Fuzz introspector: opus_repacketizer_fuzzer_floating
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique non-covered Complexity Unique Reachable Complexities Unique Reachable Functions All non-covered Complexity All Reachable Complexity Function Name Function Callsite Blocked Branch
0 4 1 :

['parse_size']

0 4 opus_packet_parse_impl call site: 00014 /src/opus/src/opus.c:305
0 2 1 :

['encode_size']

6 50 opus_repacketizer_out_range_impl call site: 00000 /src/opus/src/repacketizer.c:289
0 0 None 6 151 opus_repacketizer_out_range_impl call site: 00000 /src/opus/src/repacketizer.c:136
0 0 None 6 94 opus_repacketizer_out_range_impl call site: 00000 /src/opus/src/repacketizer.c:218
0 0 None 0 0 skip_extension call site: 00000 /src/opus/src/extensions.c:44
0 0 None 0 0 skip_extension call site: 00000 /src/opus/src/extensions.c:51
0 0 None 0 0 opus_packet_extensions_generate call site: 00000 /src/opus/src/extensions.c:200
0 0 None 0 0 opus_packet_extensions_generate call site: 00000 /src/opus/src/extensions.c:228
0 0 None 0 0 opus_packet_extensions_generate call site: 00000 /src/opus/src/extensions.c:241
0 0 None 0 0 opus_packet_extensions_generate call site: 00000 /src/opus/src/extensions.c:271
0 0 None 0 0 opus_packet_parse_impl call site: 00011 /src/opus/src/opus.c:209
0 0 None 0 0 opus_packet_parse_impl call site: 00011 /src/opus/src/opus.c:211

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 opus_repacketizer_create [function] [call site] 00001
2 opus_repacketizer_get_size [function] [call site] 00002
2 opus_alloc [function] [call site] 00003
2 opus_repacketizer_init [function] [call site] 00004
1 opus_repacketizer_init [function] [call site] 00005
1 char_to_int(unsigned char const*) [function] [call site] 00006
1 opus_repacketizer_cat [function] [call site] 00007
2 opus_repacketizer_cat_impl [function] [call site] 00008
3 opus_packet_get_samples_per_frame [function] [call site] 00009
3 opus_packet_get_nb_frames [function] [call site] 00010
3 opus_packet_parse_impl [function] [call site] 00011
4 opus_packet_get_samples_per_frame [function] [call site] 00012
4 parse_size [function] [call site] 00013
4 parse_size [function] [call site] 00014
4 parse_size [function] [call site] 00015
1 opus_repacketizer_destroy [function] [call site] 00016
2 opus_free [function] [call site] 00017