Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity	Unique Reachable Complexities	Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
15	15	1 : View List ['pb_field_iter_begin_extension']	15	362	pb_field_set_to_default	call site: 00021	/src/nanopb/pb_decode.c:911
5	5	1 : View List ['encode_callback_field']	5	5	encode_field	call site: 00167	/src/nanopb/pb_encode.c:457
0	359	2 : View List ['pb_message_set_to_defaults', 'pb_field_iter_begin']	0	706	decode_static_field	call site: 00095	/src/nanopb/pb_decode.c:557
0	43	2 : View List ['pb_make_string_substream', 'pb_close_string_substream']	0	390	pb_decode_ex	call site: 00010	/src/nanopb/pb_decode.c:1202
0	9	1 : View List ['pb_write']	0	9	pb_encode_submessage	call site: 00217	/src/nanopb/pb_encode.c:744
0	9	1 : View List ['pb_write']	0	9	encode_array	call site: 00184	/src/nanopb/pb_encode.c:177
0	2	1 : View List ['pb_istream_from_buffer']	0	773	pb_message_set_to_defaults	call site: 00014	/src/nanopb/pb_decode.c:995
0	0	None	347	810	pb_decode_inner	call site: 00014	/src/nanopb/pb_decode.c:1060
0	0	None	347	810	pb_decode_inner	call site: 00014	/src/nanopb/pb_decode.c:1085
0	0	None	347	810	pb_decode_inner	call site: 00014	/src/nanopb/pb_decode.c:1097
0	0	None	347	810	pb_decode_inner	call site: 00014	/src/nanopb/pb_decode.c:1141
0	0	None	210	435	pb_encode	call site: 00159	/src/nanopb/pb_encode.c:519

