Fuzz introspector: fuzz
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 9 1 :

['nestegg_free_packet']

0 9 nestegg_read_packet call site: 00251 /src/nestegg/src/nestegg.c:2976
0 9 1 :

['nestegg_free_packet']

0 9 nestegg_read_packet call site: 00257 /src/nestegg/src/nestegg.c:2999
0 8 1 :

['nestegg_destroy']

0 8 nestegg_init call site: 00076 /src/nestegg/src/nestegg.c:2245
0 0 None 20 155 nestegg_track_video_params call site: 00135 /src/nestegg/src/nestegg.c:2615
0 0 None 10 15 nestegg_track_codec_id call site: 00099 /src/nestegg/src/nestegg.c:2464
0 0 None 2 2 ne_pool_alloc call site: 00037 /src/nestegg/src/nestegg.c:655
0 0 None 0 196 ne_read_block call site: 00203 /src/nestegg/src/nestegg.c:1603
0 0 None 0 173 ne_read_block call site: 00208 /src/nestegg/src/nestegg.c:1622
0 0 None 0 169 ne_read_block call site: 00209 /src/nestegg/src/nestegg.c:1634
0 0 None 0 169 ne_read_block call site: 00213 /src/nestegg/src/nestegg.c:1650
0 0 None 0 169 ne_read_block call site: 00219 /src/nestegg/src/nestegg.c:1663
0 0 None 0 169 ne_read_block call site: 00223 /src/nestegg/src/nestegg.c:1671

