Fuzz introspector: twkb_import_fuzzer
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
8 184 lwpoly_free call site: 00184 lwcircstring_free
8 216 lwcollection_free call site: 00216 lwnurbscurve_free
7 206 lwmpoly_free call site: 00206 lwpsurface_free
5 96 ptarray_insert_point call site: 00096 lwerror
3 65 lwline_from_twkb_state call site: 00065 lwline_construct_empty
3 131 lwcollection_add_lwgeom call site: 00131 lwtype_name
2 106 ptarray_set_point4d call site: 00106 lwtype_name
2 227 lwgeom_from_twkb_state call site: 00227 lwtype_name
2 232 lwcollection_from_twkb_state call site: 00232 lwgeom_free
1 82 lwpoly_from_twkb_state call site: 00082 lwerror
1 87 lwpoly_from_twkb_state call site: 00087 lwerror
1 90 getPoint4d_p call site: 00090 lwerror

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 _setjmp [call site] 00001
1 postgis_lwgeom_fuzzer_cleanup_allocations() [function] [call site] 00002
1 lwgeom_from_twkb [function] [call site] 00003
2 lwgeom_from_twkb_state [function] [call site] 00004
3 header_from_twkb_state [function] [call site] 00005
4 byte_from_twkb_state [function] [call site] 00006
5 twkb_parse_state_advance [function] [call site] 00007
4 byte_from_twkb_state [function] [call site] 00009
4 unzigzag8 [function] [call site] 00010
4 lwtype_from_twkb_type [function] [call site] 00011
4 byte_from_twkb_state [function] [call site] 00013
4 twkb_parse_state_uvarint [function] [call site] 00014
5 varint_u64_decode [function] [call site] 00015
5 twkb_parse_state_advance [function] [call site] 00019
3 twkb_parse_state_double [function] [call site] 00021
4 varint_s64_decode [function] [call site] 00022
5 varint_u64_decode [function] [call site] 00023
5 unzigzag64 [function] [call site] 00024
4 twkb_parse_state_advance [function] [call site] 00025
3 twkb_parse_state_double [function] [call site] 00026
3 twkb_parse_state_double [function] [call site] 00027
3 twkb_parse_state_double [function] [call site] 00028
3 twkb_parse_state_double [function] [call site] 00029
3 twkb_parse_state_double [function] [call site] 00030
3 twkb_parse_state_double [function] [call site] 00031
3 twkb_parse_state_double [function] [call site] 00032
3 lwpoint_from_twkb_state [function] [call site] 00033
4 lwpoint_construct_empty [function] [call site] 00034
5 ptarray_construct [function] [call site] 00037
6 ptarray_construct_empty [function] [call site] 00038
7 ptarray_point_size [function] [call site] 00041
4 ptarray_from_twkb_state [function] [call site] 00043
5 ptarray_construct_empty [function] [call site] 00044
5 twkb_parse_state_has_min_bytes [function] [call site] 00045
5 ptarray_construct [function] [call site] 00047
5 twkb_parse_state_accum_coord [function] [call site] 00048
6 twkb_parse_state_varint [function] [call site] 00049
7 varint_s64_decode [function] [call site] 00050
7 twkb_parse_state_advance [function] [call site] 00051
6 safe_add_int64 [function] [call site] 00052
4 lwpoint_construct [function] [call site] 00053
3 lwpoint_as_lwgeom [function] [call site] 00055
3 lwline_from_twkb_state [function] [call site] 00056
4 lwline_construct_empty [function] [call site] 00057
5 ptarray_construct_empty [function] [call site] 00060
4 twkb_parse_state_uvarint32 [function] [call site] 00061
5 twkb_parse_state_uvarint [function] [call site] 00062
4 lwline_construct_empty [function] [call site] 00064
4 ptarray_from_twkb_state [function] [call site] 00065
4 lwline_construct_empty [function] [call site] 00066
4 lwtype_name [function] [call site] 00067
4 lwline_construct [function] [call site] 00069
3 lwline_as_lwgeom [function] [call site] 00071
3 lwpoly_from_twkb_state [function] [call site] 00072
4 lwpoly_construct_empty [function] [call site] 00073
4 twkb_parse_state_uvarint32 [function] [call site] 00077
4 lwpoly_construct_empty [function] [call site] 00078
4 twkb_parse_state_has_min_bytes [function] [call site] 00079
4 twkb_parse_state_uvarint32 [function] [call site] 00080
4 ptarray_from_twkb_state [function] [call site] 00081
4 ptarray_is_closed_2d [function] [call site] 00082