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           do_roundtrips

[function] [call site] 00001


             get_alloc_count

[function] [call site] 00002


             do_decode

[function] [call site] 00003


               get_alloc_count

[function] [call site] 00004


               malloc_with_check

[function] [call site] 00005


                 round_blocksize

[function] [call site] 00006


               malloc_with_check

[function] [call site] 00007


               __assert_fail

[call site] 00008


               pb_istream_from_buffer

[function] [call site] 00009


               pb_decode_ex

[function] [call site] 00010


                 pb_decode_inner

[function] [call site] 00011


                   pb_field_iter_begin

[function] [call site] 00012


                     load_descriptor_values

[function] [call site] 00013


                   pb_message_set_to_defaults

[function] [call site] 00014


                     pb_istream_from_buffer

[function] [call site] 00015


                     pb_decode_tag

[function] [call site] 00016


                       pb_decode_varint32

[function] [call site] 00017


                         pb_readbyte

[function] [call site] 00018


                         pb_readbyte

[function] [call site] 00019


                       strcmp

[call site] 00020


                     pb_field_set_to_default

[function] [call site] 00021


                       pb_field_iter_begin_extension

[function] [call site] 00022


                         pb_field_iter_begin

[function] [call site] 00023


                         pb_field_iter_begin

[function] [call site] 00024


                       pb_message_set_to_defaults

[function] [call site] 00025


                         decode_field

[function] [call site] 00026


                           decode_static_field

[function] [call site] 00027


                             decode_basic_field

[function] [call site] 00028


                               pb_dec_bool

[function] [call site] 00029


                                 pb_decode_bool

[function] [call site] 00030


                                   pb_decode_varint32

[function] [call site] 00031


                               pb_dec_varint

[function] [call site] 00032


                                 pb_decode_varint

[function] [call site] 00033


                                   pb_readbyte

[function] [call site] 00034


                                 pb_decode_svarint

[function] [call site] 00035


                                   pb_decode_varint

[function] [call site] 00036


                                 pb_decode_varint

[function] [call site] 00037


                               pb_decode_fixed32

[function] [call site] 00038


                                 pb_read

[function] [call site] 00039


                                   pb_read

[function] [call site] 00040


                                     pb_read

[function] [call site] 00041


                               pb_decode_fixed64

[function] [call site] 00042


                                 pb_read

[function] [call site] 00043


                               pb_dec_bytes

[function] [call site] 00044


                                 pb_decode_varint32

[function] [call site] 00045


                                 pb_read

[function] [call site] 00046


                               pb_dec_string

[function] [call site] 00047


                                 pb_decode_varint32

[function] [call site] 00048


                                 pb_read

[function] [call site] 00049


                               pb_dec_submessage

[function] [call site] 00050


                                 pb_make_string_substream

[function] [call site] 00051


                                   pb_decode_varint32

[function] [call site] 00052


                                 pb_decode_inner

[function] [call site] 00053


                                   pb_decode_tag

[function] [call site] 00054


                                   pb_field_iter_find

[function] [call site] 00055


                                     advance_iterator

[function] [call site] 00056


                                     load_descriptor_values

[function] [call site] 00057


                                     load_descriptor_values

[function] [call site] 00058


                                   pb_field_iter_find_extension

[function] [call site] 00059


                                     advance_iterator

[function] [call site] 00060


                                     load_descriptor_values

[function] [call site] 00061


                                     load_descriptor_values

[function] [call site] 00062


                                   decode_extension

[function] [call site] 00063


                                     default_extension_decoder

[function] [call site] 00064


                                       pb_field_iter_begin_extension

[function] [call site] 00065


                                       decode_field

[function] [call site] 00066


                                         decode_pointer_field

[function] [call site] 00067


                                         decode_callback_field

[function] [call site] 00068


                                           pb_skip_field

[function] [call site] 00069


                                             pb_skip_varint

[function] [call site] 00070


                                               pb_read

[function] [call site] 00071


                                             pb_read

[function] [call site] 00072


                                             pb_skip_string

[function] [call site] 00073


                                               pb_decode_varint32

[function] [call site] 00074


                                               pb_read

[function] [call site] 00075


                                             pb_read

[function] [call site] 00076


                                           pb_make_string_substream

[function] [call site] 00077


                                           pb_close_string_substream

[function] [call site] 00078


                                             pb_read

[function] [call site] 00079


                                           read_raw_value

[function] [call site] 00080


                                             pb_read

[function] [call site] 00081


                                             pb_read

[function] [call site] 00082


                                             pb_read

[function] [call site] 00083


                                           pb_istream_from_buffer

[function] [call site] 00084


                                   pb_skip_field

[function] [call site] 00085


                                   decode_field

[function] [call site] 00086


                                 pb_close_string_substream

[function] [call site] 00087


                               pb_dec_fixed_length_bytes

[function] [call site] 00088


                                 pb_decode_varint32

[function] [call site] 00089


                                 pb_read

[function] [call site] 00090


                             decode_basic_field

[function] [call site] 00091


                             pb_make_string_substream

[function] [call site] 00092


                             decode_basic_field

[function] [call site] 00093


                             pb_close_string_substream

[function] [call site] 00094


                             decode_basic_field

[function] [call site] 00095


                             pb_field_iter_begin

[function] [call site] 00096


                             pb_message_set_to_defaults

[function] [call site] 00097


                               pb_decode_tag

[function] [call site] 00098


                               pb_field_iter_next

[function] [call site] 00099


                                 advance_iterator

[function] [call site] 00100


                                 load_descriptor_values

[function] [call site] 00101


                             decode_basic_field

[function] [call site] 00102


                       pb_field_iter_begin

[function] [call site] 00103


                       pb_message_set_to_defaults

[function] [call site] 00104


                 pb_make_string_substream

[function] [call site] 00105


                 pb_decode_inner

[function] [call site] 00106


                 pb_close_string_substream

[function] [call site] 00107


               validate_message

[function] [call site] 00108


                 pb_field_iter_begin_const

[function] [call site] 00109


                   pb_const_cast

[function] [call site] 00110


                   pb_field_iter_begin

[function] [call site] 00111


                 validate_static

[function] [call site] 00112


                   __assert_fail

[call site] 00113


                   memcmp

[call site] 00114


                   __assert_fail

[call site] 00115


                   strlen

[call site] 00116