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 nestegg_init [function] [call site] 00001
2 ne_context_new [function] [call site] 00002
3 ne_alloc [function] [call site] 00003
4 calloc [call site] 00004
3 nestegg_destroy [function] [call site] 00006
4 __assert_fail [call site] 00007
4 ne_pool_destroy [function] [call site] 00008
3 ne_pool_init [function] [call site] 00009
4 calloc [call site] 00010
3 nestegg_destroy [function] [call site] 00011
2 ne_peek_element [function] [call site] 00012
3 ne_read_id [function] [call site] 00013
4 ne_bare_read_vint [function] [call site] 00014
5 ne_io_read [function] [call site] 00015
5 ne_io_read [function] [call site] 00016
3 ne_read_vint [function] [call site] 00017
4 ne_bare_read_vint [function] [call site] 00018
2 nestegg_destroy [function] [call site] 00019
2 nestegg_destroy [function] [call site] 00020
2 ne_ctx_push [function] [call site] 00021
2 nestegg_destroy [function] [call site] 00023
2 ne_parse [function] [call site] 00024
3 __assert_fail [call site] 00025
3 ne_io_tell [function] [call site] 00026
3 ne_peek_element [function] [call site] 00027
3 ne_find_element [function] [call site] 00028
3 __assert_fail [call site] 00029
3 ne_read_element [function] [call site] 00030
4 ne_peek_element [function] [call site] 00031
3 __assert_fail [call site] 00032
3 ne_io_tell [function] [call site] 00033
3 ne_read_master [function] [call site] 00034
4 __assert_fail [call site] 00035
4 ne_pool_alloc [function] [call site] 00036
5 calloc [call site] 00037
5 calloc [call site] 00038
4 ne_pool_alloc [function] [call site] 00039
4 ne_ctx_push [function] [call site] 00040
3 ne_read_single_master [function] [call site] 00041
4 __assert_fail [call site] 00042
4 ne_ctx_push [function] [call site] 00043
3 ne_read_simple [function] [call site] 00044
4 ne_io_read_skip [function] [call site] 00045
5 ne_io_read [function] [call site] 00046
4 ne_read_uint [function] [call site] 00047
5 ne_io_read [function] [call site] 00048
5 ne_io_read [function] [call site] 00049
4 ne_read_float [function] [call site] 00050
5 ne_read_uint [function] [call site] 00051
4 ne_read_string [function] [call site] 00052
5 ne_pool_alloc [function] [call site] 00053
5 ne_io_read [function] [call site] 00054
4 ne_read_binary [function] [call site] 00055
5 ne_pool_alloc [function] [call site] 00056
5 ne_io_read [function] [call site] 00057
4 __assert_fail [call site] 00058
3 ne_is_ancestor_element [function] [call site] 00059
3 ne_ctx_pop [function] [call site] 00060
3 ne_read_element [function] [call site] 00061
3 ne_io_read_skip [function] [call site] 00062
3 ne_ctx_pop [function] [call site] 00063
2 ne_ctx_pop [function] [call site] 00064
2 nestegg_destroy [function] [call site] 00065
2 ne_get_uint [function] [call site] 00066
3 __assert_fail [call site] 00067
2 nestegg_destroy [function] [call site] 00068
2 ne_get_string [function] [call site] 00069
3 __assert_fail [call site] 00070
2 strcmp [call site] 00071
2 nestegg_destroy [function] [call site] 00072
2 ne_get_uint [function] [call site] 00073
2 nestegg_destroy [function] [call site] 00074
2 nestegg_destroy [function] [call site] 00075
2 ne_ctx_save [function] [call site] 00076
3 ne_io_tell [function] [call site] 00077
2 nestegg_destroy [function] [call site] 00078
1 nestegg_track_count [function] [call site] 00079
1 nestegg_duration [function] [call site] 00080
2 ne_get_float [function] [call site] 00081
3 __assert_fail [call site] 00082
2 ne_get_timecode_scale [function] [call site] 00083
3 ne_get_uint [function] [call site] 00084
1 nestegg_tstamp_scale [function] [call site] 00085
2 ne_get_timecode_scale [function] [call site] 00086
1 nestegg_has_cues [function] [call site] 00087
2 ne_find_seek_for_id [function] [call site] 00088
3 __assert_fail [call site] 00089
3 __assert_fail [call site] 00090
3 ne_get_binary [function] [call site] 00091
4 __assert_fail [call site] 00092
3 ne_buf_read_id [function] [call site] 00093
1 nestegg_track_type [function] [call site] 00094
2 ne_find_track_entry [function] [call site] 00095
3 __assert_fail [call site] 00096
2 ne_get_uint [function] [call site] 00097
1 nestegg_track_codec_id [function] [call site] 00098
2 ne_find_track_entry [function] [call site] 00099
2 ne_get_string [function] [call site] 00100
2 strcmp [call site] 00101
2 strcmp [call site] 00102
2 strcmp [call site] 00103
2 strcmp [call site] 00104
2 strcmp [call site] 00105
1 nestegg_track_codec_data_count [function] [call site] 00106
