The followings are the branches where fuzzer fails to bypass.
Unique non-covered Complexity | Unique Reachable Complexities | Unique Reachable Functions | All non-covered Complexity | All Reachable Complexity | Function Name | Function Callsite | Blocked Branch |
---|---|---|---|---|---|---|---|
38 | 38 |
1 :
['inflateInit_'] |
370 | 935 | Pl_Flate::handleData(unsignedcharconst*,unsignedlong,int) | call site: 00000 | /src/qpdf/libqpdf/Pl_Flate.cc:151 |
21 | 21 |
1 :
['crc32'] |
579 | 630 | deflate | call site: 00098 | /src/zlib/deflate.c:1160 |
21 | 21 |
1 :
['crc32'] |
21 | 21 | read_buf | call site: 00106 | /src/zlib/deflate.c:227 |
14 | 35 |
3 :
['deflateEnd', 'inflateEnd', '__clang_call_terminate'] |
14 | 35 | Pl_Flate::Members::~Members() | call site: 00000 | /src/qpdf/libqpdf/Pl_Flate.cc:55 |
12 | 12 |
1 :
['inflateEnd'] |
30 | 81 | Pl_Flate::finish() | call site: 00000 | /src/qpdf/libqpdf/Pl_Flate.cc:240 |
12 | 12 |
8 :
['__cxa_guard_acquire', 'std::__1::basic_string
|
12 | 12 | Pl_Flate::zopfli_enabled() | call site: 00000 | /src/qpdf/libqpdf/Pl_Flate.cc:352 |
8 | 8 |
4 :
['__cxa_throw', '__cxa_allocate_exception', 'std::runtime_error::runtime_error(char const*)', '__cxa_free_exception'] |
8 | 8 | Pl_Flate::Members::Members(unsignedlong,Pl_Flate::action_e) | call site: 00000 | /src/qpdf/libqpdf/Pl_Flate.cc:34 |
8 | 8 |
13 :
['_ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2B8ne180100ILi0EEEPKc', '__cxa_throw', 'std::__1::basic_string
|
8 | 8 | Pl_Flate::checkError(charconst*,int) | call site: 00000 | /src/qpdf/libqpdf/Pl_Flate.cc:272 |
7 | 14 |
2 :
['_tr_align', '_tr_stored_block'] |
7 | 38 | deflate | call site: 00143 | /src/zlib/deflate.c:1211 |
2 | 2 |
1 :
['Pl_Flate::finish_zopfli()'] |
20 | 24 | Pl_Flate::finish() | call site: 00000 | /src/qpdf/libqpdf/Pl_Flate.cc:231 |
0 | 21 |
1 :
['deflateEnd'] |
0 | 21 | deflateInit2_ | call site: 00038 | /src/zlib/deflate.c:499 |
0 | 0 | None | 747 | 869 | deflate | call site: 00079 | /src/zlib/deflate.c:1009 |
LLVMFuzzerTestOneInput
[function]
[call site]
00000
FuzzHelper::FuzzHelper(unsigned char const*, unsigned long)
[function]
[call site]
00001
FuzzHelper::run()
[function]
[call site]
00002
FuzzHelper::doChecks()
[function]
[call site]
00003
Pl_Discard::Pl_Discard()
[function]
[call site]
00004
Pipeline::Pipeline(char const*, Pipeline*)
[function]
[call site]
00005
Pl_Flate::Pl_Flate(char const*, Pipeline*, Pl_Flate::action_e, unsigned int)
[function]
[call site]
00006
Pipeline::Pipeline(char const*, Pipeline*)
[function]
[call site]
00007
unsigned long QIntC::to_size<unsigned int>(unsigned int const&)
[function]
[call site]
00008
QIntC::IntConverter<unsigned int, unsigned long, false, false>::convert(unsigned int const&)
[function]
[call site]
00009
QIntC::IntConverter<unsigned int, unsigned long, false, false>::error(unsigned int)
[function]
[call site]
00010
__cxa_allocate_exception
[call site]
00011
std::__1::basic_ostringstream<char, std::__1::char_traits<char>, std::__1::allocator<char> >::str[abi:ne180100]() const &
[function]
[call site]
00012
std::__1::basic_stringbuf<char, std::__1::char_traits<char>, std::__1::allocator<char> >::str[abi:ne180100]() const &
[function]
[call site]
00013
std::range_error::range_error[abi:ne180100](std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)
[function]
[call site]
00014
std::runtime_error::runtime_error(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)
[call site]
00015
__cxa_throw
[call site]
00016
__cxa_free_exception
[call site]
00017
__cxa_allocate_exception
[call site]
00018
std::logic_error::logic_error(char const*)
[call site]
00019
__cxa_throw
[call site]
00020
__cxa_free_exception
[call site]
00021
Pipeline::~Pipeline()
[function]
[call site]
00022
Pl_Flate::write(unsigned char const*, unsigned long)
[function]
[call site]
00023
__cxa_allocate_exception
[call site]
00024
std::logic_error::logic_error(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)
[call site]
00025
__cxa_throw
[call site]
00026
__cxa_free_exception
[call site]
00027
Pl_Flate::handleData(unsigned char const*, unsigned long, int)
[function]
[call site]
00028
__cxa_allocate_exception
[call site]
00029
std::runtime_error::runtime_error(char const*)
[call site]
00030
__cxa_throw
[call site]
00031
std::runtime_error::~runtime_error()
[call site]