                   __assert_fail

[call site] 00117


                   __assert_fail

[call site] 00118


                   memcmp

[call site] 00119


                   __assert_fail

[call site] 00120


                   validate_message

[function] [call site] 00121


                     validate_pointer

[function] [call site] 00122


                       __assert_fail

[call site] 00123


                       get_allocation_size

[function] [call site] 00124


                       __assert_fail

[call site] 00125


                       get_allocation_size

[function] [call site] 00126


                       __assert_fail

[call site] 00127


                       strlen

[call site] 00128


                       get_allocation_size

[function] [call site] 00129


                       __assert_fail

[call site] 00130


                       get_allocation_size

[function] [call site] 00131


                       __assert_fail

[call site] 00132


                       memcmp

[call site] 00133


                       __assert_fail

[call site] 00134


                       validate_message

[function] [call site] 00135


                         pb_field_iter_next

[function] [call site] 00136


               fprintf

[call site] 00137


               __assert_fail

[call site] 00138


               pb_release

[function] [call site] 00139


               free_with_check

[function] [call site] 00140


                 __assert_fail

[call site] 00141


                 __assert_fail

[call site] 00142


                 __assert_fail

[call site] 00143


               free_with_check

[function] [call site] 00144


               get_alloc_count

[function] [call site] 00145


               __assert_fail

[call site] 00146


             do_roundtrip

[function] [call site] 00147


               malloc_with_check

[function] [call site] 00148


               malloc_with_check

[function] [call site] 00149


               __assert_fail

[call site] 00150


               pb_istream_from_buffer

[function] [call site] 00151


               pb_decode

[function] [call site] 00152


                 pb_decode_ex

[function] [call site] 00153


               fprintf

[call site] 00154


               __assert_fail

[call site] 00155


               validate_message

[function] [call site] 00156


               pb_ostream_from_buffer

[function] [call site] 00157


               pb_encode

[function] [call site] 00158


                 pb_field_iter_begin_const

[function] [call site] 00159


                 encode_extension_field

[function] [call site] 00160


                   default_extension_encoder

[function] [call site] 00161


                     pb_field_iter_begin_extension_const

[function] [call site] 00162


                       pb_const_cast

[function] [call site] 00163


                       pb_field_iter_begin_extension

[function] [call site] 00164


                     encode_field

[function] [call site] 00165


                       safe_read_bool

[function] [call site] 00166


                       pb_check_proto3_default_value

[function] [call site] 00167


                         safe_read_bool

[function] [call site] 00168


                         pb_field_iter_begin

[function] [call site] 00169


                         pb_check_proto3_default_value

[function] [call site] 00170


                           pb_field_iter_next

[function] [call site] 00171


                       encode_callback_field

[function] [call site] 00172


                       encode_array

[function] [call site] 00173


                         pb_encode_tag

[function] [call site] 00174


                           pb_encode_varint

[function] [call site] 00175


                             pb_write

[function] [call site] 00176


                             pb_encode_varint_32

[function] [call site] 00177


                               pb_write

[function] [call site] 00178


                         pb_enc_varint

[function] [call site] 00179


                           pb_encode_varint

[function] [call site] 00180


                           pb_encode_svarint

[function] [call site] 00181


                             pb_encode_varint

[function] [call site] 00182


                           pb_encode_varint

[function] [call site] 00183


                         pb_encode_varint

[function] [call site] 00184


                         pb_write

[function] [call site] 00185


                         pb_enc_fixed

[function] [call site] 00186


                           pb_encode_fixed32

[function] [call site] 00187


                             pb_write

[function] [call site] 00188


                           pb_encode_fixed64

[function] [call site] 00189


                             pb_write

[function] [call site] 00190


                         pb_enc_varint

[function] [call site] 00191


                         pb_encode_tag_for_field

[function] [call site] 00192


                           pb_encode_tag

[function] [call site] 00193


                         pb_encode_varint

[function] [call site] 00194


                         encode_basic_field

[function] [call site] 00195


                           pb_encode_tag_for_field

[function] [call site] 00196


                           pb_enc_bool

[function] [call site] 00197


                             safe_read_bool

[function] [call site] 00198


                             pb_encode_varint

[function] [call site] 00199


                           pb_enc_varint

[function] [call site] 00200


                           pb_enc_fixed

[function] [call site] 00201


                           pb_enc_bytes

[function] [call site] 00202


                             pb_encode_string

[function] [call site] 00203


                               pb_encode_varint

[function] [call site] 00204


                               pb_write

[function] [call site] 00205


                             pb_encode_string

[function] [call site] 00206


                           pb_enc_string

[function] [call site] 00207


                             pb_encode_string

[function] [call site] 00208


                           pb_enc_submessage

[function] [call site] 00209


                             pb_encode_submessage

[function] [call site] 00210


                               pb_encode

[function] [call site] 00211


                                 encode_field

[function] [call site] 00212


                                   encode_basic_field

[function] [call site] 00213


                                     pb_enc_fixed_length_bytes

[function] [call site] 00214


                                       pb_encode_string

[function] [call site] 00215


                                 pb_field_iter_next

[function] [call site] 00216


                               pb_encode_varint

[function] [call site] 00217


                               pb_write

[function] [call site] 00218


                               pb_encode

[function] [call site] 00219


                         encode_basic_field

[function] [call site] 00220


               strcmp

[call site] 00221


               fprintf

[call site] 00222


               __assert_fail

[call site] 00223


               xor32_checksum

[function] [call site] 00224


               pb_release

[function] [call site] 00225


               pb_istream_from_buffer

[function] [call site] 00226


               pb_decode

[function] [call site] 00227


               fprintf

[call site] 00228


               __assert_fail

[call site] 00229


               validate_message

[function] [call site] 00230


               pb_ostream_from_buffer

[function] [call site] 00231


               pb_encode

[function] [call site] 00232


               fprintf

[call site] 00233


               __assert_fail

[call site] 00234


               xor32_checksum

[function] [call site] 00235


               __assert_fail

[call site] 00236


               __assert_fail

[call site] 00237


               pb_release

[function] [call site] 00238


               free_with_check

[function] [call site] 00239


               free_with_check

[function] [call site] 00240


             do_stream_decode

[function] [call site] 00241


               get_alloc_count

[function] [call site] 00242


               malloc_with_check

[function] [call site] 00243


               __assert_fail

[call site] 00244


               flakystream_init

[function] [call site] 00245


               pb_decode_ex

[function] [call site] 00246


               validate_message

[function] [call site] 00247


               fprintf

[call site] 00248


               __assert_fail

[call site] 00249


               pb_release

[function] [call site] 00250


               free_with_check

[function] [call site] 00251


               get_alloc_count

[function] [call site] 00252


               __assert_fail

[call site] 00253


             get_alloc_count

[function] [call site] 00254


             __assert_fail

[call site] 00255