2 ne_find_track_entry [function] [call site] 00107
2 nestegg_track_codec_id [function] [call site] 00108
2 ne_get_binary [function] [call site] 00109
1 nestegg_track_encoding [function] [call site] 00110
2 ne_find_track_entry [function] [call site] 00111
2 ne_get_uint [function] [call site] 00112
1 nestegg_track_default_duration [function] [call site] 00113
2 ne_find_track_entry [function] [call site] 00114
2 ne_get_uint [function] [call site] 00115
1 nestegg_track_content_enc_key_id [function] [call site] 00116
2 ne_find_track_entry [function] [call site] 00117
2 ne_get_uint [function] [call site] 00118
2 ne_get_uint [function] [call site] 00119
2 ne_get_uint [function] [call site] 00120
2 ne_get_binary [function] [call site] 00121
1 nestegg_track_codec_data [function] [call site] 00122
2 ne_find_track_entry [function] [call site] 00123
2 nestegg_track_codec_id [function] [call site] 00124
2 nestegg_track_codec_id [function] [call site] 00125
2 ne_get_binary [function] [call site] 00126
2 nestegg_track_codec_id [function] [call site] 00127
2 ne_read_uint [function] [call site] 00128
2 ne_read_xiph_lacing [function] [call site] 00129
3 ne_read_xiph_lace_value [function] [call site] 00130
4 ne_read_uint [function] [call site] 00131
4 ne_read_uint [function] [call site] 00132
2 __assert_fail [call site] 00133
1 nestegg_track_video_params [function] [call site] 00134
2 ne_find_track_entry [function] [call site] 00135
2 nestegg_track_type [function] [call site] 00136
2 ne_get_uint [function] [call site] 00137
2 ne_get_uint [function] [call site] 00138
2 ne_get_uint [function] [call site] 00139
2 ne_get_uint [function] [call site] 00140
2 ne_get_uint [function] [call site] 00141
2 ne_get_uint [function] [call site] 00142
2 ne_get_uint [function] [call site] 00143
2 ne_get_uint [function] [call site] 00144
2 ne_get_uint [function] [call site] 00145
2 ne_get_uint [function] [call site] 00146
2 ne_get_uint [function] [call site] 00147
2 ne_get_uint [function] [call site] 00148
2 ne_get_uint [function] [call site] 00149
2 ne_get_uint [function] [call site] 00150
2 strtod [call site] 00151
2 ne_get_float [function] [call site] 00152
2 strtod [call site] 00153
2 ne_get_float [function] [call site] 00154
2 strtod [call site] 00155
2 ne_get_float [function] [call site] 00156
2 strtod [call site] 00157
2 ne_get_float [function] [call site] 00158
2 strtod [call site] 00159
2 ne_get_float [function] [call site] 00160
2 strtod [call site] 00161
2 ne_get_float [function] [call site] 00162
2 strtod [call site] 00163
2 ne_get_float [function] [call site] 00164
2 strtod [call site] 00165
2 ne_get_float [function] [call site] 00166
2 strtod [call site] 00167
2 ne_get_float [function] [call site] 00168
2 strtod [call site] 00169
2 ne_get_float [function] [call site] 00170
1 nestegg_track_audio_params [function] [call site] 00171
2 ne_find_track_entry [function] [call site] 00172
2 nestegg_track_type [function] [call site] 00173
2 ne_get_float [function] [call site] 00174
2 ne_get_uint [function] [call site] 00175
2 ne_get_uint [function] [call site] 00176
2 ne_get_uint [function] [call site] 00177
2 ne_get_uint [function] [call site] 00178
1 nestegg_read_packet [function] [call site] 00179
2 __assert_fail [call site] 00180
2 ne_ctx_save [function] [call site] 00181
2 ne_read_element [function] [call site] 00182
2 ne_read_element [function] [call site] 00183
2 ne_io_read_skip [function] [call site] 00184
2 ne_read_element [function] [call site] 00185
2 ne_read_uint [function] [call site] 00186
2 ne_read_block [function] [call site] 00187
3 ne_read_vint [function] [call site] 00188
3 ne_read_int [function] [call site] 00189
4 ne_read_uint [function] [call site] 00190
3 ne_read_uint [function] [call site] 00191
3 ne_read_uint [function] [call site] 00192
3 __assert_fail [call site] 00193
3 ne_read_xiph_lacing [function] [call site] 00194
3 ne_read_ebml_lacing [function] [call site] 00195
4 ne_read_vint [function] [call site] 00196
4 ne_read_svint [function] [call site] 00197
5 ne_bare_read_vint [function] [call site] 00198
3 __assert_fail [call site] 00199
3 ne_map_track_number_to_index [function] [call site] 00200
4 __assert_fail [call site] 00201
4 ne_get_uint [function] [call site] 00202
3 ne_find_track_entry [function] [call site] 00203
3 ne_read_block_encryption [function] [call site] 00204
4 ne_get_uint [function] [call site] 00205
4 ne_get_uint [function] [call site] 00206