00032
__cxa_free_exception
[call site]
00033
unsigned int QIntC::to_uint<unsigned long>(unsigned long const&)
[function]
[call site]
00034
QIntC::IntConverter<unsigned long, unsigned int, false, false>::convert(unsigned long const&)
[function]
[call site]
00035
QIntC::IntConverter<unsigned long, unsigned int, false, false>::error(unsigned long)
[function]
[call site]
00036
deflateInit_
[function]
[call site]
00037
deflateInit2_
[function]
[call site]
00038
deflateEnd
[function]
[call site]
00039
deflateStateCheck
[function]
[call site]
00040
deflateReset
[function]
[call site]
00041
deflateResetKeep
[function]
[call site]
00042
deflateStateCheck
[function]
[call site]
00043
crc32
[function]
[call site]
00044
crc32_z
[function]
[call site]
00045
crc_word
[function]
[call site]
00046
crc_word
[function]
[call site]
00047
crc_word
[function]
[call site]
00048
crc_word
[function]
[call site]
00049
crc_word
[function]
[call site]
00050
byte_swap
[function]
[call site]
00051
crc_word_big
[function]
[call site]
00052
crc_word_big
[function]
[call site]
00053
crc_word_big
[function]
[call site]
00054
crc_word_big
[function]
[call site]
00055
crc_word_big
[function]
[call site]
00056
byte_swap
[function]
[call site]
00057
adler32
[function]
[call site]
00058
adler32_z
[function]
[call site]
00059
_tr_init
[function]
[call site]
00060
tr_static_init
[function]
[call site]
00061
init_block
[function]
[call site]
00062
lm_init
[function]
[call site]
00063
inflateInit_
[function]
[call site]
00064
inflateInit2_
[function]
[call site]
00065
inflateReset2
[function]
[call site]
00066
inflateStateCheck
[function]
[call site]
00067
inflateReset
[function]
[call site]
00068
inflateStateCheck
[function]
[call site]
00069
inflateResetKeep
[function]
[call site]
00070
inflateStateCheck
[function]
[call site]
00071
Pl_Flate::checkError(char const*, int)
[function]
[call site]
00072
__cxa_allocate_exception
[call site]
00073
std::runtime_error::runtime_error(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&)
[call site]
00074
__cxa_throw
[call site]
00075
__cxa_free_exception
[call site]
00076
deflate
[function]
[call site]
00077
deflateStateCheck
[function]
[call site]
00078
flush_pending
[function]
[call site]
00079
_tr_flush_bits
[function]
[call site]
00080
bi_flush
[function]
[call site]
00081
putShortMSB
[function]
[call site]
00082
putShortMSB
[function]
[call site]
00083
putShortMSB
[function]
[call site]
00084
adler32
[function]
[call site]
00085
flush_pending
[function]
[call site]
00086
crc32
[function]
[call site]
00087
flush_pending
[function]
[call site]
00088
crc32
[function]
[call site]
00089
crc32
[function]
[call site]
00090
flush_pending
[function]
[call site]
00091
crc32
[function]
[call site]
00092
crc32
[function]
[call site]
00093
flush_pending
[function]
[call site]
00094
crc32
[function]
[call site]
00095
crc32
[function]
[call site]
00096
flush_pending
[function]
[call site]
00097
crc32
[function]
[call site]
00098
flush_pending
[function]
[call site]
00099
crc32
[function]
[call site]
00100
flush_pending
[function]
[call site]
00101
deflate_stored
[function]
[call site]
00102
_tr_stored_block
[function]
[call site]
00103
bi_windup
[function]
[call site]
00104
flush_pending
[function]
[call site]
00105
read_buf
[function]
[call site]
00106
adler32
[function]
[call site]
00107
crc32
[function]
[call site]
00108
read_buf
[function]
[call site]
00109
_tr_stored_block
[function]
[call site]
00110
flush_pending
[function]
[call site]
00111
deflate_huff
[function]
[call site]
00112
fill_window
[function]
[call site]
00113
slide_hash
[function]
[call site]
00114
read_buf
[function]
[call site]
00115
_tr_flush_block
[function]
[call site]
00116
detect_data_type
[function]
[call site]
00117
build_tree
[function]
[call site]
00118
pqdownheap
[function]
[call site]
00119
pqdownheap
[function]
[call site]
00120
pqdownheap
[function]
[call site]
00121
gen_bitlen
[function]
[call site]
00122
gen_codes
[function]
[call site]
00123
bi_reverse
[function]
[call site]
00124
build_tree
[function]
[call site]
00125
build_bl_tree
[function]
[call site]
00126
scan_tree
[function]
[call site]
00127
scan_tree
[function]
[call site]
00128
build_tree
[function]
[call site]
00129
_tr_stored_block
[function]
[call site]
00130
compress_block
[function]
[call site]