5 getPoint_internal [function] [call site] 00084
6 ptarray_point_size [function] [call site] 00085
5 memcmp [call site] 00086
4 getPoint4d_p [function] [call site] 00087
5 getPoint_internal [function] [call site] 00090
4 ptarray_append_point [function] [call site] 00092
5 getPoint4d_p [function] [call site] 00094
5 ptarray_insert_point [function] [call site] 00095
6 ptarray_point_size [function] [call site] 00096
6 ptarray_point_size [function] [call site] 00099
6 ptarray_point_size [function] [call site] 00102
6 lwrealloc [function] [call site] 00103
6 getPoint_internal [function] [call site] 00104
6 ptarray_set_point4d [function] [call site] 00105
7 getPoint_internal [function] [call site] 00106
4 lwtype_name [function] [call site] 00107
4 lwpoly_add_ring [function] [call site] 00109
5 lwrealloc [function] [call site] 00110
3 lwpoly_as_lwgeom [function] [call site] 00112
3 lwmultipoint_from_twkb_state [function] [call site] 00113
4 lwcollection_construct_empty [function] [call site] 00114
5 lwtype_is_collection [function] [call site] 00115
4 twkb_parse_state_uvarint32 [function] [call site] 00120
4 twkb_parse_state_has_min_bytes [function] [call site] 00121
4 twkb_parse_state_varint_skip [function] [call site] 00122
5 varint_size [function] [call site] 00123
5 twkb_parse_state_advance [function] [call site] 00125
4 twkb_parse_state_has_min_bytes [function] [call site] 00126
4 lwpoint_from_twkb_state [function] [call site] 00127
4 lwpoint_as_lwgeom [function] [call site] 00128
4 lwcollection_add_lwgeom [function] [call site] 00129
5 lwcollection_allows_subtype [function] [call site] 00131
5 lwtype_name [function] [call site] 00132
5 lwcollection_reserve [function] [call site] 00135
6 lwrealloc [function] [call site] 00136
3 lwcollection_as_lwgeom [function] [call site] 00138
3 lwmultiline_from_twkb_state [function] [call site] 00139
4 lwcollection_construct_empty [function] [call site] 00140
4 twkb_parse_state_uvarint32 [function] [call site] 00141
4 twkb_parse_state_has_min_bytes [function] [call site] 00142
4 twkb_parse_state_varint_skip [function] [call site] 00143
4 twkb_parse_state_has_min_bytes [function] [call site] 00144
4 lwline_from_twkb_state [function] [call site] 00145
4 lwline_as_lwgeom [function] [call site] 00146
4 lwcollection_add_lwgeom [function] [call site] 00147
3 lwcollection_as_lwgeom [function] [call site] 00149
3 lwmultipoly_from_twkb_state [function] [call site] 00150
4 lwcollection_construct_empty [function] [call site] 00151
4 twkb_parse_state_uvarint32 [function] [call site] 00152
4 twkb_parse_state_has_min_bytes [function] [call site] 00153
4 twkb_parse_state_varint_skip [function] [call site] 00154
4 twkb_parse_state_has_min_bytes [function] [call site] 00155
4 lwpoly_from_twkb_state [function] [call site] 00156
4 lwpoly_as_lwgeom [function] [call site] 00157
4 lwcollection_add_lwgeom [function] [call site] 00158
3 lwcollection_as_lwgeom [function] [call site] 00160
3 lwcollection_from_twkb_state [function] [call site] 00161
4 lwcollection_construct_empty [function] [call site] 00162
4 twkb_parse_state_uvarint32 [function] [call site] 00163
4 twkb_parse_state_has_min_bytes [function] [call site] 00164
4 twkb_parse_state_varint_skip [function] [call site] 00165
4 twkb_parse_state_has_min_bytes [function] [call site] 00166
4 lwcollection_free [function] [call site] 00167
5 lwgeom_free [function] [call site] 00169
6 lwcircstring_free [function] [call site] 00185
6 lwtriangle_free [function] [call site] 00189
6 lwtin_free [function] [call site] 00212
7 lwtriangle_free [function] [call site] 00213
6 lwcollection_free [function] [call site] 00214
6 lwtype_name [function] [call site] 00223
4 lwgeom_from_twkb_state [function] [call site] 00226
5 lwcollection_as_lwgeom [function] [call site] 00227
5 lwtype_name [function] [call site] 00228
4 lwcollection_add_lwgeom [function] [call site] 00232
4 lwgeom_free [function] [call site] 00233
4 lwcollection_free [function] [call site] 00234
1 lwgeom_free [function] [call site] 00235
1 postgis_lwgeom_fuzzer_cleanup_allocations() [function] [call site] 00236