4 ne_get_uint [function] [call site] 00207
3 ne_get_timecode_scale [function] [call site] 00208
3 nestegg_free_packet [function] [call site] 00210
4 ne_free_frame [function] [call site] 00211
4 ne_free_block_additions [function] [call site] 00212
3 ne_alloc_frame [function] [call site] 00213
3 nestegg_free_packet [function] [call site] 00215
3 ne_io_read [function] [call site] 00216
3 ne_free_frame [function] [call site] 00217
3 nestegg_free_packet [function] [call site] 00218
3 ne_alloc_frame_encryption [function] [call site] 00219
3 ne_free_frame [function] [call site] 00221
3 nestegg_free_packet [function] [call site] 00222
3 ne_free_frame [function] [call site] 00224
3 nestegg_free_packet [function] [call site] 00225
3 ne_io_read [function] [call site] 00226
3 ne_free_frame [function] [call site] 00227
3 nestegg_free_packet [function] [call site] 00228
3 ne_io_read [function] [call site] 00229
3 ne_free_frame [function] [call site] 00230
3 nestegg_free_packet [function] [call site] 00231
3 ne_read_uint [function] [call site] 00233
3 ne_free_frame [function] [call site] 00234
3 nestegg_free_packet [function] [call site] 00235
3 ne_free_frame [function] [call site] 00236
3 nestegg_free_packet [function] [call site] 00237
3 ne_free_frame [function] [call site] 00239
3 nestegg_free_packet [function] [call site] 00240
3 ne_io_read [function] [call site] 00241
3 ne_free_frame [function] [call site] 00242
3 nestegg_free_packet [function] [call site] 00243
2 ne_io_tell [function] [call site] 00244
2 ne_io_tell [function] [call site] 00245
2 ne_read_element [function] [call site] 00246
2 ne_free_block_additions [function] [call site] 00247
2 nestegg_free_packet [function] [call site] 00248
2 nestegg_free_packet [function] [call site] 00249
2 ne_read_block [function] [call site] 00250
2 ne_free_block_additions [function] [call site] 00251
2 nestegg_free_packet [function] [call site] 00252
2 ne_read_uint [function] [call site] 00253
2 ne_free_block_additions [function] [call site] 00254
2 nestegg_free_packet [function] [call site] 00255
2 ne_get_timecode_scale [function] [call site] 00256
2 ne_free_block_additions [function] [call site] 00257
2 nestegg_free_packet [function] [call site] 00258
2 ne_read_int [function] [call site] 00259
2 ne_free_block_additions [function] [call site] 00260
2 nestegg_free_packet [function] [call site] 00261
2 ne_free_block_additions [function] [call site] 00262
2 nestegg_free_packet [function] [call site] 00263
2 ne_read_block_additions [function] [call site] 00264
3 __assert_fail [call site] 00265
3 ne_io_tell [function] [call site] 00266
3 ne_io_tell [function] [call site] 00267
3 ne_read_element [function] [call site] 00268
3 ne_io_read_skip [function] [call site] 00269
3 ne_io_tell [function] [call site] 00270
3 ne_io_tell [function] [call site] 00271
3 ne_read_element [function] [call site] 00272
3 ne_read_uint [function] [call site] 00273
3 ne_io_read [function] [call site] 00275
3 ne_io_read_skip [function] [call site] 00276
2 ne_free_block_additions [function] [call site] 00278
2 nestegg_free_packet [function] [call site] 00279
2 ne_read_int [function] [call site] 00280
2 ne_free_block_additions [function] [call site] 00281
2 nestegg_free_packet [function] [call site] 00282
2 ne_io_read_skip [function] [call site] 00283
2 ne_free_block_additions [function] [call site] 00284
2 nestegg_free_packet [function] [call site] 00285
2 __assert_fail [call site] 00286
2 ne_free_block_additions [function] [call site] 00287
2 ne_io_read_skip [function] [call site] 00288
1 __assert_fail [call site] 00289
1 nestegg_packet_track [function] [call site] 00290
1 nestegg_packet_has_keyframe [function] [call site] 00291
1 nestegg_packet_count [function] [call site] 00292
1 nestegg_packet_tstamp [function] [call site] 00293
1 nestegg_packet_duration [function] [call site] 00294
1 nestegg_packet_discard_padding [function] [call site] 00295
1 nestegg_packet_reference_block [function] [call site] 00296
1 nestegg_packet_additional_data [function] [call site] 00297
1 nestegg_packet_encryption [function] [call site] 00298
2 __assert_fail [call site] 00299
1 nestegg_packet_iv [function] [call site] 00300
2 __assert_fail [call site] 00301
1 nestegg_packet_offsets [function] [call site] 00302
2 __assert_fail [call site] 00303
1 nestegg_packet_data [function] [call site] 00304
1 nestegg_free_packet [function] [call site] 00305
1 nestegg_destroy [function] [call site] 00306