 00183


                 pb_decode_inner

[function] [call site] 00184


                 pb_release

[function] [call site] 00185


               fprintf

[call site] 00186


               __assert_fail

[call site] 00187


               validate_message

[function] [call site] 00188


               pb_ostream_from_buffer

[function] [call site] 00189


                 buf_write

[function] [call site] 00190


               pb_encode

[function] [call site] 00191


                 pb_field_iter_begin_const

[function] [call site] 00192


                 encode_extension_field

[function] [call site] 00193


                   default_extension_encoder

[function] [call site] 00194


                     pb_field_iter_begin_extension_const

[function] [call site] 00195


                       pb_const_cast

[function] [call site] 00196


                     encode_field

[function] [call site] 00197


                       safe_read_bool

[function] [call site] 00198


                       pb_check_proto3_default_value

[function] [call site] 00199


                         safe_read_bool

[function] [call site] 00200


                         pb_field_iter_begin

[function] [call site] 00201


                         pb_check_proto3_default_value

[function] [call site] 00202


                           pb_field_iter_next

[function] [call site] 00203


                       encode_callback_field

[function] [call site] 00204


                       encode_array

[function] [call site] 00205


                         pb_encode_tag

[function] [call site] 00206


                           pb_encode_varint

[function] [call site] 00207


                             pb_write

[function] [call site] 00208


                             pb_encode_varint_32

[function] [call site] 00209


                               pb_write

[function] [call site] 00210


                         pb_enc_varint

[function] [call site] 00211


                           pb_encode_varint

[function] [call site] 00212


                           pb_encode_svarint

[function] [call site] 00213


                             pb_encode_varint

[function] [call site] 00214


                           pb_encode_varint

[function] [call site] 00215


                         pb_encode_varint

[function] [call site] 00216


                         pb_write

[function] [call site] 00217


                         pb_enc_fixed

[function] [call site] 00218


                           pb_encode_fixed32

[function] [call site] 00219


                             pb_write

[function] [call site] 00220


                           pb_encode_fixed64

[function] [call site] 00221


                             pb_write

[function] [call site] 00222


                         pb_enc_varint

[function] [call site] 00223


                         pb_encode_tag_for_field

[function] [call site] 00224


                           pb_encode_tag

[function] [call site] 00225


                         pb_encode_varint

[function] [call site] 00226


                         encode_basic_field

[function] [call site] 00227


                           pb_encode_tag_for_field

[function] [call site] 00228


                           pb_enc_bool

[function] [call site] 00229


                             safe_read_bool

[function] [call site] 00230


                             pb_encode_varint

[function] [call site] 00231


                           pb_enc_varint

[function] [call site] 00232


                           pb_enc_fixed

[function] [call site] 00233


                           pb_enc_bytes

[function] [call site] 00234


                             pb_encode_string

[function] [call site] 00235


                               pb_encode_varint

[function] [call site] 00236


                               pb_write

[function] [call site] 00237


                             pb_encode_string

[function] [call site] 00238


                           pb_enc_string

[function] [call site] 00239


                             pb_encode_string

[function] [call site] 00240


                           pb_enc_submessage

[function] [call site] 00241


                             pb_encode_submessage

[function] [call site] 00242


                               pb_encode

[function] [call site] 00243


                                 encode_field

[function] [call site] 00244


                                   encode_basic_field

[function] [call site] 00245


                                     pb_enc_fixed_length_bytes

[function] [call site] 00246


                                       pb_encode_string

[function] [call site] 00247


                                 pb_field_iter_next

[function] [call site] 00248


                               pb_encode_varint

[function] [call site] 00249


                               pb_write

[function] [call site] 00250


                               pb_encode

[function] [call site] 00251


                         encode_basic_field

[function] [call site] 00252


               strcmp

[call site] 00253


               fprintf

[call site] 00254


               __assert_fail

[call site] 00255


               xor32_checksum

[function] [call site] 00256


               pb_release

[function] [call site] 00257


               pb_istream_from_buffer

[function] [call site] 00258


               pb_decode

[function] [call site] 00259


               fprintf

[call site] 00260


               __assert_fail

[call site] 00261


               validate_message

[function] [call site] 00262


               pb_ostream_from_buffer

[function] [call site] 00263


               pb_encode

[function] [call site] 00264


               fprintf

[call site] 00265


               __assert_fail

[call site] 00266


               xor32_checksum

[function] [call site] 00267


               __assert_fail

[call site] 00268


               __assert_fail

[call site] 00269


               pb_release

[function] [call site] 00270


               free_with_check

[function] [call site] 00271


               free_with_check

[function] [call site] 00272


             do_stream_decode

[function] [call site] 00273


               malloc_with_check

[function] [call site] 00274


               __assert_fail

[call site] 00275


               flakystream_init

[function] [call site] 00276


                 flakystream_callback

[function] [call site] 00277


               pb_decode

[function] [call site] 00278


               validate_message

[function] [call site] 00279


               fprintf

[call site] 00280


               __assert_fail

[call site] 00281


               pb_release

[function] [call site] 00282


               free_with_check

[function] [call site] 00283


               get_alloc_count

[function] [call site] 00284


               __assert_fail

[call site] 00285


             get_alloc_count

[function] [call site] 00286


             __assert_fail

[call site] 00287