00131
send_all_trees
[function]
[call site]
00132
send_tree
[function]
[call site]
00133
send_tree
[function]
[call site]
00134
compress_block
[function]
[call site]
00135
init_block
[function]
[call site]
00136
bi_windup
[function]
[call site]
00137
flush_pending
[function]
[call site]
00138
_tr_flush_block
[function]
[call site]
00139
flush_pending
[function]
[call site]
00140
_tr_flush_block
[function]
[call site]
00141
flush_pending
[function]
[call site]
00142
deflate_rle
[function]
[call site]
00143
fill_window
[function]
[call site]
00144
_tr_flush_block
[function]
[call site]
00145
flush_pending
[function]
[call site]
00146
_tr_flush_block
[function]
[call site]
00147
flush_pending
[function]
[call site]
00148
_tr_flush_block
[function]
[call site]
00149
flush_pending
[function]
[call site]
00150
_tr_align
[function]
[call site]
00151
bi_flush
[function]
[call site]
00152
_tr_stored_block
[function]
[call site]
00153
flush_pending
[function]
[call site]
00154
putShortMSB
[function]
[call site]
00155
putShortMSB
[function]
[call site]
00156
flush_pending
[function]
[call site]
00157
inflate
[function]
[call site]
00158
inflateStateCheck
[function]
[call site]
00159
crc32
[function]
[call site]
00160
crc32
[function]
[call site]
00161
adler32
[function]
[call site]
00162
crc32
[function]
[call site]
00163
crc32
[function]
[call site]
00164
crc32
[function]
[call site]
00165
crc32
[function]
[call site]
00166
crc32
[function]
[call site]
00167
crc32
[function]
[call site]
00168
crc32
[function]
[call site]
00169
crc32
[function]
[call site]
00170
adler32
[function]
[call site]
00171
fixedtables
[function]
[call site]
00172
inflate_table
[function]
[call site]
00173
inflate_table
[function]
[call site]
00174
inflate_table
[function]
[call site]
00175
inflate_fast
[function]
[call site]
00176
crc32
[function]
[call site]
00177
adler32
[function]
[call site]
00178
updatewindow
[function]
[call site]
00179
crc32
[function]
[call site]
00180
adler32
[function]
[call site]
00181
strcmp
[call site]
00182
Pl_Flate::warn(char const*, int)
[function]
[call site]
00183
unsigned long QIntC::to_ulong<unsigned long>(unsigned long const&)
[function]
[call site]
00184
QIntC::IntConverter<unsigned long, unsigned long, false, false>::convert(unsigned long const&)
[function]
[call site]
00185
QIntC::IntConverter<unsigned long, unsigned long, false, false>::error(unsigned long)
[function]
[call site]
00186
__cxa_allocate_exception
[call site]
00187
std::runtime_error::runtime_error(char const*)
[call site]
00188
__cxa_throw
[call site]
00189
std::runtime_error::~runtime_error()
[call site]
00190
__cxa_free_exception
[call site]
00191
Pipeline::next() const
[function]
[call site]
00192
unsigned int QIntC::to_uint<unsigned long>(unsigned long const&)
[function]
[call site]
00193
Pl_Flate::checkError(char const*, int)
[function]
[call site]
00194
Pl_Flate::finish()
[function]
[call site]
00195
__cxa_allocate_exception
[call site]
00196
std::runtime_error::runtime_error(char const*)
[call site]
00197
__cxa_throw
[call site]
00198
std::runtime_error::~runtime_error()
[call site]
00199
__cxa_free_exception
[call site]
00200
Pl_Flate::finish_zopfli()
[function]
[call site]
00201
__cxa_begin_catch
[call site]
00202
Pipeline::next() const
[function]
[call site]
00203
Pl_Flate::handleData(unsigned char const*, unsigned long, int)
[function]
[call site]
00204
deflateEnd
[function]
[call site]
00205
inflateEnd
[function]
[call site]
00206
inflateStateCheck
[function]
[call site]
00207
Pl_Flate::checkError(char const*, int)
[function]
[call site]
00208
__cxa_begin_catch
[call site]
00209
__cxa_end_catch
[call site]
00210
__cxa_allocate_exception
[call site]
00211
std::runtime_error::runtime_error(char const*)
[call site]
00212
__cxa_throw
[call site]
00213
__cxa_free_exception
[call site]
00214
__cxa_end_catch
[call site]
00215
Pipeline::next() const
[function]
[call site]
00216
__clang_call_terminate
[call site]
00217
__cxa_begin_catch
[call site]
00218
Pl_Flate::~Pl_Flate()
[function]
[call site]
00219
Pipeline::~Pipeline()
[function]
[call site]
00220
Pl_Discard::~Pl_Discard()
[function]
[call site]
00221
Pipeline::~Pipeline()
[function]
[call site]
00222
__cxa_begin_catch
[call site]
00223
__cxa_end_catch
[call site]
00224
__clang_call_terminate
[call site]
00225